$ rpki-client -vvf rpki.apnic.net/member_repository/A913FBB2/0E2705441A8611EEA0AA8716C4F9AE02/rYW34Ys6FvU-kpOKM07Guz64tjA.mft File: rYW34Ys6FvU-kpOKM07Guz64tjA.mft (raw, json) Hash identifier: HdAxPwxjaGgj3QbSfoGiqSA2zB7KcHGVXcNXRkcuo50= Subject key identifier: FF:82:45:3B:B5:C3:DD:CE:36:C9:A3:7D:83:E3:A1:32:07:5C:E0:05 Authority key identifier: AD:85:B7:E1:8B:3A:16:F5:3E:92:93:8A:33:4E:C6:BB:3E:B8:B6:30 Certificate issuer: /CN=A913FBB2/serialNumber=AD85B7E18B3A16F53E92938A334EC6BB3EB8B630 Certificate serial: 0174 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rYW34Ys6FvU-kpOKM07Guz64tjA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913FBB2/0E2705441A8611EEA0AA8716C4F9AE02/rYW34Ys6FvU-kpOKM07Guz64tjA.mft Manifest number: 0168 Signing time: Sat 31 May 2025 03:36:08 +0000 Manifest this update: Sat 31 May 2025 03:36:08 +0000 Manifest next update: Sat 07 Jun 2025 03:36:08 +0000 Files and hashes: 1: rYW34Ys6FvU-kpOKM07Guz64tjA.crl (hash: +Bj7lUiWPSHfZNfAYXD95S1zfm3RUWo+KexzUmDCbYI=) 2: A9321C0A1B2A11EE84F40B3AC4F9AE02.roa (hash: p81EH8N+mq+tuXFMTqadpbhtGnx8x8sovmy9swXxzCM=) 3: A8C501F61B2A11EE84F40B3AC4F9AE02.roa (hash: GGQZQXITbCi35kDi1cszvpoNDF4GQHNFV1AYsPL4NFA=) 4: B97D647C1A8811EEB5AE963CC4F9AE02.roa (hash: NMwwqT5E6qjLfBlg6rE6vavEzETFOwEvTWR7gAiqQV8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913FBB2/0E2705441A8611EEA0AA8716C4F9AE02/rYW34Ys6FvU-kpOKM07Guz64tjA.crl rsync://rpki.apnic.net/member_repository/A913FBB2/0E2705441A8611EEA0AA8716C4F9AE02/rYW34Ys6FvU-kpOKM07Guz64tjA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rYW34Ys6FvU-kpOKM07Guz64tjA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 03:36:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 372 (0x174) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913FBB2, serialNumber=AD85B7E18B3A16F53E92938A334EC6BB3EB8B630 Validity Not Before: May 31 03:36:08 2025 GMT Not After : Jun 7 03:36:08 2025 GMT Subject: CN=683a7928-e2d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:f3:ab:c7:da:e7:5c:b9:ad:cc:65:e4:5e:e3: c6:25:65:63:67:94:80:88:95:4d:40:20:2d:5c:eb: 53:63:52:af:00:ee:e3:48:f3:4a:8d:a5:aa:bd:f5: a8:c9:d4:46:4a:21:8e:f4:ab:1f:02:68:c7:67:10: 65:2f:f0:32:8c:65:77:75:ee:a5:34:d5:49:2c:93: 10:3e:7a:ad:21:b5:2c:c8:4b:2c:42:c8:ba:7c:54: 9a:fe:55:79:25:c5:56:e8:2e:c0:44:6f:eb:dc:e0: 01:3e:af:58:41:54:e0:a4:22:f7:22:60:c8:88:96: 08:d7:d5:69:37:d1:79:e6:33:4c:55:c9:2d:f4:85: 3b:42:68:9e:59:8a:23:ca:8a:ab:49:3e:44:e6:b8: 42:0e:80:e5:85:26:db:13:fd:f4:6c:2e:3a:af:fe: 22:54:4e:96:a6:8d:73:13:48:2b:6c:8d:80:fa:c4: 99:52:72:7f:07:5b:c8:77:ae:6a:ea:bf:b5:46:71: ee:42:03:b4:3a:9e:a1:37:6e:4e:7a:53:f7:88:b5: 8f:2f:ce:bc:a6:16:7a:b5:9c:4f:0a:37:5f:75:9e: 13:9f:2c:8c:d0:8f:8d:86:e8:e6:e7:ee:03:b5:5e: 50:50:15:f1:e7:70:fd:d0:10:e4:fa:74:27:d8:59: cb:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:82:45:3B:B5:C3:DD:CE:36:C9:A3:7D:83:E3:A1:32:07:5C:E0:05 