$ rpki-client -vvf rpki.apnic.net/member_repository/A913EE77/C400BB5C56D111EAA94E7E5DC4F9AE02/sY6ktIaEpn3qATi6uiMwbQADzcw.mft File: sY6ktIaEpn3qATi6uiMwbQADzcw.mft (raw, json) Hash identifier: doBIMdhgiixC5dmuuU87huqfWwLBoI2hi28BqMpd47I= Subject key identifier: 80:07:27:54:A1:F4:50:9B:1D:10:EA:6E:40:5B:CE:D9:83:2A:01:B0 Authority key identifier: B1:8E:A4:B4:86:84:A6:7D:EA:01:38:BA:BA:23:30:6D:00:03:CD:CC Certificate issuer: /CN=A913EE77/serialNumber=B18EA4B48684A67DEA0138BABA23306D0003CDCC Certificate serial: 06FF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sY6ktIaEpn3qATi6uiMwbQADzcw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913EE77/C400BB5C56D111EAA94E7E5DC4F9AE02/sY6ktIaEpn3qATi6uiMwbQADzcw.mft Manifest number: 0A94 Signing time: Fri 30 May 2025 19:44:16 +0000 Manifest this update: Fri 30 May 2025 19:44:16 +0000 Manifest next update: Fri 06 Jun 2025 19:44:16 +0000 Files and hashes: 1: sY6ktIaEpn3qATi6uiMwbQADzcw.crl (hash: 8QbYNzAAetpWMnYsj4O4AyfYF6HZPb+G3hyCMrLguTY=) 2: A8D10944DEA511EEB7B9DC35C4F9AE02.roa (hash: F5nZUR683r0GHaN7PIQS7ScZ+hYmoRww/yUwHk4aoNk=) 3: A0A9FE74DEA511EE8F515632C4F9AE02.roa (hash: SjnLXmN7OQs2QJo93KJDaMm8uwo9AE2p0tGK7wMyelo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913EE77/C400BB5C56D111EAA94E7E5DC4F9AE02/sY6ktIaEpn3qATi6uiMwbQADzcw.crl rsync://rpki.apnic.net/member_repository/A913EE77/C400BB5C56D111EAA94E7E5DC4F9AE02/sY6ktIaEpn3qATi6uiMwbQADzcw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sY6ktIaEpn3qATi6uiMwbQADzcw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 19:44:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1791 (0x6ff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913EE77, serialNumber=B18EA4B48684A67DEA0138BABA23306D0003CDCC Validity Not Before: May 30 19:44:16 2025 GMT Not After : Jun 6 19:44:16 2025 GMT Subject: CN=683a0a90-2692 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:f3:47:c0:22:50:16:4e:0d:7b:cc:fb:d2:a6: b5:ec:f2:92:e4:af:ba:07:f3:7d:2d:db:97:e5:69: 0b:65:b7:e2:49:42:97:63:97:b8:9e:ca:1e:83:d9: 3e:ef:8c:16:e5:27:2e:51:c2:62:e6:a2:4b:04:4f: b9:3b:a2:28:40:07:04:8e:b1:e7:1b:36:17:c8:0b: 7a:cd:e7:d2:26:80:bf:65:7f:c0:a4:93:62:7c:93: 5c:96:78:01:01:eb:86:f1:61:f0:8a:99:a4:2c:7c: 70:d2:f6:8b:06:a8:7b:d0:b6:af:d0:88:04:a6:9d: 37:ff:a8:be:ed:69:e7:9b:33:08:6a:76:76:0a:90: 46:91:ce:ab:89:4b:28:7b:37:3d:6d:dd:4f:12:82: 22:07:ac:a3:5c:3d:8c:5a:55:9e:30:f0:53:85:1a: 8b:34:7d:e8:55:7f:8a:72:01:14:ba:16:9e:16:84: 0c:e7:66:ef:cb:a0:28:a7:6c:ce:42:a7:21:2f:21: 05:84:2f:3f:31:94:8c:79:25:88:bc:fb:14:84:58: ab:74:a6:8a:ce:2b:65:27:6f:4e:18:78:5e:21:65: 9d:fb:51:96:29:96:45:fd:7b:6a:25:f9:f2:05:34: 18:69:d9:60:cc:7e:5a:b0:75:c2:c1:fe:1e:a1:af: b0:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:07:27:54:A1:F4:50:9B:1D:10:EA:6E:40:5B:CE:D9:83:2A:01:B0 X509v3 Authority Key Identifier: