$ rpki-client -vvf rpki.apnic.net/member_repository/A91314BC/7FD0166C5A2F11EDA19E5E61C4F9AE02/FoQVwME0AcDXcVcd-G-M1fhQOxQ.mft File: FoQVwME0AcDXcVcd-G-M1fhQOxQ.mft (raw, json) Hash identifier: 10WuSeKacQzO7sVaboptbwumXbySwn7jVyXw+2VXuWk= Subject key identifier: C3:ED:13:DA:42:0B:93:D1:BB:9C:11:DE:29:06:16:10:F6:ED:FE:CA Authority key identifier: 16:84:15:C0:C1:34:01:C0:D7:71:57:1D:F8:6F:8C:D5:F8:50:3B:14 Certificate issuer: /CN=A91314BC/serialNumber=168415C0C13401C0D771571DF86F8CD5F8503B14 Certificate serial: 01F5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FoQVwME0AcDXcVcd-G-M1fhQOxQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91314BC/7FD0166C5A2F11EDA19E5E61C4F9AE02/FoQVwME0AcDXcVcd-G-M1fhQOxQ.mft Manifest number: 01E8 Signing time: Sat 31 May 2025 02:22:59 +0000 Manifest this update: Sat 31 May 2025 02:22:59 +0000 Manifest next update: Sat 07 Jun 2025 02:22:59 +0000 Files and hashes: 1: FoQVwME0AcDXcVcd-G-M1fhQOxQ.crl (hash: G66tgL3CoFznSVAnqq1DIJkm9x1E8TEXiVQ45s+fnec=) 2: 1083BE64499711EE86AE452DC4F9AE02.roa (hash: slu67F8KWLFn/RxCNvxBYhj1V1Mx5+noN3O9kww2W8Y=) 3: 7DD0E8845A3211EDB637E665C4F9AE02.roa (hash: wtWT4PZFgcn64rOhtqw01Kyp1pjejdqieeode8aJT6o=) 4: 7D0DFE0A5A3211EDB637E665C4F9AE02.roa (hash: K4zq7amWLtDyT+UqSOR4oOsSasN49MRy2b9Pfvweln4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91314BC/7FD0166C5A2F11EDA19E5E61C4F9AE02/FoQVwME0AcDXcVcd-G-M1fhQOxQ.crl rsync://rpki.apnic.net/member_repository/A91314BC/7FD0166C5A2F11EDA19E5E61C4F9AE02/FoQVwME0AcDXcVcd-G-M1fhQOxQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FoQVwME0AcDXcVcd-G-M1fhQOxQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 02:22:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 501 (0x1f5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91314BC, serialNumber=168415C0C13401C0D771571DF86F8CD5F8503B14 Validity Not Before: May 31 02:22:59 2025 GMT Not After : Jun 7 02:22:59 2025 GMT Subject: CN=683a6803-2624 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:89:42:d6:43:99:90:1e:34:76:ab:f9:4b:d4: 2c:c2:c3:2f:f0:9a:2f:32:30:5f:51:5d:ab:8b:9a: 48:7f:ef:64:ec:b7:6e:80:07:42:50:d6:d5:95:e3: 75:dc:6f:4d:20:cb:d6:1a:c4:59:07:26:93:ed:b9: f9:94:79:a8:db:cb:f3:b1:17:27:bf:c3:06:78:d4: 84:f3:e8:8e:67:ae:b2:fc:d2:d3:d1:c5:63:23:48: 69:4d:32:a3:86:f2:1f:99:a3:7b:bb:9e:70:06:d4: ec:df:74:8e:7e:f0:65:39:6e:97:b3:d3:3c:b5:5c: e8:6b:54:c7:0b:eb:ab:83:a0:8b:d6:06:74:65:3d: 79:ae:30:35:db:c0:ba:81:e6:53:07:da:a2:c8:d1: e9:4d:0e:e0:6b:cb:14:d3:ed:23:a1:fb:25:ee:53: 17:2b:d6:16:20:61:61:1f:e0:0c:91:d4:47:df:c6: ac:87:7f:51:2d:7e:a2:7f:65:1b:6f:62:68:d5:3e: ce:32:bf:0b:38:5e:c4:e7:fd:a4:22:6e:bb:af:43: f7:09:80:42:dc:c7:a8:ed:9f:92:92:10:28:94:92: d2:88:11:0e:5d:95:fa:12:31:b4:67:40:2d:18:e1: 34:6a:1c:93:25:20:d1:88:71:44:d9:1b:d2:f5:bc: c2:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:ED:13:DA:42:0B:93:D1:BB:9C:11:DE:29:06:16:10:F6:ED:FE:CA