$ rpki-client -vvf rpki.apnic.net/member_repository/A91390D6/F964BC329AED11ECBF42E427C4F9AE02/_u6fNgpd0TKL4cgqF3B5iWh1nUg.mft File: _u6fNgpd0TKL4cgqF3B5iWh1nUg.mft (raw, json) Hash identifier: dY62ik9bMtqg2R+oeYHz7Wy40INTgzp9I7RgPyxv83Q= Subject key identifier: 9F:30:73:44:B5:50:BC:9F:B5:BD:AD:7D:57:FA:0C:A2:7E:9C:40:E1 Authority key identifier: FE:EE:9F:36:0A:5D:D1:32:8B:E1:C8:2A:17:70:79:89:68:75:9D:48 Certificate issuer: /CN=A91390D6/serialNumber=FEEE9F360A5DD1328BE1C82A1770798968759D48 Certificate serial: 03A0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_u6fNgpd0TKL4cgqF3B5iWh1nUg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91390D6/F964BC329AED11ECBF42E427C4F9AE02/_u6fNgpd0TKL4cgqF3B5iWh1nUg.mft Manifest number: 039C Signing time: Sat 31 May 2025 00:58:01 +0000 Manifest this update: Sat 31 May 2025 00:58:00 +0000 Manifest next update: Sat 07 Jun 2025 00:58:00 +0000 Files and hashes: 1: _u6fNgpd0TKL4cgqF3B5iWh1nUg.crl (hash: ZM7k8O5h8Om7gyJxmcShDY6jdutOJdk+75/j27ePWNg=) 2: 018377CA9AF111EC9717F22AC4F9AE02.roa (hash: Eke8Nptjc+wFFIze4nM4012uB/SRIMQBKPKAnolzw/g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91390D6/F964BC329AED11ECBF42E427C4F9AE02/_u6fNgpd0TKL4cgqF3B5iWh1nUg.crl rsync://rpki.apnic.net/member_repository/A91390D6/F964BC329AED11ECBF42E427C4F9AE02/_u6fNgpd0TKL4cgqF3B5iWh1nUg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_u6fNgpd0TKL4cgqF3B5iWh1nUg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 00:58:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 928 (0x3a0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91390D6, serialNumber=FEEE9F360A5DD1328BE1C82A1770798968759D48 Validity Not Before: May 31 00:58:00 2025 GMT Not After : Jun 7 00:58:00 2025 GMT Subject: CN=683a5419-232d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:9f:2c:d8:73:59:7f:d8:e4:ab:54:9f:72:8f: 88:45:15:9a:4b:e4:aa:88:49:6b:ea:2e:2d:44:af: e2:66:04:74:a4:e2:bc:0c:e4:15:6c:87:b5:5b:dd: 33:63:76:7e:83:3b:f7:2a:ef:7c:a7:12:e4:9d:b4: b8:b6:39:38:80:7e:63:17:1c:4c:cb:14:af:c9:cd: ee:5c:36:ec:b2:80:a5:e4:05:2f:f9:75:a9:8f:72: 6b:0f:ba:9b:57:06:fb:b8:43:35:3c:60:d8:0c:b2: dc:b7:7e:eb:3f:81:3f:87:bb:66:5d:60:5c:69:99: fd:55:b3:39:6b:40:81:ad:a0:4b:66:6e:9e:6e:dd: 78:74:76:af:c5:36:e2:42:04:82:60:a7:06:92:da: a5:93:43:5d:50:a0:28:d9:b9:ad:e8:4c:ee:d3:2a: db:d9:c5:48:eb:6c:67:4c:92:2c:35:96:cb:d7:98: 36:cc:36:ac:3f:9f:56:99:e9:47:81:68:9b:e4:81: 9e:18:c1:e5:6f:20:f4:36:c2:b2:9b:9b:8f:20:bd: 94:e6:0a:56:c6:56:2b:ad:6b:e2:80:89:46:56:68: b6:7e:31:81:cc:14:e5:0c:17:46:63:3b:1f:e6:49: a7:37:15:18:55:e1:76:40:e9:2c:bc:d0:b1:bf:3d: 8e:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:30:73:44:B5:50:BC:9F:B5:BD:AD:7D:57:FA:0C:A2:7E:9C:40:E1 X509v3 Authority Key Identifier: