$ rpki-client -vvf rpki.apnic.net/member_repository/A91FEF3B/AC762200E9C611EF9FA17711C4F9AE02/o41Ie9XZqKiUgCdP5vfAYcYkvMA.mft File: o41Ie9XZqKiUgCdP5vfAYcYkvMA.mft (raw, json) Hash identifier: B1ueYGQ0b/DREXhtvf795y30FIW3I1cyzgQYVARGp4U= Subject key identifier: 10:B4:6C:FD:E4:EF:08:C5:49:42:10:C3:34:A8:86:5C:22:47:85:BA Authority key identifier: A3:8D:48:7B:D5:D9:A8:A8:94:80:27:4F:E6:F7:C0:61:C6:24:BC:C0 Certificate issuer: /CN=A91FEF3B/serialNumber=A38D487BD5D9A8A89480274FE6F7C061C624BCC0 Certificate serial: 31 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o41Ie9XZqKiUgCdP5vfAYcYkvMA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FEF3B/AC762200E9C611EF9FA17711C4F9AE02/o41Ie9XZqKiUgCdP5vfAYcYkvMA.mft Manifest number: 30 Signing time: Thu 15 May 2025 06:56:33 +0000 Manifest this update: Thu 15 May 2025 06:56:33 +0000 Manifest next update: Thu 22 May 2025 06:56:33 +0000 Files and hashes: 1: o41Ie9XZqKiUgCdP5vfAYcYkvMA.crl (hash: xLNjaIPjjSk2PeDQxbFMkau7zDlzHvUdgWpuBuwjvSY=) 2: 10800248E9C711EFA1589312C4F9AE02.roa (hash: MTqILFa0C+24gi6qk+nzk7lo5NR6f5WiYqHQ/SbCX2c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FEF3B/AC762200E9C611EF9FA17711C4F9AE02/o41Ie9XZqKiUgCdP5vfAYcYkvMA.crl rsync://rpki.apnic.net/member_repository/A91FEF3B/AC762200E9C611EF9FA17711C4F9AE02/o41Ie9XZqKiUgCdP5vfAYcYkvMA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o41Ie9XZqKiUgCdP5vfAYcYkvMA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 06:56:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49 (0x31) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FEF3B, serialNumber=A38D487BD5D9A8A89480274FE6F7C061C624BCC0 Validity Not Before: May 15 06:56:33 2025 GMT Not After : May 22 06:56:33 2025 GMT Subject: CN=68259021-93d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:1f:c0:fe:52:d3:fe:2d:54:d9:ec:da:e1:e4: 56:e6:81:ed:8e:7b:36:a5:15:65:2e:7d:d9:35:46: af:a7:61:53:01:42:a6:7a:bf:a4:44:eb:f1:2f:09: 59:de:d5:13:ce:d8:ee:6c:e9:68:7b:bb:c8:13:42: 60:06:63:8b:46:0c:86:d8:a4:ac:90:1c:fc:23:8e: fe:d5:15:58:f7:b7:4f:09:38:7e:04:88:9f:09:77: 66:8f:e8:7a:01:30:58:2a:a2:c9:29:e0:3e:b1:fd: 91:b4:80:e1:90:9a:9d:39:50:e0:31:f6:8e:65:0e: a3:29:43:4b:47:60:76:bc:b9:17:31:08:86:3d:ba: 8f:88:aa:64:30:ff:6d:1e:84:e6:32:73:e3:c3:c4: 73:cf:51:fc:1b:40:4a:66:ab:52:6b:a2:c7:a9:56: 94:4d:00:4f:a3:50:ee:eb:40:3a:6a:3b:13:c4:f6: 82:30:70:2f:54:0c:9d:75:4a:41:43:be:0a:d9:5f: d5:06:fc:97:f5:be:aa:9a:68:63:5f:44:8a:12:d8: 83:f8:a0:a7:6a:af:09:43:b2:04:41:4d:58:d0:42: 80:f0:d3:19:80:e6:2d:a3:02:cf:77:10:e7:7c:ff: de:88:58:67:4b:ac:b9:d7:44:66:59:6b:63:ad:e6: a9:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:B4:6C:FD:E4:EF:08:C5:49:42:10:C3:34:A8:86:5C:22:47:85:BA X509v3 Authority Key Identifier: keyid:A3:8D:48:7B:D5:D9:A8:A8:94:80:27:4F:E6:F7:C0:61:C6:24:BC:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FEF3B/AC762200E9C611EF9FA17711C4F9AE02/o41Ie9XZqKiUgCdP5vfAYcYkvMA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o41Ie9XZqKiUgCdP5vfAYcYkvMA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FEF3B/AC762200E9C611EF9FA17711C4F9AE02/o41Ie9XZqKiUgCdP5vfAYcYkvMA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:67:f7:74:41:d4:9d:92:7f:bb:23:c1:97:8c:c0:52:79:c8: ee:08:67:a4:00:5e:05:c2:30:1b:a4:dc:3a:3a:49:64:a6:60: 17:52:5d:51:2d:80:42:7f:62:ad:0a:ab:56:49:86:94:84:2f: 29:22:82:e0:39:78:36:dc:d4:bf:88:0e:27:e2:2d:88:7d:5f: 86:6a:0b:dd:6b:02:36:fc:e9:5f:09:3b:46:0d:3a:60:78:36: 91:b7:48:2f:d5:63:ec:d2:5d:9c:c1:66:76:16:94:3e:fa:4e: d2:a3:e7:d9:da:29:11:ff:d3:b5:a0:53:68:c5:43:80:9a:6f: e1:8f:09:dd:ca:12:3e:f3:29:90:bb:66:fe:85:9e:68:6e:44: 2f:b7:dd:fc:f9:2e:9b:cd:ec:07:a1:70:89:14:49:41:fa:38: d4:ac:83:20:10:93:05:fe:27:8c:b3:0a:b0:da:2f:35:00:3f: bf:b2:e7:de:4a:05:0f:eb:54:b2:cc:da:4f:6d:dc:94:f2:1a: 7d:f9:17:d4:d1:eb:bb:bd:88:76:ae:13:5e:7d:31:db:68:e7: da:a0:03:e8:8d:20:b4:dc:00:d1:dc:ba:82:3c:96:ba:f7:e4: 6c:96:90:23:b5:ba:0c:1e:9c:d1:97:e9:4b:73:87:ec:02:fc: 1e:72:7d:4e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG RUYzQjExMC8GA1UEBRMoQTM4RDQ4N0JENUQ5QThBODk0ODAyNzRGRTZGN0MwNjFD NjI0QkNDMDAeFw0yNTA1MTUwNjU2MzNaFw0yNTA1MjIwNjU2MzNaMBgxFjAUBgNV BAMTDTY4MjU5MDIxLTkzZDkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCkH8D+UtP+LVTZ7Nrh5Fbmge2OezalFWUufdk1Rq+nYVMBQqZ6v6RE6/EvCVne 1RPO2O5s6Wh7u8gTQmAGY4tGDIbYpKyQHPwjjv7VFVj3t08JOH4EiJ8Jd2aP6HoB MFgqoskp4D6x/ZG0gOGQmp05UOAx9o5lDqMpQ0tHYHa8uRcxCIY9uo+IqmQw/20e hOYyc+PDxHPPUfwbQEpmq1JrosepVpRNAE+jUO7rQDpqOxPE9oIwcC9UDJ11SkFD vgrZX9UG/Jf1vqqaaGNfRIoS2IP4oKdqrwlDsgRBTVjQQoDw0xmA5i2jAs93EOd8 /96IWGdLrLnXRGZZa2Ot5qmtAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUELRs/eTv CMVJQhDDNKiGXCJHhbowHwYDVR0jBBgwFoAUo41Ie9XZqKiUgCdP5vfAYcYkvMAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZFRjNCL0FDNzYyMjAwRTlD NjExRUY5RkExNzcxMUM0RjlBRTAyL280MUllOVhacUtpVWdDZFA1dmZBWWNZa3ZN QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbzQxSWU5WFpxS2lVZ0NkUDV2ZkFZY1lrdk1BLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZF RjNCL0FDNzYyMjAwRTlDNjExRUY5RkExNzcxMUM0RjlBRTAyL280MUllOVhacUtp VWdDZFA1dmZBWWNZa3ZNQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAF1n93RB1J2Sf7sjwZeMwFJ5yO4IZ6QAXgXCMBuk3Do6SWSmYBdSXVEt gEJ/Yq0Kq1ZJhpSELykiguA5eDbc1L+IDifiLYh9X4ZqC91rAjb86V8JO0YNOmB4 NpG3SC/VY+zSXZzBZnYWlD76TtKj59naKRH/07WgU2jFQ4Cab+GPCd3KEj7zKZC7 Zv6FnmhuRC+33fz5LpvN7AehcIkUSUH6ONSsgyAQkwX+J4yzCrDaLzUAP7+y595K BQ/rVLLM2k9t3JTyGn35F9TR67u9iHauE159Mdto59qgA+iNILTcANHcuoI8lrr3 5GyWkCO1ugwenNGX6Utzh+wC/B5yfU4= -----END CERTIFICATE-----Generated at Thu May 15 15:31:02 2025 by rpki-client