$ rpki-client -vvf rpki.apnic.net/member_repository/A91982FB/994D6DA6FE8711EBB9FA7263C4F9AE02/RkmySeQmwrj6r_YvJ5Dy5nsA_Fs.mft File: RkmySeQmwrj6r_YvJ5Dy5nsA_Fs.mft (raw, json) Hash identifier: fXQDdG5O16EKG5DyjwDbJgBgRAZWBjslY2syr1NhRAg= Subject key identifier: 8E:CE:96:7C:D0:D0:3F:2D:14:0D:0D:56:0C:4A:7C:0C:7E:24:FC:7E Authority key identifier: 46:49:B2:49:E4:26:C2:B8:FA:AF:F6:2F:27:90:F2:E6:7B:00:FC:5B Certificate issuer: /CN=A91982FB/serialNumber=4649B249E426C2B8FAAFF62F2790F2E67B00FC5B Certificate serial: 0520 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RkmySeQmwrj6r_YvJ5Dy5nsA_Fs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91982FB/994D6DA6FE8711EBB9FA7263C4F9AE02/RkmySeQmwrj6r_YvJ5Dy5nsA_Fs.mft Manifest number: 0517 Signing time: Thu 24 Apr 2025 23:22:26 +0000 Manifest this update: Thu 24 Apr 2025 23:22:26 +0000 Manifest next update: Thu 01 May 2025 23:22:26 +0000 Files and hashes: 1: RkmySeQmwrj6r_YvJ5Dy5nsA_Fs.crl (hash: aysMFIWC6vGwsSbmqylO9llu6giYAOz9R3qQZiGIYog=) 2: 0006ED8263DD11EC9A50031BC4F9AE02.roa (hash: wRribXkCp4s0JF1oTM02hSLF0pchc7JmKUBHKJxUnUY=) 3: D249CE5EFE8911EBA7BEB564C4F9AE02.roa (hash: Kl/jYxUXqCil/0G6LuLn2peWneSNh/bHX1vc6KhRG0E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91982FB/994D6DA6FE8711EBB9FA7263C4F9AE02/RkmySeQmwrj6r_YvJ5Dy5nsA_Fs.crl rsync://rpki.apnic.net/member_repository/A91982FB/994D6DA6FE8711EBB9FA7263C4F9AE02/RkmySeQmwrj6r_YvJ5Dy5nsA_Fs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RkmySeQmwrj6r_YvJ5Dy5nsA_Fs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 23:22:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1312 (0x520) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91982FB, serialNumber=4649B249E426C2B8FAAFF62F2790F2E67B00FC5B Validity Not Before: Apr 24 23:22:26 2025 GMT Not After : May 1 23:22:26 2025 GMT Subject: CN=680ac7b2-1ccc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:2b:ca:76:0b:3c:e2:2c:8a:53:7b:ab:02:2f: 91:58:1e:a6:78:2f:6f:e7:df:ba:91:64:83:e4:4f: 46:c9:6e:7b:16:49:ec:32:7a:fc:df:f4:74:6e:d1: 94:e7:14:48:f0:f2:da:75:59:e6:f9:96:c8:c8:08: 37:c8:e2:65:27:00:35:1e:03:b6:40:31:38:a1:5b: b2:d5:f0:5b:ef:23:95:2e:2e:af:42:0b:69:71:df: a1:9a:dc:83:a4:93:bc:23:93:ce:87:0a:6d:24:c5: 6e:57:7b:d6:51:33:6c:4a:57:77:e6:4f:98:78:99: 76:c3:29:01:23:b0:40:c8:50:eb:ed:42:62:64:c6: 4d:81:45:b7:a2:82:15:fd:a6:dc:d7:b7:28:1a:6f: 14:96:af:71:dd:c8:52:b5:62:90:ca:28:47:6f:63: ec:13:ab:09:b0:a1:31:84:89:2f:99:fd:92:ce:8e: 29:ee:32:90:52:44:c1:15:96:ba:eb:40:a7:77:b6: 27:a4:15:37:f6:33:de:44:27:74:f5:63:dc:2e:e3: a2:3b:48:db:73:c1:46:ee:2c:d8:83:61:29:3e:02: 31:43:1f:45:16:64:34:11:54:5a:5a:6e:9a:58:96: fa:15:0b:4e:4b:02:9d:00:30:09:f4:8f:4e:51:10: bb:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:CE:96:7C:D0:D0:3F:2D:14:0D:0D:56:0C:4A:7C:0C:7E:24:FC:7E X509v3 Authority Key Identifier: keyid:46:49:B2:49:E4:26:C2:B8:FA:AF:F6:2F:27:90:F2:E6:7B:00:FC:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91982FB/994D6DA6FE8711EBB9FA7263C4F9AE02/RkmySeQmwrj6r_YvJ5Dy5nsA_Fs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RkmySeQmwrj6r_YvJ5Dy5nsA_Fs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91982FB/994D6DA6FE8711EBB9FA7263C4F9AE02/RkmySeQmwrj6r_YvJ5Dy5nsA_Fs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:6b:ba:c2:b7:b8:5e:98:19:c5:ea:e2:fc:b2:c1:50:84:a0: d0:27:14:f7:e5:d2:90:ab:cb:8b:87:71:c9:f8:8e:a7:39:73: f8:c2:97:5f:21:a1:2d:ea:ca:3e:c4:86:78:9e:5c:91:40:9b: ca:bf:ba:82:d3:42:57:79:22:ba:3e:e7:84:ff:3e:94:60:90: b1:47:4f:09:7f:1c:07:39:5b:28:e3:1c:8b:c2:d9:66:2b:c9: 84:b1:79:e5:59:b3:f8:eb:f7:9a:1e:28:be:67:fb:22:23:c5: 68:f3:9a:1d:a6:b8:6f:2a:d8:25:7c:ea:04:e0:c3:15:f2:9a: e4:f3:57:c2:fc:74:7f:06:53:b5:eb:98:3e:81:d3:f0:f2:99: 5c:37:16:ba:c7:89:41:a2:50:92:0f:e0:fc:7a:b8:1c:eb:33: 81:a6:90:57:35:fa:28:90:45:67:3f:5e:79:54:10:7d:8a:7f: 86:65:ae:2b:2a:54:54:3f:5f:f4:f4:cb:14:c3:4a:c3:e2:36: fd:29:01:b3:69:e8:07:72:56:af:44:e7:07:68:a0:d1:cd:a0: d7:f0:d2:5e:37:b9:d0:65:7f:93:f4:e6:c9:49:f5:51:48:f2: 1d:7c:e8:0a:e6:a8:63:a8:c0:40:1c:9e:c2:fb:db:4e:4b:5c: 00:54:0d:c2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBSAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTgyRkIxMTAvBgNVBAUTKDQ2NDlCMjQ5RTQyNkMyQjhGQUFGRjYyRjI3OTBGMkU2 N0IwMEZDNUIwHhcNMjUwNDI0MjMyMjI2WhcNMjUwNTAxMjMyMjI2WjAYMRYwFAYD VQQDEw02ODBhYzdiMi0xY2NjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwivKdgs84iyKU3urAi+RWB6meC9v59+6kWSD5E9GyW57FknsMnr83/R0btGU 5xRI8PLadVnm+ZbIyAg3yOJlJwA1HgO2QDE4oVuy1fBb7yOVLi6vQgtpcd+hmtyD pJO8I5POhwptJMVuV3vWUTNsSld35k+YeJl2wykBI7BAyFDr7UJiZMZNgUW3ooIV /abc17coGm8Ulq9x3chStWKQyihHb2PsE6sJsKExhIkvmf2Szo4p7jKQUkTBFZa6 60Cnd7YnpBU39jPeRCd09WPcLuOiO0jbc8FG7izYg2EpPgIxQx9FFmQ0EVRaWm6a WJb6FQtOSwKdADAJ9I9OURC7kwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI7OlnzQ 0D8tFA0NVgxKfAx+JPx+MB8GA1UdIwQYMBaAFEZJsknkJsK4+q/2LyeQ8uZ7APxb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODJGQi85OTRENkRBNkZF ODcxMUVCQjlGQTcyNjNDNEY5QUUwMi9Sa215U2VRbXdyajZyX1l2SjVEeTVuc0Ff RnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JrbXlTZVFtd3JqNnJfWXZKNUR5NW5zQV9Gcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 ODJGQi85OTRENkRBNkZFODcxMUVCQjlGQTcyNjNDNEY5QUUwMi9Sa215U2VRbXdy ajZyX1l2SjVEeTVuc0FfRnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBca7rCt7hemBnF6uL8ssFQhKDQJxT35dKQq8uLh3HJ+I6nOXP4wpdf IaEt6so+xIZ4nlyRQJvKv7qC00JXeSK6PueE/z6UYJCxR08JfxwHOVso4xyLwtlm K8mEsXnlWbP46/eaHii+Z/siI8Vo85odprhvKtglfOoE4MMV8prk81fC/HR/BlO1 65g+gdPw8plcNxa6x4lBolCSD+D8ergc6zOBppBXNfookEVnP155VBB9in+GZa4r KlRUP1/09MsUw0rD4jb9KQGzaegHclavROcHaKDRzaDX8NJeN7nQZX+T9ObJSfVR SPIdfOgK5qhjqMBAHJ7C+9tOS1wAVA3C -----END CERTIFICATE-----Generated at Sat Apr 26 16:52:20 2025 by rpki-client