$ rpki-client -vvf rpki.apnic.net/member_repository/A91E57C9/9C6EF74EF9D511ECB6DCAD54C4F9AE02/mlTRAXUBnPgIazCzHmUq4GAv9rw.mft File: mlTRAXUBnPgIazCzHmUq4GAv9rw.mft (raw, json) Hash identifier: dybK5JnefeGQhidHuAJMy2k66zP71bGDi+Rz3BIrRHg= Subject key identifier: D9:07:91:5E:14:0E:54:19:31:69:9A:0B:9A:CF:2A:CA:51:77:0C:E0 Authority key identifier: 9A:54:D1:01:75:01:9C:F8:08:6B:30:B3:1E:65:2A:E0:60:2F:F6:BC Certificate issuer: /CN=A91E57C9/serialNumber=9A54D10175019CF8086B30B31E652AE0602FF6BC Certificate serial: 0293 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mlTRAXUBnPgIazCzHmUq4GAv9rw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E57C9/9C6EF74EF9D511ECB6DCAD54C4F9AE02/mlTRAXUBnPgIazCzHmUq4GAv9rw.mft Manifest number: 028D Signing time: Sat 05 Apr 2025 01:42:43 +0000 Manifest this update: Sat 05 Apr 2025 01:42:42 +0000 Manifest next update: Sat 12 Apr 2025 01:42:42 +0000 Files and hashes: 1: mlTRAXUBnPgIazCzHmUq4GAv9rw.crl (hash: B96+0LibqHqAKaHa/H8dQJr2ekAqtzEBqymn8+2OYek=) 2: 2AEC4C4EF9D911ECBC381559C4F9AE02.roa (hash: vfdbKyJ3mviRT1GnKxYZo1xv2FhpXFvdbF0/IM2Mc1w=) 3: 2B658C44F9D911ECBC381559C4F9AE02.roa (hash: qqSsVUySdeF/mPXA1H2/Nb+W0uFPMOk9qHP5kfHhs6E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E57C9/9C6EF74EF9D511ECB6DCAD54C4F9AE02/mlTRAXUBnPgIazCzHmUq4GAv9rw.crl rsync://rpki.apnic.net/member_repository/A91E57C9/9C6EF74EF9D511ECB6DCAD54C4F9AE02/mlTRAXUBnPgIazCzHmUq4GAv9rw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mlTRAXUBnPgIazCzHmUq4GAv9rw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 01:42:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 659 (0x293) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E57C9 Validity Not Before: Apr 5 01:42:42 2025 GMT Not After : Apr 12 01:42:42 2025 GMT Subject: CN=67f08a93-6da8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:2b:80:33:3b:82:ae:f3:c2:09:76:33:e5:fb: 49:8e:3f:33:e9:35:8f:64:9b:ed:86:0b:c8:8b:67: 78:8c:f6:ec:22:81:2b:17:70:92:1e:6f:e4:62:84: 37:3f:c5:77:30:03:cb:9a:3d:c4:1d:b7:a0:c6:90: 46:a1:75:bc:15:e1:25:15:e5:6b:56:dd:02:93:85: 8f:f0:3d:4b:6d:20:3c:4f:62:01:ba:c8:b3:d3:c0: bc:9b:29:58:a4:e0:00:ef:2a:7f:aa:22:05:35:58: da:b1:7d:81:72:75:4f:97:8c:74:18:c5:12:a7:c8: d9:13:11:0d:52:f9:71:ff:13:20:92:bf:93:6e:ad: 26:9a:39:92:68:29:ae:28:33:28:08:16:b8:16:0e: f0:f7:7b:c7:ec:85:da:db:b1:48:a4:84:9c:1b:39: 80:76:f2:e6:1e:06:11:f5:de:da:6a:9d:5a:6f:ca: db:c8:8c:58:13:f1:6e:b9:d8:66:6c:f0:18:24:6e: 84:29:be:61:c4:59:30:8e:0d:84:88:10:25:fe:1c: 3c:f7:bb:b4:da:51:25:49:65:d2:41:e6:16:2d:95: 3c:ba:12:2f:15:ee:bb:4d:1d:22:48:92:9f:0c:8b: 26:0d:99:cc:72:89:1b:7b:94:5f:54:67:0f:2d:f5: 89:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:07:91:5E:14:0E:54:19:31:69:9A:0B:9A:CF:2A:CA:51:77:0C:E0 X509v3 Authority Key Identifier: