$ rpki-client -vvf rpki.apnic.net/member_repository/A91447E7/FE4469D2130111EDADCE5C7DC4F9AE02/53uHFGgF4mBLSe7ytKQ4y9KlFCQ.mft File: 53uHFGgF4mBLSe7ytKQ4y9KlFCQ.mft (raw, json) Hash identifier: OwxYCavFFHz4irgaVw841Zer0wZw1ya1C6hNL5caOLw= Subject key identifier: E9:D3:3E:87:DE:0A:4F:41:06:D2:8F:E5:90:EC:D9:F6:20:48:B9:87 Authority key identifier: E7:7B:87:14:68:05:E2:60:4B:49:EE:F2:B4:A4:38:CB:D2:A5:14:24 Certificate issuer: /CN=A91447E7/serialNumber=E77B87146805E2604B49EEF2B4A438CBD2A51424 Certificate serial: 028C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/53uHFGgF4mBLSe7ytKQ4y9KlFCQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91447E7/FE4469D2130111EDADCE5C7DC4F9AE02/53uHFGgF4mBLSe7ytKQ4y9KlFCQ.mft Manifest number: 027C Signing time: Sat 31 May 2025 01:56:17 +0000 Manifest this update: Sat 31 May 2025 01:56:17 +0000 Manifest next update: Sat 07 Jun 2025 01:56:17 +0000 Files and hashes: 1: 53uHFGgF4mBLSe7ytKQ4y9KlFCQ.crl (hash: fqxkG9JjXijG1n3Z4kr3FO2FuF2iziOZVzCAKr82zwY=) 2: 60A2CF98817811EE9E9A211DC4F9AE02.roa (hash: OBulHvX2B6jsIGrCSAsyqZYvuyIkHgMKG5wNVNk2ul8=) 3: 195EA596AC8711EEAC4B2427C4F9AE02.roa (hash: hhO5y4e/DFpdPdaj49uvYHcFr1O6lkR5HUgMp+6rOns=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91447E7/FE4469D2130111EDADCE5C7DC4F9AE02/53uHFGgF4mBLSe7ytKQ4y9KlFCQ.crl rsync://rpki.apnic.net/member_repository/A91447E7/FE4469D2130111EDADCE5C7DC4F9AE02/53uHFGgF4mBLSe7ytKQ4y9KlFCQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/53uHFGgF4mBLSe7ytKQ4y9KlFCQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 01:56:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 652 (0x28c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91447E7, serialNumber=E77B87146805E2604B49EEF2B4A438CBD2A51424 Validity Not Before: May 31 01:56:17 2025 GMT Not After : Jun 7 01:56:17 2025 GMT Subject: CN=683a61c1-6047 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:da:0a:d7:82:00:ef:e1:87:fb:ab:9c:53:d7: 8b:3f:65:5d:cc:d1:ac:66:dc:16:f8:76:f3:52:48: 89:7a:c7:44:86:55:e6:a5:52:c9:9e:b6:b6:db:94: 3c:1c:2c:6b:e8:6b:14:6e:8e:fe:31:6b:28:30:ea: a6:dc:62:83:ed:7c:82:86:60:d1:5d:86:fd:a7:d9: 3d:f4:bd:55:8e:e6:8c:03:34:43:c5:33:2b:92:c1: 3d:d9:5a:47:02:7c:dc:4a:73:4b:9f:58:a1:bd:74: 29:56:68:4f:05:0a:fd:01:30:6e:04:c4:5c:94:c4: 70:17:6b:a7:79:a2:63:d8:13:80:c5:26:20:88:0c: 6b:c5:c9:17:f9:38:a2:76:a9:d4:c1:da:48:1e:79: 30:2f:4e:39:1b:f6:6e:7d:37:1b:e2:0e:10:3f:d1: d8:c4:bb:8f:59:ea:3f:c1:89:9f:66:2a:48:2c:0d: 3d:1b:f6:1f:89:d3:cb:e9:8f:a2:64:3b:57:7b:7a: 9d:08:9a:4d:c5:c6:b0:b6:ac:8f:94:78:33:e1:b8: 34:f1:01:f2:e9:81:fb:16:01:cf:f4:64:08:40:12: 82:45:d2:6d:df:db:21:4d:04:36:1b:b4:c6:2e:bf: 42:4a:e0:c4:17:9f:74:61:41:44:8c:c4:da:9e:e0: 3b:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:D3:3E:87:DE:0A:4F:41:06:D2:8F:E5:90:EC:D9:F6:20:48:B9:87 X509v3 Authority Key Identifier: