$ rpki-client -vvf rpki.apnic.net/member_repository/A91251EF/2E94874E91DA11EA84CC0515C4F9AE02/_MUE2ks5jGbdvyw5K3UZzJDBoQk.mft File: _MUE2ks5jGbdvyw5K3UZzJDBoQk.mft (raw, json) Hash identifier: QB6yF9/4cFmLlRFAx2eheX5/wYtihoghXHXL7lzRyss= Subject key identifier: 9D:3D:1E:3D:C5:DA:53:3E:9E:2D:38:A9:C8:E9:D4:C0:32:13:DF:84 Authority key identifier: FC:C5:04:DA:4B:39:8C:66:DD:BF:2C:39:2B:75:19:CC:90:C1:A1:09 Certificate issuer: /CN=A91251EF/serialNumber=FCC504DA4B398C66DDBF2C392B7519CC90C1A109 Certificate serial: 0975 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_MUE2ks5jGbdvyw5K3UZzJDBoQk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91251EF/2E94874E91DA11EA84CC0515C4F9AE02/_MUE2ks5jGbdvyw5K3UZzJDBoQk.mft Manifest number: 096E Signing time: Fri 30 May 2025 20:57:36 +0000 Manifest this update: Fri 30 May 2025 20:57:35 +0000 Manifest next update: Fri 06 Jun 2025 20:57:35 +0000 Files and hashes: 1: _MUE2ks5jGbdvyw5K3UZzJDBoQk.crl (hash: TwbdTz8EcjT86uEUhpnSRX+RUiw5Q8Nb5x7aW/74njU=) 2: 869CBF5E91DC11EAA5FD4A1CC4F9AE02.roa (hash: xa2e2Chwv4yeL7fHM+A196uDscfEXGZLiMt2MCiQxb0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91251EF/2E94874E91DA11EA84CC0515C4F9AE02/_MUE2ks5jGbdvyw5K3UZzJDBoQk.crl rsync://rpki.apnic.net/member_repository/A91251EF/2E94874E91DA11EA84CC0515C4F9AE02/_MUE2ks5jGbdvyw5K3UZzJDBoQk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_MUE2ks5jGbdvyw5K3UZzJDBoQk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 20:57:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2421 (0x975) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91251EF, serialNumber=FCC504DA4B398C66DDBF2C392B7519CC90C1A109 Validity Not Before: May 30 20:57:35 2025 GMT Not After : Jun 6 20:57:35 2025 GMT Subject: CN=683a1bbf-60a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:f6:b3:46:4b:ef:bf:e4:59:f2:7a:0c:fc:9a: db:e0:2a:86:9b:3d:23:12:d6:e2:72:9e:46:28:f8: 91:63:2b:21:92:38:bf:e1:01:a3:4e:9c:02:5c:e4: 2e:89:ae:df:ec:49:29:83:70:94:0c:7c:f9:07:75: 1b:b2:df:d4:c5:55:25:41:d7:f7:51:8c:f9:7a:d9: 27:f6:42:c2:d7:12:1d:93:d4:d2:2c:11:68:2b:7a: ee:a2:b6:25:7b:a6:41:20:c5:b8:41:cd:d1:0f:61: be:e6:ec:90:ac:82:2c:bd:9a:7f:24:fb:94:1b:3c: d4:5d:24:5b:da:18:39:92:67:04:e6:14:c9:0a:f1: 10:35:69:b4:10:19:10:c0:fc:11:a3:82:7a:d6:0b: a9:90:8f:33:1d:18:29:e9:50:b1:ae:cb:fb:e9:82: 45:f1:2f:9c:73:8e:a2:af:0d:32:37:2d:1e:2f:fe: 00:f1:ae:a9:38:98:15:43:e5:49:3a:61:ab:b9:51: 20:a5:06:20:fc:9a:0d:ea:ae:fd:55:1d:cb:20:25: e0:be:77:bb:a2:d0:ec:29:aa:91:13:99:44:8f:cf: 5a:af:c2:f6:5a:2a:da:c0:73:8b:ae:d7:61:77:2a: ca:f2:bf:63:e0:10:2a:d0:f2:4b:c1:e3:e4:3a:e6: 41:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:3D:1E:3D:C5:DA:53:3E:9E:2D:38:A9:C8:E9:D4:C0:32:13:DF:84 X509v3 Authority Key Identifier: keyid:FC:C5:04:DA:4B:39:8C:66:DD:BF:2C:39:2B:75:19:CC:90:C1:A1:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91251EF/2E94874E91DA11EA84CC0515C4F9AE02/_MUE2ks5jGbdvyw5K3UZzJDBoQk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_MUE2ks5jGbdvyw5K3UZzJDBoQk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91251EF/2E94874E91DA11EA84CC0515C4F9AE02/_MUE2ks5jGbdvyw5K3UZzJDBoQk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:72:13:a2:91:f0:d4:14:5e:0b:50:db:26:d4:8f:9c:43:ce: 69:fa:ac:a3:40:be:c0:25:6d:49:81:9c:eb:f3:4a:a6:9a:a9: 74:58:b2:b4:cb:63:2c:ca:e9:62:c5:db:1e:2c:6b:bc:74:df: 6c:43:2d:59:6c:97:55:e2:d9:37:44:45:ec:38:68:2a:eb:41: 84:57:de:76:10:42:b4:9e:84:ef:db:27:aa:d7:77:f7:5d:90: a3:f7:2e:2c:5b:50:7c:99:59:39:1f:d2:bb:b3:d5:e9:1f:2c: 58:85:c0:aa:5d:55:1c:4d:55:d9:75:02:a6:84:a9:8c:6b:88: f5:63:39:ff:a9:75:b9:f5:92:a2:c5:c9:43:ac:45:12:f5:e2: 3c:d6:1b:0d:d8:2d:7f:de:8f:fe:5f:d4:2f:a7:ef:4b:52:08: c2:6b:13:46:58:15:e6:4f:7a:d1:12:27:28:62:b9:0a:cc:ed: f1:d1:ee:96:4a:b1:47:6e:f0:8f:99:f3:aa:b1:12:9f:5f:d1: ad:6d:23:7b:b3:2b:15:37:46:09:f3:71:40:c1:3f:80:65:21: c7:30:23:91:67:0c:92:72:1a:dd:a6:64:da:01:ee:3b:72:21: 1c:d3:a3:4b:55:f4:21:0e:a0:3e:4b:a2:26:04:47:77:57:34: 85:dd:f3:72 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCXUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjUxRUYxMTAvBgNVBAUTKEZDQzUwNERBNEIzOThDNjZEREJGMkMzOTJCNzUxOUND OTBDMUExMDkwHhcNMjUwNTMwMjA1NzM1WhcNMjUwNjA2MjA1NzM1WjAYMRYwFAYD VQQDEw02ODNhMWJiZi02MGE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyvazRkvvv+RZ8noM/Jrb4CqGmz0jEtbicp5GKPiRYyshkji/4QGjTpwCXOQu ia7f7Ekpg3CUDHz5B3Ubst/UxVUlQdf3UYz5etkn9kLC1xIdk9TSLBFoK3ruorYl e6ZBIMW4Qc3RD2G+5uyQrIIsvZp/JPuUGzzUXSRb2hg5kmcE5hTJCvEQNWm0EBkQ wPwRo4J61gupkI8zHRgp6VCxrsv76YJF8S+cc46irw0yNy0eL/4A8a6pOJgVQ+VJ OmGruVEgpQYg/JoN6q79VR3LICXgvne7otDsKaqRE5lEj89ar8L2WirawHOLrtdh dyrK8r9j4BAq0PJLwePkOuZBVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ09Hj3F 2lM+ni04qcjp1MAyE9+EMB8GA1UdIwQYMBaAFPzFBNpLOYxm3b8sOSt1GcyQwaEJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNTFFRi8yRTk0ODc0RTkx REExMUVBODRDQzA1MTVDNEY5QUUwMi9fTVVFMmtzNWpHYmR2eXc1SzNVWnpKREJv UWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19NVUUya3M1akdiZHZ5dzVLM1VaekpEQm9Ray5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NTFFRi8yRTk0ODc0RTkxREExMUVBODRDQzA1MTVDNEY5QUUwMi9fTVVFMmtzNWpH YmR2eXc1SzNVWnpKREJvUWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCechOikfDUFF4LUNsm1I+cQ85p+qyjQL7AJW1JgZzr80qmmql0WLK0 y2MsyulixdseLGu8dN9sQy1ZbJdV4tk3REXsOGgq60GEV952EEK0noTv2yeq13f3 XZCj9y4sW1B8mVk5H9K7s9XpHyxYhcCqXVUcTVXZdQKmhKmMa4j1Yzn/qXW59ZKi xclDrEUS9eI81hsN2C1/3o/+X9Qvp+9LUgjCaxNGWBXmT3rREicoYrkKzO3x0e6W SrFHbvCPmfOqsRKfX9GtbSN7sysVN0YJ83FAwT+AZSHHMCORZwySchrdpmTaAe47 ciEc06NLVfQhDqA+S6ImBEd3VzSF3fNy -----END CERTIFICATE-----Generated at Sat May 31 17:30:19 2025 by rpki-client