$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE5E5/F0E76E12AFBF11EFA28A3654C4F9AE02/aSNuWZYwCi_Xhe-FeDxcKcW06HQ.mft File: aSNuWZYwCi_Xhe-FeDxcKcW06HQ.mft (raw, json) Hash identifier: cnMNnOcAHt3vzpPyFWx35CpCKSZCjQSchNfnxw4CJdg= Subject key identifier: AE:C3:7C:A4:0B:22:DB:33:17:87:6F:E3:63:06:03:D3:79:1F:CE:C1 Authority key identifier: 69:23:6E:59:96:30:0A:2F:D7:85:EF:85:78:3C:5C:29:C5:B4:E8:74 Certificate issuer: /CN=A91EE5E5/serialNumber=69236E5996300A2FD785EF85783C5C29C5B4E874 Certificate serial: 56 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aSNuWZYwCi_Xhe-FeDxcKcW06HQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EE5E5/F0E76E12AFBF11EFA28A3654C4F9AE02/aSNuWZYwCi_Xhe-FeDxcKcW06HQ.mft Manifest number: 54 Signing time: Fri 09 May 2025 06:15:21 +0000 Manifest this update: Fri 09 May 2025 06:15:20 +0000 Manifest next update: Fri 16 May 2025 06:15:20 +0000 Files and hashes: 1: aSNuWZYwCi_Xhe-FeDxcKcW06HQ.crl (hash: dh+OvJrOauega0D+PH5L+WwmGvf0kgVkRLuZiKGU7hM=) 2: 1506B298B00711EF863A582EC4F9AE02.roa (hash: PjiKcHZxo3PwYpPFYpla6KazUuXCJGnKHspIakJqo2E=) 3: 4965F84CAFC011EF82BB1055C4F9AE02.roa (hash: jpijFayg1AhLIehVWTrf1nyIqutL0nvGe/8hsMY0L/c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EE5E5/F0E76E12AFBF11EFA28A3654C4F9AE02/aSNuWZYwCi_Xhe-FeDxcKcW06HQ.crl rsync://rpki.apnic.net/member_repository/A91EE5E5/F0E76E12AFBF11EFA28A3654C4F9AE02/aSNuWZYwCi_Xhe-FeDxcKcW06HQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aSNuWZYwCi_Xhe-FeDxcKcW06HQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 May 2025 06:15:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 86 (0x56) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EE5E5, serialNumber=69236E5996300A2FD785EF85783C5C29C5B4E874 Validity Not Before: May 9 06:15:20 2025 GMT Not After : May 16 06:15:20 2025 GMT Subject: CN=681d9d79-f43f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:79:1e:af:55:76:1c:dc:99:c9:74:00:e9:80: e9:02:76:bf:80:a0:6f:7a:6e:bd:85:e0:e9:5e:fa: f6:23:35:54:bd:3b:d0:a4:3d:41:5e:bb:52:ba:48: bc:ed:9e:cd:fb:4f:3f:2d:e2:97:70:99:97:cf:06: 64:b2:90:ce:0a:4a:eb:25:e3:3a:ca:8f:ae:4d:1a: 52:bd:6e:66:95:fe:a9:a1:af:8e:92:6d:b2:52:25: 53:81:65:e2:e8:65:d2:eb:bf:c9:25:f4:82:3d:e5: 47:f3:21:5b:69:62:41:fa:2f:d2:ef:29:a3:d6:11: 7f:1d:9a:0e:9a:64:21:68:d5:d4:04:81:51:0f:8b: bb:d9:63:70:ff:bb:a8:fe:39:53:e0:62:c7:7e:a7: 3c:0b:72:18:d3:f3:16:e5:66:57:f0:57:82:c8:14: ba:03:63:39:9d:7b:99:52:6b:6b:a6:54:a1:cd:32: e6:bd:49:60:95:45:eb:81:fc:5f:95:b4:50:7c:a7: ce:fa:07:ec:0d:30:75:3c:9f:4f:3e:fd:fe:f6:ba: 90:5d:36:7d:5a:eb:90:08:ff:ac:41:04:c7:ae:ab: 8d:1a:3c:e8:96:35:9b:4a:be:b7:93:e9:58:99:c7: b1:2a:da:73:05:e9:d5:25:11:e2:bf:94:b1:f2:eb: d7:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:C3:7C:A4:0B:22:DB:33:17:87:6F:E3:63:06:03:D3:79:1F:CE:C1 X509v3 Authority Key Identifier: