$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF3CA/EF4F937CC3A411E797BBF15EC4F9AE02/u5MlbmB9QutuNCDcxxN_ILhNDIo.mft File: u5MlbmB9QutuNCDcxxN_ILhNDIo.mft (raw, json) Hash identifier: ZgDw3U1+Vo8g5f71apTxTH0+IuRi3xJk9BwuuzpDIZk= Subject key identifier: D1:9D:6C:47:6E:83:74:36:53:22:08:15:7F:F5:18:99:67:9C:1C:A5 Authority key identifier: BB:93:25:6E:60:7D:42:EB:6E:34:20:DC:C7:13:7F:20:B8:4D:0C:8A Certificate issuer: /CN=A91DF3CA/serialNumber=BB93256E607D42EB6E3420DCC7137F20B84D0C8A Certificate serial: 17BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u5MlbmB9QutuNCDcxxN_ILhNDIo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF3CA/EF4F937CC3A411E797BBF15EC4F9AE02/u5MlbmB9QutuNCDcxxN_ILhNDIo.mft Manifest number: 17B2 Signing time: Wed 16 Apr 2025 16:34:26 +0000 Manifest this update: Wed 16 Apr 2025 16:34:26 +0000 Manifest next update: Wed 23 Apr 2025 16:34:26 +0000 Files and hashes: 1: u5MlbmB9QutuNCDcxxN_ILhNDIo.crl (hash: vl1PMLMnlF4JnMZznlGPov4IhQjyMIN4yyx7iw7sSjM=) 2: 7D4E6EDCC3A511E78971975FC4F9AE02.roa (hash: veiSAA57yRrgqocVJ9kM0ybPgWzL/JzbGINmTfwNHX8=) 3: 0EB22CD66BBE11EDBF717818C4F9AE02.roa (hash: zCpY8nx1qxvRAvrVO7S1BXfjXPbBU6CC+eJhv6+dkZQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF3CA/EF4F937CC3A411E797BBF15EC4F9AE02/u5MlbmB9QutuNCDcxxN_ILhNDIo.crl rsync://rpki.apnic.net/member_repository/A91DF3CA/EF4F937CC3A411E797BBF15EC4F9AE02/u5MlbmB9QutuNCDcxxN_ILhNDIo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u5MlbmB9QutuNCDcxxN_ILhNDIo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Apr 2025 16:34:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6078 (0x17be) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF3CA, serialNumber=BB93256E607D42EB6E3420DCC7137F20B84D0C8A Validity Not Before: Apr 16 16:34:26 2025 GMT Not After : Apr 23 16:34:26 2025 GMT Subject: CN=67ffdc12-343f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:25:e7:be:23:78:45:f9:90:75:41:27:91:aa: 45:fe:03:91:f7:5c:0d:db:f1:cd:96:48:ce:34:c4: e0:b0:4d:41:b6:85:99:bc:12:f0:ed:5f:5c:79:ea: da:01:19:c1:b9:22:ce:7f:b5:21:6e:46:b7:4b:f0: 64:99:e2:69:a5:1c:f6:ae:4f:cf:32:0b:8b:71:5f: 54:b0:8a:3d:a4:55:8a:68:33:a4:bc:45:c1:f5:6f: cf:17:ec:31:e8:78:5e:58:de:51:63:df:31:dd:e1: 5b:74:ca:75:59:4a:3d:16:0c:5d:65:5d:36:ad:f3: 3d:19:c6:7b:cb:a2:ca:43:85:ad:9e:ce:50:ab:83: 32:30:69:6f:4b:7e:55:51:79:5d:67:9a:fe:6c:cc: 25:20:bb:2c:5f:29:d4:b3:40:d9:62:6b:92:04:f8: ab:02:8a:98:ca:73:be:cd:c9:d0:61:6b:70:44:c3: d4:84:f9:d0:5c:b2:a6:09:b1:02:1d:06:c4:11:3e: 8a:d6:79:a8:8f:fd:11:2f:63:50:9c:6c:4b:4b:b2: 92:c0:94:27:79:67:85:e7:17:b1:be:82:1e:74:2c: 8a:7b:8f:53:0c:0e:14:74:79:dd:bf:99:8d:1e:1b: 2a:18:bd:73:34:97:5d:ed:f0:5c:0b:ad:36:10:a7: 3d:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:9D:6C:47:6E:83:74:36:53:22:08:15:7F:F5:18:99:67:9C:1C:A5 X509v3 Authority Key Identifier: keyid:BB:93:25:6E:60:7D:42:EB:6E:34:20:DC:C7:13:7F:20:B8:4D:0C:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF3CA/EF4F937CC3A411E797BBF15EC4F9AE02/u5MlbmB9QutuNCDcxxN_ILhNDIo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u5MlbmB9QutuNCDcxxN_ILhNDIo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF3CA/EF4F937CC3A411E797BBF15EC4F9AE02/u5MlbmB9QutuNCDcxxN_ILhNDIo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:86:a1:1e:67:79:aa:af:c7:12:56:92:18:64:19:79:09:dd: e1:99:4f:86:a4:25:d9:ab:3e:bb:4e:cc:7d:96:61:9c:09:b7: 53:7c:8d:47:c3:a1:5c:7a:4a:52:f5:a1:ad:03:f7:b6:46:96: dc:37:03:18:df:01:af:cc:e8:14:64:12:48:da:07:7a:4a:bd: 15:51:74:2a:e2:01:af:5e:a3:ce:e4:1a:a8:0b:f2:e8:43:92: a7:f3:1e:c3:20:28:55:75:21:e5:a7:ef:b4:ee:20:0d:93:13: 80:a8:c1:5a:3a:a4:8b:ef:d9:f1:92:16:52:a6:94:8f:56:be: 9c:1e:04:16:f5:a3:eb:bc:0c:5d:f8:35:d7:50:18:c6:17:14: 15:d1:83:71:d6:5a:59:1e:5a:aa:79:70:ba:79:f4:ec:e5:5d: db:49:e7:3e:05:dc:f2:4d:19:3a:8a:d8:82:27:7e:af:58:ae: 6d:1b:8a:2b:c1:67:17:bf:b9:e6:df:2b:10:fa:47:05:eb:53: 98:3a:2e:65:d3:15:c1:e2:b5:24:3f:02:4b:ca:20:0c:ac:50: dc:57:b8:34:ba:98:96:2b:74:2e:05:c6:0a:8e:e5:e6:f5:70: af:6f:ad:3a:dd:64:eb:00:73:82:16:c0:e0:48:1b:1b:bd:2c: 3f:68:b6:2b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICF74wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REYzQ0ExMTAvBgNVBAUTKEJCOTMyNTZFNjA3RDQyRUI2RTM0MjBEQ0M3MTM3RjIw Qjg0RDBDOEEwHhcNMjUwNDE2MTYzNDI2WhcNMjUwNDIzMTYzNDI2WjAYMRYwFAYD VQQDEw02N2ZmZGMxMi0zNDNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAviXnviN4RfmQdUEnkapF/gOR91wN2/HNlkjONMTgsE1BtoWZvBLw7V9ceera ARnBuSLOf7Uhbka3S/BkmeJppRz2rk/PMguLcV9UsIo9pFWKaDOkvEXB9W/PF+wx 6HheWN5RY98x3eFbdMp1WUo9FgxdZV02rfM9GcZ7y6LKQ4Wtns5Qq4MyMGlvS35V UXldZ5r+bMwlILssXynUs0DZYmuSBPirAoqYynO+zcnQYWtwRMPUhPnQXLKmCbEC HQbEET6K1nmoj/0RL2NQnGxLS7KSwJQneWeF5xexvoIedCyKe49TDA4UdHndv5mN HhsqGL1zNJdd7fBcC602EKc9UwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNGdbEdu g3Q2UyIIFX/1GJlnnBylMB8GA1UdIwQYMBaAFLuTJW5gfULrbjQg3McTfyC4TQyK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjNDQS9FRjRGOTM3Q0Mz QTQxMUU3OTdCQkYxNUVDNEY5QUUwMi91NU1sYm1COVF1dHVOQ0RjeHhOX0lMaE5E SW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3U1TWxibUI5UXV0dU5DRGN4eE5fSUxoTkRJby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RjNDQS9FRjRGOTM3Q0MzQTQxMUU3OTdCQkYxNUVDNEY5QUUwMi91NU1sYm1COVF1 dHVOQ0RjeHhOX0lMaE5ESW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAAhqEeZ3mqr8cSVpIYZBl5Cd3hmU+GpCXZqz67Tsx9lmGcCbdTfI1H w6FcekpS9aGtA/e2RpbcNwMY3wGvzOgUZBJI2gd6Sr0VUXQq4gGvXqPO5BqoC/Lo Q5Kn8x7DIChVdSHlp++07iANkxOAqMFaOqSL79nxkhZSppSPVr6cHgQW9aPrvAxd +DXXUBjGFxQV0YNx1lpZHlqqeXC6efTs5V3bSec+BdzyTRk6itiCJ36vWK5tG4or wWcXv7nm3ysQ+kcF61OYOi5l0xXB4rUkPwJLyiAMrFDcV7g0upiWK3QuBcYKjuXm 9XCvb6063WTrAHOCFsDgSBsbvSw/aLYr -----END CERTIFICATE-----Generated at Fri Apr 18 15:14:27 2025 by rpki-client