keyid:E7:7B:87:14:68:05:E2:60:4B:49:EE:F2:B4:A4:38:CB:D2:A5:14:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91447E7/FE4469D2130111EDADCE5C7DC4F9AE02/53uHFGgF4mBLSe7ytKQ4y9KlFCQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/53uHFGgF4mBLSe7ytKQ4y9KlFCQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91447E7/FE4469D2130111EDADCE5C7DC4F9AE02/53uHFGgF4mBLSe7ytKQ4y9KlFCQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:5d:66:8f:f0:b8:22:82:a0:a6:84:1f:1a:f5:3f:16:43:0c: 22:15:ae:53:12:65:61:f3:e7:21:1c:53:f7:15:0a:d9:9a:49: fb:be:83:4e:90:67:e7:47:fb:08:12:a6:14:c3:7f:73:d0:64: 47:5c:bb:fe:77:fd:24:85:65:06:11:1b:5b:ad:a0:56:c0:b4: f0:ff:c7:c7:e7:59:46:50:11:4d:6d:e1:9e:b5:39:ae:4b:cc: 43:ab:eb:6c:a1:47:4e:c6:3d:88:82:3a:5c:5f:33:44:46:20: da:ed:af:83:94:95:e7:22:f6:33:23:f5:5a:c0:1e:b9:e8:cd: 42:77:c9:14:75:a9:5a:68:6e:85:84:e7:19:8c:ad:92:b8:d3: e5:d4:de:ed:99:54:5d:1f:0c:a3:d4:b9:01:8a:5f:69:bd:e6: 51:33:f1:b5:25:4f:d6:fe:75:21:cc:1b:c5:71:e9:c1:46:80: 3e:58:98:c8:b2:88:c3:c5:4f:03:3a:b9:8e:9d:0c:81:20:84: 7c:78:45:d5:8c:67:04:62:2b:3d:34:73:32:e2:0f:47:26:b3: 9d:cf:42:6f:8e:60:83:0c:ba:61:1f:05:93:bd:09:7e:ef:23: db:52:2d:5b:1b:8f:11:09:3c:ef:7b:1a:6b:0d:94:a2:19:a3: 0c:8a:b5:e2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAowwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDQ3RTcxMTAvBgNVBAUTKEU3N0I4NzE0NjgwNUUyNjA0QjQ5RUVGMkI0QTQzOENC RDJBNTE0MjQwHhcNMjUwNTMxMDE1NjE3WhcNMjUwNjA3MDE1NjE3WjAYMRYwFAYD VQQDEw02ODNhNjFjMS02MDQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA49oK14IA7+GH+6ucU9eLP2VdzNGsZtwW+HbzUkiJesdEhlXmpVLJnra225Q8 HCxr6GsUbo7+MWsoMOqm3GKD7XyChmDRXYb9p9k99L1VjuaMAzRDxTMrksE92VpH AnzcSnNLn1ihvXQpVmhPBQr9ATBuBMRclMRwF2uneaJj2BOAxSYgiAxrxckX+Tii dqnUwdpIHnkwL045G/ZufTcb4g4QP9HYxLuPWeo/wYmfZipILA09G/YfidPL6Y+i ZDtXe3qdCJpNxcawtqyPlHgz4bg08QHy6YH7FgHP9GQIQBKCRdJt39shTQQ2G7TG Lr9CSuDEF590YUFEjMTanuA75QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOnTPofe Ck9BBtKP5ZDs2fYgSLmHMB8GA1UdIwQYMBaAFOd7hxRoBeJgS0nu8rSkOMvSpRQk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDdFNy9GRTQ0NjlEMjEz MDExMUVEQURDRTVDN0RDNEY5QUUwMi81M3VIRkdnRjRtQkxTZTd5dEtRNHk5S2xG Q1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzUzdUhGR2dGNG1CTFNlN3l0S1E0eTlLbEZDUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NDdFNy9GRTQ0NjlEMjEzMDExMUVEQURDRTVDN0RDNEY5QUUwMi81M3VIRkdnRjRt QkxTZTd5dEtRNHk5S2xGQ1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBWXWaP8LgigqCmhB8a9T8WQwwiFa5TEmVh8+chHFP3FQrZmkn7voNO kGfnR/sIEqYUw39z0GRHXLv+d/0khWUGERtbraBWwLTw/8fH51lGUBFNbeGetTmu S8xDq+tsoUdOxj2IgjpcXzNERiDa7a+DlJXnIvYzI/VawB656M1Cd8kUdalaaG6F hOcZjK2SuNPl1N7tmVRdHwyj1LkBil9pveZRM/G1JU/W/nUhzBvFcenBRoA+WJjI sojDxU8DOrmOnQyBIIR8eEXVjGcEYis9NHMy4g9HJrOdz0JvjmCDDLphHwWTvQl+ 7yPbUi1bG48RCTzvexprDZSiGaMMirXi -----END CERTIFICATE-----Generated at Sat May 31 17:04:49 2025 by rpki-client