$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDBE8/9D363178152B11EB9BD4EB46C4F9AE02/81QJOUhm-0CKDRiOC30AzFpzlI4.mft File: 81QJOUhm-0CKDRiOC30AzFpzlI4.mft (raw, json) Hash identifier: CzP6TpbdwYaJDuwgXcCWhpBL0pf/46+MX/jb72/k7kU= Subject key identifier: 91:97:1C:D9:27:8A:D9:A6:26:BB:45:DC:9A:89:3F:8E:7B:4E:74:9C Authority key identifier: F3:54:09:39:48:66:FB:40:8A:0D:18:8E:0B:7D:00:CC:5A:73:94:8E Certificate issuer: /CN=A91FDBE8/serialNumber=F35409394866FB408A0D188E0B7D00CC5A73948E Certificate serial: 078A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/81QJOUhm-0CKDRiOC30AzFpzlI4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDBE8/9D363178152B11EB9BD4EB46C4F9AE02/81QJOUhm-0CKDRiOC30AzFpzlI4.mft Manifest number: 077C Signing time: Sat 10 May 2025 21:10:07 +0000 Manifest this update: Sat 10 May 2025 21:10:06 +0000 Manifest next update: Sat 17 May 2025 21:10:06 +0000 Files and hashes: 1: 81QJOUhm-0CKDRiOC30AzFpzlI4.crl (hash: hkOiqZRNuhjfssnLtJBwy6DEJZc0IMrwDqq2wMQi/2Y=) 2: 06F011A2134B11F0AA41F90AC4F9AE02.roa (hash: YTvlEQrf2/CpKkJlEJSGtIQ8Px/n8vlq3KbTCRS5T8Q=) 3: 407DD9CED09211EE843A0F22C4F9AE02.roa (hash: DYjETZSzXLPZu6k/scGKmt/lU3UqCl+3wtEbXL9L8Pg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDBE8/9D363178152B11EB9BD4EB46C4F9AE02/81QJOUhm-0CKDRiOC30AzFpzlI4.crl rsync://rpki.apnic.net/member_repository/A91FDBE8/9D363178152B11EB9BD4EB46C4F9AE02/81QJOUhm-0CKDRiOC30AzFpzlI4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/81QJOUhm-0CKDRiOC30AzFpzlI4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 21:10:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1930 (0x78a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDBE8, serialNumber=F35409394866FB408A0D188E0B7D00CC5A73948E Validity Not Before: May 10 21:10:06 2025 GMT Not After : May 17 21:10:06 2025 GMT Subject: CN=681fc0ae-6d92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:8f:82:c1:42:9c:56:75:bd:5f:6f:29:f1:82: d5:43:96:0a:b1:0e:12:83:b6:60:0a:d3:ca:b2:66: 59:73:df:93:47:a5:ad:2b:fa:1b:39:89:96:51:3e: b7:68:91:58:af:2d:42:85:fe:ac:21:c7:14:21:49: 92:d8:59:ac:3d:77:98:fa:90:0a:89:c2:d1:25:d7: 55:8a:c3:e4:03:68:d9:9d:31:3d:5e:ed:f4:bf:f5: 35:86:0c:42:09:89:fa:a1:67:90:45:5b:ac:85:79: cf:e8:01:40:a1:88:3e:d0:03:46:d4:09:0c:06:b0: ce:f9:aa:9d:3c:cc:f0:73:88:27:c3:7e:88:8f:f3: 59:9a:a8:c9:78:9f:39:70:eb:02:59:14:8d:a6:fc: 1b:52:72:ac:30:c7:cf:76:56:4b:1c:9f:7d:41:66: 00:a0:23:85:c4:c7:dc:0a:0d:78:61:66:55:07:e3: bf:cf:62:40:a4:63:07:dd:70:4f:3f:ed:b1:2e:57: a6:54:45:59:20:4c:9e:11:5e:3e:00:00:ff:ba:1c: 61:ea:65:00:ee:e2:3f:82:a5:0a:72:a0:ad:5c:85: e2:8e:89:83:2e:0a:a7:a4:d1:b9:53:06:ae:45:9a: 6c:b8:bc:a3:2c:48:f8:eb:e0:be:8d:db:a3:05:70: a4:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:97:1C:D9:27:8A:D9:A6:26:BB:45:DC:9A:89:3F:8E:7B:4E:74:9C X509v3 Authority Key Identifier: keyid:F3:54:09:39:48:66:FB:40:8A:0D:18:8E:0B:7D:00:CC:5A:73:94:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDBE8/9D363178152B11EB9BD4EB46C4F9AE02/81QJOUhm-0CKDRiOC30AzFpzlI4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/81QJOUhm-0CKDRiOC30AzFpzlI4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDBE8/9D363178152B11EB9BD4EB46C4F9AE02/81QJOUhm-0CKDRiOC30AzFpzlI4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:ac:96:4b:3e:3c:50:72:d5:d1:9b:b3:22:92:ba:c8:d4:6f: 52:a3:a7:a6:bd:3f:7c:15:ac:00:7e:15:37:0c:05:47:79:36: a2:85:c5:87:f1:90:b0:4e:34:2c:e9:41:83:bf:cf:9d:75:04: e4:9a:ea:4e:b9:88:d3:2e:ed:d0:3b:0b:ce:a1:34:df:1c:1c: 0f:b7:24:89:81:e1:a7:5f:2c:6e:f4:c9:72:e2:0e:f1:9b:3a: 03:45:05:f9:25:cf:6a:cc:53:dd:28:ac:5b:03:c1:01:2e:83: 35:6e:17:5f:c2:24:73:a1:18:a9:a1:22:40:bf:b4:0d:51:46: 93:46:7a:a9:66:e7:f8:13:ef:81:70:6c:89:7c:68:53:60:88: c5:33:42:43:1a:87:04:2d:0f:55:d6:c6:5b:25:e2:25:94:79: 11:2e:ab:7d:54:36:bb:b2:72:9d:30:d0:89:b1:9a:27:88:5b: 25:d1:dd:45:45:cf:b5:5c:a0:57:e8:66:e8:b8:d6:6e:30:bc: 0f:95:52:ba:33:ca:73:57:3d:4d:ff:e9:0c:7e:22:01:05:4f: 8f:c4:e6:6f:a9:6e:a9:21:f9:d2:82:e2:67:26:1d:01:14:19: 33:8b:c3:6c:b4:4e:61:4e:d0:03:a3:67:0a:02:80:28:10:91: 43:8d:d3:40 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB4owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkRCRTgxMTAvBgNVBAUTKEYzNTQwOTM5NDg2NkZCNDA4QTBEMTg4RTBCN0QwMEND NUE3Mzk0OEUwHhcNMjUwNTEwMjExMDA2WhcNMjUwNTE3MjExMDA2WjAYMRYwFAYD VQQDEw02ODFmYzBhZS02ZDkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoI+CwUKcVnW9X28p8YLVQ5YKsQ4Sg7ZgCtPKsmZZc9+TR6WtK/obOYmWUT63 aJFYry1Chf6sIccUIUmS2FmsPXeY+pAKicLRJddVisPkA2jZnTE9Xu30v/U1hgxC CYn6oWeQRVushXnP6AFAoYg+0ANG1AkMBrDO+aqdPMzwc4gnw36Ij/NZmqjJeJ85 cOsCWRSNpvwbUnKsMMfPdlZLHJ99QWYAoCOFxMfcCg14YWZVB+O/z2JApGMH3XBP P+2xLlemVEVZIEyeEV4+AAD/uhxh6mUA7uI/gqUKcqCtXIXijomDLgqnpNG5Uwau RZpsuLyjLEj46+C+jdujBXCkUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJGXHNkn itmmJrtF3JqJP457TnScMB8GA1UdIwQYMBaAFPNUCTlIZvtAig0Yjgt9AMxac5SO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGREJFOC85RDM2MzE3ODE1 MkIxMUVCOUJENEVCNDZDNEY5QUUwMi84MVFKT1VobS0wQ0tEUmlPQzMwQXpGcHps STQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzgxUUpPVWhtLTBDS0RSaU9DMzBBekZwemxJNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG REJFOC85RDM2MzE3ODE1MkIxMUVCOUJENEVCNDZDNEY5QUUwMi84MVFKT1VobS0w Q0tEUmlPQzMwQXpGcHpsSTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBirJZLPjxQctXRm7MikrrI1G9So6emvT98FawAfhU3DAVHeTaihcWH 8ZCwTjQs6UGDv8+ddQTkmupOuYjTLu3QOwvOoTTfHBwPtySJgeGnXyxu9Mly4g7x mzoDRQX5Jc9qzFPdKKxbA8EBLoM1bhdfwiRzoRipoSJAv7QNUUaTRnqpZuf4E++B cGyJfGhTYIjFM0JDGocELQ9V1sZbJeIllHkRLqt9VDa7snKdMNCJsZoniFsl0d1F Rc+1XKBX6GbouNZuMLwPlVK6M8pzVz1N/+kMfiIBBU+PxOZvqW6pIfnSguJnJh0B FBkzi8NstE5hTtADo2cKAoAoEJFDjdNA -----END CERTIFICATE-----Generated at Sun May 11 20:00:42 2025 by rpki-client