$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEE85/FC66F5AE45AD11EFB435EB6FC4F9AE02/ByRKmUzcS5OAdHEcQkjUn51Q2Cc.mft File: ByRKmUzcS5OAdHEcQkjUn51Q2Cc.mft (raw, json) Hash identifier: lMVqn7Y9xGDuMFYbgWL9bgXD1KpzLWtacsteA2xeFsw= Subject key identifier: F6:6A:97:C3:49:B0:69:74:A0:19:04:C4:05:F3:25:5B:ED:CE:2B:23 Authority key identifier: 07:24:4A:99:4C:DC:4B:93:80:74:71:1C:42:48:D4:9F:9D:50:D8:27 Certificate issuer: /CN=A91CEE85/serialNumber=07244A994CDC4B938074711C4248D49F9D50D827 Certificate serial: 95 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ByRKmUzcS5OAdHEcQkjUn51Q2Cc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CEE85/FC66F5AE45AD11EFB435EB6FC4F9AE02/ByRKmUzcS5OAdHEcQkjUn51Q2Cc.mft Manifest number: 93 Signing time: Fri 25 Apr 2025 05:25:06 +0000 Manifest this update: Fri 25 Apr 2025 05:25:06 +0000 Manifest next update: Fri 02 May 2025 05:25:06 +0000 Files and hashes: 1: ByRKmUzcS5OAdHEcQkjUn51Q2Cc.crl (hash: XYKqbROg0Bi5l1+llUNof5+vWOvJMrigIiWyhzmop6k=) 2: C2838C8245B011EFAE60CC76C4F9AE02.roa (hash: dwidYpMLAJTM9jddkunL1qdnHKOnW/Pf1EZaeXyq6Fk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CEE85/FC66F5AE45AD11EFB435EB6FC4F9AE02/ByRKmUzcS5OAdHEcQkjUn51Q2Cc.crl rsync://rpki.apnic.net/member_repository/A91CEE85/FC66F5AE45AD11EFB435EB6FC4F9AE02/ByRKmUzcS5OAdHEcQkjUn51Q2Cc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ByRKmUzcS5OAdHEcQkjUn51Q2Cc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:25:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 149 (0x95) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CEE85, serialNumber=07244A994CDC4B938074711C4248D49F9D50D827 Validity Not Before: Apr 25 05:25:06 2025 GMT Not After : May 2 05:25:06 2025 GMT Subject: CN=680b1cb2-e254 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:85:43:f9:0b:e0:4e:65:cc:da:66:d7:b6:09: 24:b1:f2:71:8d:34:6a:cf:20:15:e5:13:40:76:36: 98:a4:59:62:c9:32:c0:9e:b6:04:26:29:0e:60:ea: 30:cc:a6:a0:80:9f:fd:c6:e2:95:2a:65:5c:ab:e8: a3:18:a7:16:73:a6:5d:fa:bb:5f:03:c0:78:06:25: a5:1d:ee:36:42:87:fe:63:ec:2c:53:62:c6:8a:59: dc:d6:28:62:e3:e4:be:29:d9:c7:b2:57:8b:b0:8a: 19:bf:01:d9:eb:33:eb:67:3a:95:44:e8:4f:6c:f9: 9e:6e:af:ee:c7:c0:cc:a4:37:70:93:4a:eb:7e:5c: 5b:d2:c6:57:cc:7c:55:5b:49:b8:71:ed:8d:e1:24: a9:40:12:a6:27:0a:e3:9a:49:94:41:72:93:fd:83: 6c:c8:dd:d9:a1:7a:63:b3:bf:1b:ac:86:ca:2f:3b: 8d:26:39:0c:b5:0f:8d:32:f4:0c:5b:2d:3c:d4:e0: a0:04:81:2a:a9:33:47:9b:17:92:98:b1:4f:06:14: cc:48:ec:fa:d2:8f:1d:7c:12:d6:65:81:51:a2:09: 51:9d:9f:12:a6:fa:9d:30:92:77:fc:57:3d:3f:35: 9d:8f:a6:7c:5f:db:69:96:9c:26:82:57:ef:52:75: 06:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:6A:97:C3:49:B0:69:74:A0:19:04:C4:05:F3:25:5B:ED:CE:2B:23 X509v3 Authority Key Identifier: