$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0848/64D8B1DE77E411ED97F5934DC4F9AE02/AkIpyBrDU1oh1g4twyqbiL1q2B8.mft File: AkIpyBrDU1oh1g4twyqbiL1q2B8.mft (raw, json) Hash identifier: yn8BNSO/B8I5tDBI/eTwCrgj4aFiKuSJRPf1Tlz7uXU= Subject key identifier: A8:8C:F1:79:4C:43:5D:FE:B7:CF:BF:AA:E4:AE:F8:81:B3:6E:DD:51 Authority key identifier: 02:42:29:C8:1A:C3:53:5A:21:D6:0E:2D:C3:2A:9B:88:BD:6A:D8:1F Certificate issuer: /CN=A91A0848/serialNumber=024229C81AC3535A21D60E2DC32A9B88BD6AD81F Certificate serial: 01EE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AkIpyBrDU1oh1g4twyqbiL1q2B8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A0848/64D8B1DE77E411ED97F5934DC4F9AE02/AkIpyBrDU1oh1g4twyqbiL1q2B8.mft Manifest number: 01DB Signing time: Sat 31 May 2025 02:36:14 +0000 Manifest this update: Sat 31 May 2025 02:36:13 +0000 Manifest next update: Sat 07 Jun 2025 02:36:13 +0000 Files and hashes: 1: AkIpyBrDU1oh1g4twyqbiL1q2B8.crl (hash: o5XejI4nYxns3vGZc9/PCQnVH9vjVL+zo68IOfo8MGI=) 2: 0FBB769A5DDB11EEAEEA437DC4F9AE02.roa (hash: uKjzis/CrgsSg2LUM/lsbZTCdaGZHhh4O1b0+pc2P3M=) 3: B9D00D3C195A11EE83248835C4F9AE02.roa (hash: wCL8taH4LIUOWXKWcvReDaNZ3+NnYlOsUT+x4rsuWPo=) 4: DE56B490143611EEAB1A5D73C4F9AE02.roa (hash: 3IVp9MXxKURZzAWVcJ2+aQ10UWSD+/QnsDWHqJYEcQI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A0848/64D8B1DE77E411ED97F5934DC4F9AE02/AkIpyBrDU1oh1g4twyqbiL1q2B8.crl rsync://rpki.apnic.net/member_repository/A91A0848/64D8B1DE77E411ED97F5934DC4F9AE02/AkIpyBrDU1oh1g4twyqbiL1q2B8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AkIpyBrDU1oh1g4twyqbiL1q2B8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 02:36:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 494 (0x1ee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A0848, serialNumber=024229C81AC3535A21D60E2DC32A9B88BD6AD81F Validity Not Before: May 31 02:36:13 2025 GMT Not After : Jun 7 02:36:13 2025 GMT Subject: CN=683a6b1e-4a3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:10:37:1e:d4:a4:a3:e5:53:79:15:a5:c4:e4: 42:eb:5b:d9:52:d2:8b:58:0c:dc:10:bf:10:b4:b6: 29:56:df:52:52:b4:9d:7f:6c:4c:7a:dd:64:f2:37: d8:41:42:6f:de:cb:77:2e:9f:9c:e2:2f:0f:d6:82: d5:35:cc:cf:63:bf:16:0b:38:c5:eb:26:9d:eb:04: 34:1a:e4:d4:91:c3:0f:4d:be:ef:45:5f:5b:95:59: a9:a3:be:d0:69:2f:5a:dc:5d:c6:70:2a:6c:1b:b2: cd:05:d8:ee:00:37:03:1d:b3:3b:87:78:5d:c1:c0: a1:14:f0:69:9e:39:24:3e:4c:45:a9:d1:0b:e0:85: d2:58:85:9e:a5:19:72:27:71:1c:6e:2d:dd:3d:e8: 75:60:2d:06:d7:86:ad:4c:1c:b9:01:68:67:cc:f8: 86:08:55:50:8b:d0:35:35:a1:a0:5f:1c:a6:a8:d3: e3:51:34:e1:47:90:a3:10:86:fd:97:79:f1:a7:fb: fa:ce:f2:4b:b9:c7:c2:ed:4a:17:29:13:7d:2f:8c: cc:8c:44:74:70:56:22:97:e9:61:09:29:c4:10:d0: f0:99:e5:70:55:64:f8:c6:c8:c5:b4:b1:28:03:73: 36:bc:ce:12:d1:25:ae:73:d2:a9:bb:dd:bf:c6:8f: 08:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:8C:F1:79:4C:43:5D:FE:B7:CF:BF:AA:E4:AE:F8:81:B3:6E:DD:51 