$ rpki-client -vvf rpki.apnic.net/member_repository/A91D73BB/7ED57586E18D11EE990FEC4FC4F9AE02/k3obX-sKKTNg6k6IRzUuf9Nsx6U.mft File: k3obX-sKKTNg6k6IRzUuf9Nsx6U.mft (raw, json) Hash identifier: xAdY+nZmoo88fjX2bM1qvhsjFA9oqQaZWqXdi7fODbU= Subject key identifier: 17:38:2E:CE:2C:50:72:4E:11:B4:52:75:C7:B3:18:4E:37:53:82:3E Authority key identifier: 93:7A:1B:5F:EB:0A:29:33:60:EA:4E:88:47:35:2E:7F:D3:6C:C7:A5 Certificate issuer: /CN=A91D73BB/serialNumber=937A1B5FEB0A293360EA4E8847352E7FD36CC7A5 Certificate serial: DA Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/k3obX-sKKTNg6k6IRzUuf9Nsx6U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D73BB/7ED57586E18D11EE990FEC4FC4F9AE02/k3obX-sKKTNg6k6IRzUuf9Nsx6U.mft Manifest number: D5 Signing time: Fri 25 Apr 2025 04:41:14 +0000 Manifest this update: Fri 25 Apr 2025 04:41:13 +0000 Manifest next update: Fri 02 May 2025 04:41:13 +0000 Files and hashes: 1: k3obX-sKKTNg6k6IRzUuf9Nsx6U.crl (hash: MARrGru00KI14Qj+nNDVuyNmWCu7liMUe06o9kA/u0U=) 2: CFE87CFEE74911EE9E36BA2AC4F9AE02.roa (hash: UKwsFEyPykSAjx1cUaIvhwF+WNkQjRemB2kUzANIKwE=) 3: E0C47044E18D11EE82E6CE22C4F9AE02.roa (hash: oHYJEFfD1Lon7ikYLeo6m1Hr1wIXkseOcXKkDnJ3sdE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D73BB/7ED57586E18D11EE990FEC4FC4F9AE02/k3obX-sKKTNg6k6IRzUuf9Nsx6U.crl rsync://rpki.apnic.net/member_repository/A91D73BB/7ED57586E18D11EE990FEC4FC4F9AE02/k3obX-sKKTNg6k6IRzUuf9Nsx6U.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/k3obX-sKKTNg6k6IRzUuf9Nsx6U.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:41:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 218 (0xda) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D73BB, serialNumber=937A1B5FEB0A293360EA4E8847352E7FD36CC7A5 Validity Not Before: Apr 25 04:41:13 2025 GMT Not After : May 2 04:41:13 2025 GMT Subject: CN=680b1269-4b35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:81:73:f6:7b:2f:76:b0:c6:bf:40:6d:3a:ce: 38:4e:74:5f:ea:84:22:78:ff:ff:c6:90:c8:e9:54: 94:0a:fd:21:fe:23:30:d4:96:4f:6d:68:75:2f:5b: b3:ca:12:c3:e1:5c:42:74:4e:09:3f:ce:f0:83:23: 86:2c:48:ce:bb:c6:4f:27:d9:51:82:87:23:1d:33: c4:02:22:d2:b1:b1:1a:c5:e6:26:81:b2:47:ca:b4: 31:70:fd:f0:c9:22:1e:89:c3:07:75:6b:09:3d:0e: 4f:c2:34:d3:ba:5d:d9:80:b2:c0:14:4a:1e:0a:12: 7c:50:11:e1:06:23:6a:0c:de:ce:28:f4:6a:80:30: 39:f2:b4:f6:11:7e:c9:4a:d7:36:85:d9:f6:6f:4d: 22:51:f7:70:aa:dc:a6:54:fc:ab:ee:73:fb:ca:65: a4:bd:71:15:54:48:df:b4:d0:f2:4a:5f:4b:bc:df: b2:83:62:2e:e8:2b:07:e4:d2:34:e2:be:b3:2c:d3: 78:4b:34:00:32:e5:04:ed:09:6a:81:ee:34:4c:24: b0:11:7b:d6:d0:0e:d3:42:c6:ef:00:78:c8:0f:a4: 5d:43:0d:b8:9d:dc:a7:02:03:10:c4:3d:87:f6:27: 56:57:82:58:2a:70:fc:62:73:aa:52:c5:0a:88:6d: 89:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:38:2E:CE:2C:50:72:4E:11:B4:52:75:C7:B3:18:4E:37:53:82:3E X509v3 Authority Key