$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE735/E8E667CA94BE11EA984FAD58C4F9AE02/rXOtuRQhOGLtjhTXcGn0dNg8yPU.mft File: rXOtuRQhOGLtjhTXcGn0dNg8yPU.mft (raw, json) Hash identifier: mfzeLkuf8J8M5jp+Z8bFwD30mTIzdaeSdoWw0giHj9A= Subject key identifier: D2:BD:4A:22:D9:D6:9A:F4:30:8E:0D:97:D2:25:AE:82:4C:9A:08:B8 Authority key identifier: AD:73:AD:B9:14:21:38:62:ED:8E:14:D7:70:69:F4:74:D8:3C:C8:F5 Certificate issuer: /CN=A91EE735/serialNumber=AD73ADB914213862ED8E14D77069F474D83CC8F5 Certificate serial: 095A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rXOtuRQhOGLtjhTXcGn0dNg8yPU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EE735/E8E667CA94BE11EA984FAD58C4F9AE02/rXOtuRQhOGLtjhTXcGn0dNg8yPU.mft Manifest number: 094D Signing time: Mon 14 Apr 2025 20:05:11 +0000 Manifest this update: Mon 14 Apr 2025 20:05:11 +0000 Manifest next update: Mon 21 Apr 2025 20:05:11 +0000 Files and hashes: 1: rXOtuRQhOGLtjhTXcGn0dNg8yPU.crl (hash: 4NgYqA1vm+xmzztzriLPWuNYAxRQ/ZQ9X3rCs02aapk=) 2: 34E183809E5F11EB97709628C4F9AE02.roa (hash: foE9s6/AQfQ6WPOMFTFBf1eqXxlDCuQ9XLb/49LNi4o=) 3: E7F141609E9911EBB4117632C4F9AE02.roa (hash: bPG+JKz2c8qz67QLcdFAZ1OKHiVMuC03ojwfXNaj3R8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EE735/E8E667CA94BE11EA984FAD58C4F9AE02/rXOtuRQhOGLtjhTXcGn0dNg8yPU.crl rsync://rpki.apnic.net/member_repository/A91EE735/E8E667CA94BE11EA984FAD58C4F9AE02/rXOtuRQhOGLtjhTXcGn0dNg8yPU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rXOtuRQhOGLtjhTXcGn0dNg8yPU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Apr 2025 20:05:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2394 (0x95a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EE735, serialNumber=AD73ADB914213862ED8E14D77069F474D83CC8F5 Validity Not Before: Apr 14 20:05:11 2025 GMT Not After : Apr 21 20:05:11 2025 GMT Subject: CN=67fd6a77-3e5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:92:f0:f5:66:7c:2f:3b:71:07:10:c6:7b:e1: d8:c9:c5:50:43:82:c2:e7:38:52:e9:ff:23:a0:97: f7:d2:0a:bc:cd:f3:af:5b:e5:f1:c2:3f:39:80:92: 3c:74:d2:be:f4:2b:4a:b8:24:56:03:90:d1:47:55: 6c:d9:f4:c5:16:4b:af:54:f4:35:a3:87:3f:36:67: c4:9c:31:6d:68:db:33:9f:2a:1c:25:e6:c2:9a:b3: 65:a7:70:2d:28:03:c6:3a:84:8f:64:26:07:38:3a: 93:2b:ed:2f:10:fd:5f:d1:b8:61:90:04:04:71:70: ee:10:5b:a4:20:bd:d9:a8:ac:3d:7a:29:0c:50:aa: 42:95:41:af:e7:5f:6f:05:bb:14:e0:0b:1d:f5:4c: 34:9c:5e:b3:d8:af:22:d0:f2:8d:18:0c:43:35:72: 4f:f3:5f:32:bd:ac:52:46:bf:88:2d:c0:bb:a3:44: 00:48:12:dd:f3:e2:3b:65:fe:ba:b9:c5:cc:20:13: a6:dc:66:9a:bb:39:68:bf:1d:76:78:87:43:10:3b: 5a:fd:8f:9a:37:1a:f1:f8:3d:02:c3:fb:3d:7e:44: fe:b0:12:90:22:fe:50:6a:fc:da:4e:b5:69:76:75: c6:db:b2:2d:b2:6f:e1:b4:1e:9e:3b:1a:0c:e0:7e: 0e:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:BD:4A:22:D9:D6:9A:F4:30:8E:0D:97:D2:25:AE:82:4C:9A:08:B8 X509v3 Authority Key Identifier: keyid:AD:73:AD:B9:14:21:38:62:ED:8E:14:D7:70:69:F4:74:D8:3C:C8:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EE735/E8E667CA94BE11EA984FAD58C4F9AE02/rXOtuRQhOGLtjhTXcGn0dNg8yPU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rXOtuRQhOGLtjhTXcGn0dNg8yPU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE735/E8E667CA94BE11EA984FAD58C4F9AE02/rXOtuRQhOGLtjhTXcGn0dNg8yPU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:71:67:ee:99:65:e5:0d:8c:11:70:7a:45:8b:89:7b:7a:82: 09:51:6d:c2:c9:19:56:b6:db:9f:9f:87:cf:9d:11:e4:6a:7f: 8f:7a:2a:dc:26:f3:27:91:ce:a1:81:c4:b8:3b:c9:c9:3e:5f: 16:6f:7c:86:e7:4e:8b:27:88:de:19:73:ab:b1:df:25:1b:27: 44:62:eb:2a:35:6b:90:c8:04:f4:2c:99:40:88:90:01:fe:83: 98:fc:f7:9c:6a:2c:a5:f9:da:84:c5:42:2a:52:70:f9:0b:94: 6f:dd:f7:63:b6:23:96:ff:7c:aa:e4:5a:a0:5e:4c:4d:7d:7d: de:8d:c4:8f:9f:99:84:08:93:f9:72:ae:1c:7e:2c:ea:45:d4: 9f:a1:3e:dc:84:18:66:13:1f:62:d6:89:1a:5e:3b:5e:02:3e: 35:0a:97:4b:14:5d:d1:69:62:08:1a:d2:c7:41:7e:f3:33:5a: c4:92:51:c6:39:cf:4a:c8:88:a7:55:5d:04:9a:97:f0:e1:b9: bd:4a:af:f6:4a:12:ca:14:5c:1a:0f:0d:61:07:1d:ce:df:03: d1:52:aa:7f:63:2e:7d:80:85:57:4c:26:56:9d:1e:dd:8c:34: 91:d5:f4:c5:c9:73:58:d3:9d:cf:ce:ba:ae:aa:9f:ca:c1:8a: ea:18:06:4f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCVowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUU3MzUxMTAvBgNVBAUTKEFENzNBREI5MTQyMTM4NjJFRDhFMTRENzcwNjlGNDc0 RDgzQ0M4RjUwHhcNMjUwNDE0MjAwNTExWhcNMjUwNDIxMjAwNTExWjAYMRYwFAYD VQQDEw02N2ZkNmE3Ny0zZTViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA15Lw9WZ8LztxBxDGe+HYycVQQ4LC5zhS6f8joJf30gq8zfOvW+Xxwj85gJI8 dNK+9CtKuCRWA5DRR1Vs2fTFFkuvVPQ1o4c/NmfEnDFtaNsznyocJebCmrNlp3At KAPGOoSPZCYHODqTK+0vEP1f0bhhkAQEcXDuEFukIL3ZqKw9eikMUKpClUGv519v BbsU4Asd9Uw0nF6z2K8i0PKNGAxDNXJP818yvaxSRr+ILcC7o0QASBLd8+I7Zf66 ucXMIBOm3Gaauzlovx12eIdDEDta/Y+aNxrx+D0Cw/s9fkT+sBKQIv5QavzaTrVp dnXG27Itsm/htB6eOxoM4H4OCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNK9SiLZ 1pr0MI4Nl9IlroJMmgi4MB8GA1UdIwQYMBaAFK1zrbkUIThi7Y4U13Bp9HTYPMj1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRTczNS9FOEU2NjdDQTk0 QkUxMUVBOTg0RkFENThDNEY5QUUwMi9yWE90dVJRaE9HTHRqaFRYY0duMGROZzh5 UFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JYT3R1UlFoT0dMdGpoVFhjR24wZE5nOHlQVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RTczNS9FOEU2NjdDQTk0QkUxMUVBOTg0RkFENThDNEY5QUUwMi9yWE90dVJRaE9H THRqaFRYY0duMGROZzh5UFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBtcWfumWXlDYwRcHpFi4l7eoIJUW3CyRlWttufn4fPnRHkan+Peirc JvMnkc6hgcS4O8nJPl8Wb3yG506LJ4jeGXOrsd8lGydEYusqNWuQyAT0LJlAiJAB /oOY/Pecaiyl+dqExUIqUnD5C5Rv3fdjtiOW/3yq5FqgXkxNfX3ejcSPn5mECJP5 cq4cfizqRdSfoT7chBhmEx9i1okaXjteAj41CpdLFF3RaWIIGtLHQX7zM1rEklHG Oc9KyIinVV0Empfw4bm9Sq/2ShLKFFwaDw1hBx3O3wPRUqp/Yy59gIVXTCZWnR7d jDSR1fTFyXNY053Pzrquqp/KwYrqGAZP -----END CERTIFICATE-----Generated at Tue Apr 15 18:08:42 2025 by rpki-client