$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAD63/DD364118344711EDB10DA43AC4F9AE02/d4O93Owt-bn8-48Qm3PU95Shc4Y.mft File: d4O93Owt-bn8-48Qm3PU95Shc4Y.mft (raw, json) Hash identifier: tn6aWyFyovLeko7O09h6j8qaSz3G7ES+vm71EJmdfOs= Subject key identifier: 35:37:5C:13:FD:6B:C8:C5:1F:56:DD:C4:75:85:09:6F:2D:1E:27:0C Authority key identifier: 77:83:BD:DC:EC:2D:F9:B9:FC:FB:8F:10:9B:73:D4:F7:94:A1:73:86 Certificate issuer: /CN=A91EAD63/serialNumber=7783BDDCEC2DF9B9FCFB8F109B73D4F794A17386 Certificate serial: 0218 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d4O93Owt-bn8-48Qm3PU95Shc4Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EAD63/DD364118344711EDB10DA43AC4F9AE02/d4O93Owt-bn8-48Qm3PU95Shc4Y.mft Manifest number: 0214 Signing time: Sat 31 May 2025 02:10:15 +0000 Manifest this update: Sat 31 May 2025 02:10:15 +0000 Manifest next update: Sat 07 Jun 2025 02:10:15 +0000 Files and hashes: 1: d4O93Owt-bn8-48Qm3PU95Shc4Y.crl (hash: mXo7poJoOv66TtwH5N2Qv4xz+5Y2MPbruqGbzvYU59U=) 2: 9BA13212344C11ED8F22CB70C4F9AE02.roa (hash: dSvt8WCJ5sX7UlCP0MxYFfwdeu8sA3Ot5FCk8B7masI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EAD63/DD364118344711EDB10DA43AC4F9AE02/d4O93Owt-bn8-48Qm3PU95Shc4Y.crl rsync://rpki.apnic.net/member_repository/A91EAD63/DD364118344711EDB10DA43AC4F9AE02/d4O93Owt-bn8-48Qm3PU95Shc4Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d4O93Owt-bn8-48Qm3PU95Shc4Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 02:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 536 (0x218) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EAD63, serialNumber=7783BDDCEC2DF9B9FCFB8F109B73D4F794A17386 Validity Not Before: May 31 02:10:15 2025 GMT Not After : Jun 7 02:10:15 2025 GMT Subject: CN=683a6507-f888 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:a5:2e:bc:57:c3:b8:28:36:38:39:11:f1:71: c9:40:c7:45:37:12:12:05:ae:82:16:9d:2f:e6:ac: 2e:70:ce:43:ec:08:95:af:b3:5a:fc:35:1a:33:ab: 41:b8:c9:b8:d6:c5:51:f6:a0:30:9d:dc:3d:f7:84: 36:24:fe:66:47:16:c3:31:5f:d2:9b:d1:4d:23:22: af:e8:10:3d:be:c4:09:52:45:8d:c5:c2:be:ed:de: e0:04:49:2a:ad:0a:af:41:8a:1a:ea:76:32:85:b2: 0a:89:52:12:7a:4d:f6:c9:37:b2:ce:e9:1a:36:ae: 20:7b:7f:a1:80:1d:c9:bf:b8:ad:84:d2:85:04:33: 89:67:88:96:5f:a3:15:25:20:14:9f:7d:c3:57:bf: bb:cb:80:5e:ab:3e:8c:d1:82:c8:24:45:f6:0d:e3: 81:46:e2:7f:55:26:fc:e4:59:ea:4d:68:ca:b2:bb: 92:05:54:72:70:e7:9d:8c:4a:72:db:5d:7f:54:ab: 89:cc:a4:73:0f:12:3a:fe:2c:95:6f:22:1b:fd:5b: a4:1b:f4:ae:5f:15:2b:c9:9e:c2:18:88:8f:4d:eb: 58:2f:80:ec:a6:00:b0:94:05:ca:47:1f:bc:4b:a0: 3f:23:fe:b8:44:7e:b2:67:98:ee:88:6d:a2:02:3b: 0b:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:37:5C:13:FD:6B:C8:C5:1F:56:DD:C4:75:85:09:6F:2D:1E:27:0C X509v3 Authority Key Identifier: keyid:77:83:BD:DC:EC:2D:F9:B9:FC:FB:8F:10:9B:73:D4:F7:94:A1:73:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EAD63/DD364118344711EDB10DA43AC4F9AE02/d4O93Owt-bn8-48Qm3PU95Shc4Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d4O93Owt-bn8-48Qm3PU95Shc4Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAD63/DD364118344711EDB10DA43AC4F9AE02/d4O93Owt-bn8-48Qm3PU95Shc4Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:93:d1:82:43:98:ce:ba:04:55:ef:35:05:b2:b4:c6:d7:4b: b2:c3:f2:e2:d1:80:0f:e6:0d:91:11:a5:f8:dc:ba:72:ca:63: 72:9e:29:06:c1:06:a3:1b:2e:c6:62:71:61:43:fd:6a:3c:95: 1d:f3:79:f2:23:83:31:2f:f9:17:14:cb:c1:fd:2a:e6:bd:86: 17:35:a6:6c:2b:73:4e:c0:32:a9:8a:1f:0a:c1:30:4f:4f:c7: 83:90:c7:06:9d:ba:4a:e8:2c:34:07:b8:0a:92:8c:71:ba:ba: e8:fa:30:ad:64:bb:9e:90:2c:ef:58:5a:a8:69:0f:7a:41:a3: e9:d2:c0:85:bd:74:3f:06:92:73:2f:a3:4c:70:3a:62:2e:8d: 9c:84:01:1e:68:88:70:3f:db:ff:b0:79:c1:43:a6:5f:99:07: c8:65:61:e1:f6:ab:d5:fc:a8:f7:8e:97:7b:3d:03:21:51:b7: d8:ec:f5:3a:84:1a:61:8c:72:56:35:7a:eb:88:fe:07:52:2d: 96:3e:7d:c1:ea:aa:71:53:81:7e:77:ef:b8:99:8d:8e:d5:85: 6c:42:2e:e5:bc:15:52:f1:e7:b9:ad:13:ea:03:e8:d5:15:08: e0:13:1f:09:47:25:07:4a:d9:9f:ed:3b:9b:52:4a:22:45:2c: 92:83:27:55 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUFENjMxMTAvBgNVBAUTKDc3ODNCRERDRUMyREY5QjlGQ0ZCOEYxMDlCNzNENEY3 OTRBMTczODYwHhcNMjUwNTMxMDIxMDE1WhcNMjUwNjA3MDIxMDE1WjAYMRYwFAYD VQQDEw02ODNhNjUwNy1mODg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2KUuvFfDuCg2ODkR8XHJQMdFNxISBa6CFp0v5qwucM5D7AiVr7Na/DUaM6tB uMm41sVR9qAwndw994Q2JP5mRxbDMV/Sm9FNIyKv6BA9vsQJUkWNxcK+7d7gBEkq rQqvQYoa6nYyhbIKiVISek32yTeyzukaNq4ge3+hgB3Jv7ithNKFBDOJZ4iWX6MV JSAUn33DV7+7y4Beqz6M0YLIJEX2DeOBRuJ/VSb85FnqTWjKsruSBVRycOedjEpy 211/VKuJzKRzDxI6/iyVbyIb/VukG/SuXxUryZ7CGIiPTetYL4DspgCwlAXKRx+8 S6A/I/64RH6yZ5juiG2iAjsLiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDU3XBP9 a8jFH1bdxHWFCW8tHicMMB8GA1UdIwQYMBaAFHeDvdzsLfm5/PuPEJtz1PeUoXOG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQUQ2My9ERDM2NDExODM0 NDcxMUVEQjEwREE0M0FDNEY5QUUwMi9kNE85M093dC1ibjgtNDhRbTNQVTk1U2hj NFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Q0TzkzT3d0LWJuOC00OFFtM1BVOTVTaGM0WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QUQ2My9ERDM2NDExODM0NDcxMUVEQjEwREE0M0FDNEY5QUUwMi9kNE85M093dC1i bjgtNDhRbTNQVTk1U2hjNFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBAk9GCQ5jOugRV7zUFsrTG10uyw/Li0YAP5g2REaX43LpyymNynikG wQajGy7GYnFhQ/1qPJUd83nyI4MxL/kXFMvB/SrmvYYXNaZsK3NOwDKpih8KwTBP T8eDkMcGnbpK6Cw0B7gKkoxxurro+jCtZLuekCzvWFqoaQ96QaPp0sCFvXQ/BpJz L6NMcDpiLo2chAEeaIhwP9v/sHnBQ6ZfmQfIZWHh9qvV/Kj3jpd7PQMhUbfY7PU6 hBphjHJWNXrriP4HUi2WPn3B6qpxU4F+d++4mY2O1YVsQi7lvBVS8ee5rRPqA+jV FQjgEx8JRyUHStmf7TubUkoiRSySgydV -----END CERTIFICATE-----Generated at Sat May 31 16:43:45 2025 by rpki-client