X509v3 Authority Key Identifier: keyid:AD:85:B7:E1:8B:3A:16:F5:3E:92:93:8A:33:4E:C6:BB:3E:B8:B6:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913FBB2/0E2705441A8611EEA0AA8716C4F9AE02/rYW34Ys6FvU-kpOKM07Guz64tjA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rYW34Ys6FvU-kpOKM07Guz64tjA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913FBB2/0E2705441A8611EEA0AA8716C4F9AE02/rYW34Ys6FvU-kpOKM07Guz64tjA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:70:ac:49:fa:d6:ea:28:6c:0a:0d:b4:82:4c:3f:be:9a:70: 9c:8b:d5:73:e6:99:24:ed:0e:63:a2:0d:d1:bc:6e:2e:51:23: 65:da:0e:64:97:86:9b:f9:58:a4:55:ec:bb:9f:23:7b:91:77: 62:73:54:c4:65:71:a0:f3:36:5a:b5:54:fd:8e:c5:17:2c:7d: 4e:70:8f:4b:cd:6b:43:c9:a0:41:ec:39:ab:b4:0f:38:4a:a3: 42:c8:fb:ef:c5:1f:d0:87:65:d1:0b:8a:f8:06:e6:a6:e9:64: 8f:b1:f7:cd:e2:73:3b:65:8e:b3:a3:30:e5:40:a2:c0:0a:65: c5:f7:cd:60:89:b6:ab:82:d1:b0:d5:ae:3a:3c:37:c2:3a:a4: c0:19:92:fa:cb:d2:6e:ad:51:84:5a:4c:0d:e5:bf:67:a4:71: fc:b7:2c:43:cf:c5:c6:0c:a4:ea:c6:d2:fe:9c:f4:8d:25:d1: 85:46:57:c4:d2:b2:38:72:26:50:9a:2c:7c:64:8a:7e:1c:3a: e1:ff:01:42:f5:43:a5:7a:48:0d:90:21:c4:d2:0d:71:0e:af: e3:67:74:f4:eb:0f:8b:e7:73:88:03:80:ad:da:55:69:bd:3d: 5b:07:99:34:a3:58:cb:59:0a:2b:b2:3c:51:c5:33:af:9f:cf: 74:36:1c:07 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0ZCQjIxMTAvBgNVBAUTKEFEODVCN0UxOEIzQTE2RjUzRTkyOTM4QTMzNEVDNkJC M0VCOEI2MzAwHhcNMjUwNTMxMDMzNjA4WhcNMjUwNjA3MDMzNjA4WjAYMRYwFAYD VQQDEw02ODNhNzkyOC1lMmQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx/Orx9rnXLmtzGXkXuPGJWVjZ5SAiJVNQCAtXOtTY1KvAO7jSPNKjaWqvfWo ydRGSiGO9KsfAmjHZxBlL/AyjGV3de6lNNVJLJMQPnqtIbUsyEssQsi6fFSa/lV5 JcVW6C7ARG/r3OABPq9YQVTgpCL3ImDIiJYI19VpN9F55jNMVckt9IU7QmieWYoj yoqrST5E5rhCDoDlhSbbE/30bC46r/4iVE6Wpo1zE0grbI2A+sSZUnJ/B1vId65q 6r+1RnHuQgO0Op6hN25OelP3iLWPL868phZ6tZxPCjdfdZ4TnyyM0I+Nhujm5+4D tV5QUBXx53D90BDk+nQn2FnL8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP+CRTu1 w93ONsmjfYPjoTIHXOAFMB8GA1UdIwQYMBaAFK2Ft+GLOhb1PpKTijNOxrs+uLYw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRkJCMi8wRTI3MDU0NDFB ODYxMUVFQTBBQTg3MTZDNEY5QUUwMi9yWVczNFlzNkZ2VS1rcE9LTTA3R3V6NjR0 akEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JZVzM0WXM2RnZVLWtwT0tNMDdHdXo2NHRqQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RkJCMi8wRTI3MDU0NDFBODYxMUVFQTBBQTg3MTZDNEY5QUUwMi9yWVczNFlzNkZ2 VS1rcE9LTTA3R3V6NjR0akEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCqcKxJ+tbqKGwKDbSCTD++mnCci9Vz5pkk7Q5jog3RvG4uUSNl2g5k l4ab+VikVey7nyN7kXdic1TEZXGg8zZatVT9jsUXLH1OcI9LzWtDyaBB7DmrtA84 SqNCyPvvxR/Qh2XRC4r4Buam6WSPsffN4nM7ZY6zozDlQKLACmXF981gibargtGw 1a46PDfCOqTAGZL6y9JurVGEWkwN5b9npHH8tyxDz8XGDKTqxtL+nPSNJdGFRlfE 0rI4ciZQmix8ZIp+HDrh/wFC9UOlekgNkCHE0g1xDq/jZ3T06w+L53OIA4Ct2lVp vT1bB5k0o1jLWQorsjxRxTOvn890NhwH -----END CERTIFICATE-----Generated at Sat May 31 17:53:08 2025 by rpki-client