$ rpki-client -vvf rpki.apnic.net/member_repository/A91D73BB/7ED57586E18D11EE990FEC4FC4F9AE02/k3obX-sKKTNg6k6IRzUuf9Nsx6U.mft File: k3obX-sKKTNg6k6IRzUuf9Nsx6U.mft (raw, json) Hash identifier: 6JzP+sTxLRoI1JSdw1hZPAPEPR89daEK73KWcam/9rc= Subject key identifier: 18:15:F6:B3:F2:05:BF:AF:E6:7F:21:82:30:39:16:A8:66:BF:83:C4 Authority key identifier: 93:7A:1B:5F:EB:0A:29:33:60:EA:4E:88:47:35:2E:7F:D3:6C:C7:A5 Certificate issuer: /CN=A91D73BB/serialNumber=937A1B5FEB0A293360EA4E8847352E7FD36CC7A5 Certificate serial: D2 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/k3obX-sKKTNg6k6IRzUuf9Nsx6U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D73BB/7ED57586E18D11EE990FEC4FC4F9AE02/k3obX-sKKTNg6k6IRzUuf9Nsx6U.mft Manifest number: CD Signing time: Wed 09 Apr 2025 04:37:28 +0000 Manifest this update: Wed 09 Apr 2025 04:37:27 +0000 Manifest next update: Wed 16 Apr 2025 04:37:27 +0000 Files and hashes: 1: k3obX-sKKTNg6k6IRzUuf9Nsx6U.crl (hash: xq3IA2P12iBpsaXSiZiR60vCJRvucUgFD/0KWiWItw4=) 2: CFE87CFEE74911EE9E36BA2AC4F9AE02.roa (hash: UKwsFEyPykSAjx1cUaIvhwF+WNkQjRemB2kUzANIKwE=) 3: E0C47044E18D11EE82E6CE22C4F9AE02.roa (hash: oHYJEFfD1Lon7ikYLeo6m1Hr1wIXkseOcXKkDnJ3sdE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D73BB/7ED57586E18D11EE990FEC4FC4F9AE02/k3obX-sKKTNg6k6IRzUuf9Nsx6U.crl rsync://rpki.apnic.net/member_repository/A91D73BB/7ED57586E18D11EE990FEC4FC4F9AE02/k3obX-sKKTNg6k6IRzUuf9Nsx6U.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/k3obX-sKKTNg6k6IRzUuf9Nsx6U.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 16 Apr 2025 04:37:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 210 (0xd2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D73BB Validity Not Before: Apr 9 04:37:27 2025 GMT Not After : Apr 16 04:37:27 2025 GMT Subject: CN=67f5f987-474e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:0c:67:f9:8c:f3:5f:dd:3f:d0:f6:40:0f:a5: cc:c9:08:b6:52:a5:fb:a3:3d:eb:c6:83:50:2b:c4: f9:e3:fc:80:07:0e:90:ca:39:ad:52:cc:79:41:cd: 80:54:5f:f5:c3:be:3e:2d:50:36:ea:ef:48:46:38: fc:2a:91:06:54:bd:9d:cb:d2:a1:df:ba:e7:2f:69: af:b1:9a:92:34:70:f5:fa:2c:5b:75:c8:87:bb:02: 00:b6:b9:c0:59:c0:a1:cd:64:26:6d:d6:ec:e4:2f: 0f:ea:83:26:5e:3e:39:9d:43:99:03:fb:30:e3:5c: 02:48:38:6a:b5:e7:0e:fb:2f:c4:6f:4c:5e:3b:78: cf:71:d2:2a:99:a7:c0:52:44:d2:6b:b4:ab:94:71: 14:59:24:46:41:bd:74:b2:b1:e0:da:bf:ed:87:7c: f6:00:2b:25:b7:25:70:83:c2:0e:4c:c8:92:16:85: 7e:7f:51:fc:d7:d0:9d:26:a0:d2:8f:ce:c9:87:3d: 63:5d:cc:4f:56:15:9a:be:96:7b:af:b4:38:6a:92: b6:40:fe:af:dc:2e:c2:5c:49:ad:31:9f:e2:b4:a4: 31:fb:3f:ea:bf:96:27:fb:2a:91:97:b2:80:1c:1d: 13:a2:a1:98:2b:69:e4:da:ed:90:a4:71:7e:87:03: 08:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:15:F6:B3:F2:05:BF:AF:E6:7F:21:82:30:39:16:A8:66:BF:83:C4 X509v3 Authority Key Identifier: keyid:93:7A:1B:5F:EB:0A:29:33:60:EA:4E:88:47:35:2E:7F:D3:6C:C7:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D73BB/7ED57586E18D11EE990FEC4FC4F9AE02/k3obX-sKKTNg6k6IRzUuf9Nsx6U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/k3obX-sKKTNg6k6IRzUuf9Nsx6U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D73BB/7ED57586E18D11EE990FEC4FC4F9AE02/k3obX-sKKTNg6k6IRzUuf9Nsx6U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:dc:dc:33:c7:fd:15:bf:15:c5:bf:73:a0:18:c1:4d:a7:b0: 88:71:1c:7a:a9:99:84:56:8b:b6:f3:dc:98:30:6c:62:f5:6b: 18:02:04:69:5c:5b:a3:2b:04:77:32:f2:c1:2e:06:95:7d:86: ed:75:f8:15:5d:79:f6:92:78:b9:8d:ae:5e:fe:03:8e:72:a6: 39:6c:83:d5:1e:4e:77:f6:81:7a:5e:ed:66:9a:87:1e:d1:50: 0e:02:9f:9f:82:a1:52:fb:e5:08:36:27:88:25:63:ad:87:ef: ec:c0:4d:ac:c5:79:da:8e:fd:c6:4b:ca:e9:f9:8b:fe:f7:76: f8:ab:c3:0f:60:7b:aa:57:75:02:b1:a6:ab:40:81:41:39:33: 4b:a8:96:10:5b:63:36:0b:b7:09:93:1d:dc:bc:3d:86:04:52: 25:f8:e7:a1:e2:42:49:df:1e:91:28:df:64:75:09:7c:83:43: 34:40:dc:bd:97:fd:dd:8d:40:13:49:6c:ab:10:a8:47:76:76: 21:82:ce:94:79:09:be:e7:d4:30:89:21:3d:4c:c5:28:29:b7: 68:fb:82:ff:f3:c6:6e:d4:26:f2:a6:77:38:c1:27:07:c8:39: 4d:a8:34:8b:96:c6:b5:4c:07:ac:a6:4b:b2:d5:6f:6f:72:55: 68:ea:8f:88 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDczQkIxMTAvBgNVBAUTKDkzN0ExQjVGRUIwQTI5MzM2MEVBNEU4ODQ3MzUyRTdG RDM2Q0M3QTUwHhcNMjUwNDA5MDQzNzI3WhcNMjUwNDE2MDQzNzI3WjAYMRYwFAYD VQQDEw02N2Y1Zjk4Ny00NzRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuAxn+YzzX90/0PZAD6XMyQi2UqX7oz3rxoNQK8T54/yABw6QyjmtUsx5Qc2A VF/1w74+LVA26u9IRjj8KpEGVL2dy9Kh37rnL2mvsZqSNHD1+ixbdciHuwIAtrnA WcChzWQmbdbs5C8P6oMmXj45nUOZA/sw41wCSDhqtecO+y/Eb0xeO3jPcdIqmafA UkTSa7SrlHEUWSRGQb10srHg2r/th3z2ACsltyVwg8IOTMiSFoV+f1H819CdJqDS j87Jhz1jXcxPVhWavpZ7r7Q4apK2QP6v3C7CXEmtMZ/itKQx+z/qv5Yn+yqRl7KA HB0ToqGYK2nk2u2QpHF+hwMI4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBgV9rPy Bb+v5n8hgjA5Fqhmv4PEMB8GA1UdIwQYMBaAFJN6G1/rCikzYOpOiEc1Ln/TbMel MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENzNCQi83RUQ1NzU4NkUx OEQxMUVFOTkwRkVDNEZDNEY5QUUwMi9rM29iWC1zS0tUTmc2azZJUnpVdWY5TnN4 NlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2szb2JYLXNLS1ROZzZrNklSelV1ZjlOc3g2VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NzNCQi83RUQ1NzU4NkUxOEQxMUVFOTkwRkVDNEZDNEY5QUUwMi9rM29iWC1zS0tU Tmc2azZJUnpVdWY5TnN4NlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCt3Nwzx/0VvxXFv3OgGMFNp7CIcRx6qZmEVou289yYMGxi9WsYAgRp XFujKwR3MvLBLgaVfYbtdfgVXXn2kni5ja5e/gOOcqY5bIPVHk539oF6Xu1mmoce 0VAOAp+fgqFS++UINieIJWOth+/swE2sxXnajv3GS8rp+Yv+93b4q8MPYHuqV3UC saarQIFBOTNLqJYQW2M2C7cJkx3cvD2GBFIl+Oeh4kJJ3x6RKN9kdQl8g0M0QNy9 l/3djUATSWyrEKhHdnYhgs6UeQm+59QwiSE9TMUoKbdo+4L/88Zu1Cbypnc4wScH yDlNqDSLlsa1TAespkuy1W9vclVo6o+I -----END CERTIFICATE-----Generated at Fri Apr 11 21:32:37 2025 by rpki-client