$ rpki-client -vvf rpki.apnic.net/member_repository/A91422D7/5B9F71D2ED3011ECBF07F012C4F9AE02/rGoi8eThZQrPtSifXctdU5IPzzQ.mft File: rGoi8eThZQrPtSifXctdU5IPzzQ.mft (raw, json) Hash identifier: Ewq9ukVwvarqqJ1koqzvefoA601jkVfd6IbUBAB05BQ= Subject key identifier: D6:C8:81:65:76:40:C7:E6:1F:FC:01:CC:D7:62:E3:31:B4:47:AD:C9 Authority key identifier: AC:6A:22:F1:E4:E1:65:0A:CF:B5:28:9F:5D:CB:5D:53:92:0F:CF:34 Certificate issuer: /CN=A91422D7/serialNumber=AC6A22F1E4E1650ACFB5289F5DCB5D53920FCF34 Certificate serial: FD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rGoi8eThZQrPtSifXctdU5IPzzQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91422D7/5B9F71D2ED3011ECBF07F012C4F9AE02/rGoi8eThZQrPtSifXctdU5IPzzQ.mft Manifest number: 03C8 Signing time: Sat 31 May 2025 01:34:44 +0000 Manifest this update: Sat 31 May 2025 01:34:44 +0000 Manifest next update: Sat 07 Jun 2025 01:34:44 +0000 Files and hashes: 1: rGoi8eThZQrPtSifXctdU5IPzzQ.crl (hash: di9XPblVYUdngS8RRg6YiwOFziO5k9xV4Xw9L7Pc35I=) 2: CE5F74E2BE5811EEA8C02E2AC4F9AE02.roa (hash: tIDiP3hNqVNzA0IqRbP/SuZVvzepUKW2qtpK5KHsOYE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91422D7/5B9F71D2ED3011ECBF07F012C4F9AE02/rGoi8eThZQrPtSifXctdU5IPzzQ.crl rsync://rpki.apnic.net/member_repository/A91422D7/5B9F71D2ED3011ECBF07F012C4F9AE02/rGoi8eThZQrPtSifXctdU5IPzzQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rGoi8eThZQrPtSifXctdU5IPzzQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 01:34:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 253 (0xfd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91422D7, serialNumber=AC6A22F1E4E1650ACFB5289F5DCB5D53920FCF34 Validity Not Before: May 31 01:34:44 2025 GMT Not After : Jun 7 01:34:44 2025 GMT Subject: CN=683a5cb4-cb1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:94:44:c8:d0:f7:8c:33:38:fd:c9:b9:36:53: 33:a6:43:0e:fb:78:fa:3d:cb:fd:ea:f4:60:72:d6: 5b:c9:d3:f3:c4:54:47:58:f8:cb:96:79:e3:87:c9: f5:e0:66:b5:76:45:45:56:78:62:55:95:d4:f0:6b: a2:94:8a:4e:d9:b0:a4:00:d3:ea:29:5d:01:cd:0c: 8c:d0:e7:3c:10:78:7a:5c:00:ee:82:40:ee:87:00: 9d:53:2c:6f:1d:2f:36:de:69:44:b4:26:ac:11:6f: 5c:1e:f7:a5:0c:c1:1e:66:c3:5e:cd:00:27:cc:97: 3d:4c:5b:08:7a:b0:ad:4c:cc:de:4b:2a:59:6d:95: bc:91:2b:c9:36:3b:27:38:30:e3:a7:d8:52:49:32: 3b:0f:a5:a3:03:5c:00:c4:85:f1:a2:40:89:1a:3d: 05:c2:3e:5e:8e:3e:13:b5:59:1e:94:7f:b2:67:c6: 4d:db:f2:b3:3b:f2:24:14:24:60:40:7a:6d:b9:09: 50:37:33:bf:bd:12:34:ce:75:0f:b8:a1:4b:da:ea: 5b:e7:af:84:57:95:4c:7d:a3:90:8b:94:a4:3e:78: 99:01:0b:eb:8b:18:d2:21:14:93:19:98:12:97:24: 3a:27:eb:99:73:86:b0:f9:a7:4d:77:41:fa:de:5c: 7d:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:C8:81:65:76:40:C7:E6:1F:FC:01:CC:D7:62:E3:31:B4:47:AD:C9 X509v3 Authority Key Identifier: