$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/-cREz887ajdUceO1SHT8K0myxyY.mft File: -cREz887ajdUceO1SHT8K0myxyY.mft (raw, json) Hash identifier: OjsJVi54+T1fJ7j9vHoDXOx9sJEiANjmyOMeL9BxV6w= Subject key identifier: E6:FC:64:1D:C2:58:72:9A:C3:C6:0D:8F:70:78:98:88:19:4B:B8:E3 Authority key identifier: F9:C4:44:CF:CF:3B:6A:37:54:71:E3:B5:48:74:FC:2B:49:B2:C7:26 Certificate issuer: /CN=A91E6B9A/serialNumber=F9C444CFCF3B6A375471E3B54874FC2B49B2C726 Certificate serial: 83 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-cREz887ajdUceO1SHT8K0myxyY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/-cREz887ajdUceO1SHT8K0myxyY.mft Manifest number: 81 Signing time: Fri 25 Apr 2025 05:39:47 +0000 Manifest this update: Fri 25 Apr 2025 05:39:47 +0000 Manifest next update: Fri 02 May 2025 05:39:47 +0000 Files and hashes: 1: -cREz887ajdUceO1SHT8K0myxyY.crl (hash: OAXFNd8GkNuFxetAQcLA2yBrrRTnp7zyjnXFfpR3w6E=) 2: 58CA0E62615111EFACF30C14C4F9AE02.roa (hash: n/H7m4JyEx7dcVifKMlTV7vtmvQ/Ig1JHl4d6IW0aVA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/-cREz887ajdUceO1SHT8K0myxyY.crl rsync://rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/-cREz887ajdUceO1SHT8K0myxyY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-cREz887ajdUceO1SHT8K0myxyY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:39:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 131 (0x83) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6B9A, serialNumber=F9C444CFCF3B6A375471E3B54874FC2B49B2C726 Validity Not Before: Apr 25 05:39:47 2025 GMT Not After : May 2 05:39:47 2025 GMT Subject: CN=680b2023-03ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:71:04:9a:70:71:24:fe:84:86:85:e1:bd:72: 58:58:a8:00:c2:3a:81:ea:c8:38:52:33:5e:a1:c2: 6c:d0:e1:17:0a:d6:c6:0c:2a:d1:22:33:fe:2e:c0: 20:78:c8:a4:9f:32:be:67:99:e8:cc:fe:73:1c:8d: d3:d4:35:58:29:d4:3f:37:db:99:a6:79:e1:57:6c: b1:82:f2:21:d3:5c:b2:31:4a:d6:91:04:3c:e8:0f: d9:fc:14:c4:be:3f:8b:64:92:3e:e8:46:5c:93:53: 2b:96:a1:72:67:b8:b3:ec:79:30:a1:b1:82:f4:46: ef:56:31:2f:aa:72:29:c7:fd:60:3b:3f:4f:66:14: 57:34:fa:38:9a:12:b4:6d:13:d2:dd:6d:66:1f:2a: a1:1c:1f:56:ae:0c:ed:fb:1d:ca:50:56:53:e6:11: dc:ff:82:47:c5:6d:70:76:fa:77:2c:ea:37:ce:e8: e1:33:2a:eb:c4:6e:14:63:e0:81:bd:57:58:16:3a: 10:5d:ce:f0:93:89:59:21:5a:0d:eb:cb:15:02:71: 4f:1e:c2:df:83:43:cb:00:f1:ac:5e:92:8b:8a:d8: 00:e3:f8:ed:2a:10:1d:e2:f3:9a:9d:43:de:ab:94: 5c:76:93:34:aa:51:8f:7d:2e:b7:a2:f5:1e:f6:a4: a8:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:FC:64:1D:C2:58:72:9A:C3:C6:0D:8F:70:78:98:88:19:4B:B8:E3 X509v3 Authority Key Identifier: