$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1621/99D68DCE1D6911E2A4640DA708B02CD2/-kF5Yn9bJllOVjA1Ogt3heDWksU.mft File: -kF5Yn9bJllOVjA1Ogt3heDWksU.mft (raw, json) Hash identifier: 3XW5lYxSAt+EkiuepPXRPYnI0LLSoQnyMJrOFqvlKF4= Subject key identifier: D0:CD:13:48:49:4C:12:B3:1C:AB:05:A6:7D:36:D6:11:33:32:EE:83 Authority key identifier: FA:41:79:62:7F:5B:26:59:4E:56:30:35:3A:0B:77:85:E0:D6:92:C5 Certificate issuer: /CN=A91C1621/serialNumber=FA4179627F5B26594E5630353A0B7785E0D692C5 Certificate serial: 34A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-kF5Yn9bJllOVjA1Ogt3heDWksU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1621/99D68DCE1D6911E2A4640DA708B02CD2/-kF5Yn9bJllOVjA1Ogt3heDWksU.mft Manifest number: 3491 Signing time: Thu 24 Apr 2025 14:16:11 +0000 Manifest this update: Thu 24 Apr 2025 14:16:11 +0000 Manifest next update: Thu 01 May 2025 14:16:11 +0000 Files and hashes: 1: -kF5Yn9bJllOVjA1Ogt3heDWksU.crl (hash: ekOxPVuvBXi1GAb8/liddyrkiu2HbYfdgPOknnYpEx0=) 2: CDE36D52DB9511E99F3F673EC4F9AE02.roa (hash: zbmIG6CT7ypIn3HcTtsDFC7ihfXsVyZlUb242ctePDw=) 3: BB8F87B4D4B011ECAA427351C4F9AE02.roa (hash: V6xVQh9iUu5NDnwtI8z/zA2tAozAKTEZViih6UdSdQ0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1621/99D68DCE1D6911E2A4640DA708B02CD2/-kF5Yn9bJllOVjA1Ogt3heDWksU.crl rsync://rpki.apnic.net/member_repository/A91C1621/99D68DCE1D6911E2A4640DA708B02CD2/-kF5Yn9bJllOVjA1Ogt3heDWksU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-kF5Yn9bJllOVjA1Ogt3heDWksU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 14:16:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13480 (0x34a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1621, serialNumber=FA4179627F5B26594E5630353A0B7785E0D692C5 Validity Not Before: Apr 24 14:16:11 2025 GMT Not After : May 1 14:16:11 2025 GMT Subject: CN=680a47ab-50c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:91:ec:f3:aa:41:95:e5:3d:07:b4:fb:5b:bc: cc:b9:06:4a:a8:9c:36:30:8b:21:dd:67:51:e1:cc: 7f:64:a0:79:fb:23:2c:00:1a:e1:3c:42:0e:8b:3c: c8:a4:6f:ec:97:32:d7:45:66:8b:2d:29:7d:f6:fa: 89:d7:ce:35:db:ca:41:10:8d:f3:0b:cd:05:6d:25: ca:cc:cb:12:b2:58:0c:ee:cd:d4:9a:fe:db:06:bb: 99:07:ac:3c:dc:9a:63:6d:1a:63:81:11:a0:71:6e: 06:f0:48:43:c4:5d:92:e8:5d:de:8a:64:6b:48:09: 5c:0d:0e:09:32:41:7c:5e:b7:f4:19:0c:1f:77:9d: 5f:10:bb:d9:a6:92:98:82:bb:6a:33:10:f2:52:26: 24:27:0d:44:b5:e5:23:8c:36:87:dc:90:67:44:30: 24:0f:91:44:60:49:ba:4f:1f:ab:96:4f:90:0e:38: 2a:32:9f:8b:f7:f2:69:c6:14:01:00:46:44:7f:89: f8:ba:bc:7c:b6:51:c0:15:31:3a:af:b6:29:18:87: 7d:ab:49:83:d8:7f:46:29:f3:62:62:a5:0c:db:26: 46:67:57:79:2a:f6:c0:10:55:62:58:e9:79:e6:40: 3f:5c:52:d1:10:27:27:f6:36:61:7b:2e:99:20:c2: d0:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:CD:13:48:49:4C:12:B3:1C:AB:05:A6:7D:36:D6:11:33:32:EE:83 X509v3 Authority Key Identifier: keyid:FA:41:79:62:7F:5B:26:59:4E:56:30:35:3A:0B:77:85:E0:D6:92:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1621/99D68DCE1D6911E2A4640DA708B02CD2/-kF5Yn9bJllOVjA1Ogt3heDWksU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-kF5Yn9bJllOVjA1Ogt3heDWksU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1621/99D68DCE1D6911E2A4640DA708B02CD2/-kF5Yn9bJllOVjA1Ogt3heDWksU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:db:03:e8:fa:22:8e:2e:50:e3:f3:ea:ce:44:61:bd:cc:54: 09:53:0a:2c:41:7c:90:b9:d9:d6:ee:b2:ac:77:fb:33:98:ab: fd:d7:f9:a5:bb:2c:2c:63:e8:70:45:92:fd:13:ff:4d:21:d3: a4:f1:9f:d4:88:23:2a:b7:f2:10:4b:f5:dc:fe:54:b6:06:c8: 42:27:c8:6d:c6:d1:89:de:7e:6b:96:2b:5c:95:0f:99:af:69: ee:1e:29:8e:1d:4a:86:4e:44:52:f1:60:34:ab:b4:01:cf:87: b3:3e:ee:d2:51:40:8e:84:37:92:10:10:7d:d7:f0:0a:65:75: 66:4d:6e:2b:20:1d:d8:bb:55:5f:77:2c:62:fb:6f:ce:63:33: 79:0a:15:62:51:51:84:48:58:6b:15:d5:74:71:f6:c1:29:eb: ab:03:33:b9:f3:d9:17:a1:94:56:b1:f1:56:73:ce:17:2e:1b: 0f:d3:a3:af:07:c5:fc:9d:d7:61:f9:6d:96:39:4b:40:1d:ef: 31:27:aa:3e:2d:81:25:36:de:6f:26:66:f6:77:47:2f:14:99: ca:51:70:f1:c7:ad:47:d8:19:18:ad:ae:2d:cb:03:2c:53:8f: 1f:2e:10:56:79:6a:ce:36:4a:96:3e:df:28:65:f6:2f:7b:14: 16:1e:df:bd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNKgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzE2MjExMTAvBgNVBAUTKEZBNDE3OTYyN0Y1QjI2NTk0RTU2MzAzNTNBMEI3Nzg1 RTBENjkyQzUwHhcNMjUwNDI0MTQxNjExWhcNMjUwNTAxMTQxNjExWjAYMRYwFAYD VQQDEw02ODBhNDdhYi01MGM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx5Hs86pBleU9B7T7W7zMuQZKqJw2MIsh3WdR4cx/ZKB5+yMsABrhPEIOizzI pG/slzLXRWaLLSl99vqJ184128pBEI3zC80FbSXKzMsSslgM7s3Umv7bBruZB6w8 3JpjbRpjgRGgcW4G8EhDxF2S6F3eimRrSAlcDQ4JMkF8Xrf0GQwfd51fELvZppKY grtqMxDyUiYkJw1EteUjjDaH3JBnRDAkD5FEYEm6Tx+rlk+QDjgqMp+L9/JpxhQB AEZEf4n4urx8tlHAFTE6r7YpGId9q0mD2H9GKfNiYqUM2yZGZ1d5KvbAEFViWOl5 5kA/XFLRECcn9jZhey6ZIMLQkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNDNE0hJ TBKzHKsFpn021hEzMu6DMB8GA1UdIwQYMBaAFPpBeWJ/WyZZTlYwNToLd4Xg1pLF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTYyMS85OUQ2OERDRTFE NjkxMUUyQTQ2NDBEQTcwOEIwMkNEMi8ta0Y1WW45YkpsbE9WakExT2d0M2hlRFdr c1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1rRjVZbjliSmxsT1ZqQTFPZ3QzaGVEV2tzVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MTYyMS85OUQ2OERDRTFENjkxMUUyQTQ2NDBEQTcwOEIwMkNEMi8ta0Y1WW45Ykps bE9WakExT2d0M2hlRFdrc1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBc2wPo+iKOLlDj8+rORGG9zFQJUwosQXyQudnW7rKsd/szmKv91/ml uywsY+hwRZL9E/9NIdOk8Z/UiCMqt/IQS/Xc/lS2BshCJ8htxtGJ3n5rlitclQ+Z r2nuHimOHUqGTkRS8WA0q7QBz4ezPu7SUUCOhDeSEBB91/AKZXVmTW4rIB3Yu1Vf dyxi+2/OYzN5ChViUVGESFhrFdV0cfbBKeurAzO589kXoZRWsfFWc84XLhsP06Ov B8X8nddh+W2WOUtAHe8xJ6o+LYElNt5vJmb2d0cvFJnKUXDxx61H2BkYra4tywMs U48fLhBWeWrONkqWPt8oZfYvexQWHt+9 -----END CERTIFICATE-----Generated at Sat Apr 26 12:34:42 2025 by rpki-client