$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF634/1327A73E172911E98DD18E23C4F9AE02/49O0eIJzzkWSmwmYOr9ktdRNHwg.mft File: 49O0eIJzzkWSmwmYOr9ktdRNHwg.mft (raw, json) Hash identifier: +cTNZWgsNAnbLXN0TchDLOK1TkxUfAfSo3cNutbSwNQ= Subject key identifier: B8:26:1D:02:3D:40:79:F1:7B:94:B7:CF:4D:10:6D:2F:0B:12:E9:FE Authority key identifier: E3:D3:B4:78:82:73:CE:45:92:9B:09:98:3A:BF:64:B5:D4:4D:1F:08 Certificate issuer: /CN=A91FF634/serialNumber=E3D3B4788273CE45929B09983ABF64B5D44D1F08 Certificate serial: 1124 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/49O0eIJzzkWSmwmYOr9ktdRNHwg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FF634/1327A73E172911E98DD18E23C4F9AE02/49O0eIJzzkWSmwmYOr9ktdRNHwg.mft Manifest number: 110D Signing time: Wed 14 May 2025 17:25:19 +0000 Manifest this update: Wed 14 May 2025 17:25:19 +0000 Manifest next update: Wed 21 May 2025 17:25:19 +0000 Files and hashes: 1: 49O0eIJzzkWSmwmYOr9ktdRNHwg.crl (hash: 8wvHJqTITDxoCdGNlhL8ITGBIDDwGJbJn44eVs/LCDw=) 2: 97F937E440BC11EAA2B89432C4F9AE02.roa (hash: YvhnTG1A1W5kz0Vch4cPsIzgbILMaDioP1ySIyj5aeE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FF634/1327A73E172911E98DD18E23C4F9AE02/49O0eIJzzkWSmwmYOr9ktdRNHwg.crl rsync://rpki.apnic.net/member_repository/A91FF634/1327A73E172911E98DD18E23C4F9AE02/49O0eIJzzkWSmwmYOr9ktdRNHwg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/49O0eIJzzkWSmwmYOr9ktdRNHwg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 17:25:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4388 (0x1124) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FF634, serialNumber=E3D3B4788273CE45929B09983ABF64B5D44D1F08 Validity Not Before: May 14 17:25:19 2025 GMT Not After : May 21 17:25:19 2025 GMT Subject: CN=6824d1ff-acb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:43:ab:a7:b9:e7:7d:d9:06:15:aa:3e:23:e1: 42:66:4f:ee:9b:9a:9f:0d:ca:a2:ce:0c:00:0a:16: cc:19:ac:78:51:36:65:95:c0:15:ce:d9:5c:93:a1: 2f:fd:af:54:18:98:3b:3f:b5:ec:a0:15:56:8a:2f: a9:14:c4:8a:68:6e:1f:88:77:60:67:09:76:20:06: b7:06:ae:d1:64:c2:41:a5:54:0d:d8:b1:20:4e:a4: f4:95:27:f7:7c:ed:8a:f4:aa:35:c6:6e:fd:f9:66: 1e:59:16:cd:60:52:1b:0d:29:6b:8d:29:20:ac:d7: 30:0f:4d:26:87:5f:16:24:9f:c1:8c:d1:a3:1b:c7: 70:ec:30:5e:64:e8:0a:dd:30:0e:f5:e2:be:95:6f: 4d:3d:e7:84:ea:1e:49:62:eb:a2:1d:82:61:b4:cc: 0e:f0:40:34:dd:f4:37:c1:fe:c3:a3:cf:18:c7:1f: 1f:eb:20:73:98:2c:9d:f4:eb:64:3f:fe:d8:75:68: 1e:69:ea:8a:3a:96:70:4f:4c:5b:09:08:eb:8e:2a: 69:6b:f4:37:a0:95:70:77:cc:9f:f2:25:86:67:75: bd:78:4a:a3:86:7f:fe:25:73:55:9e:cf:76:41:38: a4:d3:b8:db:ea:7f:43:ea:35:7d:02:46:a5:87:89: 2d:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:26:1D:02:3D:40:79:F1:7B:94:B7:CF:4D:10:6D:2F:0B:12:E9:FE X509v3 Authority Key Identifier: keyid:E3:D3:B4:78:82:73:CE:45:92:9B:09:98:3A:BF:64:B5:D4:4D:1F:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FF634/1327A73E172911E98DD18E23C4F9AE02/49O0eIJzzkWSmwmYOr9ktdRNHwg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/49O0eIJzzkWSmwmYOr9ktdRNHwg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF634/1327A73E172911E98DD18E23C4F9AE02/49O0eIJzzkWSmwmYOr9ktdRNHwg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:2d:56:3b:1e:d9:e1:68:c7:33:a8:0f:4b:30:a1:85:c8:32: a7:54:23:1b:61:de:18:a2:70:af:75:a5:ea:a1:ff:01:52:58: 65:43:4e:75:74:52:be:e1:7f:46:ec:c0:85:80:ec:a5:d6:9e: 74:14:ca:46:f2:90:28:ed:9b:8f:c8:22:d9:2a:7b:d8:c9:85: ad:47:48:40:67:5c:90:77:95:58:09:f8:8c:79:c3:37:c1:08: 90:e5:27:78:58:3e:0c:87:f8:bf:47:13:bb:16:78:35:dd:7b: 55:8e:2a:23:52:04:07:22:c1:a4:d6:24:de:1a:16:aa:3d:a4: e4:0d:a6:ac:ad:f6:44:b3:57:34:e3:86:b8:b1:db:2d:f5:91: a0:4a:64:63:45:ef:5c:9b:09:81:d0:72:e4:72:d2:04:13:d6: 5a:d4:e5:01:18:23:44:63:7a:40:7e:08:1a:df:b2:71:71:4a: 4e:76:02:57:87:d8:e1:1e:0d:c2:77:49:11:2d:23:b7:4b:17: 75:77:e0:a3:2a:e8:f7:b4:93:5e:d4:79:fe:bf:4e:75:af:f8: c2:79:f2:a8:f5:5e:49:49:4a:c8:5d:33:1a:7d:4f:09:0b:ff: b5:40:1a:be:7d:ab:65:59:c6:90:e9:ac:de:6b:db:15:1c:67: 00:e9:46:b0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICESQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkY2MzQxMTAvBgNVBAUTKEUzRDNCNDc4ODI3M0NFNDU5MjlCMDk5ODNBQkY2NEI1 RDQ0RDFGMDgwHhcNMjUwNTE0MTcyNTE5WhcNMjUwNTIxMTcyNTE5WjAYMRYwFAYD VQQDEw02ODI0ZDFmZi1hY2IzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvEOrp7nnfdkGFao+I+FCZk/um5qfDcqizgwAChbMGax4UTZllcAVztlck6Ev /a9UGJg7P7XsoBVWii+pFMSKaG4fiHdgZwl2IAa3Bq7RZMJBpVQN2LEgTqT0lSf3 fO2K9Ko1xm79+WYeWRbNYFIbDSlrjSkgrNcwD00mh18WJJ/BjNGjG8dw7DBeZOgK 3TAO9eK+lW9NPeeE6h5JYuuiHYJhtMwO8EA03fQ3wf7Do88Yxx8f6yBzmCyd9Otk P/7YdWgeaeqKOpZwT0xbCQjrjippa/Q3oJVwd8yf8iWGZ3W9eEqjhn/+JXNVns92 QTik07jb6n9D6jV9Akalh4ktHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLgmHQI9 QHnxe5S3z00QbS8LEun+MB8GA1UdIwQYMBaAFOPTtHiCc85FkpsJmDq/ZLXUTR8I MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRjYzNC8xMzI3QTczRTE3 MjkxMUU5OEREMThFMjNDNEY5QUUwMi80OU8wZUlKenprV1Ntd21ZT3I5a3RkUk5I d2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzQ5TzBlSUp6emtXU213bVlPcjlrdGRSTkh3Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RjYzNC8xMzI3QTczRTE3MjkxMUU5OEREMThFMjNDNEY5QUUwMi80OU8wZUlKenpr V1Ntd21ZT3I5a3RkUk5Id2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBgLVY7HtnhaMczqA9LMKGFyDKnVCMbYd4YonCvdaXqof8BUlhlQ051 dFK+4X9G7MCFgOyl1p50FMpG8pAo7ZuPyCLZKnvYyYWtR0hAZ1yQd5VYCfiMecM3 wQiQ5Sd4WD4Mh/i/RxO7Fng13XtVjiojUgQHIsGk1iTeGhaqPaTkDaasrfZEs1c0 44a4sdst9ZGgSmRjRe9cmwmB0HLkctIEE9Za1OUBGCNEY3pAfgga37JxcUpOdgJX h9jhHg3Cd0kRLSO3Sxd1d+CjKuj3tJNe1Hn+v051r/jCefKo9V5JSUrIXTMafU8J C/+1QBq+fatlWcaQ6azea9sVHGcA6Uaw -----END CERTIFICATE-----Generated at Fri May 16 19:22:20 2025 by rpki-client