X509v3 Authority Key Identifier: keyid:16:84:15:C0:C1:34:01:C0:D7:71:57:1D:F8:6F:8C:D5:F8:50:3B:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91314BC/7FD0166C5A2F11EDA19E5E61C4F9AE02/FoQVwME0AcDXcVcd-G-M1fhQOxQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FoQVwME0AcDXcVcd-G-M1fhQOxQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91314BC/7FD0166C5A2F11EDA19E5E61C4F9AE02/FoQVwME0AcDXcVcd-G-M1fhQOxQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:7c:4e:c0:49:14:95:df:fd:57:0e:06:e2:4a:d7:36:45:02: b3:fd:95:57:bb:d3:b7:4f:95:58:f7:0d:43:d4:6e:9a:e4:7a: 7a:a7:19:b2:0c:b6:5a:7b:d6:5a:9c:eb:1d:43:38:c8:b2:01: ad:6f:de:f0:62:8d:f9:dd:ff:25:e9:f4:6f:da:be:1c:89:04: 3f:0a:af:43:af:2e:d0:ca:30:00:2d:e7:59:f3:0f:94:c4:d9: 44:65:d3:c5:94:5c:f5:da:1d:b3:fe:3d:17:cc:8c:2f:06:a8: e4:29:5c:38:5e:c0:0d:7c:8c:04:8d:24:dc:c6:36:4a:c3:8d: b2:5a:84:fa:2a:48:bf:28:28:70:77:7c:4a:2b:72:62:ba:e2: ef:1b:f8:a8:52:e8:cf:54:77:45:53:79:fa:b1:32:6d:ea:f7: b4:8b:05:77:51:3b:77:32:3f:68:3f:36:86:4d:47:12:33:b3: 34:52:a9:c6:91:21:b5:7d:2b:18:4e:9c:c5:d3:10:f8:73:bc: 11:68:dc:b3:7e:81:56:6f:30:32:9a:df:b7:56:c5:4b:27:6e: 9a:71:e5:51:e7:8b:10:af:ea:9f:6f:27:e1:2e:5c:26:c4:bf: f6:d5:80:45:9c:40:52:5a:b9:17:13:f6:6a:df:74:c3:85:05: 9c:19:3e:a6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzE0QkMxMTAvBgNVBAUTKDE2ODQxNUMwQzEzNDAxQzBENzcxNTcxREY4NkY4Q0Q1 Rjg1MDNCMTQwHhcNMjUwNTMxMDIyMjU5WhcNMjUwNjA3MDIyMjU5WjAYMRYwFAYD VQQDEw02ODNhNjgwMy0yNjI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr4lC1kOZkB40dqv5S9QswsMv8JovMjBfUV2ri5pIf+9k7LdugAdCUNbVleN1 3G9NIMvWGsRZByaT7bn5lHmo28vzsRcnv8MGeNSE8+iOZ66y/NLT0cVjI0hpTTKj hvIfmaN7u55wBtTs33SOfvBlOW6Xs9M8tVzoa1THC+urg6CL1gZ0ZT15rjA128C6 geZTB9qiyNHpTQ7ga8sU0+0jofsl7lMXK9YWIGFhH+AMkdRH38ash39RLX6if2Ub b2Jo1T7OMr8LOF7E5/2kIm67r0P3CYBC3Meo7Z+SkhAolJLSiBEOXZX6EjG0Z0At GOE0ahyTJSDRiHFE2RvS9bzCawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMPtE9pC C5PRu5wR3ikGFhD27f7KMB8GA1UdIwQYMBaAFBaEFcDBNAHA13FXHfhvjNX4UDsU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTRCQy83RkQwMTY2QzVB MkYxMUVEQTE5RTVFNjFDNEY5QUUwMi9Gb1FWd01FMEFjRFhjVmNkLUctTTFmaFFP eFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZvUVZ3TUUwQWNEWGNWY2QtRy1NMWZoUU94US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MTRCQy83RkQwMTY2QzVBMkYxMUVEQTE5RTVFNjFDNEY5QUUwMi9Gb1FWd01FMEFj RFhjVmNkLUctTTFmaFFPeFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBVfE7ASRSV3/1XDgbiStc2RQKz/ZVXu9O3T5VY9w1D1G6a5Hp6pxmy DLZae9ZanOsdQzjIsgGtb97wYo353f8l6fRv2r4ciQQ/Cq9Dry7QyjAALedZ8w+U xNlEZdPFlFz12h2z/j0XzIwvBqjkKVw4XsANfIwEjSTcxjZKw42yWoT6Kki/KChw d3xKK3JiuuLvG/ioUujPVHdFU3n6sTJt6ve0iwV3UTt3Mj9oPzaGTUcSM7M0UqnG kSG1fSsYTpzF0xD4c7wRaNyzfoFWbzAymt+3VsVLJ26aceVR54sQr+qfbyfhLlwm xL/21YBFnEBSWrkXE/Zq33TDhQWcGT6m -----END CERTIFICATE-----Generated at Sat May 31 16:29:38 2025 by rpki-client