$ rpki-client -vvf rpki.apnic.net/member_repository/A91A40AE/86215FD0FC3811EC9D1AA71EC4F9AE02/S91WBs7jg4cxsnbrWuJ0CVXm6DU.mft File: S91WBs7jg4cxsnbrWuJ0CVXm6DU.mft (raw, json) Hash identifier: ED/w2jwXTDKKsUmIbVipRHRWI/m8WKmPKJEhGVe2qXs= Subject key identifier: 3C:93:32:4E:5C:98:05:F7:9B:9D:AA:CB:79:27:5E:AF:00:1D:E9:C8 Authority key identifier: 4B:DD:56:06:CE:E3:83:87:31:B2:76:EB:5A:E2:74:09:55:E6:E8:35 Certificate issuer: /CN=A91A40AE/serialNumber=4BDD5606CEE3838731B276EB5AE2740955E6E835 Certificate serial: 0296 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S91WBs7jg4cxsnbrWuJ0CVXm6DU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A40AE/86215FD0FC3811EC9D1AA71EC4F9AE02/S91WBs7jg4cxsnbrWuJ0CVXm6DU.mft Manifest number: 0293 Signing time: Tue 29 Apr 2025 02:10:41 +0000 Manifest this update: Tue 29 Apr 2025 02:10:41 +0000 Manifest next update: Tue 06 May 2025 02:10:41 +0000 Files and hashes: 1: S91WBs7jg4cxsnbrWuJ0CVXm6DU.crl (hash: 8yadefZza/NDhWdafjkah4M0mlwbSMiYxYZF6HRlE6Q=) 2: 0C2902B4FC3D11ECAD619C35C4F9AE02.roa (hash: hVypcOVVHiw3xkPQvZdEii5XB06efgTyPBfdlHWp4xo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A40AE/86215FD0FC3811EC9D1AA71EC4F9AE02/S91WBs7jg4cxsnbrWuJ0CVXm6DU.crl rsync://rpki.apnic.net/member_repository/A91A40AE/86215FD0FC3811EC9D1AA71EC4F9AE02/S91WBs7jg4cxsnbrWuJ0CVXm6DU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S91WBs7jg4cxsnbrWuJ0CVXm6DU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 06 May 2025 02:10:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 662 (0x296) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A40AE, serialNumber=4BDD5606CEE3838731B276EB5AE2740955E6E835 Validity Not Before: Apr 29 02:10:41 2025 GMT Not After : May 6 02:10:41 2025 GMT Subject: CN=68103521-4656 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:50:87:70:70:09:89:95:6e:83:c5:89:1d:15: c5:21:32:d3:a4:3f:7c:0d:b5:8b:c2:8b:54:15:83: 8d:0c:47:09:89:f0:fe:da:c9:27:30:cb:ce:51:b6: 90:1c:b9:f7:8a:d6:64:20:e4:f6:d7:aa:ec:19:d7: 26:99:d3:cd:ca:db:59:39:a4:b5:99:26:da:48:c6: 0d:f4:96:a8:5d:40:4c:f5:61:a8:a1:b3:14:54:c6: dc:df:51:34:35:d2:52:00:d1:5b:54:da:39:d8:b9: 67:d4:07:9b:52:9d:01:c7:19:aa:25:db:a0:ac:ff: 6f:49:3e:ef:82:84:4d:04:37:d3:fc:05:fb:39:ad: 50:44:fd:08:20:23:99:90:ee:f0:67:1c:ef:57:14: 11:43:1a:ef:9c:ea:4b:6a:a7:b3:be:a4:a3:05:34: 45:48:0a:37:3a:a7:3c:aa:1e:ed:fd:6d:01:77:86: 1d:99:b5:83:e6:eb:e1:fe:31:a4:4e:bd:b9:ab:b5: 30:68:79:6a:9e:52:39:9b:1f:b7:5f:80:6c:e3:bf: a8:0c:d7:9e:d4:e0:f8:2d:9b:6d:8b:e0:65:b2:88: 82:73:b8:3c:53:4c:5d:17:51:4d:f1:86:36:a1:67: e6:a2:31:62:58:ef:0c:29:14:57:68:06:63:07:7f: 97:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:93:32:4E:5C:98:05:F7:9B:9D:AA:CB:79:27:5E:AF:00:1D:E9:C8 X509v3 Authority Key Identifier: keyid:4B:DD:56:06:CE:E3:83:87:31:B2:76:EB:5A:E2:74:09:55:E6:E8:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A40AE/86215FD0FC3811EC9D1AA71EC4F9AE02/S91WBs7jg4cxsnbrWuJ0CVXm6DU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S91WBs7jg4cxsnbrWuJ0CVXm6DU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A40AE/86215FD0FC3811EC9D1AA71EC4F9AE02/S91WBs7jg4cxsnbrWuJ0CVXm6DU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:b8:13:e5:12:f8:38:7a:9f:88:1c:71:33:df:4c:5b:08:45: b1:38:bf:59:68:1d:b5:6a:aa:b4:af:ae:30:8f:a3:60:9d:6d: 11:89:ee:9a:1b:6e:12:d9:c2:85:de:bb:4e:11:63:39:d3:1d: 99:73:fc:2d:06:71:d1:ce:00:66:e1:8d:29:63:38:c0:bc:70: d8:a9:14:fa:09:9d:29:0a:1e:e4:f7:e3:15:d7:c6:fb:31:e5: 1c:4b:47:56:3d:6d:ce:87:18:9f:69:de:82:9a:5d:94:3f:ef: 53:10:c6:d6:57:ce:b4:56:49:c6:1e:e8:d1:9e:4d:e9:ff:bb: 8b:4b:7b:ac:23:7d:7c:d8:ae:79:41:15:a8:3c:37:76:80:f4: 70:8e:a2:4a:b0:c8:ba:28:37:f5:36:36:55:44:20:60:96:4f: 24:b0:c3:22:63:9f:e2:8e:40:6b:26:2b:e6:15:e1:af:05:7e: 26:ba:cd:bd:44:95:c0:4c:40:c5:64:68:f6:06:3a:37:04:43: 05:ef:13:6e:3e:5d:6a:c4:65:bc:46:e2:67:49:34:3d:05:17: aa:28:27:76:61:0a:0d:0d:da:6c:01:6d:c3:c8:83:3b:36:e7: a9:1c:51:9a:0b:0e:d4:69:ec:58:9f:4a:c9:21:bc:43:0f:d0: 07:0e:8f:b3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICApYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQwQUUxMTAvBgNVBAUTKDRCREQ1NjA2Q0VFMzgzODczMUIyNzZFQjVBRTI3NDA5 NTVFNkU4MzUwHhcNMjUwNDI5MDIxMDQxWhcNMjUwNTA2MDIxMDQxWjAYMRYwFAYD VQQDEw02ODEwMzUyMS00NjU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzlCHcHAJiZVug8WJHRXFITLTpD98DbWLwotUFYONDEcJifD+2sknMMvOUbaQ HLn3itZkIOT216rsGdcmmdPNyttZOaS1mSbaSMYN9JaoXUBM9WGoobMUVMbc31E0 NdJSANFbVNo52Lln1AebUp0BxxmqJdugrP9vST7vgoRNBDfT/AX7Oa1QRP0IICOZ kO7wZxzvVxQRQxrvnOpLaqezvqSjBTRFSAo3Oqc8qh7t/W0Bd4YdmbWD5uvh/jGk Tr25q7UwaHlqnlI5mx+3X4Bs47+oDNee1OD4LZtti+BlsoiCc7g8U0xdF1FN8YY2 oWfmojFiWO8MKRRXaAZjB3+X1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDyTMk5c mAX3m52qy3knXq8AHenIMB8GA1UdIwQYMBaAFEvdVgbO44OHMbJ261ridAlV5ug1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDBBRS84NjIxNUZEMEZD MzgxMUVDOUQxQUE3MUVDNEY5QUUwMi9TOTFXQnM3amc0Y3hzbmJyV3VKMENWWG02 RFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1M5MVdCczdqZzRjeHNuYnJXdUowQ1ZYbTZEVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDBBRS84NjIxNUZEMEZDMzgxMUVDOUQxQUE3MUVDNEY5QUUwMi9TOTFXQnM3amc0 Y3hzbmJyV3VKMENWWG02RFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCduBPlEvg4ep+IHHEz30xbCEWxOL9ZaB21aqq0r64wj6NgnW0Rie6a G24S2cKF3rtOEWM50x2Zc/wtBnHRzgBm4Y0pYzjAvHDYqRT6CZ0pCh7k9+MV18b7 MeUcS0dWPW3Ohxifad6Cml2UP+9TEMbWV860VknGHujRnk3p/7uLS3usI3182K55 QRWoPDd2gPRwjqJKsMi6KDf1NjZVRCBglk8ksMMiY5/ijkBrJivmFeGvBX4mus29 RJXATEDFZGj2Bjo3BEMF7xNuPl1qxGW8RuJnSTQ9BReqKCd2YQoNDdpsAW3DyIM7 NuepHFGaCw7UaexYn0rJIbxDD9AHDo+z -----END CERTIFICATE-----Generated at Wed Apr 30 10:14:51 2025 by rpki-client