$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE7DB/B951E28C3DCA11EA81B9D352C4F9AE02/rroZtvzB0hrnExdw57HaPhR17JA.mft File: rroZtvzB0hrnExdw57HaPhR17JA.mft (raw, json) Hash identifier: 6zm91hhzYYsMO1Ys02hE/tw3CUk+GqowD11Jb/qsVZM= Subject key identifier: 25:59:83:5B:EF:CE:82:C0:13:A7:3B:EF:CB:CF:D5:4B:FB:7C:0B:81 Authority key identifier: AE:BA:19:B6:FC:C1:D2:1A:E7:13:17:70:E7:B1:DA:3E:14:75:EC:90 Certificate issuer: /CN=A91FE7DB/serialNumber=AEBA19B6FCC1D21AE7131770E7B1DA3E1475EC90 Certificate serial: 0B1C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rroZtvzB0hrnExdw57HaPhR17JA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FE7DB/B951E28C3DCA11EA81B9D352C4F9AE02/rroZtvzB0hrnExdw57HaPhR17JA.mft Manifest number: 0B15 Signing time: Mon 12 May 2025 19:05:34 +0000 Manifest this update: Mon 12 May 2025 19:05:33 +0000 Manifest next update: Mon 19 May 2025 19:05:33 +0000 Files and hashes: 1: rroZtvzB0hrnExdw57HaPhR17JA.crl (hash: CUXJQ/ORh/W852G2o3MIx8M9BW41hvUoMlt7uMSqjKo=) 2: 078AE946642A11EAA019224CC4F9AE02.roa (hash: mTWsYywMPiMfrhBIpNOsBljvGA4XjVbx+hSty7byGCw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FE7DB/B951E28C3DCA11EA81B9D352C4F9AE02/rroZtvzB0hrnExdw57HaPhR17JA.crl rsync://rpki.apnic.net/member_repository/A91FE7DB/B951E28C3DCA11EA81B9D352C4F9AE02/rroZtvzB0hrnExdw57HaPhR17JA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rroZtvzB0hrnExdw57HaPhR17JA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 19:05:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2844 (0xb1c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FE7DB, serialNumber=AEBA19B6FCC1D21AE7131770E7B1DA3E1475EC90 Validity Not Before: May 12 19:05:33 2025 GMT Not After : May 19 19:05:33 2025 GMT Subject: CN=6822467d-d4fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:d8:1c:a7:2c:e9:08:7c:e7:a0:99:05:f4:73: de:2c:b9:0f:11:ef:ef:3a:4f:02:63:ea:0f:8a:24: c6:df:49:33:02:9f:b4:a3:c1:72:ca:c1:cc:c8:43: 66:a8:7c:1d:00:61:2a:b1:6f:c5:9b:cf:e2:39:bd: 3c:a7:46:17:ec:e9:cc:72:7a:80:45:ae:5d:dd:be: fa:93:09:03:b1:72:91:94:b6:0e:01:26:a8:d6:45: 7d:04:73:55:9f:85:dd:5c:23:d4:80:a2:29:12:a4: 8d:39:4a:63:fd:54:2e:97:84:0d:f1:f8:7b:60:cb: 49:83:a6:29:75:39:45:53:6c:0f:56:2d:d4:7b:43: 23:82:75:91:d4:54:db:88:74:36:88:25:c5:e8:95: 4e:6c:98:ec:af:44:c9:fe:fa:4c:85:1a:7c:b6:1a: 74:5f:eb:20:3e:4f:8a:4f:e4:6e:26:71:f8:06:a4: 15:78:3d:eb:3a:9c:39:02:5b:a4:10:a8:70:78:17: ea:72:f2:94:24:a4:3a:cf:41:79:6e:aa:f9:cc:93: 9d:b2:f8:58:b3:f4:5e:fb:b3:ad:c2:1c:b7:71:52: f7:70:17:3d:f1:19:1d:7a:21:2d:78:29:2d:05:e7: ba:a4:74:b5:31:61:b9:ef:0b:e4:96:44:fe:20:2d: d0:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:59:83:5B:EF:CE:82:C0:13:A7:3B:EF:CB:CF:D5:4B:FB:7C:0B:81 X509v3 Authority Key Identifier: keyid:AE:BA:19:B6:FC:C1:D2:1A:E7:13:17:70:E7:B1:DA:3E:14:75:EC:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FE7DB/B951E28C3DCA11EA81B9D352C4F9AE02/rroZtvzB0hrnExdw57HaPhR17JA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rroZtvzB0hrnExdw57HaPhR17JA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE7DB/B951E28C3DCA11EA81B9D352C4F9AE02/rroZtvzB0hrnExdw57HaPhR17JA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:63:ad:74:ff:a3:ba:61:db:5d:f4:1e:f4:96:23:12:8e:bd: c2:0f:9d:c8:d0:eb:81:1b:9a:12:c7:6b:5a:1c:4e:16:fd:06: a4:26:cc:b1:d2:e1:98:e1:ff:38:15:d5:01:b8:47:41:17:6e: c0:a8:99:be:c9:72:a0:9b:cd:d8:3c:fb:53:39:c0:81:f8:64: ec:89:35:ba:9d:c8:09:fa:fe:79:e4:cd:48:bd:62:7d:6e:7d: 99:3c:4d:0e:ee:9e:32:02:29:45:2b:3b:8b:e3:fc:36:1a:80: 36:a9:f5:6b:ef:0e:e8:fa:2a:e2:df:d1:35:41:7b:4a:1e:b3: 2d:cf:35:63:e5:3e:79:e3:fa:c3:b0:37:27:ff:bc:45:2e:06: 23:0f:92:b7:02:b0:8e:8c:e6:30:bc:2b:27:45:2a:81:b6:b3: d6:9f:95:d6:0c:a3:6f:7a:61:35:d7:26:65:13:ad:78:08:90: 55:16:6b:1f:e1:3c:83:c3:2a:5e:e1:6b:6d:7b:64:ee:63:74: 12:99:f7:18:0e:a6:ed:40:69:38:fd:02:6b:8d:4f:8f:a1:e0: 89:8d:18:d6:46:e2:b2:99:04:f4:13:a6:69:72:20:78:66:22: c5:79:b9:3e:87:53:2c:17:cd:b4:9b:57:4d:f0:d9:0c:43:e3: d5:97:bc:46 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCxwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkU3REIxMTAvBgNVBAUTKEFFQkExOUI2RkNDMUQyMUFFNzEzMTc3MEU3QjFEQTNF MTQ3NUVDOTAwHhcNMjUwNTEyMTkwNTMzWhcNMjUwNTE5MTkwNTMzWjAYMRYwFAYD VQQDEw02ODIyNDY3ZC1kNGZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsNgcpyzpCHznoJkF9HPeLLkPEe/vOk8CY+oPiiTG30kzAp+0o8FyysHMyENm qHwdAGEqsW/Fm8/iOb08p0YX7OnMcnqARa5d3b76kwkDsXKRlLYOASao1kV9BHNV n4XdXCPUgKIpEqSNOUpj/VQul4QN8fh7YMtJg6YpdTlFU2wPVi3Ue0MjgnWR1FTb iHQ2iCXF6JVObJjsr0TJ/vpMhRp8thp0X+sgPk+KT+RuJnH4BqQVeD3rOpw5Aluk EKhweBfqcvKUJKQ6z0F5bqr5zJOdsvhYs/Re+7Otwhy3cVL3cBc98RkdeiEteCkt Bee6pHS1MWG57wvklkT+IC3Q/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCVZg1vv zoLAE6c778vP1Uv7fAuBMB8GA1UdIwQYMBaAFK66Gbb8wdIa5xMXcOex2j4UdeyQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRTdEQi9COTUxRTI4QzNE Q0ExMUVBODFCOUQzNTJDNEY5QUUwMi9ycm9adHZ6QjBocm5FeGR3NTdIYVBoUjE3 SkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Jyb1p0dnpCMGhybkV4ZHc1N0hhUGhSMTdKQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RTdEQi9COTUxRTI4QzNEQ0ExMUVBODFCOUQzNTJDNEY5QUUwMi9ycm9adHZ6QjBo cm5FeGR3NTdIYVBoUjE3SkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCuY610/6O6Ydtd9B70liMSjr3CD53I0OuBG5oSx2taHE4W/QakJsyx 0uGY4f84FdUBuEdBF27AqJm+yXKgm83YPPtTOcCB+GTsiTW6ncgJ+v555M1IvWJ9 bn2ZPE0O7p4yAilFKzuL4/w2GoA2qfVr7w7o+iri39E1QXtKHrMtzzVj5T554/rD sDcn/7xFLgYjD5K3ArCOjOYwvCsnRSqBtrPWn5XWDKNvemE11yZlE614CJBVFmsf 4TyDwype4Wtte2TuY3QSmfcYDqbtQGk4/QJrjU+PoeCJjRjWRuKymQT0E6ZpciB4 ZiLFebk+h1MsF820m1dN8NkMQ+PVl7xG -----END CERTIFICATE-----Generated at Tue May 13 11:37:31 2025 by rpki-client