keyid:B1:8E:A4:B4:86:84:A6:7D:EA:01:38:BA:BA:23:30:6D:00:03:CD:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913EE77/C400BB5C56D111EAA94E7E5DC4F9AE02/sY6ktIaEpn3qATi6uiMwbQADzcw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sY6ktIaEpn3qATi6uiMwbQADzcw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913EE77/C400BB5C56D111EAA94E7E5DC4F9AE02/sY6ktIaEpn3qATi6uiMwbQADzcw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:0c:35:96:6a:b7:f0:d7:aa:02:b0:36:56:74:42:03:8b:78: 56:f4:bc:da:28:5f:b4:d6:d3:70:b2:a7:91:f5:b7:48:3a:33: d6:99:e3:09:4f:84:65:dd:aa:4e:49:51:83:56:6d:fc:7c:61: 56:2d:c6:5f:3e:27:d5:c9:63:01:ae:65:79:58:dc:b6:17:fe: 46:dd:db:48:2f:2f:7e:22:db:b4:84:02:89:f8:e0:ab:7a:78: d8:a3:13:03:1b:4a:5d:82:80:9a:ee:56:eb:ca:c1:ad:63:46: b8:8b:26:48:21:3c:a1:d5:ca:a9:94:03:61:ba:ed:d3:1d:91: 97:3c:13:fa:bf:34:2e:be:fc:11:4e:f1:54:83:b6:db:cd:e2: 08:9c:49:42:e9:ea:f3:49:e8:6b:af:c3:33:dd:c7:79:76:65: 5a:6a:4e:3b:e5:ec:13:3c:76:d1:ab:32:f6:93:a7:be:18:74: a9:20:85:b7:ce:a9:e1:01:19:7d:87:2d:cf:2e:5f:6d:3e:2b: 6c:79:8d:f0:f0:82:cf:b5:d4:76:09:9e:a1:26:41:04:95:db: 8f:11:a8:ce:3d:cd:4c:34:65:4c:89:e2:3f:50:5b:ec:7d:5b: 71:9b:06:92:c6:cf:cb:42:67:e9:10:62:a0:82:4c:8b:87:fd: 7e:ec:4a:f6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBv8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0VFNzcxMTAvBgNVBAUTKEIxOEVBNEI0ODY4NEE2N0RFQTAxMzhCQUJBMjMzMDZE MDAwM0NEQ0MwHhcNMjUwNTMwMTk0NDE2WhcNMjUwNjA2MTk0NDE2WjAYMRYwFAYD VQQDEw02ODNhMGE5MC0yNjkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzPNHwCJQFk4Ne8z70qa17PKS5K+6B/N9LduX5WkLZbfiSUKXY5e4nsoeg9k+ 74wW5ScuUcJi5qJLBE+5O6IoQAcEjrHnGzYXyAt6zefSJoC/ZX/ApJNifJNclngB AeuG8WHwipmkLHxw0vaLBqh70Lav0IgEpp03/6i+7WnnmzMIanZ2CpBGkc6riUso ezc9bd1PEoIiB6yjXD2MWlWeMPBThRqLNH3oVX+KcgEUuhaeFoQM52bvy6Aop2zO QqchLyEFhC8/MZSMeSWIvPsUhFirdKaKzitlJ29OGHheIWWd+1GWKZZF/XtqJfny BTQYadlgzH5asHXCwf4eoa+w4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIAHJ1Sh 9FCbHRDqbkBbztmDKgGwMB8GA1UdIwQYMBaAFLGOpLSGhKZ96gE4urojMG0AA83M MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRUU3Ny9DNDAwQkI1QzU2 RDExMUVBQTk0RTdFNURDNEY5QUUwMi9zWTZrdElhRXBuM3FBVGk2dWlNd2JRQUR6 Y3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NZNmt0SWFFcG4zcUFUaTZ1aU13YlFBRHpjdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RUU3Ny9DNDAwQkI1QzU2RDExMUVBQTk0RTdFNURDNEY5QUUwMi9zWTZrdElhRXBu M3FBVGk2dWlNd2JRQUR6Y3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAyDDWWarfw16oCsDZWdEIDi3hW9LzaKF+01tNwsqeR9bdIOjPWmeMJ T4Rl3apOSVGDVm38fGFWLcZfPifVyWMBrmV5WNy2F/5G3dtILy9+Itu0hAKJ+OCr enjYoxMDG0pdgoCa7lbrysGtY0a4iyZIITyh1cqplANhuu3THZGXPBP6vzQuvvwR TvFUg7bbzeIInElC6erzSehrr8Mz3cd5dmVaak475ewTPHbRqzL2k6e+GHSpIIW3 zqnhARl9hy3PLl9tPitseY3w8ILPtdR2CZ6hJkEElduPEajOPc1MNGVMieI/UFvs fVtxmwaSxs/LQmfpEGKggkyLh/1+7Er2 -----END CERTIFICATE-----Generated at Sat May 31 17:01:18 2025 by rpki-client