$ rpki-client -vvf rpki.apnic.net/member_repository/A91DCD09/EAC7EEA0112D11EC8D87057DC4F9AE02/rbmJeP11H5nZqOsq5y08DFUEU6Q.mft File: rbmJeP11H5nZqOsq5y08DFUEU6Q.mft (raw, json) Hash identifier: Yb5r8xrnK8gu0O2RxFAuS66MDwrOK1LQ5n/c0ajKU2Q= Subject key identifier: 97:49:9E:9D:89:93:C9:19:78:5C:B3:FA:D0:28:7B:CC:42:09:7C:E4 Authority key identifier: AD:B9:89:78:FD:75:1F:99:D9:A8:EB:2A:E7:2D:3C:0C:55:04:53:A4 Certificate issuer: /CN=A91DCD09/serialNumber=ADB98978FD751F99D9A8EB2AE72D3C0C550453A4 Certificate serial: 050E Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rbmJeP11H5nZqOsq5y08DFUEU6Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DCD09/EAC7EEA0112D11EC8D87057DC4F9AE02/rbmJeP11H5nZqOsq5y08DFUEU6Q.mft Manifest number: 04F8 Signing time: Thu 24 Apr 2025 16:23:27 +0000 Manifest this update: Thu 24 Apr 2025 16:23:27 +0000 Manifest next update: Thu 01 May 2025 16:23:27 +0000 Files and hashes: 1: rbmJeP11H5nZqOsq5y08DFUEU6Q.crl (hash: G6Ki5VB5ZZ4psvEFCrgTBes0P3PILf2FNO4RCSSTr3c=) 2: 5B0ADC308D3A11EC94DEEC7BC4F9AE02.roa (hash: yR/rS2v+MnuPsp4IAeWDDgPbPiNnjwU9wDh4QYZV4SU=) 3: 43AB9FC641A311ECA73C8C0EC4F9AE02.roa (hash: qkuJyiuag7r0VmHzzxIeNNPZvE1YemZEbkXs9TYwx5o=) 4: CE99A9F2D33811EDAAE97C1BC4F9AE02.roa (hash: YZwNutRVemyQTlte1eEv/AcDXWm1xtlx4204L/kTObo=) 5: CF49BBDAD33811EDAAE97C1BC4F9AE02.roa (hash: ACLXZnrak+BWFZVdvvziA50vZItebg8EqCvB342Th1I=) 6: 0ECA9B023D9F11EC9EC18739C4F9AE02.roa (hash: Cywfb2Rnt+MB9wFrcD0/BbNel0gnNnVhinHv2K8l9OM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DCD09/EAC7EEA0112D11EC8D87057DC4F9AE02/rbmJeP11H5nZqOsq5y08DFUEU6Q.crl rsync://rpki.apnic.net/member_repository/A91DCD09/EAC7EEA0112D11EC8D87057DC4F9AE02/rbmJeP11H5nZqOsq5y08DFUEU6Q.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rbmJeP11H5nZqOsq5y08DFUEU6Q.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 16:23:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1294 (0x50e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DCD09, serialNumber=ADB98978FD751F99D9A8EB2AE72D3C0C550453A4 Validity Not Before: Apr 24 16:23:27 2025 GMT Not After : May 1 16:23:27 2025 GMT Subject: CN=680a657f-525c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:45:80:c2:b1:93:57:fe:a0:29:c9:47:80:87: ae:d9:d3:50:4a:17:96:27:d0:66:16:ef:be:7a:e9: c4:21:d4:25:99:fe:8e:48:40:e5:1a:9e:67:55:3a: 98:c6:ed:3c:cb:1d:3b:d2:42:07:84:90:31:e5:d3: 84:48:cd:9a:98:ac:11:73:fa:c7:f7:ef:ef:bd:d2: 2f:53:dc:37:4e:40:36:d9:82:16:2f:7c:ae:6c:08: f3:d0:c4:7d:df:83:1f:c5:41:23:6b:8f:1a:ba:ba: 71:59:50:16:04:56:3b:37:51:3d:73:46:a6:47:95: 80:15:35:13:c2:68:97:82:53:13:48:ad:da:4b:5a: 55:10:e1:4a:f1:04:38:ed:7a:9b:f1:59:cb:0f:8b: d6:f6:7d:1a:a8:d0:5d:02:29:d0:4a:a4:02:fd:a5: b6:2a:c4:65:c6:c8:69:79:87:20:7f:de:2d:76:86: 38:ff:c6:1d:bf:3b:7f:00:b8:b9:46:0a:2c:2f:e7: f7:ec:6d:03:20:e1:02:af:f8:7e:7f:53:27:34:96: 10:da:03:2a:73:3d:e1:38:18:8d:11:7f:4d:63:36: d9:42:e3:05:3b:31:c1:14:c2:b8:2d:32:e8:ca:75: 2b:55:60:b5:32:ed:53:af:cf:7b:35:fa:2a:e6:04: 26:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:49:9E:9D:89:93:C9:19:78:5C:B3:FA:D0:28:7B:CC:42:09:7C:E4 X509v3 Authority Key Identifier: keyid:AD:B9:89:78:FD:75:1F:99:D9:A8:EB:2A:E7:2D:3C:0C:55:04:53:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DCD09/EAC7EEA0112D11EC8D87057DC4F9AE02/rbmJeP11H5nZqOsq5y08DFUEU6Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rbmJeP11H5nZqOsq5y08DFUEU6Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCD09/EAC7EEA0112D11EC8D87057DC4F9AE02/rbmJeP11H5nZqOsq5y08DFUEU6Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:6c:2f:ff:dd:7d:2d:35:55:9d:2c:22:4f:a7:c5:5c:d2:df: bf:aa:f7:73:2c:75:36:24:58:2e:99:40:8c:0e:d6:c9:09:45: 33:a9:49:bd:58:63:9d:eb:33:32:d8:1d:c1:4a:94:f6:55:e8: 90:34:87:9e:32:a7:76:cc:f0:2e:f2:b3:27:a3:38:f5:68:9a: 45:76:ee:37:7d:47:1b:55:3b:61:6f:6f:13:4d:14:3a:48:37: da:7d:93:50:d0:2a:ac:bd:9f:70:93:41:db:03:5f:2b:d1:66: 15:6f:9f:29:90:25:63:c7:5e:5d:77:1e:99:35:0c:b5:14:b7: e1:a2:09:c7:5e:cb:52:61:f0:b7:f6:6a:a9:d7:a3:f4:8f:e1: aa:8c:4d:4b:3c:06:22:fa:cc:ac:7f:8e:20:d1:95:58:47:ba: f9:3e:95:f0:9e:ee:f7:80:9c:72:6f:23:af:2b:28:56:10:a2: 40:f7:f3:2c:8f:9b:28:c4:6c:c9:5f:d7:6b:e1:48:ed:67:f0: 91:57:56:d1:87:ad:48:dd:0e:dd:4d:7a:90:2b:dd:7b:0e:cf: af:ef:3d:ef:02:99:a7:a4:3c:e5:65:cb:33:17:51:0c:8d:4b: 3c:0b:62:3a:84:63:6f:59:fb:b7:d7:55:f1:47:90:30:a5:12: d3:c3:17:c4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBQ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RENEMDkxMTAvBgNVBAUTKEFEQjk4OTc4RkQ3NTFGOTlEOUE4RUIyQUU3MkQzQzBD NTUwNDUzQTQwHhcNMjUwNDI0MTYyMzI3WhcNMjUwNTAxMTYyMzI3WjAYMRYwFAYD VQQDEw02ODBhNjU3Zi01MjVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArEWAwrGTV/6gKclHgIeu2dNQSheWJ9BmFu++eunEIdQlmf6OSEDlGp5nVTqY xu08yx070kIHhJAx5dOESM2amKwRc/rH9+/vvdIvU9w3TkA22YIWL3yubAjz0MR9 34MfxUEja48aurpxWVAWBFY7N1E9c0amR5WAFTUTwmiXglMTSK3aS1pVEOFK8QQ4 7Xqb8VnLD4vW9n0aqNBdAinQSqQC/aW2KsRlxshpeYcgf94tdoY4/8Ydvzt/ALi5 RgosL+f37G0DIOECr/h+f1MnNJYQ2gMqcz3hOBiNEX9NYzbZQuMFOzHBFMK4LTLo ynUrVWC1Mu1Tr897Nfoq5gQmSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJdJnp2J k8kZeFyz+tAoe8xCCXzkMB8GA1UdIwQYMBaAFK25iXj9dR+Z2ajrKuctPAxVBFOk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQ0QwOS9FQUM3RUVBMDEx MkQxMUVDOEQ4NzA1N0RDNEY5QUUwMi9yYm1KZVAxMUg1blpxT3NxNXkwOERGVUVV NlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL3JibUplUDExSDVuWnFPc3E1eTA4REZVRVU2US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Q0QwOS9FQUM3RUVBMDExMkQxMUVDOEQ4NzA1N0RDNEY5QUUwMi9yYm1KZVAxMUg1 blpxT3NxNXkwOERGVUVVNlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAhbC//3X0tNVWdLCJPp8Vc0t+/qvdzLHU2JFgumUCMDtbJCUUzqUm9 WGOd6zMy2B3BSpT2VeiQNIeeMqd2zPAu8rMnozj1aJpFdu43fUcbVTthb28TTRQ6 SDfafZNQ0CqsvZ9wk0HbA18r0WYVb58pkCVjx15ddx6ZNQy1FLfhognHXstSYfC3 9mqp16P0j+GqjE1LPAYi+sysf44g0ZVYR7r5PpXwnu73gJxybyOvKyhWEKJA9/Ms j5soxGzJX9dr4UjtZ/CRV1bRh61I3Q7dTXqQK917Ds+v7z3vApmnpDzlZcszF1EM jUs8C2I6hGNvWfu311XxR5AwpRLTwxfE -----END CERTIFICATE-----Generated at Sat Apr 26 12:58:31 2025 by rpki-client