$ rpki-client -vvf rpki.apnic.net/member_repository/A91447E7/FE4469D2130111EDADCE5C7DC4F9AE02/53uHFGgF4mBLSe7ytKQ4y9KlFCQ.mft File: 53uHFGgF4mBLSe7ytKQ4y9KlFCQ.mft (raw, json) Hash identifier: I7PG/YaUdaKMzLpyPon4C3/RIWNhjpcVi+6jdK6eQzg= Subject key identifier: AE:27:66:7B:32:3F:09:F1:86:62:F2:20:71:FB:BA:73:6B:91:8E:CC Authority key identifier: E7:7B:87:14:68:05:E2:60:4B:49:EE:F2:B4:A4:38:CB:D2:A5:14:24 Certificate issuer: /CN=A91447E7/serialNumber=E77B87146805E2604B49EEF2B4A438CBD2A51424 Certificate serial: 027E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/53uHFGgF4mBLSe7ytKQ4y9KlFCQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91447E7/FE4469D2130111EDADCE5C7DC4F9AE02/53uHFGgF4mBLSe7ytKQ4y9KlFCQ.mft Manifest number: 026E Signing time: Thu 01 May 2025 01:24:28 +0000 Manifest this update: Thu 01 May 2025 01:24:27 +0000 Manifest next update: Thu 08 May 2025 01:24:27 +0000 Files and hashes: 1: 53uHFGgF4mBLSe7ytKQ4y9KlFCQ.crl (hash: w/O4ZWRvDcMQSRUGqm8qJrXBjlNlnK1o6XPovoE3teQ=) 2: 60A2CF98817811EE9E9A211DC4F9AE02.roa (hash: OBulHvX2B6jsIGrCSAsyqZYvuyIkHgMKG5wNVNk2ul8=) 3: 195EA596AC8711EEAC4B2427C4F9AE02.roa (hash: hhO5y4e/DFpdPdaj49uvYHcFr1O6lkR5HUgMp+6rOns=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91447E7/FE4469D2130111EDADCE5C7DC4F9AE02/53uHFGgF4mBLSe7ytKQ4y9KlFCQ.crl rsync://rpki.apnic.net/member_repository/A91447E7/FE4469D2130111EDADCE5C7DC4F9AE02/53uHFGgF4mBLSe7ytKQ4y9KlFCQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/53uHFGgF4mBLSe7ytKQ4y9KlFCQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 08 May 2025 01:24:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 638 (0x27e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91447E7, serialNumber=E77B87146805E2604B49EEF2B4A438CBD2A51424 Validity Not Before: May 1 01:24:27 2025 GMT Not After : May 8 01:24:27 2025 GMT Subject: CN=6812cd4c-31f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:ca:b3:13:26:ce:c0:ab:89:95:cb:fb:da:9f: 0a:9f:a6:74:c6:b5:19:58:4a:43:9c:53:fe:95:01: 21:26:f3:e2:da:4a:ff:3d:ad:70:c2:90:6a:42:32: 1b:d5:b4:b0:7b:e8:73:f3:51:fc:f7:aa:53:a0:4d: 0a:e9:a1:44:8d:37:18:d1:3d:89:c3:3a:05:7e:51: a7:55:2d:12:ca:86:7c:83:fb:97:80:ad:af:e5:8e: 47:64:5d:9d:d5:33:32:c7:cd:02:1e:99:fa:3b:4c: a8:54:3d:e8:0d:b0:49:ba:c1:69:23:c6:ad:53:3a: 6e:19:d2:60:f5:35:6f:46:6a:f8:e4:22:81:3c:1e: da:fd:cf:70:e5:22:7a:7d:88:e9:c0:fc:62:2c:1a: 0a:72:94:27:af:ec:bf:cc:90:7e:39:37:b0:29:da: a6:95:42:79:c7:bb:c2:aa:0d:ca:b7:97:19:7a:e2: f1:df:4e:e1:30:b6:3c:98:b9:d2:2f:d6:b0:0f:04: c4:e8:c5:12:86:1b:7b:c2:54:6f:f2:75:ad:aa:d2: 17:97:b9:31:79:5c:fd:a3:80:19:84:09:b9:1a:f9: 15:ae:fc:c3:e6:d1:ea:e1:01:b4:f4:b8:f7:90:dc: 8c:ba:08:39:7c:df:0a:d7:af:1a:80:59:fe:97:03: b2:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:27:66:7B:32:3F:09:F1:86:62:F2:20:71:FB:BA:73:6B:91:8E:CC X509v3 Authority Key Identifier: keyid:E7:7B:87:14:68:05:E2:60:4B:49:EE:F2:B4:A4:38:CB:D2:A5:14:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91447E7/FE4469D2130111EDADCE5C7DC4F9AE02/53uHFGgF4mBLSe7ytKQ4y9KlFCQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/53uHFGgF4mBLSe7ytKQ4y9KlFCQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91447E7/FE4469D2130111EDADCE5C7DC4F9AE02/53uHFGgF4mBLSe7ytKQ4y9KlFCQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:4b:6b:9e:2b:fc:ed:04:80:bc:4a:21:f9:e0:36:fe:70:13: db:62:7e:ba:52:e0:6a:9c:48:74:2e:f5:c7:6a:0e:88:45:90: c1:ea:57:7b:3c:55:d2:4a:7c:e4:69:e9:86:2f:98:cd:57:25: d3:06:54:ba:95:33:c6:82:f9:68:71:e7:12:78:c5:65:d4:ff: f1:61:1e:db:32:97:bb:15:8c:a7:88:fc:95:80:fd:6f:53:70: 3b:09:64:3a:36:96:ac:52:8e:3c:8f:87:7e:7f:6a:87:8d:8a: 3f:dd:d8:7a:49:ce:a6:39:14:af:15:18:63:ae:6e:ea:7e:30: e0:db:d9:b6:a5:8c:d1:42:35:1e:29:16:6a:a1:3d:37:00:6b: c6:09:1b:1f:80:49:47:54:58:7a:9d:b9:44:e0:ff:1a:a2:ac: 44:f1:f7:22:7d:46:ad:6c:c7:da:e4:8f:4b:22:a3:f2:55:cf: e2:1b:09:69:03:ab:c1:76:e0:ab:26:65:7e:8e:ff:05:55:f3: 65:d2:f6:dd:74:d9:8f:bb:d4:74:67:f0:17:54:85:94:b0:0e: b7:71:cb:0f:69:68:a2:c5:10:93:c2:3b:96:a8:4c:0f:6e:44: bd:43:69:41:d8:5e:fc:f3:1c:d8:8d:05:96:8f:a5:33:fc:cc: a3:39:9d:97 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAn4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDQ3RTcxMTAvBgNVBAUTKEU3N0I4NzE0NjgwNUUyNjA0QjQ5RUVGMkI0QTQzOENC RDJBNTE0MjQwHhcNMjUwNTAxMDEyNDI3WhcNMjUwNTA4MDEyNDI3WjAYMRYwFAYD VQQDEw02ODEyY2Q0Yy0zMWYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy8qzEybOwKuJlcv72p8Kn6Z0xrUZWEpDnFP+lQEhJvPi2kr/Pa1wwpBqQjIb 1bSwe+hz81H896pToE0K6aFEjTcY0T2JwzoFflGnVS0SyoZ8g/uXgK2v5Y5HZF2d 1TMyx80CHpn6O0yoVD3oDbBJusFpI8atUzpuGdJg9TVvRmr45CKBPB7a/c9w5SJ6 fYjpwPxiLBoKcpQnr+y/zJB+OTewKdqmlUJ5x7vCqg3Kt5cZeuLx307hMLY8mLnS L9awDwTE6MUShht7wlRv8nWtqtIXl7kxeVz9o4AZhAm5GvkVrvzD5tHq4QG09Lj3 kNyMugg5fN8K168agFn+lwOyGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK4nZnsy PwnxhmLyIHH7unNrkY7MMB8GA1UdIwQYMBaAFOd7hxRoBeJgS0nu8rSkOMvSpRQk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDdFNy9GRTQ0NjlEMjEz MDExMUVEQURDRTVDN0RDNEY5QUUwMi81M3VIRkdnRjRtQkxTZTd5dEtRNHk5S2xG Q1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzUzdUhGR2dGNG1CTFNlN3l0S1E0eTlLbEZDUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NDdFNy9GRTQ0NjlEMjEzMDExMUVEQURDRTVDN0RDNEY5QUUwMi81M3VIRkdnRjRt QkxTZTd5dEtRNHk5S2xGQ1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCxS2ueK/ztBIC8SiH54Db+cBPbYn66UuBqnEh0LvXHag6IRZDB6ld7 PFXSSnzkaemGL5jNVyXTBlS6lTPGgvlocecSeMVl1P/xYR7bMpe7FYyniPyVgP1v U3A7CWQ6NpasUo48j4d+f2qHjYo/3dh6Sc6mORSvFRhjrm7qfjDg29m2pYzRQjUe KRZqoT03AGvGCRsfgElHVFh6nblE4P8aoqxE8fcifUatbMfa5I9LIqPyVc/iGwlp A6vBduCrJmV+jv8FVfNl0vbddNmPu9R0Z/AXVIWUsA63ccsPaWiixRCTwjuWqEwP bkS9Q2lB2F788xzYjQWWj6Uz/MyjOZ2X -----END CERTIFICATE-----Generated at Thu May 1 09:08:26 2025 by rpki-client