keyid:69:23:6E:59:96:30:0A:2F:D7:85:EF:85:78:3C:5C:29:C5:B4:E8:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EE5E5/F0E76E12AFBF11EFA28A3654C4F9AE02/aSNuWZYwCi_Xhe-FeDxcKcW06HQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aSNuWZYwCi_Xhe-FeDxcKcW06HQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE5E5/F0E76E12AFBF11EFA28A3654C4F9AE02/aSNuWZYwCi_Xhe-FeDxcKcW06HQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:09:42:0c:4e:09:ab:54:da:6b:b0:08:ca:17:c3:98:38:05: 92:ba:19:ff:9d:8f:1f:af:33:9c:e5:52:6a:b1:47:a6:de:ab: 1f:3e:55:9f:10:1b:6a:eb:bb:3c:55:7e:c7:3f:37:5b:43:60: 23:8b:7e:ff:f8:c3:6c:56:b2:7c:75:45:67:27:1f:ea:60:eb: 39:0c:10:ef:08:12:25:11:ec:2d:42:1b:1e:6f:08:2b:3e:50: f5:03:38:d9:f0:b4:ec:1a:28:18:b8:3e:2e:0c:fb:ee:8a:7f: 85:97:03:b9:47:0b:c3:b4:1d:41:12:2f:c2:f2:fa:00:41:4a: a3:5c:b9:4d:c5:8c:d0:3d:0c:2a:24:79:f1:95:61:76:1f:5b: 8b:27:f4:6f:bd:fc:4a:15:3f:b2:6b:50:36:ba:5f:26:7d:72: ef:59:11:85:d0:42:94:08:ba:f4:23:26:89:d0:1f:bd:7f:cc: e0:aa:a4:b9:a7:45:12:8e:40:a9:c9:84:8f:1f:66:70:1b:de: 5d:5c:25:a8:ac:1a:d9:70:f7:f5:9c:04:8d:eb:09:96:b7:3f: 63:aa:8c:bd:b6:92:08:a7:0e:a3:ca:e8:3a:e8:3d:0d:f2:0d: 79:47:c1:eb:db:74:37:93:88:6f:70:30:67:22:27:94:3a:35: 06:49:49:8f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBVjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF RTVFNTExMC8GA1UEBRMoNjkyMzZFNTk5NjMwMEEyRkQ3ODVFRjg1NzgzQzVDMjlD NUI0RTg3NDAeFw0yNTA1MDkwNjE1MjBaFw0yNTA1MTYwNjE1MjBaMBgxFjAUBgNV BAMTDTY4MWQ5ZDc5LWY0M2YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDfeR6vVXYc3JnJdADpgOkCdr+AoG96br2F4Ole+vYjNVS9O9CkPUFeu1K6SLzt ns37Tz8t4pdwmZfPBmSykM4KSusl4zrKj65NGlK9bmaV/qmhr46SbbJSJVOBZeLo ZdLrv8kl9II95UfzIVtpYkH6L9LvKaPWEX8dmg6aZCFo1dQEgVEPi7vZY3D/u6j+ OVPgYsd+pzwLchjT8xblZlfwV4LIFLoDYzmde5lSa2umVKHNMua9SWCVReuB/F+V tFB8p876B+wNMHU8n08+/f72upBdNn1a65AI/6xBBMeuq40aPOiWNZtKvreT6ViZ x7Eq2nMF6dUlEeK/lLHy69fXAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUrsN8pAsi 2zMXh2/jYwYD03kfzsEwHwYDVR0jBBgwFoAUaSNuWZYwCi/Xhe+FeDxcKcW06HQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVFNUU1L0YwRTc2RTEyQUZC RjExRUZBMjhBMzY1NEM0RjlBRTAyL2FTTnVXWll3Q2lfWGhlLUZlRHhjS2NXMDZI US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvYVNOdVdaWXdDaV9YaGUtRmVEeGNLY1cwNkhRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVF NUU1L0YwRTc2RTEyQUZCRjExRUZBMjhBMzY1NEM0RjlBRTAyL2FTTnVXWll3Q2lf WGhlLUZlRHhjS2NXMDZIUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHUJQgxOCatU2muwCMoXw5g4BZK6Gf+djx+vM5zlUmqxR6beqx8+VZ8Q G2rruzxVfsc/N1tDYCOLfv/4w2xWsnx1RWcnH+pg6zkMEO8IEiUR7C1CGx5vCCs+ UPUDONnwtOwaKBi4Pi4M++6Kf4WXA7lHC8O0HUESL8Ly+gBBSqNcuU3FjNA9DCok efGVYXYfW4sn9G+9/EoVP7JrUDa6XyZ9cu9ZEYXQQpQIuvQjJonQH71/zOCqpLmn RRKOQKnJhI8fZnAb3l1cJaisGtlw9/WcBI3rCZa3P2OqjL22kginDqPK6DroPQ3y DXlHwevbdDeTiG9wMGciJ5Q6NQZJSY8= -----END CERTIFICATE-----Generated at Fri May 9 17:01:45 2025 by rpki-client