$ rpki-client -vvf rpki.apnic.net/member_repository/A912654A/FFB443789F0C11EC9A1AF70EC4F9AE02/mBRRd8rC9b7l0nZ0XO2YmEBT7ac.mft File: mBRRd8rC9b7l0nZ0XO2YmEBT7ac.mft (raw, json) Hash identifier: 9mh6qY+STfRlWSNR4O90qUrAG8C0nAHUX5FxRtmDTOc= Subject key identifier: AD:A6:88:E1:08:50:A5:D0:B6:5A:84:1B:51:3B:A5:5D:1D:D2:CE:E1 Authority key identifier: 98:14:51:77:CA:C2:F5:BE:E5:D2:76:74:5C:ED:98:98:40:53:ED:A7 Certificate issuer: /CN=A912654A/serialNumber=98145177CAC2F5BEE5D276745CED98984053EDA7 Certificate serial: 0392 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mBRRd8rC9b7l0nZ0XO2YmEBT7ac.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912654A/FFB443789F0C11EC9A1AF70EC4F9AE02/mBRRd8rC9b7l0nZ0XO2YmEBT7ac.mft Manifest number: 038F Signing time: Sat 31 May 2025 01:00:27 +0000 Manifest this update: Sat 31 May 2025 01:00:27 +0000 Manifest next update: Sat 07 Jun 2025 01:00:27 +0000 Files and hashes: 1: mBRRd8rC9b7l0nZ0XO2YmEBT7ac.crl (hash: xOK/f0NF5VVSyKxodfxg61f6TDnp+oq4md1dPMxynRI=) 2: D83A3404EF0311EDA8B8C81EC4F9AE02.roa (hash: RNcRlm2wXA2LTmrbU4YLnCSJL/XH7jtpKjrey/Lilq4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912654A/FFB443789F0C11EC9A1AF70EC4F9AE02/mBRRd8rC9b7l0nZ0XO2YmEBT7ac.crl rsync://rpki.apnic.net/member_repository/A912654A/FFB443789F0C11EC9A1AF70EC4F9AE02/mBRRd8rC9b7l0nZ0XO2YmEBT7ac.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mBRRd8rC9b7l0nZ0XO2YmEBT7ac.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 01:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 914 (0x392) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912654A, serialNumber=98145177CAC2F5BEE5D276745CED98984053EDA7 Validity Not Before: May 31 01:00:27 2025 GMT Not After : Jun 7 01:00:27 2025 GMT Subject: CN=683a54ab-6191 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:3f:d7:9e:f6:f2:43:ff:8d:c1:0e:19:e4:fe: 5b:38:4a:b3:00:ad:91:b1:c8:45:db:c9:cf:2c:b6: 80:e6:57:81:87:d7:b4:8e:86:3d:71:ee:e7:34:0f: b4:cd:70:9e:e0:28:77:c8:a1:3f:08:25:87:6d:9b: 7d:49:0a:cd:e8:fb:07:85:c1:55:d6:fb:4a:9c:7d: ba:47:c7:97:81:d1:1d:2a:b5:7b:76:ce:35:bd:58: a1:f0:f7:b2:16:36:c9:51:34:8c:77:e3:a0:1c:cb: 13:65:a4:3e:1a:1f:55:8f:14:04:5e:57:64:49:5e: 1a:0c:e5:10:f0:e4:ca:c8:f4:5c:b8:6a:c4:d3:f7: b4:99:a5:00:84:62:36:f6:69:80:74:02:13:42:54: 51:04:2a:3b:13:1d:0a:7a:fb:60:ff:e3:ab:68:81: 4e:43:84:bc:9b:31:19:d3:a1:32:13:6b:eb:43:a5: 65:ae:f0:80:e4:4a:f2:79:9e:00:ea:dd:3d:e0:92: 25:9b:2c:5e:51:85:4f:47:0c:57:5e:8b:f6:58:b2: 9d:dc:30:38:78:6b:32:21:35:45:3b:e9:27:f4:ac: aa:a3:75:c1:b5:09:ce:ff:73:a8:26:79:63:4d:6f: 06:ac:07:84:36:08:ca:df:48:09:1c:02:8f:47:f8: 7c:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:A6:88:E1:08:50:A5:D0:B6:5A:84:1B:51:3B:A5:5D:1D:D2:CE:E1 X509v3 Authority Key Identifier: keyid:98:14:51:77:CA:C2:F5:BE:E5:D2:76:74:5C:ED:98:98:40:53:ED:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912654A/FFB443789F0C11EC9A1AF70EC4F9AE02/mBRRd8rC9b7l0nZ0XO2YmEBT7ac.