$ rpki-client -vvf rpki.apnic.net/member_repository/A91E46B1/F00DF366679711E8A7891C48C4F9AE02/MAeESqoZm6nIjWQEw9_oduHjn8Y.mft File: MAeESqoZm6nIjWQEw9_oduHjn8Y.mft (raw, json) Hash identifier: GeNbNeCy8pfLDyVxQbzBSDrHChNXVKVC2n9acqoORCI= Subject key identifier: D7:B7:8D:CD:49:88:DA:80:29:C2:00:84:CF:F6:57:71:CD:A6:B9:2B Authority key identifier: 30:07:84:4A:AA:19:9B:A9:C8:8D:64:04:C3:DF:E8:76:E1:E3:9F:C6 Certificate issuer: /CN=A91E46B1/serialNumber=3007844AAA199BA9C88D6404C3DFE876E1E39FC6 Certificate serial: 1475 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MAeESqoZm6nIjWQEw9_oduHjn8Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E46B1/F00DF366679711E8A7891C48C4F9AE02/MAeESqoZm6nIjWQEw9_oduHjn8Y.mft Manifest number: 1463 Signing time: Tue 08 Apr 2025 16:56:46 +0000 Manifest this update: Tue 08 Apr 2025 16:56:46 +0000 Manifest next update: Tue 15 Apr 2025 16:56:46 +0000 Files and hashes: 1: MAeESqoZm6nIjWQEw9_oduHjn8Y.crl (hash: Oxr+Sni+Wqkeo6AWXFOHh9aF0U9OcPxBW34QVubDxfk=) 2: D0D94718CB8111E89EDE697DC4F9AE02.roa (hash: 9jViCMxta64fmIo5dm4osOtVC5SSmRZm2YRKWH3IWTM=) 3: 391E6EDE679B11E886728650C4F9AE02.roa (hash: FfJi+Cna0JYZDzk+rBUfl7UT75ngYXqfbGnsFnMhnRc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E46B1/F00DF366679711E8A7891C48C4F9AE02/MAeESqoZm6nIjWQEw9_oduHjn8Y.crl rsync://rpki.apnic.net/member_repository/A91E46B1/F00DF366679711E8A7891C48C4F9AE02/MAeESqoZm6nIjWQEw9_oduHjn8Y.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MAeESqoZm6nIjWQEw9_oduHjn8Y.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 15 Apr 2025 16:56:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5237 (0x1475) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E46B1 Validity Not Before: Apr 8 16:56:46 2025 GMT Not After : Apr 15 16:56:46 2025 GMT Subject: CN=67f5554e-a447 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:a4:20:84:98:8f:9d:ee:e6:b9:8a:3b:5e:6a: 05:86:28:a0:34:2c:73:f6:bd:a7:b6:ca:e6:8f:e4: 58:9a:cf:b0:e8:48:5d:0a:13:e1:79:96:5c:08:ff: 4f:d0:8c:98:85:a4:81:ff:59:6f:3d:c9:28:f6:3b: 00:1b:74:5f:ac:1d:67:d6:64:c3:37:ef:e5:7d:1d: 02:db:d3:12:5d:92:1c:a3:75:43:4d:f5:ee:30:8c: 93:ba:ba:b4:cd:89:ac:6f:49:d3:4e:03:77:ef:de: 8e:e9:77:91:30:23:8a:16:87:45:50:cc:85:0d:ca: bf:9d:7e:80:22:f6:35:74:3f:98:5c:c7:f2:33:ca: 27:03:77:95:ec:76:a1:6b:25:d3:93:a6:dc:30:6f: 8d:02:c4:7a:72:bd:09:d1:88:1f:7d:1b:a7:1b:b7: 90:9e:b3:5e:77:86:39:a1:68:13:4c:f2:3b:b7:28: a2:05:dc:00:4c:17:8b:4a:79:b9:de:b3:11:1f:a8: 2e:7c:bf:c8:87:2d:23:1c:9d:36:b8:22:0d:bc:ec: 21:62:53:97:67:73:e9:3e:2a:08:cd:25:6a:bc:a2: 6f:87:c3:b6:46:45:f1:77:3c:05:c4:29:fe:9a:6e: 54:8d:d9:51:dd:5f:08:18:8c:e9:fa:3a:7f:68:3e: 6e:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:B7:8D:CD:49:88:DA:80:29:C2:00:84:CF:F6:57:71:CD:A6:B9:2B X509v3 Authority Key Identifier: keyid:30:07:84:4A:AA:19:9B:A9:C8:8D:64:04:C3:DF:E8:76:E1:E3:9F:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E46B1/F00DF366679711E8A7891C48C4F9AE02/MAeESqoZm6nIjWQEw9_oduHjn8Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MAeESqoZm6nIjWQEw9_oduHjn8Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E46B1/F00DF366679711E8A7891C48C4F9AE02/MAeESqoZm6nIjWQEw9_oduHjn8Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bb:47:84:c4:9b:df:14:cf:98:3d:a5:fd:0c:b9:13:bd:23:d8: e2:0e:7b:7f:ab:62:53:00:32:fc:3f:38:c3:00:b5:7a:22:43: fb:23:20:82:04:e8:83:e7:a3:60:36:71:21:1c:47:8c:eb:79: 41:0b:2e:bb:97:af:ce:87:a5:7f:52:23:06:fc:e0:a9:cd:36: f2:bc:fa:ed:4e:7a:77:74:95:69:7e:e6:6f:b1:66:a3:9f:b1: 90:ad:87:d6:09:66:a0:61:47:22:78:9c:02:06:73:be:74:3b: ed:c5:79:81:86:07:52:51:f9:48:c5:40:b4:85:53:7c:3b:82: 08:b1:ee:83:83:9c:40:eb:d4:20:21:29:5f:d2:1c:c4:dc:0e: c0:b9:1e:ca:03:16:f5:6d:66:92:30:ee:54:df:2a:8c:5a:b0: e3:a8:a7:2e:fb:23:c7:04:47:20:44:94:19:65:8b:eb:bc:33: 7a:e9:e4:be:77:b3:1d:ea:40:d9:22:e4:14:1a:1c:fb:18:d0: f7:c4:c3:85:9a:b3:37:ea:d1:4a:1c:f3:67:a6:83:65:f6:27: 92:56:80:97:36:95:8c:08:a9:7a:a0:12:01:45:90:92:23:d7: 40:c0:c2:ee:16:66:1d:d0:1d:fe:57:ea:e8:30:8f:cc:bc:75: 8a:f2:d3:9e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFHUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTQ2QjExMTAvBgNVBAUTKDMwMDc4NDRBQUExOTlCQTlDODhENjQwNEMzREZFODc2 RTFFMzlGQzYwHhcNMjUwNDA4MTY1NjQ2WhcNMjUwNDE1MTY1NjQ2WjAYMRYwFAYD VQQDEw02N2Y1NTU0ZS1hNDQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsqQghJiPne7muYo7XmoFhiigNCxz9r2ntsrmj+RYms+w6EhdChPheZZcCP9P 0IyYhaSB/1lvPcko9jsAG3RfrB1n1mTDN+/lfR0C29MSXZIco3VDTfXuMIyTurq0 zYmsb0nTTgN3796O6XeRMCOKFodFUMyFDcq/nX6AIvY1dD+YXMfyM8onA3eV7Hah ayXTk6bcMG+NAsR6cr0J0YgffRunG7eQnrNed4Y5oWgTTPI7tyiiBdwATBeLSnm5 3rMRH6gufL/Ihy0jHJ02uCINvOwhYlOXZ3PpPioIzSVqvKJvh8O2RkXxdzwFxCn+ mm5UjdlR3V8IGIzp+jp/aD5ufwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNe3jc1J iNqAKcIAhM/2V3HNprkrMB8GA1UdIwQYMBaAFDAHhEqqGZupyI1kBMPf6Hbh45/G MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNDZCMS9GMDBERjM2NjY3 OTcxMUU4QTc4OTFDNDhDNEY5QUUwMi9NQWVFU3FvWm02bklqV1FFdzlfb2R1SGpu OFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL01BZUVTcW9abTZuSWpXUUV3OV9vZHVIam44WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NDZCMS9GMDBERjM2NjY3OTcxMUU4QTc4OTFDNDhDNEY5QUUwMi9NQWVFU3FvWm02 bklqV1FFdzlfb2R1SGpuOFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC7R4TEm98Uz5g9pf0MuRO9I9jiDnt/q2JTADL8PzjDALV6IkP7IyCC BOiD56NgNnEhHEeM63lBCy67l6/Oh6V/UiMG/OCpzTbyvPrtTnp3dJVpfuZvsWaj n7GQrYfWCWagYUcieJwCBnO+dDvtxXmBhgdSUflIxUC0hVN8O4IIse6Dg5xA69Qg ISlf0hzE3A7AuR7KAxb1bWaSMO5U3yqMWrDjqKcu+yPHBEcgRJQZZYvrvDN66eS+ d7Md6kDZIuQUGhz7GND3xMOFmrM36tFKHPNnpoNl9ieSVoCXNpWMCKl6oBIBRZCS I9dAwMLuFmYd0B3+V+roMI/MvHWK8tOe -----END CERTIFICATE-----Generated at Fri Apr 11 00:40:13 2025 by rpki-client