$ rpki-client -vvf rpki.apnic.net/member_repository/A91743EF/E6ABB010BA4011E7A08D266FC4F9AE02/0dZcikMk4of26pFbOfXTYC0eN6Y.mft File: 0dZcikMk4of26pFbOfXTYC0eN6Y.mft (raw, json) Hash identifier: oWXEqtg86fmvztS2jwaW24+FqBFLtXjcH5Wk5cHY5mg= Subject key identifier: C5:B6:45:BD:65:6C:41:F1:02:E3:DB:F4:01:36:FB:A4:9B:05:BF:60 Authority key identifier: D1:D6:5C:8A:43:24:E2:87:F6:EA:91:5B:39:F5:D3:60:2D:1E:37:A6 Certificate issuer: /CN=A91743EF/serialNumber=D1D65C8A4324E287F6EA915B39F5D3602D1E37A6 Certificate serial: 1812 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0dZcikMk4of26pFbOfXTYC0eN6Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91743EF/E6ABB010BA4011E7A08D266FC4F9AE02/0dZcikMk4of26pFbOfXTYC0eN6Y.mft Manifest number: 1800 Signing time: Fri 30 May 2025 16:48:01 +0000 Manifest this update: Fri 30 May 2025 16:48:01 +0000 Manifest next update: Fri 06 Jun 2025 16:48:01 +0000 Files and hashes: 1: 0dZcikMk4of26pFbOfXTYC0eN6Y.crl (hash: j4Xs7+nmGAI3RKSfw60hYKDXDQ2EVZRGjBUN6zI9Yrg=) 2: 8B2EE9667A0911EE934F1262C4F9AE02.roa (hash: c58kYquiR7PhXwHG1m2k+88ex1+jC31dtd+q7AHBr2g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91743EF/E6ABB010BA4011E7A08D266FC4F9AE02/0dZcikMk4of26pFbOfXTYC0eN6Y.crl rsync://rpki.apnic.net/member_repository/A91743EF/E6ABB010BA4011E7A08D266FC4F9AE02/0dZcikMk4of26pFbOfXTYC0eN6Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0dZcikMk4of26pFbOfXTYC0eN6Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 16:48:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6162 (0x1812) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91743EF, serialNumber=D1D65C8A4324E287F6EA915B39F5D3602D1E37A6 Validity Not Before: May 30 16:48:01 2025 GMT Not After : Jun 6 16:48:01 2025 GMT Subject: CN=6839e141-84a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:7f:eb:6f:fe:b0:7e:79:2b:a6:00:7a:e6:7d: bb:c7:d0:b6:74:27:c3:f7:5c:17:9f:29:79:23:ae: eb:24:07:2d:00:ff:27:5e:7f:df:8b:02:44:a2:c7: 3b:6b:ac:dd:dd:f8:79:a1:f1:75:55:09:d8:87:32: a4:87:3d:29:74:63:7f:70:18:9e:94:f3:9b:66:19: ba:0a:75:cb:b5:9a:72:ff:43:f3:ed:89:dc:74:3c: b8:3f:6c:3e:06:59:7f:6b:a7:28:09:20:15:8f:cc: dc:97:e5:b8:c0:c4:df:93:52:11:db:f5:30:63:de: 4c:d7:e4:ac:8e:34:be:db:bb:bf:ce:84:d7:e4:37: f3:b9:a6:7e:8f:e7:6d:4f:3c:20:e0:f8:df:2b:76: a6:2d:5a:40:c4:21:cd:2f:9a:d0:3a:98:38:c0:58: e5:01:33:e7:cc:c3:4d:e2:51:e3:e4:d8:c7:7c:5c: 44:dc:c6:1e:6a:7f:71:cb:c3:c7:37:3c:b0:d9:fb: f0:37:ed:47:1a:5e:39:aa:0c:6b:5d:5a:95:ac:66: cd:ce:eb:e7:22:7c:57:36:fe:4a:0c:34:6e:38:7b: fe:57:03:92:9d:c5:4c:24:e7:52:40:75:7d:34:94: e4:7a:49:22:61:26:ba:6b:f9:91:ce:83:a5:5b:a7: da:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:B6:45:BD:65:6C:41:F1:02:E3:DB:F4:01:36:FB:A4:9B:05:BF:60 X509v3 Authority Key Identifier: keyid:D1:D6:5C:8A:43:24:E2:87:F6:EA:91:5B:39:F5:D3:60:2D:1E:37:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91743EF/E6ABB010BA4011E7A08D266FC4F9AE02/0dZcikMk4of26pFbOfXTYC0eN6Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0dZcikMk4of26pFbOfXTYC0eN6Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91743EF/E6ABB010BA4011E7A08D266FC4F9AE02/0dZcikMk4of26pFbOfXTYC0eN6Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:22:8d:40:60:d0:0d:d4:1e:da:78:40:ba:be:f4:05:7a:a8: 56:d7:e7:d7:ca:5f:32:29:72:71:3f:45:48:4a:dc:a9:ff:97: 2b:ef:6b:99:96:0a:13:d1:84:a9:60:96:66:f3:ef:0e:53:00: cf:9f:df:f0:18:cf:e9:88:b6:1c:ed:91:35:24:f4:8a:dd:b7: 8f:81:b5:28:5a:4f:af:aa:c0:3a:bb:fc:3b:ea:8f:89:e2:e5: 67:a1:d6:1b:0a:3b:d8:33:5b:4b:cb:7f:e1:b0:67:82:b3:be: c5:4a:3d:98:45:58:13:82:c7:e4:a5:3f:8c:d6:02:45:88:41: f1:79:60:fd:70:a9:56:a6:82:2f:54:a3:e7:3b:37:b0:46:c2: ab:ed:ce:db:6c:30:46:ad:60:9f:e9:b2:7f:17:87:14:d0:a2: e9:c6:5d:d9:ca:f9:d3:8b:d4:e4:7e:12:e0:97:81:04:33:d0: 95:5c:0f:22:b7:45:25:fb:f6:63:07:4a:b5:13:8c:f4:d2:b7: bc:a2:d5:1a:fc:a3:58:21:be:24:b3:3c:0c:87:9a:85:95:ff: a4:32:2e:43:40:97:30:e6:1b:57:12:40:d4:26:39:5b:25:45: d8:8e:8c:37:e2:53:ff:a9:b4:fb:37:54:1e:a0:20:3c:69:bb: 09:a7:bf:38 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGBIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzQzRUYxMTAvBgNVBAUTKEQxRDY1QzhBNDMyNEUyODdGNkVBOTE1QjM5RjVEMzYw MkQxRTM3QTYwHhcNMjUwNTMwMTY0ODAxWhcNMjUwNjA2MTY0ODAxWjAYMRYwFAYD VQQDEw02ODM5ZTE0MS04NGE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0X/rb/6wfnkrpgB65n27x9C2dCfD91wXnyl5I67rJActAP8nXn/fiwJEosc7 a6zd3fh5ofF1VQnYhzKkhz0pdGN/cBielPObZhm6CnXLtZpy/0Pz7YncdDy4P2w+ Bll/a6coCSAVj8zcl+W4wMTfk1IR2/UwY95M1+SsjjS+27u/zoTX5DfzuaZ+j+dt Tzwg4PjfK3amLVpAxCHNL5rQOpg4wFjlATPnzMNN4lHj5NjHfFxE3MYean9xy8PH Nzyw2fvwN+1HGl45qgxrXVqVrGbNzuvnInxXNv5KDDRuOHv+VwOSncVMJOdSQHV9 NJTkekkiYSa6a/mRzoOlW6fauQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMW2Rb1l bEHxAuPb9AE2+6SbBb9gMB8GA1UdIwQYMBaAFNHWXIpDJOKH9uqRWzn102AtHjem MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NDNFRi9FNkFCQjAxMEJB NDAxMUU3QTA4RDI2NkZDNEY5QUUwMi8wZFpjaWtNazRvZjI2cEZiT2ZYVFlDMGVO NlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBkWmNpa01rNG9mMjZwRmJPZlhUWUMwZU42WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NDNFRi9FNkFCQjAxMEJBNDAxMUU3QTA4RDI2NkZDNEY5QUUwMi8wZFpjaWtNazRv ZjI2cEZiT2ZYVFlDMGVONlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCjIo1AYNAN1B7aeEC6vvQFeqhW1+fXyl8yKXJxP0VIStyp/5cr72uZ lgoT0YSpYJZm8+8OUwDPn9/wGM/piLYc7ZE1JPSK3bePgbUoWk+vqsA6u/w76o+J 4uVnodYbCjvYM1tLy3/hsGeCs77FSj2YRVgTgsfkpT+M1gJFiEHxeWD9cKlWpoIv VKPnOzewRsKr7c7bbDBGrWCf6bJ/F4cU0KLpxl3ZyvnTi9TkfhLgl4EEM9CVXA8i t0Ul+/ZjB0q1E4z00re8otUa/KNYIb4kszwMh5qFlf+kMi5DQJcw5htXEkDUJjlb JUXYjow34lP/qbT7N1QeoCA8absJp784 -----END CERTIFICATE-----Generated at Sat May 31 14:39:51 2025 by rpki-client