$ rpki-client -vvf rpki.apnic.net/member_repository/A913A69E/FB9FB93A2AE611EAABD56B14C4F9AE02/d-pv4BZlHPsWk0FnRemlvqR0U0Y.mft File: d-pv4BZlHPsWk0FnRemlvqR0U0Y.mft (raw, json) Hash identifier: GCC8Rl57XPaisPoO7hBIQupwGd7rIBXov6KPWXHzDTc= Subject key identifier: E8:92:07:70:C8:70:40:D9:21:E5:5A:AC:87:EE:DF:0D:65:13:6B:95 Authority key identifier: 77:EA:6F:E0:16:65:1C:FB:16:93:41:67:45:E9:A5:BE:A4:74:53:46 Certificate issuer: /CN=A913A69E/serialNumber=77EA6FE016651CFB1693416745E9A5BEA4745346 Certificate serial: 0B8E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d-pv4BZlHPsWk0FnRemlvqR0U0Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913A69E/FB9FB93A2AE611EAABD56B14C4F9AE02/d-pv4BZlHPsWk0FnRemlvqR0U0Y.mft Manifest number: 0B85 Signing time: Fri 30 May 2025 19:14:15 +0000 Manifest this update: Fri 30 May 2025 19:14:14 +0000 Manifest next update: Fri 06 Jun 2025 19:14:14 +0000 Files and hashes: 1: d-pv4BZlHPsWk0FnRemlvqR0U0Y.crl (hash: 3ojFp7lSZtdhp3CBC2U1Umvy8kxwL54AkGpGyoVsptQ=) 2: AB60C088B6E111EDB3BAC26CC4F9AE02.roa (hash: 5XNAMXcyNSOVLGmmucARGwpqHZGGrdPlivmquQGAyUw=) 3: 951CA536C1B511EF87BCEA11C4F9AE02.roa (hash: 7wRjpl4ak/daHT3cAIU8dsdddsw6EG34B50egxoHuUc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913A69E/FB9FB93A2AE611EAABD56B14C4F9AE02/d-pv4BZlHPsWk0FnRemlvqR0U0Y.crl rsync://rpki.apnic.net/member_repository/A913A69E/FB9FB93A2AE611EAABD56B14C4F9AE02/d-pv4BZlHPsWk0FnRemlvqR0U0Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d-pv4BZlHPsWk0FnRemlvqR0U0Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 19:14:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2958 (0xb8e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913A69E, serialNumber=77EA6FE016651CFB1693416745E9A5BEA4745346 Validity Not Before: May 30 19:14:14 2025 GMT Not After : Jun 6 19:14:14 2025 GMT Subject: CN=683a0386-bf5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:60:96:e1:3a:49:88:10:79:39:f0:28:07:18: 5b:38:ba:09:1c:f1:55:7d:e0:40:10:91:6f:87:e3: de:b6:11:d8:fc:52:24:c7:0c:ba:cc:83:c9:b5:51: ef:d5:55:5e:5f:95:33:c5:1c:26:85:29:3a:d6:6e: 41:93:3a:df:de:1c:d9:ba:69:3a:ff:d2:b6:55:c7: da:b3:08:4a:5c:38:ee:45:e3:9b:d3:90:06:df:9a: d5:17:c2:c2:01:17:33:64:a4:d4:bb:0e:90:22:0d: 4c:f6:e2:b3:fb:31:40:fd:44:1a:70:85:8c:d7:da: 02:e7:6f:98:4b:3f:52:f0:0b:b5:8c:a7:7d:b5:a1: e5:09:d6:87:da:4c:ea:30:66:d4:ae:5b:3b:5e:b3: 29:d5:13:25:3c:36:98:f2:3c:4c:52:df:3a:a2:9b: 2e:54:ab:18:51:f9:c1:1b:27:4c:e2:bd:8f:9b:79: 71:a8:c2:97:c9:d6:7a:37:66:b3:d0:3b:24:eb:39: b3:c1:22:6c:15:0a:c1:a4:84:66:85:cb:59:ad:1a: ec:d3:fd:07:ca:75:62:91:8f:d1:42:1b:06:fb:54: 7e:f1:e5:c1:c4:94:c3:0f:d7:db:00:f5:01:50:55: f6:69:d1:0f:20:c2:58:f3:fc:3d:96:5e:70:18:60: 30:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:92:07:70:C8:70:40:D9:21:E5:5A:AC:87:EE:DF:0D:65:13:6B:95 X509v3 Authority Key Identifier: keyid:77:EA:6F:E0:16:65:1C:FB:16:93:41:67:45:E9:A5:BE:A4:74:53:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913A69E/FB9FB93A2AE611EAABD56B14C4F9AE02/d-pv4BZlHPsWk0FnRemlvqR0U0Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d-pv4BZlHPsWk0FnRemlvqR0U0Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913A69E/FB9FB93A2AE611EAABD56B14C4F9AE02/d-pv4BZlHPsWk0FnRemlvqR0U0Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:8f:ce:e7:ee:6b:3b:5d:81:82:4d:40:3f:a5:5e:83:8b:88: 71:7a:7e:ec:a7:03:23:ca:2a:03:96:1c:ef:5f:d2:5b:20:60: ab:6b:63:6f:7a:54:bd:a8:2b:be:1f:62:71:c8:4e:bc:cd:63: 78:db:8e:61:4c:78:17:62:c1:1e:28:6d:8f:8b:62:a9:01:ac: e4:cf:b3:6e:c3:cc:68:f0:00:00:f7:c8:50:fe:d5:2e:9e:73: 75:d8:8a:f2:19:1d:78:30:51:75:61:35:ed:4f:18:d0:1e:47: a5:5e:0a:34:6a:d6:33:06:54:d2:af:31:28:3f:bc:d4:44:d9: ec:4a:ae:be:f3:c5:3f:48:b3:b5:ca:d6:85:49:4b:96:f9:3e: 7d:fa:5a:82:59:5a:a5:92:69:57:03:20:9a:af:df:46:d7:bb: d1:79:80:6e:d1:b1:bd:f8:a8:20:cf:75:a3:f2:79:63:f8:5e: 9d:06:d3:65:84:e3:96:f5:e8:3c:6c:e7:8f:70:05:64:61:6f: 02:43:32:ee:a7:0d:21:de:23:ad:f4:97:03:e3:df:98:84:78: ab:e5:77:e1:cf:81:c1:a3:41:e5:06:c1:3f:a1:be:4c:8c:09: a1:78:57:e2:17:b6:ef:05:32:ab:7f:a2:82:96:b9:d4:33:ae: 71:32:ed:8b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC44wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0E2OUUxMTAvBgNVBAUTKDc3RUE2RkUwMTY2NTFDRkIxNjkzNDE2NzQ1RTlBNUJF QTQ3NDUzNDYwHhcNMjUwNTMwMTkxNDE0WhcNMjUwNjA2MTkxNDE0WjAYMRYwFAYD VQQDEw02ODNhMDM4Ni1iZjVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvWCW4TpJiBB5OfAoBxhbOLoJHPFVfeBAEJFvh+PethHY/FIkxwy6zIPJtVHv 1VVeX5UzxRwmhSk61m5Bkzrf3hzZumk6/9K2VcfaswhKXDjuReOb05AG35rVF8LC ARczZKTUuw6QIg1M9uKz+zFA/UQacIWM19oC52+YSz9S8Au1jKd9taHlCdaH2kzq MGbUrls7XrMp1RMlPDaY8jxMUt86opsuVKsYUfnBGydM4r2Pm3lxqMKXydZ6N2az 0Dsk6zmzwSJsFQrBpIRmhctZrRrs0/0HynVikY/RQhsG+1R+8eXBxJTDD9fbAPUB UFX2adEPIMJY8/w9ll5wGGAw0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOiSB3DI cEDZIeVarIfu3w1lE2uVMB8GA1UdIwQYMBaAFHfqb+AWZRz7FpNBZ0Xppb6kdFNG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQTY5RS9GQjlGQjkzQTJB RTYxMUVBQUJENTZCMTRDNEY5QUUwMi9kLXB2NEJabEhQc1drMEZuUmVtbHZxUjBV MFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2QtcHY0QlpsSFBzV2swRm5SZW1sdnFSMFUwWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QTY5RS9GQjlGQjkzQTJBRTYxMUVBQUJENTZCMTRDNEY5QUUwMi9kLXB2NEJabEhQ c1drMEZuUmVtbHZxUjBVMFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA0j87n7ms7XYGCTUA/pV6Di4hxen7spwMjyioDlhzvX9JbIGCra2Nv elS9qCu+H2JxyE68zWN4245hTHgXYsEeKG2Pi2KpAazkz7Nuw8xo8AAA98hQ/tUu nnN12IryGR14MFF1YTXtTxjQHkelXgo0atYzBlTSrzEoP7zURNnsSq6+88U/SLO1 ytaFSUuW+T59+lqCWVqlkmlXAyCar99G17vReYBu0bG9+Kggz3Wj8nlj+F6dBtNl hOOW9eg8bOePcAVkYW8CQzLupw0h3iOt9JcD49+YhHir5Xfhz4HBo0HlBsE/ob5M jAmheFfiF7bvBTKrf6KClrnUM65xMu2L -----END CERTIFICATE-----Generated at Sat May 31 17:47:20 2025 by rpki-client