keyid:F9:C4:44:CF:CF:3B:6A:37:54:71:E3:B5:48:74:FC:2B:49:B2:C7:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/-cREz887ajdUceO1SHT8K0myxyY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-cREz887ajdUceO1SHT8K0myxyY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/-cREz887ajdUceO1SHT8K0myxyY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:ff:f8:4f:5c:a3:55:43:18:93:61:0b:c3:a3:04:ec:6f:1e: c5:16:46:be:9f:fb:cb:fb:70:8e:0d:38:f3:25:d9:39:54:c6: d8:ab:1a:f0:f5:53:f1:50:2c:b9:78:43:fc:15:6d:df:42:e4: 8b:c5:dd:1f:5f:57:ef:7a:e9:61:d8:17:4f:ad:0c:4f:37:a7: 53:cd:4d:f5:1f:a8:7a:f9:8b:22:3c:6e:2a:a0:31:b6:b5:5a: 77:64:c3:fe:2a:fc:44:43:66:6c:95:b2:10:1e:d8:c8:c9:8b: 7e:83:f3:b2:23:52:41:d3:66:31:47:74:0c:9f:d5:e1:8a:dd: bb:35:6c:6d:be:a6:32:9f:47:92:4d:4d:68:9f:0a:e5:68:62: a3:88:cb:ad:3b:2b:b0:e9:89:e0:60:8d:95:b5:ac:a9:7b:38: 85:33:28:ff:b7:f1:cb:3e:a1:9d:bf:b9:78:e3:79:bb:44:28: 8b:2f:fc:22:15:3a:70:59:b9:02:9a:cc:00:6f:26:92:a8:84: 26:43:99:fe:1f:0d:de:e8:ab:89:e0:91:37:f9:ba:8b:9e:0a: 66:91:f6:33:db:06:31:1b:7a:0d:ec:e6:6e:df:c4:a2:4e:ed: f5:13:c5:d9:bc:ac:01:41:48:be:62:82:08:ba:13:20:d2:d3: 86:13:1c:3e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTZCOUExMTAvBgNVBAUTKEY5QzQ0NENGQ0YzQjZBMzc1NDcxRTNCNTQ4NzRGQzJC NDlCMkM3MjYwHhcNMjUwNDI1MDUzOTQ3WhcNMjUwNTAyMDUzOTQ3WjAYMRYwFAYD VQQDEw02ODBiMjAyMy0wM2VkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5nEEmnBxJP6EhoXhvXJYWKgAwjqB6sg4UjNeocJs0OEXCtbGDCrRIjP+LsAg eMiknzK+Z5nozP5zHI3T1DVYKdQ/N9uZpnnhV2yxgvIh01yyMUrWkQQ86A/Z/BTE vj+LZJI+6EZck1MrlqFyZ7iz7HkwobGC9EbvVjEvqnIpx/1gOz9PZhRXNPo4mhK0 bRPS3W1mHyqhHB9Wrgzt+x3KUFZT5hHc/4JHxW1wdvp3LOo3zujhMyrrxG4UY+CB vVdYFjoQXc7wk4lZIVoN68sVAnFPHsLfg0PLAPGsXpKLitgA4/jtKhAd4vOanUPe q5RcdpM0qlGPfS63ovUe9qSoMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOb8ZB3C WHKaw8YNj3B4mIgZS7jjMB8GA1UdIwQYMBaAFPnERM/PO2o3VHHjtUh0/CtJsscm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNkI5QS8xMTYwMTI4RTYx NTAxMUVGQUU3QThDNzNDNEY5QUUwMi8tY1JFejg4N2FqZFVjZU8xU0hUOEswbXl4 eVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLy1jUkV6ODg3YWpkVWNlTzFTSFQ4SzBteXh5WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NkI5QS8xMTYwMTI4RTYxNTAxMUVGQUU3QThDNzNDNEY5QUUwMi8tY1JFejg4N2Fq ZFVjZU8xU0hUOEswbXl4eVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCn//hPXKNVQxiTYQvDowTsbx7FFka+n/vL+3CODTjzJdk5VMbYqxrw 9VPxUCy5eEP8FW3fQuSLxd0fX1fveulh2BdPrQxPN6dTzU31H6h6+YsiPG4qoDG2 tVp3ZMP+KvxEQ2ZslbIQHtjIyYt+g/OyI1JB02YxR3QMn9Xhit27NWxtvqYyn0eS TU1onwrlaGKjiMutOyuw6YngYI2VtaypeziFMyj/t/HLPqGdv7l443m7RCiLL/wi FTpwWbkCmswAbyaSqIQmQ5n+Hw3e6KuJ4JE3+bqLngpmkfYz2wYxG3oN7OZu38Si Tu31E8XZvKwBQUi+YoIIuhMg0tOGExw+ -----END CERTIFICATE-----Generated at Sat Apr 26 13:57:26 2025 by rpki-client