keyid:AC:6A:22:F1:E4:E1:65:0A:CF:B5:28:9F:5D:CB:5D:53:92:0F:CF:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91422D7/5B9F71D2ED3011ECBF07F012C4F9AE02/rGoi8eThZQrPtSifXctdU5IPzzQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rGoi8eThZQrPtSifXctdU5IPzzQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91422D7/5B9F71D2ED3011ECBF07F012C4F9AE02/rGoi8eThZQrPtSifXctdU5IPzzQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:ac:a3:f2:f3:6e:ad:11:e7:92:4e:01:02:ca:53:47:2e:29: 0c:8f:60:7f:ca:34:a4:de:f7:de:f3:99:68:3e:52:41:eb:13: a6:fb:ed:36:41:cb:99:d9:36:0d:6b:62:4f:cc:b7:fc:bb:47: 50:9c:2a:dc:bf:1e:00:38:51:4b:3d:af:74:60:91:c2:de:99: db:3d:cd:c1:c7:ee:38:09:0d:4a:ce:98:a5:bf:7b:df:89:81: 38:25:cf:35:4f:ba:0b:45:8f:8f:30:46:8f:7c:04:a7:15:c3: 2f:68:84:a5:19:fb:3f:40:8c:98:73:94:26:c2:5e:64:04:a0: e0:3b:a3:b6:3e:0f:e6:37:a0:2a:48:6e:f2:37:05:2d:23:0d: ea:f7:53:17:5f:33:85:aa:72:b1:f9:f4:1a:23:72:cc:09:40: 16:11:c2:6a:d5:7f:9e:e3:bd:30:22:52:70:96:eb:d2:9f:19: 87:91:f4:0c:f6:ec:2d:d2:eb:95:38:8a:69:5f:29:d5:e7:50: 5f:38:c9:20:a2:93:a5:96:ec:e2:4f:30:02:36:f9:44:36:bc: a2:43:1f:f8:f1:b1:82:a5:8e:59:c6:a3:f1:6d:11:f7:44:56: c6:7f:2e:73:32:1f:31:04:e9:49:ef:08:1c:41:a0:bb:18:c2: 93:3b:bc:cb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAP0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDIyRDcxMTAvBgNVBAUTKEFDNkEyMkYxRTRFMTY1MEFDRkI1Mjg5RjVEQ0I1RDUz OTIwRkNGMzQwHhcNMjUwNTMxMDEzNDQ0WhcNMjUwNjA3MDEzNDQ0WjAYMRYwFAYD VQQDEw02ODNhNWNiNC1jYjFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuJREyND3jDM4/cm5NlMzpkMO+3j6Pcv96vRgctZbydPzxFRHWPjLlnnjh8n1 4Ga1dkVFVnhiVZXU8GuilIpO2bCkANPqKV0BzQyM0Oc8EHh6XADugkDuhwCdUyxv HS823mlEtCasEW9cHvelDMEeZsNezQAnzJc9TFsIerCtTMzeSypZbZW8kSvJNjsn ODDjp9hSSTI7D6WjA1wAxIXxokCJGj0Fwj5ejj4TtVkelH+yZ8ZN2/KzO/IkFCRg QHptuQlQNzO/vRI0znUPuKFL2upb56+EV5VMfaOQi5SkPniZAQvrixjSIRSTGZgS lyQ6J+uZc4aw+adNd0H63lx9PwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNbIgWV2 QMfmH/wBzNdi4zG0R63JMB8GA1UdIwQYMBaAFKxqIvHk4WUKz7Uon13LXVOSD880 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjJENy81QjlGNzFEMkVE MzAxMUVDQkYwN0YwMTJDNEY5QUUwMi9yR29pOGVUaFpRclB0U2lmWGN0ZFU1SVB6 elEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JHb2k4ZVRoWlFyUHRTaWZYY3RkVTVJUHp6US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MjJENy81QjlGNzFEMkVEMzAxMUVDQkYwN0YwMTJDNEY5QUUwMi9yR29pOGVUaFpR clB0U2lmWGN0ZFU1SVB6elEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCqrKPy826tEeeSTgECylNHLikMj2B/yjSk3vfe85loPlJB6xOm++02 QcuZ2TYNa2JPzLf8u0dQnCrcvx4AOFFLPa90YJHC3pnbPc3Bx+44CQ1Kzpilv3vf iYE4Jc81T7oLRY+PMEaPfASnFcMvaISlGfs/QIyYc5Qmwl5kBKDgO6O2Pg/mN6Aq SG7yNwUtIw3q91MXXzOFqnKx+fQaI3LMCUAWEcJq1X+e470wIlJwluvSnxmHkfQM 9uwt0uuVOIppXynV51BfOMkgopOlluziTzACNvlENryiQx/48bGCpY5ZxqPxbRH3 RFbGfy5zMh8xBOlJ7wgcQaC7GMKTO7zL -----END CERTIFICATE-----Generated at Sat May 31 17:23:31 2025 by rpki-client