keyid:9A:54:D1:01:75:01:9C:F8:08:6B:30:B3:1E:65:2A:E0:60:2F:F6:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E57C9/9C6EF74EF9D511ECB6DCAD54C4F9AE02/mlTRAXUBnPgIazCzHmUq4GAv9rw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mlTRAXUBnPgIazCzHmUq4GAv9rw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E57C9/9C6EF74EF9D511ECB6DCAD54C4F9AE02/mlTRAXUBnPgIazCzHmUq4GAv9rw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:40:fa:c5:d0:5c:81:9b:6b:d8:fc:6b:9e:75:de:0f:83:dc: 09:55:07:a3:7b:6f:06:35:6e:41:35:0d:41:bc:48:01:a9:16: 30:67:e8:2c:4b:24:6b:87:c6:1c:40:58:7e:49:ea:77:b7:33: 92:3e:33:03:a7:e2:bc:ed:03:a4:cf:3c:fb:4c:2c:cf:94:10: 23:41:68:a3:df:0e:06:b6:58:04:2d:2a:52:8e:e7:7d:93:e1: 43:56:d0:59:dc:80:18:49:96:07:e5:8d:b2:51:c6:27:b9:6e: 91:9d:50:a3:e4:f9:c9:47:2e:d2:b5:d6:e8:ff:a5:cb:8a:8c: b0:47:16:bc:f7:8d:81:ee:69:4c:25:da:dc:31:90:3d:43:90: e3:21:98:9d:83:a0:01:eb:49:8b:79:93:6a:fc:cd:76:f9:00: 8e:d3:9d:c6:b8:88:f9:99:ac:20:ed:b7:ca:05:83:d6:6f:9e: 5a:dc:05:40:17:5f:8e:7f:12:05:95:78:e4:ed:e6:2c:c1:c6: 95:c8:41:f3:51:ba:88:d1:8b:d6:59:fd:8d:66:4c:34:f7:f1: fb:72:c0:fe:6d:1f:46:c2:f9:20:95:82:c4:ff:d8:99:4e:90: 31:de:a5:f6:f8:5e:07:d5:ab:db:75:ef:2a:ed:30:f7:d4:70: df:15:ce:53 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICApMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTU3QzkxMTAvBgNVBAUTKDlBNTREMTAxNzUwMTlDRjgwODZCMzBCMzFFNjUyQUUw NjAyRkY2QkMwHhcNMjUwNDA1MDE0MjQyWhcNMjUwNDEyMDE0MjQyWjAYMRYwFAYD VQQDEw02N2YwOGE5My02ZGE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtSuAMzuCrvPCCXYz5ftJjj8z6TWPZJvthgvIi2d4jPbsIoErF3CSHm/kYoQ3 P8V3MAPLmj3EHbegxpBGoXW8FeElFeVrVt0Ck4WP8D1LbSA8T2IBusiz08C8mylY pOAA7yp/qiIFNVjasX2BcnVPl4x0GMUSp8jZExENUvlx/xMgkr+Tbq0mmjmSaCmu KDMoCBa4Fg7w93vH7IXa27FIpIScGzmAdvLmHgYR9d7aap1ab8rbyIxYE/Fuudhm bPAYJG6EKb5hxFkwjg2EiBAl/hw897u02lElSWXSQeYWLZU8uhIvFe67TR0iSJKf DIsmDZnMcokbe5RfVGcPLfWJdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNkHkV4U DlQZMWmaC5rPKspRdwzgMB8GA1UdIwQYMBaAFJpU0QF1AZz4CGswsx5lKuBgL/a8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTdDOS85QzZFRjc0RUY5 RDUxMUVDQjZEQ0FENTRDNEY5QUUwMi9tbFRSQVhVQm5QZ0lhekN6SG1VcTRHQXY5 cncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21sVFJBWFVCblBnSWF6Q3pIbVVxNEdBdjlydy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NTdDOS85QzZFRjc0RUY5RDUxMUVDQjZEQ0FENTRDNEY5QUUwMi9tbFRSQVhVQm5Q Z0lhekN6SG1VcTRHQXY5cncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBHQPrF0FyBm2vY/Guedd4Pg9wJVQeje28GNW5BNQ1BvEgBqRYwZ+gs SyRrh8YcQFh+Sep3tzOSPjMDp+K87QOkzzz7TCzPlBAjQWij3w4GtlgELSpSjud9 k+FDVtBZ3IAYSZYH5Y2yUcYnuW6RnVCj5PnJRy7Stdbo/6XLioywRxa8942B7mlM JdrcMZA9Q5DjIZidg6AB60mLeZNq/M12+QCO053GuIj5mawg7bfKBYPWb55a3AVA F1+OfxIFlXjk7eYswcaVyEHzUbqI0YvWWf2NZkw09/H7csD+bR9GwvkglYLE/9iZ TpAx3qX2+F4H1avbde8q7TD31HDfFc5T -----END CERTIFICATE-----Generated at Sat Apr 5 21:58:59 2025 by rpki-client