keyid:07:24:4A:99:4C:DC:4B:93:80:74:71:1C:42:48:D4:9F:9D:50:D8:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CEE85/FC66F5AE45AD11EFB435EB6FC4F9AE02/ByRKmUzcS5OAdHEcQkjUn51Q2Cc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ByRKmUzcS5OAdHEcQkjUn51Q2Cc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEE85/FC66F5AE45AD11EFB435EB6FC4F9AE02/ByRKmUzcS5OAdHEcQkjUn51Q2Cc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:67:66:74:4e:bb:45:de:ca:9a:de:7b:e9:46:bc:7a:f3:c6: 6f:5e:62:4e:57:0b:10:ab:a5:88:88:5d:da:f0:c9:c3:15:ff: b0:8c:91:00:15:2d:a3:c1:8b:db:0b:5b:44:62:da:0d:c6:6e: d1:92:d1:31:98:c1:da:f9:78:8d:c2:e5:0f:bf:f5:2f:29:f7: f5:cd:4d:5b:16:4b:a5:a0:c7:03:01:1b:b9:de:30:de:0e:e9: d2:44:19:20:18:bf:a6:cd:a4:48:b5:fb:f6:3e:75:63:0c:cb: 42:60:a6:92:7a:53:06:cf:20:94:b3:af:94:2b:1f:7e:59:4a: 6d:8d:16:84:a8:de:60:f7:da:9c:1d:26:6d:7d:39:05:98:cf: 24:bf:f0:ff:3f:c5:54:39:13:07:3f:d9:5c:0a:f5:26:1f:93: 96:57:d3:03:94:84:ba:d5:91:96:46:64:84:02:ab:bc:0e:5d: 2a:16:5d:a1:b2:dd:91:76:87:fa:fb:1c:bd:00:75:1e:0b:84: de:47:ab:16:50:40:fc:7e:29:70:53:f9:71:e4:19:c0:5f:79: fc:06:8e:80:18:a7:a4:18:b5:bc:36:62:2f:e5:17:07:04:6e: b4:09:d4:c9:94:c2:d8:8e:73:5a:24:b3:af:d8:f5:e7:8a:d1: b4:d8:19:c5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0VFODUxMTAvBgNVBAUTKDA3MjQ0QTk5NENEQzRCOTM4MDc0NzExQzQyNDhENDlG OUQ1MEQ4MjcwHhcNMjUwNDI1MDUyNTA2WhcNMjUwNTAyMDUyNTA2WjAYMRYwFAYD VQQDEw02ODBiMWNiMi1lMjU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtoVD+QvgTmXM2mbXtgkksfJxjTRqzyAV5RNAdjaYpFliyTLAnrYEJikOYOow zKaggJ/9xuKVKmVcq+ijGKcWc6Zd+rtfA8B4BiWlHe42Qof+Y+wsU2LGilnc1ihi 4+S+KdnHsleLsIoZvwHZ6zPrZzqVROhPbPmebq/ux8DMpDdwk0rrflxb0sZXzHxV W0m4ce2N4SSpQBKmJwrjmkmUQXKT/YNsyN3ZoXpjs78brIbKLzuNJjkMtQ+NMvQM Wy081OCgBIEqqTNHmxeSmLFPBhTMSOz60o8dfBLWZYFRoglRnZ8SpvqdMJJ3/Fc9 PzWdj6Z8X9tplpwmglfvUnUGuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPZql8NJ sGl0oBkExAXzJVvtzisjMB8GA1UdIwQYMBaAFAckSplM3EuTgHRxHEJI1J+dUNgn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRUU4NS9GQzY2RjVBRTQ1 QUQxMUVGQjQzNUVCNkZDNEY5QUUwMi9CeVJLbVV6Y1M1T0FkSEVjUWtqVW41MVEy Q2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0J5UkttVXpjUzVPQWRIRWNRa2pVbjUxUTJDYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RUU4NS9GQzY2RjVBRTQ1QUQxMUVGQjQzNUVCNkZDNEY5QUUwMi9CeVJLbVV6Y1M1 T0FkSEVjUWtqVW41MVEyQ2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBtZ2Z0TrtF3sqa3nvpRrx688ZvXmJOVwsQq6WIiF3a8MnDFf+wjJEA FS2jwYvbC1tEYtoNxm7RktExmMHa+XiNwuUPv/UvKff1zU1bFkuloMcDARu53jDe DunSRBkgGL+mzaRItfv2PnVjDMtCYKaSelMGzyCUs6+UKx9+WUptjRaEqN5g99qc HSZtfTkFmM8kv/D/P8VUORMHP9lcCvUmH5OWV9MDlIS61ZGWRmSEAqu8Dl0qFl2h st2Rdof6+xy9AHUeC4TeR6sWUED8filwU/lx5BnAX3n8Bo6AGKekGLW8NmIv5RcH BG60CdTJlMLYjnNaJLOv2PXnitG02BnF -----END CERTIFICATE-----Generated at Sat Apr 26 19:07:41 2025 by rpki-client