Identifier: keyid:93:7A:1B:5F:EB:0A:29:33:60:EA:4E:88:47:35:2E:7F:D3:6C:C7:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D73BB/7ED57586E18D11EE990FEC4FC4F9AE02/k3obX-sKKTNg6k6IRzUuf9Nsx6U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/k3obX-sKKTNg6k6IRzUuf9Nsx6U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D73BB/7ED57586E18D11EE990FEC4FC4F9AE02/k3obX-sKKTNg6k6IRzUuf9Nsx6U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:0e:8a:f0:1f:e2:dd:ca:10:92:f2:7b:8f:c6:4d:7a:5f:85: 2b:8f:a0:fd:ec:95:0d:6f:fa:bd:1c:4a:cb:a3:cc:d0:ec:3d: 4a:1e:6d:d8:57:41:85:e4:95:4c:87:56:d8:96:99:38:26:a6: 7d:e9:14:32:72:a4:6b:ff:b2:44:7e:6f:74:13:86:36:e3:ea: a3:ea:e4:a7:53:af:39:7c:19:6a:28:fb:23:b4:26:d3:b2:bd: 73:00:09:d0:0f:eb:63:2d:cc:f2:17:6b:12:93:33:3a:a8:e1: 0f:45:64:b9:55:72:50:c0:33:75:72:d8:da:01:66:46:15:af: 2e:62:7f:3d:70:90:f4:b8:56:b9:06:f2:64:ba:7a:0c:5c:8f: 13:82:cc:b2:ea:d5:d5:fa:24:01:3e:e1:30:a4:93:e3:06:03: f4:30:04:38:48:2e:a5:50:b3:7c:0d:fd:6b:cb:af:bb:08:a9: e2:a2:81:8d:46:c9:69:2c:33:45:fb:39:64:02:3d:b8:8e:d3: 6d:77:77:59:8d:67:5f:7b:89:d1:65:9d:a2:98:13:a9:bd:f7: 9d:4e:c9:60:16:d0:52:ef:96:b5:30:2f:00:bc:15:b7:8c:79: 08:14:32:22:e5:71:d1:21:aa:22:cd:5a:db:73:8e:ec:2d:c6: 04:50:aa:84 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDczQkIxMTAvBgNVBAUTKDkzN0ExQjVGRUIwQTI5MzM2MEVBNEU4ODQ3MzUyRTdG RDM2Q0M3QTUwHhcNMjUwNDI1MDQ0MTEzWhcNMjUwNTAyMDQ0MTEzWjAYMRYwFAYD VQQDEw02ODBiMTI2OS00YjM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqYFz9nsvdrDGv0BtOs44TnRf6oQieP//xpDI6VSUCv0h/iMw1JZPbWh1L1uz yhLD4VxCdE4JP87wgyOGLEjOu8ZPJ9lRgocjHTPEAiLSsbEaxeYmgbJHyrQxcP3w ySIeicMHdWsJPQ5PwjTTul3ZgLLAFEoeChJ8UBHhBiNqDN7OKPRqgDA58rT2EX7J Stc2hdn2b00iUfdwqtymVPyr7nP7ymWkvXEVVEjftNDySl9LvN+yg2Iu6CsH5NI0 4r6zLNN4SzQAMuUE7Qlqge40TCSwEXvW0A7TQsbvAHjID6RdQw24ndynAgMQxD2H 9idWV4JYKnD8YnOqUsUKiG2JKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBc4Ls4s UHJOEbRSdcezGE43U4I+MB8GA1UdIwQYMBaAFJN6G1/rCikzYOpOiEc1Ln/TbMel MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENzNCQi83RUQ1NzU4NkUx OEQxMUVFOTkwRkVDNEZDNEY5QUUwMi9rM29iWC1zS0tUTmc2azZJUnpVdWY5TnN4 NlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2szb2JYLXNLS1ROZzZrNklSelV1ZjlOc3g2VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NzNCQi83RUQ1NzU4NkUxOEQxMUVFOTkwRkVDNEZDNEY5QUUwMi9rM29iWC1zS0tU Tmc2azZJUnpVdWY5TnN4NlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQASDorwH+LdyhCS8nuPxk16X4Urj6D97JUNb/q9HErLo8zQ7D1KHm3Y V0GF5JVMh1bYlpk4JqZ96RQycqRr/7JEfm90E4Y24+qj6uSnU685fBlqKPsjtCbT sr1zAAnQD+tjLczyF2sSkzM6qOEPRWS5VXJQwDN1ctjaAWZGFa8uYn89cJD0uFa5 BvJkunoMXI8Tgsyy6tXV+iQBPuEwpJPjBgP0MAQ4SC6lULN8Df1ry6+7CKniooGN RslpLDNF+zlkAj24jtNtd3dZjWdfe4nRZZ2imBOpvfedTslgFtBS75a1MC8AvBW3 jHkIFDIi5XHRIaoizVrbc47sLcYEUKqE -----END CERTIFICATE-----Generated at Sun Apr 27 05:31:10 2025 by rpki-client