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mBRRd8rC9b7l0nZ0XO2YmEBT7ac.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912654A/FFB443789F0C11EC9A1AF70EC4F9AE02/mBRRd8rC9b7l0nZ0XO2YmEBT7ac.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:bc:fa:f5:4f:16:e9:4d:92:51:ec:e4:12:ad:6f:98:96:c7: 33:f7:f9:44:b1:7f:6d:2f:c0:3a:df:f0:6b:e0:b8:de:b9:a3: b7:af:6a:ec:b6:a6:bc:cc:9f:70:1e:98:ad:85:a2:78:5b:98: 02:bc:ee:42:57:be:cc:f1:4d:8e:34:ec:b9:ba:92:fc:6f:91: 94:4d:12:d3:04:ee:4f:4f:79:b5:6c:ff:b3:4e:33:af:ca:19: 25:1f:a4:bd:62:ea:04:4b:59:b4:6e:c5:cd:4a:41:48:91:36: 6c:5d:97:ef:fe:b6:99:47:98:a3:44:c1:ac:f9:5e:08:76:19: d5:4e:d0:c1:df:a7:b8:bf:ba:5b:6e:1b:c3:4b:0b:c5:16:3a: f8:ef:56:6b:1d:b6:5d:89:00:f2:92:47:3d:b1:6e:57:3e:50: ef:ba:af:07:97:5a:74:61:74:36:be:57:33:8b:d8:56:f8:ed: 11:4e:70:20:87:f2:a7:ff:a0:e2:a3:1f:c6:4b:40:08:8b:14: 77:6a:7b:6c:96:8a:3b:61:b7:1d:b4:19:3c:9b:42:39:98:29: 98:04:62:27:ac:85:83:3f:d1:c8:9c:a3:2a:ad:cd:d3:cc:d6: 0b:fd:37:c2:a7:b8:68:d2:c1:f7:81:bf:d2:ab:38:87:fc:d3: 73:8a:a7:75 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA5IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjY1NEExMTAvBgNVBAUTKDk4MTQ1MTc3Q0FDMkY1QkVFNUQyNzY3NDVDRUQ5ODk4 NDA1M0VEQTcwHhcNMjUwNTMxMDEwMDI3WhcNMjUwNjA3MDEwMDI3WjAYMRYwFAYD VQQDEw02ODNhNTRhYi02MTkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzD/XnvbyQ/+NwQ4Z5P5bOEqzAK2RschF28nPLLaA5leBh9e0joY9ce7nNA+0 zXCe4Ch3yKE/CCWHbZt9SQrN6PsHhcFV1vtKnH26R8eXgdEdKrV7ds41vVih8Pey FjbJUTSMd+OgHMsTZaQ+Gh9VjxQEXldkSV4aDOUQ8OTKyPRcuGrE0/e0maUAhGI2 9mmAdAITQlRRBCo7Ex0Kevtg/+OraIFOQ4S8mzEZ06EyE2vrQ6VlrvCA5EryeZ4A 6t094JIlmyxeUYVPRwxXXov2WLKd3DA4eGsyITVFO+kn9Kyqo3XBtQnO/3OoJnlj TW8GrAeENgjK30gJHAKPR/h8AwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK2miOEI UKXQtlqEG1E7pV0d0s7hMB8GA1UdIwQYMBaAFJgUUXfKwvW+5dJ2dFztmJhAU+2n MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjU0QS9GRkI0NDM3ODlG MEMxMUVDOUExQUY3MEVDNEY5QUUwMi9tQlJSZDhyQzliN2wwblowWE8yWW1FQlQ3 YWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21CUlJkOHJDOWI3bDBuWjBYTzJZbUVCVDdhYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NjU0QS9GRkI0NDM3ODlGMEMxMUVDOUExQUY3MEVDNEY5QUUwMi9tQlJSZDhyQzli N2wwblowWE8yWW1FQlQ3YWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBevPr1TxbpTZJR7OQSrW+Ylscz9/lEsX9tL8A63/Br4LjeuaO3r2rs tqa8zJ9wHpithaJ4W5gCvO5CV77M8U2ONOy5upL8b5GUTRLTBO5PT3m1bP+zTjOv yhklH6S9YuoES1m0bsXNSkFIkTZsXZfv/raZR5ijRMGs+V4IdhnVTtDB36e4v7pb bhvDSwvFFjr471ZrHbZdiQDykkc9sW5XPlDvuq8Hl1p0YXQ2vlczi9hW+O0RTnAg h/Kn/6Diox/GS0AIixR3antsloo7YbcdtBk8m0I5mCmYBGInrIWDP9HInKMqrc3T zNYL/TfCp7ho0sH3gb/SqziH/NNziqd1 -----END CERTIFICATE-----Generated at Sat May 31 17:03:34 2025 by rpki-client