$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/edZsZKYWWi5Ms31JcA5sdhhBw5o.mft File: edZsZKYWWi5Ms31JcA5sdhhBw5o.mft (raw, json) Hash identifier: eRlQCwU2+jOk5dRVvDvlDVd8XTGQ5H+gTT1LbnNPwCo= Subject key identifier: 51:00:6D:F3:6A:9E:1F:1D:21:75:B7:42:65:33:61:38:46:20:43:F6 Authority key identifier: 79:D6:6C:64:A6:16:5A:2E:4C:B3:7D:49:70:0E:6C:76:18:41:C3:9A Certificate issuer: /CN=A91BC847/serialNumber=79D66C64A6165A2E4CB37D49700E6C761841C39A Certificate serial: 13D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/edZsZKYWWi5Ms31JcA5sdhhBw5o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/edZsZKYWWi5Ms31JcA5sdhhBw5o.mft Manifest number: 1384 Signing time: Thu 24 Apr 2025 16:59:48 +0000 Manifest this update: Thu 24 Apr 2025 16:59:48 +0000 Manifest next update: Thu 01 May 2025 16:59:48 +0000 Files and hashes: 1: edZsZKYWWi5Ms31JcA5sdhhBw5o.crl (hash: BIg2ho2eDxCNBvcVR/2U1x2yi/zVASvHnPB5VsJvWTE=) 2: C24FF4C8050D11EA8626AD5DC4F9AE02.roa (hash: bxKpA/oFCU6TUM9crxLIgO78TFK6gY7b8jSCF6lkl2Q=) 3: 1F90160E87F211ECBEBC5339C4F9AE02.roa (hash: Ie+fFLUk+hkh8iPsi0JIDwR97rjtnpIzqO2/djh9dOA=) 4: CC7502F8670E11EC90C22B7EC4F9AE02.roa (hash: HMDXcvVMEGAxoOC++6wcObudAAOApyw/6bDY30a1r+o=) 5: 17780EF09B3C11E8A13BA63AC4F9AE02.roa (hash: bwsT9LHkujI+JrOu04/8rGiF6KuhSDYaJy2PKrf04nk=) 6: 1DE5F30A87F211ECBEBC5339C4F9AE02.roa (hash: vIOfq2VGA/o5BqEJqyV+v1G5m5lQGi2kmLP/YtnJAmE=) 7: 92F5E790172E11EA9CCC934DC4F9AE02.roa (hash: l4uHSTMAHvz3K39iQ1N6BJocMGP4W2EFJHrCsRCiw/k=) 8: 85C534069AA711EBB9BBD670C4F9AE02.roa (hash: 0Wf6MrY856EXSgNTseMSxFkk6LBzj+vW0CkBQhFM5Vo=) 9: 7CD480F64E4D11EAAE4CAC65C4F9AE02.roa (hash: wsYRvalqXpbWZCIqLrO6x3uxF4QcGxGmLPv4fG6+ndk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/edZsZKYWWi5Ms31JcA5sdhhBw5o.crl rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/edZsZKYWWi5Ms31JcA5sdhhBw5o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/edZsZKYWWi5Ms31JcA5sdhhBw5o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 16:59:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5081 (0x13d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BC847, serialNumber=79D66C64A6165A2E4CB37D49700E6C761841C39A Validity Not Before: Apr 24 16:59:48 2025 GMT Not After : May 1 16:59:48 2025 GMT Subject: CN=680a6e04-cca8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:c6:7e:48:6f:29:ae:7f:80:d7:29:ab:31:9a: 63:36:72:6d:f9:26:a3:01:e8:14:0c:8c:b9:76:8f: e5:c6:7d:36:de:65:d3:cd:94:c1:95:4f:da:e5:19: 47:6c:62:59:6f:c8:7f:87:3c:86:ea:65:3e:ce:51: 73:50:2f:36:39:6a:ba:0f:2c:d8:e7:30:73:ff:4d: fb:3f:a5:77:36:35:af:0e:af:3f:15:bf:f1:6c:4c: e8:26:d5:66:24:26:56:53:0f:1c:3e:46:61:bf:13: d6:46:4f:8d:41:4b:36:5b:e5:55:dd:2b:3d:ab:9d: 24:5e:10:54:44:8a:e3:39:5c:3f:15:07:eb:81:6a: cd:ed:62:d1:ee:1e:ca:81:1b:6e:a2:3f:1b:3b:9e: cd:cd:d8:96:87:55:f4:03:87:08:43:79:6f:5c:4a: a2:55:3f:c0:ba:81:f3:67:05:06:55:d7:c0:13:38: df:ea:02:5e:8a:7f:3c:ad:de:0d:d5:f7:95:99:1c: 9a:dd:be:87:ae:48:05:ba:2e:e2:28:c2:16:ea:90: 9d:b7:e4:dd:6b:ce:46:8e:26:85:87:53:f5:9c:02: a6:3d:4d:aa:34:4b:44:b4:a2:89:57:1b:c5:b7:57: ad:08:4b:9a:19:f4:88:85:fa:11:0f:ed:ce:1b:84: e4:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:00:6D:F3:6A:9E:1F:1D:21:75:B7:42:65:33:61:38:46:20:43:F6 X509v3 Authority Key Identifier: keyid:79:D6:6C:64:A6:16:5A:2E:4C:B3:7D:49:70:0E:6C:76:18:41:C3:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/edZsZKYWWi5Ms31JcA5sdhhBw5o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/edZsZKYWWi5Ms31JcA5sdhhBw5o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/edZsZKYWWi5Ms31JcA5sdhhBw5o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:eb:3e:28:09:96:e5:f1:eb:fc:41:d4:ef:3b:9c:2a:e5:78: 02:c3:08:e7:9d:03:95:80:88:88:54:5d:33:24:7a:6c:da:83: 6a:a6:e6:28:97:6c:b3:d4:16:f5:61:75:d3:98:46:24:d9:4a: 87:6f:5a:ce:a2:29:70:1a:43:bc:fc:40:54:77:fb:63:11:08: b6:f9:9f:f0:64:7b:2f:01:ee:ea:36:da:23:d5:88:19:dd:88: 9d:77:35:48:c0:e9:15:ad:b8:bf:5a:09:e0:8d:4b:5c:10:72: ab:8a:2e:c6:4d:63:28:56:82:c0:dd:e5:11:80:ff:1e:f1:22: b2:e8:0f:8e:5d:79:2e:d0:5d:b6:4d:6a:60:7a:c4:47:f1:02: 21:1a:df:4f:c8:4e:b4:09:e7:6a:75:12:9d:76:74:87:25:57: 27:c9:c7:c8:8b:3a:b0:10:e4:80:8f:cd:e2:72:25:a5:62:b6: 0d:6a:7f:ff:9e:11:1b:5b:2e:a8:25:c0:bb:b9:bb:cd:66:8a: 90:25:7f:f2:1d:55:c2:64:6b:d2:b8:fe:a6:b0:87:b0:57:86: 25:29:f8:7b:a5:ce:93:a7:a4:13:5a:6c:b8:c9:a9:9c:fa:06: 21:a3:d1:87:64:f7:c0:ad:80:be:4d:55:f0:da:aa:10:98:6a: c8:8d:7e:08 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICE9kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkM4NDcxMTAvBgNVBAUTKDc5RDY2QzY0QTYxNjVBMkU0Q0IzN0Q0OTcwMEU2Qzc2 MTg0MUMzOUEwHhcNMjUwNDI0MTY1OTQ4WhcNMjUwNTAxMTY1OTQ4WjAYMRYwFAYD VQQDEw02ODBhNmUwNC1jY2E4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt8Z+SG8prn+A1ymrMZpjNnJt+SajAegUDIy5do/lxn023mXTzZTBlU/a5RlH bGJZb8h/hzyG6mU+zlFzUC82OWq6DyzY5zBz/037P6V3NjWvDq8/Fb/xbEzoJtVm JCZWUw8cPkZhvxPWRk+NQUs2W+VV3Ss9q50kXhBURIrjOVw/FQfrgWrN7WLR7h7K gRtuoj8bO57NzdiWh1X0A4cIQ3lvXEqiVT/AuoHzZwUGVdfAEzjf6gJein88rd4N 1feVmRya3b6HrkgFui7iKMIW6pCdt+Tda85GjiaFh1P1nAKmPU2qNEtEtKKJVxvF t1etCEuaGfSIhfoRD+3OG4TkVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFEAbfNq nh8dIXW3QmUzYThGIEP2MB8GA1UdIwQYMBaAFHnWbGSmFlouTLN9SXAObHYYQcOa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzg0Ny9BQ0Y5NDM1MjlB RjMxMUU4QUFCNEQ1NURDNEY5QUUwMi9lZFpzWktZV1dpNU1zMzFKY0E1c2RoaEJ3 NW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VkWnNaS1lXV2k1TXMzMUpjQTVzZGhoQnc1by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Qzg0Ny9BQ0Y5NDM1MjlBRjMxMUU4QUFCNEQ1NURDNEY5QUUwMi9lZFpzWktZV1dp NU1zMzFKY0E1c2RoaEJ3NW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB66z4oCZbl8ev8QdTvO5wq5XgCwwjnnQOVgIiIVF0zJHps2oNqpuYo l2yz1Bb1YXXTmEYk2UqHb1rOoilwGkO8/EBUd/tjEQi2+Z/wZHsvAe7qNtoj1YgZ 3YiddzVIwOkVrbi/WgngjUtcEHKrii7GTWMoVoLA3eURgP8e8SKy6A+OXXku0F22 TWpgesRH8QIhGt9PyE60CedqdRKddnSHJVcnycfIizqwEOSAj83iciWlYrYNan// nhEbWy6oJcC7ubvNZoqQJX/yHVXCZGvSuP6msIewV4YlKfh7pc6Tp6QTWmy4yamc +gYho9GHZPfArYC+TVXw2qoQmGrIjX4I -----END CERTIFICATE-----Generated at Sat Apr 26 05:14:31 2025 by rpki-client