$ rpki-client -vvf rpki.apnic.net/member_repository/A91E46B1/F00DF366679711E8A7891C48C4F9AE02/MAeESqoZm6nIjWQEw9_oduHjn8Y.mft File: MAeESqoZm6nIjWQEw9_oduHjn8Y.mft (raw, json) Hash identifier: 93huunfRRTgYHiCFHBhuv/WTgWnMamhPiwwgg1aeyJk= Subject key identifier: 71:47:C4:37:24:DB:37:D0:48:03:81:40:76:1F:B5:69:C5:21:B6:7A Authority key identifier: 30:07:84:4A:AA:19:9B:A9:C8:8D:64:04:C3:DF:E8:76:E1:E3:9F:C6 Certificate issuer: /CN=A91E46B1/serialNumber=3007844AAA199BA9C88D6404C3DFE876E1E39FC6 Certificate serial: 1482 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MAeESqoZm6nIjWQEw9_oduHjn8Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E46B1/F00DF366679711E8A7891C48C4F9AE02/MAeESqoZm6nIjWQEw9_oduHjn8Y.mft Manifest number: 1470 Signing time: Sun 04 May 2025 16:48:44 +0000 Manifest this update: Sun 04 May 2025 16:48:44 +0000 Manifest next update: Sun 11 May 2025 16:48:44 +0000 Files and hashes: 1: MAeESqoZm6nIjWQEw9_oduHjn8Y.crl (hash: QsR+JYSLT+su5mfRwZEWr4puy78BlZjvflQk4jfYYss=) 2: D0D94718CB8111E89EDE697DC4F9AE02.roa (hash: 9jViCMxta64fmIo5dm4osOtVC5SSmRZm2YRKWH3IWTM=) 3: 391E6EDE679B11E886728650C4F9AE02.roa (hash: FfJi+Cna0JYZDzk+rBUfl7UT75ngYXqfbGnsFnMhnRc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E46B1/F00DF366679711E8A7891C48C4F9AE02/MAeESqoZm6nIjWQEw9_oduHjn8Y.crl rsync://rpki.apnic.net/member_repository/A91E46B1/F00DF366679711E8A7891C48C4F9AE02/MAeESqoZm6nIjWQEw9_oduHjn8Y.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MAeESqoZm6nIjWQEw9_oduHjn8Y.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 16:48:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5250 (0x1482) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E46B1, serialNumber=3007844AAA199BA9C88D6404C3DFE876E1E39FC6 Validity Not Before: May 4 16:48:44 2025 GMT Not After : May 11 16:48:44 2025 GMT Subject: CN=68179a6c-e24f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:30:5e:07:67:4f:f3:9d:1b:04:2e:6e:63:e7: b9:b4:85:4c:1d:28:b0:e4:5b:13:8e:69:7f:a2:35: 10:59:a8:95:43:a5:37:a2:58:c1:ca:97:a9:46:bb: 15:d5:90:f8:38:ef:c8:4d:f2:5f:a8:c5:7d:91:bf: 08:00:90:f5:2f:7b:de:27:c7:25:aa:52:b4:49:c3: d5:2c:03:7d:5d:2f:1c:08:e5:26:0b:58:4f:69:51: a8:5d:cf:0b:fb:ce:97:66:e9:bf:60:ab:35:74:91: 84:21:71:7a:24:60:4b:68:ad:4f:d2:12:ae:d7:5f: e8:b9:04:fc:ff:1c:0c:b9:30:72:a6:de:2b:e8:66: 53:8d:29:ef:af:2c:0d:5c:b0:07:59:dd:f9:9a:aa: 7a:c5:75:38:af:fe:82:72:3b:35:e5:69:d1:c0:2d: 0b:5d:91:7b:56:b9:0a:51:fa:4c:da:27:ed:85:ca: f7:6c:c3:9b:67:f7:02:10:d4:40:eb:e0:0c:41:25: 20:43:08:31:dd:7d:f5:bc:51:9d:6c:f8:c1:a7:ac: 69:a7:a9:08:7f:de:99:f1:1a:ac:9a:6d:38:a5:bc: a0:84:54:09:f3:4d:ef:49:d0:77:21:16:01:f2:80: 0c:5e:ab:ff:a6:ee:30:01:50:b1:fc:f1:bb:e4:f4: 39:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:47:C4:37:24:DB:37:D0:48:03:81:40:76:1F:B5:69:C5:21:B6:7A X509v3 Authority Key Identifier: keyid:30:07:84:4A:AA:19:9B:A9:C8:8D:64:04:C3:DF:E8:76:E1:E3:9F:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E46B1/F00DF366679711E8A7891C48C4F9AE02/MAeESqoZm6nIjWQEw9_oduHjn8Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MAeESqoZm6nIjWQEw9_oduHjn8Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E46B1/F00DF366679711E8A7891C48C4F9AE02/MAeESqoZm6nIjWQEw9_oduHjn8Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:51:2f:75:e6:36:ee:db:2a:cc:76:c6:cd:f9:b4:5a:72:28: 7f:b4:7c:fc:2e:60:17:2d:c0:98:e0:81:bd:f9:c9:61:47:eb: 28:d1:14:d0:c5:a1:2e:62:39:a6:3f:28:ff:90:15:95:3c:e0: f1:cd:1a:9e:e3:51:4a:91:17:ef:af:5a:f2:d0:c3:05:0d:44: c5:bf:a1:2e:aa:2f:c5:fc:ca:bd:3b:d4:c0:df:5e:b2:78:22: 5f:bd:48:2f:44:dc:0d:0b:16:e6:e6:d7:a5:b2:5f:4a:e4:2a: c4:e0:c2:0c:6c:43:5b:49:dd:03:33:03:3c:90:cd:54:2d:f0: 62:12:ed:87:b2:a9:34:ed:d0:2a:05:44:0e:c3:b3:99:f7:0b: ee:d3:5b:52:d7:93:54:c1:42:12:46:17:91:f9:3d:e4:60:64: 0b:8c:3e:07:4d:67:2c:bf:95:55:5d:be:71:73:2f:22:cd:3d: 09:58:8e:a4:c5:02:80:74:6e:a7:a0:31:ca:0b:f1:a2:60:dd: c4:2a:6e:50:c4:05:5e:f6:b7:8c:64:af:7e:22:35:cf:7d:b0: cb:a5:11:33:e0:3f:88:ce:3d:8b:72:e3:9e:09:bf:f2:cc:02: 9c:c8:7d:4b:5b:3a:7d:44:38:35:22:4c:65:f1:92:f1:09:fc: 07:89:e0:40 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFIIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTQ2QjExMTAvBgNVBAUTKDMwMDc4NDRBQUExOTlCQTlDODhENjQwNEMzREZFODc2 RTFFMzlGQzYwHhcNMjUwNTA0MTY0ODQ0WhcNMjUwNTExMTY0ODQ0WjAYMRYwFAYD VQQDEw02ODE3OWE2Yy1lMjRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxzBeB2dP850bBC5uY+e5tIVMHSiw5FsTjml/ojUQWaiVQ6U3oljBypepRrsV 1ZD4OO/ITfJfqMV9kb8IAJD1L3veJ8clqlK0ScPVLAN9XS8cCOUmC1hPaVGoXc8L +86XZum/YKs1dJGEIXF6JGBLaK1P0hKu11/ouQT8/xwMuTBypt4r6GZTjSnvrywN XLAHWd35mqp6xXU4r/6Ccjs15WnRwC0LXZF7VrkKUfpM2ifthcr3bMObZ/cCENRA 6+AMQSUgQwgx3X31vFGdbPjBp6xpp6kIf96Z8Rqsmm04pbyghFQJ803vSdB3IRYB 8oAMXqv/pu4wAVCx/PG75PQ5/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHFHxDck 2zfQSAOBQHYftWnFIbZ6MB8GA1UdIwQYMBaAFDAHhEqqGZupyI1kBMPf6Hbh45/G MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNDZCMS9GMDBERjM2NjY3 OTcxMUU4QTc4OTFDNDhDNEY5QUUwMi9NQWVFU3FvWm02bklqV1FFdzlfb2R1SGpu OFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL01BZUVTcW9abTZuSWpXUUV3OV9vZHVIam44WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NDZCMS9GMDBERjM2NjY3OTcxMUU4QTc4OTFDNDhDNEY5QUUwMi9NQWVFU3FvWm02 bklqV1FFdzlfb2R1SGpuOFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBzUS915jbu2yrMdsbN+bRacih/tHz8LmAXLcCY4IG9+clhR+so0RTQ xaEuYjmmPyj/kBWVPODxzRqe41FKkRfvr1ry0MMFDUTFv6Euqi/F/Mq9O9TA316y eCJfvUgvRNwNCxbm5telsl9K5CrE4MIMbENbSd0DMwM8kM1ULfBiEu2Hsqk07dAq BUQOw7OZ9wvu01tS15NUwUISRheR+T3kYGQLjD4HTWcsv5VVXb5xcy8izT0JWI6k xQKAdG6noDHKC/GiYN3EKm5QxAVe9reMZK9+IjXPfbDLpREz4D+Izj2LcuOeCb/y zAKcyH1LWzp9RDg1Ikxl8ZLxCfwHieBA -----END CERTIFICATE-----Generated at Tue May 6 04:25:30 2025 by rpki-client