keyid:FE:EE:9F:36:0A:5D:D1:32:8B:E1:C8:2A:17:70:79:89:68:75:9D:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91390D6/F964BC329AED11ECBF42E427C4F9AE02/_u6fNgpd0TKL4cgqF3B5iWh1nUg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_u6fNgpd0TKL4cgqF3B5iWh1nUg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91390D6/F964BC329AED11ECBF42E427C4F9AE02/_u6fNgpd0TKL4cgqF3B5iWh1nUg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:6b:08:f3:02:d6:25:66:a2:63:50:24:9e:53:7c:e4:96:5f: 0c:fa:8d:e4:fd:0f:0e:47:ce:8c:94:ea:69:41:5d:36:34:bc: bd:4e:68:c3:f0:83:d0:90:00:db:ad:4c:91:21:af:d4:32:6b: 0d:9c:b3:0e:2c:45:6c:f1:e4:40:ed:ca:d5:61:fa:81:59:4d: cb:bc:e2:17:3f:f7:2e:ea:d5:96:21:99:99:48:9c:d0:e6:b1: ae:9e:9d:2f:6e:68:3c:26:f2:0d:ef:45:9b:fd:b0:44:a1:ef: f0:21:e7:80:23:94:02:37:cc:07:a1:5a:c0:6c:8e:2a:37:85: ca:90:9f:7b:43:79:b1:69:64:09:e0:95:ee:fb:bb:68:1b:20: b4:fa:10:b3:90:45:16:46:9d:8d:bf:19:be:f5:c6:da:a9:11: 39:17:99:74:ac:98:23:88:81:fe:ed:aa:5f:f1:d0:ac:71:46: f8:55:37:df:c1:cf:cf:00:e0:b8:34:b4:cf:c1:d4:1e:f1:33: a2:35:f0:c8:e0:60:31:cb:94:61:75:a8:7f:a2:93:f2:9f:da: 01:94:5e:32:47:3b:2d:02:49:81:38:d2:68:24:86:a5:5e:a8: 03:12:90:16:e2:9e:87:6b:13:d9:ab:bd:59:e6:f6:51:ab:87: 53:e3:00:48 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA6AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzkwRDYxMTAvBgNVBAUTKEZFRUU5RjM2MEE1REQxMzI4QkUxQzgyQTE3NzA3OTg5 Njg3NTlENDgwHhcNMjUwNTMxMDA1ODAwWhcNMjUwNjA3MDA1ODAwWjAYMRYwFAYD VQQDEw02ODNhNTQxOS0yMzJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3Z8s2HNZf9jkq1Sfco+IRRWaS+SqiElr6i4tRK/iZgR0pOK8DOQVbIe1W90z Y3Z+gzv3Ku98pxLknbS4tjk4gH5jFxxMyxSvyc3uXDbssoCl5AUv+XWpj3JrD7qb Vwb7uEM1PGDYDLLct37rP4E/h7tmXWBcaZn9VbM5a0CBraBLZm6ebt14dHavxTbi QgSCYKcGktqlk0NdUKAo2bmt6Ezu0yrb2cVI62xnTJIsNZbL15g2zDasP59WmelH gWib5IGeGMHlbyD0NsKym5uPIL2U5gpWxlYrrWvigIlGVmi2fjGBzBTlDBdGYzsf 5kmnNxUYVeF2QOksvNCxvz2OyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ8wc0S1 ULyftb2tfVf6DKJ+nEDhMB8GA1UdIwQYMBaAFP7unzYKXdEyi+HIKhdweYlodZ1I MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOTBENi9GOTY0QkMzMjlB RUQxMUVDQkY0MkU0MjdDNEY5QUUwMi9fdTZmTmdwZDBUS0w0Y2dxRjNCNWlXaDFu VWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL191NmZOZ3BkMFRLTDRjZ3FGM0I1aVdoMW5VZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OTBENi9GOTY0QkMzMjlBRUQxMUVDQkY0MkU0MjdDNEY5QUUwMi9fdTZmTmdwZDBU S0w0Y2dxRjNCNWlXaDFuVWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBlawjzAtYlZqJjUCSeU3zkll8M+o3k/Q8OR86MlOppQV02NLy9TmjD 8IPQkADbrUyRIa/UMmsNnLMOLEVs8eRA7crVYfqBWU3LvOIXP/cu6tWWIZmZSJzQ 5rGunp0vbmg8JvIN70Wb/bBEoe/wIeeAI5QCN8wHoVrAbI4qN4XKkJ97Q3mxaWQJ 4JXu+7toGyC0+hCzkEUWRp2Nvxm+9cbaqRE5F5l0rJgjiIH+7apf8dCscUb4VTff wc/PAOC4NLTPwdQe8TOiNfDI4GAxy5Rhdah/opPyn9oBlF4yRzstAkmBONJoJIal XqgDEpAW4p6HaxPZq71Z5vZRq4dT4wBI -----END CERTIFICATE-----Generated at Sat May 31 17:47:16 2025 by rpki-client