$ rpki-client -vvf rpki.apnic.net/member_repository/A91FECDA/8A88F1046F9C11E9A5074B2FC4F9AE02/AduB721jlOZtOzIxW0eevteZyTc.mft File: AduB721jlOZtOzIxW0eevteZyTc.mft (raw, json) Hash identifier: dfnpRTQLiMLFb91MRzcK/8l3I4XyRSHAwlFn8vWF2lQ= Subject key identifier: D5:E6:DD:90:79:E8:A4:62:F6:AE:29:32:43:21:A6:B3:18:89:AC:7D Authority key identifier: 01:DB:81:EF:6D:63:94:E6:6D:3B:32:31:5B:47:9E:BE:D7:99:C9:37 Certificate issuer: /CN=A91FECDA/serialNumber=01DB81EF6D6394E66D3B32315B479EBED799C937 Certificate serial: 0F3F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AduB721jlOZtOzIxW0eevteZyTc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FECDA/8A88F1046F9C11E9A5074B2FC4F9AE02/AduB721jlOZtOzIxW0eevteZyTc.mft Manifest number: 0F36 Signing time: Sun 04 May 2025 17:31:50 +0000 Manifest this update: Sun 04 May 2025 17:31:50 +0000 Manifest next update: Sun 11 May 2025 17:31:50 +0000 Files and hashes: 1: AduB721jlOZtOzIxW0eevteZyTc.crl (hash: wHcVoYC5EFMbwsOZCc7uMMc29wd9DwS1xrWz9rMmueA=) 2: 85B9F090F35011EFAE695322C4F9AE02.roa (hash: lww/ZRWFPgZIaev9PDmaV5kjaByxeNEFJJYVjFLwNzI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FECDA/8A88F1046F9C11E9A5074B2FC4F9AE02/AduB721jlOZtOzIxW0eevteZyTc.crl rsync://rpki.apnic.net/member_repository/A91FECDA/8A88F1046F9C11E9A5074B2FC4F9AE02/AduB721jlOZtOzIxW0eevteZyTc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AduB721jlOZtOzIxW0eevteZyTc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 17:31:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3903 (0xf3f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FECDA, serialNumber=01DB81EF6D6394E66D3B32315B479EBED799C937 Validity Not Before: May 4 17:31:50 2025 GMT Not After : May 11 17:31:50 2025 GMT Subject: CN=6817a486-619b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:2b:4a:df:54:d3:32:c4:f4:5d:54:32:3c:3e: 29:f7:e2:9a:78:6a:bc:36:0b:36:f5:92:3b:6c:1b: 48:ca:5b:6e:02:b7:40:ac:23:37:c7:bd:be:34:f6: a5:cb:1c:7f:66:b6:7f:8d:21:c4:d0:47:04:21:41: fb:f8:43:44:57:8b:3b:9b:f1:74:14:c6:32:ac:c9: 7b:04:38:81:6c:28:29:fa:79:ae:f4:fb:43:6a:fc: b5:1b:4f:50:ec:16:bb:11:33:b7:9e:3d:46:48:12: 5c:94:46:d1:0c:2b:e2:d0:c6:26:80:2d:4b:6d:3a: 3f:d7:50:da:d0:96:d1:04:5a:c0:52:52:08:ea:33: 0c:0a:c0:da:18:a1:cc:d5:c4:e4:6f:b7:18:b4:09: 2e:41:a7:bc:bc:15:bc:8a:22:73:8f:41:41:d7:ea: 54:c2:ba:fc:97:65:21:b9:47:f6:70:32:62:f1:be: f4:f5:75:5e:ae:65:d6:b4:0f:b6:1f:af:2f:05:61: ba:2a:07:7b:b7:c9:68:47:bc:6f:68:f1:cd:f7:90: 59:36:1c:44:c2:90:c8:af:1e:9d:e6:26:da:6c:b7: fa:82:bb:5e:d9:fa:4c:eb:8d:64:17:05:0b:01:7f: bf:cb:15:1b:3a:3c:fa:03:82:49:d9:0b:c5:24:8b: 3d:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:E6:DD:90:79:E8:A4:62:F6:AE:29:32:43:21:A6:B3:18:89:AC:7D X509v3 Authority Key Identifier: keyid:01:DB:81:EF:6D:63:94:E6:6D:3B:32:31:5B:47:9E:BE:D7:99:C9:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FECDA/8A88F1046F9C11E9A5074B2FC4F9AE02/AduB721jlOZtOzIxW0eevteZyTc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AduB721jlOZtOzIxW0eevteZyTc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FECDA/8A88F1046F9C11E9A5074B2FC4F9AE02/AduB721jlOZtOzIxW0eevteZyTc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:ae:02:8f:53:2b:3a:6d:0d:64:26:28:8f:37:65:50:50:e3: 59:e9:ef:2f:22:e3:78:fd:e7:2f:c8:6d:4f:33:4b:6e:8e:32: 53:0d:2e:c9:88:f5:45:a0:77:b7:2e:c4:3a:30:07:c3:b7:7d: 04:53:a4:49:0a:dc:40:4e:65:e5:60:2f:3a:49:04:d4:e2:e5: d0:f6:94:1b:75:c6:12:85:2d:38:de:4e:38:76:d3:c3:b7:1e: af:15:e8:86:65:5b:cc:96:71:5e:dc:bd:ef:4d:18:f5:ad:0a: e9:ac:1f:07:43:a7:6b:16:89:4c:3f:d6:8b:fb:cf:57:fd:5b: a0:09:5d:0f:fe:54:c7:37:e4:82:13:72:06:de:31:3d:e6:f8: 4c:b7:ef:84:e4:b1:6a:81:af:ac:9a:e8:ce:3e:f9:66:7b:7d: 87:41:c2:9e:36:cb:62:79:5b:b6:c7:96:96:05:df:0a:f1:7b: 41:29:4c:99:f5:b8:52:23:81:a2:8c:c7:53:35:67:2a:41:60: 48:35:5c:58:ea:57:58:ac:01:cd:af:c4:c7:34:d2:51:ea:5d: 68:4c:4f:38:54:af:82:b5:cb:58:07:e4:45:8e:c5:6c:11:a9: 11:4e:c6:5b:4a:28:11:31:3e:21:58:b0:95:fd:fc:d7:24:22: b7:29:51:c4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDz8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkVDREExMTAvBgNVBAUTKDAxREI4MUVGNkQ2Mzk0RTY2RDNCMzIzMTVCNDc5RUJF RDc5OUM5MzcwHhcNMjUwNTA0MTczMTUwWhcNMjUwNTExMTczMTUwWjAYMRYwFAYD VQQDEw02ODE3YTQ4Ni02MTliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoStK31TTMsT0XVQyPD4p9+KaeGq8Ngs29ZI7bBtIyltuArdArCM3x72+NPal yxx/ZrZ/jSHE0EcEIUH7+ENEV4s7m/F0FMYyrMl7BDiBbCgp+nmu9PtDavy1G09Q 7Ba7ETO3nj1GSBJclEbRDCvi0MYmgC1LbTo/11Da0JbRBFrAUlII6jMMCsDaGKHM 1cTkb7cYtAkuQae8vBW8iiJzj0FB1+pUwrr8l2UhuUf2cDJi8b709XVermXWtA+2 H68vBWG6Kgd7t8loR7xvaPHN95BZNhxEwpDIrx6d5ibabLf6grte2fpM641kFwUL AX+/yxUbOjz6A4JJ2QvFJIs9NwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNXm3ZB5 6KRi9q4pMkMhprMYiax9MB8GA1UdIwQYMBaAFAHbge9tY5TmbTsyMVtHnr7Xmck3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRUNEQS84QTg4RjEwNDZG OUMxMUU5QTUwNzRCMkZDNEY5QUUwMi9BZHVCNzIxamxPWnRPekl4VzBlZXZ0ZVp5 VGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FkdUI3MjFqbE9adE96SXhXMGVldnRlWnlUYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RUNEQS84QTg4RjEwNDZGOUMxMUU5QTUwNzRCMkZDNEY5QUUwMi9BZHVCNzIxamxP WnRPekl4VzBlZXZ0ZVp5VGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBMrgKPUys6bQ1kJiiPN2VQUONZ6e8vIuN4/ecvyG1PM0tujjJTDS7J iPVFoHe3LsQ6MAfDt30EU6RJCtxATmXlYC86SQTU4uXQ9pQbdcYShS043k44dtPD tx6vFeiGZVvMlnFe3L3vTRj1rQrprB8HQ6drFolMP9aL+89X/VugCV0P/lTHN+SC E3IG3jE95vhMt++E5LFqga+smujOPvlme32HQcKeNstieVu2x5aWBd8K8XtBKUyZ 9bhSI4GijMdTNWcqQWBINVxY6ldYrAHNr8THNNJR6l1oTE84VK+CtctYB+RFjsVs EakRTsZbSigRMT4hWLCV/fzXJCK3KVHE -----END CERTIFICATE-----Generated at Tue May 6 02:24:14 2025 by rpki-client