X509v3 Authority Key Identifier: keyid:02:42:29:C8:1A:C3:53:5A:21:D6:0E:2D:C3:2A:9B:88:BD:6A:D8:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A0848/64D8B1DE77E411ED97F5934DC4F9AE02/AkIpyBrDU1oh1g4twyqbiL1q2B8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AkIpyBrDU1oh1g4twyqbiL1q2B8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0848/64D8B1DE77E411ED97F5934DC4F9AE02/AkIpyBrDU1oh1g4twyqbiL1q2B8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:d8:ef:ec:b6:4e:b2:69:1f:51:90:72:21:10:1a:1f:d0:8f: ac:82:f7:31:a8:71:72:59:c7:a5:d9:8d:3c:3c:93:14:07:b9: 9f:35:cc:cf:5a:b4:37:ec:ad:73:cb:a7:44:9f:4b:19:c8:5b: 17:f2:1e:a0:d6:15:ed:33:c9:02:a3:4e:b2:8c:5e:d3:36:48: 3b:e6:e5:e5:1c:c8:16:63:53:94:b4:8f:e8:96:13:25:a5:20: 7a:64:a4:c8:a4:e2:ab:24:12:6e:04:36:3d:e1:50:4d:48:39: 83:c5:fc:ab:12:69:5c:dc:1c:74:be:ab:ca:42:61:19:a3:69: 8e:44:5e:bc:ed:c4:c0:e0:0d:74:63:aa:cb:14:cf:60:6d:22: 18:94:37:11:eb:94:b5:3c:ae:34:8c:88:e8:13:a3:a4:30:13: 62:00:5c:ab:02:d1:e8:45:b5:8c:81:f4:8f:ad:c5:66:9d:be: e5:ba:61:2b:36:40:32:db:36:b7:82:1b:a8:76:b3:98:2b:d7: e4:2b:19:c9:ae:7e:a6:c4:6f:02:3d:6c:87:fa:4d:55:e5:a7: a1:71:8c:8e:bd:fe:34:ff:7f:39:9b:41:6f:f9:53:c2:14:2e: 0b:b6:3d:d0:dc:48:0f:e4:3e:7c:61:8f:61:7e:a8:98:24:a7: f1:2e:10:11 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAe4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTA4NDgxMTAvBgNVBAUTKDAyNDIyOUM4MUFDMzUzNUEyMUQ2MEUyREMzMkE5Qjg4 QkQ2QUQ4MUYwHhcNMjUwNTMxMDIzNjEzWhcNMjUwNjA3MDIzNjEzWjAYMRYwFAYD VQQDEw02ODNhNmIxZS00YTNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuhA3HtSko+VTeRWlxORC61vZUtKLWAzcEL8QtLYpVt9SUrSdf2xMet1k8jfY QUJv3st3Lp+c4i8P1oLVNczPY78WCzjF6yad6wQ0GuTUkcMPTb7vRV9blVmpo77Q aS9a3F3GcCpsG7LNBdjuADcDHbM7h3hdwcChFPBpnjkkPkxFqdEL4IXSWIWepRly J3Ecbi3dPeh1YC0G14atTBy5AWhnzPiGCFVQi9A1NaGgXxymqNPjUTThR5CjEIb9 l3nxp/v6zvJLucfC7UoXKRN9L4zMjER0cFYil+lhCSnEENDwmeVwVWT4xsjFtLEo A3M2vM4S0SWuc9Kpu92/xo8I1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKiM8XlM Q13+t8+/quSu+IGzbt1RMB8GA1UdIwQYMBaAFAJCKcgaw1NaIdYOLcMqm4i9atgf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMDg0OC82NEQ4QjFERTc3 RTQxMUVEOTdGNTkzNERDNEY5QUUwMi9Ba0lweUJyRFUxb2gxZzR0d3lxYmlMMXEy QjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FrSXB5QnJEVTFvaDFnNHR3eXFiaUwxcTJCOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MDg0OC82NEQ4QjFERTc3RTQxMUVEOTdGNTkzNERDNEY5QUUwMi9Ba0lweUJyRFUx b2gxZzR0d3lxYmlMMXEyQjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAj2O/stk6yaR9RkHIhEBof0I+sgvcxqHFyWcel2Y08PJMUB7mfNczP WrQ37K1zy6dEn0sZyFsX8h6g1hXtM8kCo06yjF7TNkg75uXlHMgWY1OUtI/olhMl pSB6ZKTIpOKrJBJuBDY94VBNSDmDxfyrEmlc3Bx0vqvKQmEZo2mORF687cTA4A10 Y6rLFM9gbSIYlDcR65S1PK40jIjoE6OkMBNiAFyrAtHoRbWMgfSPrcVmnb7lumEr NkAy2za3ghuodrOYK9fkKxnJrn6mxG8CPWyH+k1V5aehcYyOvf40/385m0Fv+VPC FC4Ltj3Q3EgP5D58YY9hfqiYJKfxLhAR -----END CERTIFICATE-----Generated at Sat May 31 17:46:26 2025 by rpki-client