$ rpki-client -vvf rpki.apnic.net/member_repository/A91D774B/8FAB216643B111EC9A51A52EC4F9AE02/mPVq6odEo9Few5KtBtYIN3BGJUE.mft File: mPVq6odEo9Few5KtBtYIN3BGJUE.mft (raw, json) Hash identifier: kiLk7nX/9Esl/8+KfDIM7PoI/2lynxAPxR91G0x0/Bk= Subject key identifier: B6:3A:4B:4A:F0:C6:84:2C:7B:49:B6:4D:50:C2:46:95:D5:BC:47:BD Authority key identifier: 98:F5:6A:EA:87:44:A3:D1:5E:C3:92:AD:06:D6:08:37:70:46:25:41 Certificate issuer: /CN=A91D774B/serialNumber=98F56AEA8744A3D15EC392AD06D6083770462541 Certificate serial: 047F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mPVq6odEo9Few5KtBtYIN3BGJUE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D774B/8FAB216643B111EC9A51A52EC4F9AE02/mPVq6odEo9Few5KtBtYIN3BGJUE.mft Manifest number: 0473 Signing time: Thu 24 Apr 2025 23:54:32 +0000 Manifest this update: Thu 24 Apr 2025 23:54:31 +0000 Manifest next update: Thu 01 May 2025 23:54:31 +0000 Files and hashes: 1: mPVq6odEo9Few5KtBtYIN3BGJUE.crl (hash: Auv7urkC9CsWGeSmC1qyeKqi6ih7Gtdvd0NjF9ZzW2Y=) 2: 30B8A186DBEF11EFAF6FF37AC4F9AE02.roa (hash: C2tgoi4ndceE+FSZfwDXIED+n+ZW+4Wp1mUo8nhP9gw=) 3: CB7E6CF0DBEF11EF9FC5007CC4F9AE02.roa (hash: jv1ungDFXqLOGYMpTJjaYjynG3firC0fxKibhbmN4oA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D774B/8FAB216643B111EC9A51A52EC4F9AE02/mPVq6odEo9Few5KtBtYIN3BGJUE.crl rsync://rpki.apnic.net/member_repository/A91D774B/8FAB216643B111EC9A51A52EC4F9AE02/mPVq6odEo9Few5KtBtYIN3BGJUE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mPVq6odEo9Few5KtBtYIN3BGJUE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 23:54:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1151 (0x47f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D774B, serialNumber=98F56AEA8744A3D15EC392AD06D6083770462541 Validity Not Before: Apr 24 23:54:31 2025 GMT Not After : May 1 23:54:31 2025 GMT Subject: CN=680acf37-1475 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:c7:4b:61:46:55:8c:de:fd:03:b8:75:a1:7a: d8:c7:9c:a9:4e:e8:6d:42:9f:ea:0d:90:53:bf:3a: 89:dc:eb:6f:f9:22:b3:86:13:e7:05:e8:fc:3b:51: b8:1e:18:7d:d6:3b:4a:72:01:0a:20:28:ba:c2:d4: b9:92:ed:bf:76:6b:fd:ac:ee:b4:df:78:96:e2:1d: 8d:35:c9:d6:57:1e:4c:a4:de:d1:83:4b:27:ec:50: 47:fa:46:a0:f6:b1:10:cc:b9:f8:89:1a:16:0e:e4: 27:95:20:f9:5d:b0:4b:8d:42:2c:a3:23:4d:05:e1: 16:78:ad:18:6b:1e:d9:33:9e:cb:5a:da:a1:45:9e: 6e:1d:8a:37:dc:6e:fc:0d:e0:54:f3:8a:89:79:a1: fc:ab:2a:b9:b1:53:29:5e:84:25:5a:c2:12:ed:cd: 32:70:be:7f:3f:85:2f:a1:3a:42:a5:fd:39:e9:22: 53:93:3e:7e:26:99:36:de:4a:20:fb:f3:1f:87:4f: 7b:e0:9d:fb:ef:2f:04:0e:e5:be:b7:1e:15:89:92: b5:0d:39:6a:fa:e2:17:6b:53:6e:d6:4f:ba:a9:fc: 09:8c:66:9b:d3:07:9b:83:1f:c2:6a:58:98:c7:53: 2b:db:6c:86:09:6a:31:cd:f0:3f:1c:57:7c:66:2f: 38:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:3A:4B:4A:F0:C6:84:2C:7B:49:B6:4D:50:C2:46:95:D5:BC:47:BD X509v3 Authority Key Identifier: keyid:98:F5:6A:EA:87:44:A3:D1:5E:C3:92:AD:06:D6:08:37:70:46:25:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D774B/8FAB216643B111EC9A51A52EC4F9AE02/mPVq6odEo9Few5KtBtYIN3BGJUE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mPVq6odEo9Few5KtBtYIN3BGJUE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D774B/8FAB216643B111EC9A51A52EC4F9AE02/mPVq6odEo9Few5KtBtYIN3BGJUE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:6f:32:e2:82:7a:58:b6:dd:31:29:07:97:f9:47:8a:82:61: ad:59:1e:50:cf:5f:b9:96:ed:9d:f4:de:6d:a1:a9:5c:ec:55: 39:2c:6c:ea:7b:b6:0e:43:0a:fa:be:b4:5b:7a:7f:35:f4:f2: 80:8c:6a:68:38:aa:f8:f1:c2:6d:13:30:a2:c3:b7:8a:0e:59: 63:0e:ed:50:f9:5a:2d:ba:b8:7d:46:d7:7f:0f:27:d3:8c:fb: 78:6d:d4:c3:ce:f4:8b:8e:72:5e:50:69:41:7d:fe:d2:92:47: ae:e7:62:a0:59:f6:c5:3d:59:dc:8f:bf:54:37:e4:ba:be:70: 76:8d:39:ad:ad:51:00:80:b6:87:d9:e5:d0:45:2b:2f:9b:28: 12:46:58:57:e0:ea:55:b0:e9:10:27:aa:cb:b7:b8:34:0c:c5: 27:08:a3:68:88:a7:53:93:32:13:18:ae:cf:a9:e3:97:23:cb: 63:26:a5:95:a0:72:6c:2f:fc:5c:b3:ec:0d:b5:73:86:25:e7: 7e:fb:47:c8:43:b1:ea:2b:5f:c3:64:99:46:6a:49:dd:42:55: 3f:9a:2c:de:cb:b4:b5:5e:b9:c2:be:aa:15:31:ce:57:5f:7e: 50:e9:9c:a4:d5:e9:01:04:95:bc:29:6d:9a:36:22:6d:4a:70: b8:9d:e4:17 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBH8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDc3NEIxMTAvBgNVBAUTKDk4RjU2QUVBODc0NEEzRDE1RUMzOTJBRDA2RDYwODM3 NzA0NjI1NDEwHhcNMjUwNDI0MjM1NDMxWhcNMjUwNTAxMjM1NDMxWjAYMRYwFAYD VQQDEw02ODBhY2YzNy0xNDc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2MdLYUZVjN79A7h1oXrYx5ypTuhtQp/qDZBTvzqJ3Otv+SKzhhPnBej8O1G4 Hhh91jtKcgEKICi6wtS5ku2/dmv9rO6033iW4h2NNcnWVx5MpN7Rg0sn7FBH+kag 9rEQzLn4iRoWDuQnlSD5XbBLjUIsoyNNBeEWeK0Yax7ZM57LWtqhRZ5uHYo33G78 DeBU84qJeaH8qyq5sVMpXoQlWsIS7c0ycL5/P4UvoTpCpf056SJTkz5+Jpk23kog +/Mfh0974J377y8EDuW+tx4ViZK1DTlq+uIXa1Nu1k+6qfwJjGab0webgx/CaliY x1Mr22yGCWoxzfA/HFd8Zi84awIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLY6S0rw xoQse0m2TVDCRpXVvEe9MB8GA1UdIwQYMBaAFJj1auqHRKPRXsOSrQbWCDdwRiVB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENzc0Qi84RkFCMjE2NjQz QjExMUVDOUE1MUE1MkVDNEY5QUUwMi9tUFZxNm9kRW85RmV3NUt0QnRZSU4zQkdK VUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21QVnE2b2RFbzlGZXc1S3RCdFlJTjNCR0pVRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Nzc0Qi84RkFCMjE2NjQzQjExMUVDOUE1MUE1MkVDNEY5QUUwMi9tUFZxNm9kRW85 RmV3NUt0QnRZSU4zQkdKVUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBgbzLignpYtt0xKQeX+UeKgmGtWR5Qz1+5lu2d9N5toalc7FU5LGzq e7YOQwr6vrRben819PKAjGpoOKr48cJtEzCiw7eKDlljDu1Q+Voturh9Rtd/DyfT jPt4bdTDzvSLjnJeUGlBff7Skkeu52KgWfbFPVncj79UN+S6vnB2jTmtrVEAgLaH 2eXQRSsvmygSRlhX4OpVsOkQJ6rLt7g0DMUnCKNoiKdTkzITGK7PqeOXI8tjJqWV oHJsL/xcs+wNtXOGJed++0fIQ7HqK1/DZJlGakndQlU/mizey7S1XrnCvqoVMc5X X35Q6Zyk1ekBBJW8KW2aNiJtSnC4neQX -----END CERTIFICATE-----Generated at Sat Apr 26 16:41:10 2025 by rpki-client