$ rpki-client -vvf rpki.apnic.net/member_repository/A914459D/0B3F665AD60F11EFB0FA533FC4F9AE02/-0iFaOdSC8eCoRmJdikDDtBpXNs.mft File: -0iFaOdSC8eCoRmJdikDDtBpXNs.mft (raw, json) Hash identifier: eypWCvGBdEkEqfyjs3Z3NeE74xtqbjCqUNo8P4NKHCc= Subject key identifier: A0:B6:FD:2D:10:E0:2B:9C:C9:5B:73:19:F7:67:02:95:07:77:70:DB Authority key identifier: FB:48:85:68:E7:52:0B:C7:82:A1:19:89:76:29:03:0E:D0:69:5C:DB Certificate issuer: /CN=A914459D/serialNumber=FB488568E7520BC782A119897629030ED0695CDB Certificate serial: 48 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0iFaOdSC8eCoRmJdikDDtBpXNs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914459D/0B3F665AD60F11EFB0FA533FC4F9AE02/-0iFaOdSC8eCoRmJdikDDtBpXNs.mft Manifest number: 46 Signing time: Sat 31 May 2025 06:59:26 +0000 Manifest this update: Sat 31 May 2025 06:59:25 +0000 Manifest next update: Sat 07 Jun 2025 06:59:25 +0000 Files and hashes: 1: -0iFaOdSC8eCoRmJdikDDtBpXNs.crl (hash: 4IIxK1HS4Z/a40j6rK4eF6AQJwb/5GSQbnamK8gx2b0=) 2: 4720EB9ED60F11EFA2510540C4F9AE02.roa (hash: Q8ipP3E5cVxqpK+wwh4P32pECYgAwVU6B1+eB8QC8yE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914459D/0B3F665AD60F11EFB0FA533FC4F9AE02/-0iFaOdSC8eCoRmJdikDDtBpXNs.crl rsync://rpki.apnic.net/member_repository/A914459D/0B3F665AD60F11EFB0FA533FC4F9AE02/-0iFaOdSC8eCoRmJdikDDtBpXNs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0iFaOdSC8eCoRmJdikDDtBpXNs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 06:59:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72 (0x48) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914459D, serialNumber=FB488568E7520BC782A119897629030ED0695CDB Validity Not Before: May 31 06:59:25 2025 GMT Not After : Jun 7 06:59:25 2025 GMT Subject: CN=683aa8ce-08ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:99:2c:49:14:42:ec:ef:5e:29:3c:29:69:d4: fe:1f:1b:86:29:89:d4:b2:d2:3b:75:ea:88:7f:a9: 90:88:18:1c:9b:6f:d4:f8:f6:9d:23:10:4f:b7:f6: 08:eb:e6:f5:fa:9e:e8:3f:49:ca:cb:6d:3c:93:da: b2:92:d3:00:ea:37:36:8f:20:4b:a7:cc:d4:e9:b9: 2d:40:07:25:26:4b:ea:fa:29:cb:3f:b3:38:c3:f7: 2d:db:2d:06:36:36:c7:a1:e6:7a:76:07:4d:d2:7d: e6:15:b7:db:c8:57:2d:99:f9:e5:21:73:ef:ac:15: 48:27:b0:74:7c:7f:ba:d7:a6:9a:0a:b7:25:9b:e0: 6e:9b:ae:9a:07:81:3f:d4:be:21:65:7c:6f:c4:7f: 7d:fc:b5:80:3c:5e:29:43:95:ef:69:4b:cd:4c:bc: d8:ca:e4:67:9b:bf:e9:5b:9d:82:a5:8e:ab:3c:03: 12:e3:d7:f4:44:e9:6d:7d:0b:62:18:b4:ff:67:25: 46:8a:33:f8:44:6d:75:f0:62:42:2b:b2:57:01:50: 43:51:f4:b3:70:db:05:fd:a2:00:45:c3:59:51:0e: 4a:68:ea:17:fd:d8:27:e6:6f:db:cf:5f:4d:79:ce: 21:3b:c9:e2:9f:71:99:f3:ae:dd:d2:ef:10:ca:1d: 19:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:B6:FD:2D:10:E0:2B:9C:C9:5B:73:19:F7:67:02:95:07:77:70:DB X509v3 Authority Key Identifier: keyid:FB:48:85:68:E7:52:0B:C7:82:A1:19:89:76:29:03:0E:D0:69:5C:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914459D/0B3F665AD60F11EFB0FA533FC4F9AE02/-0iFaOdSC8eCoRmJdikDDtBpXNs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0iFaOdSC8eCoRmJdikDDtBpXNs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914459D/0B3F665AD60F11EFB0FA533FC4F9AE02/-0iFaOdSC8eCoRmJdikDDtBpXNs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:9d:c7:17:f2:2a:e2:8d:95:ae:78:e3:10:0f:fd:94:c6:0f: 33:37:67:a9:12:5b:80:46:56:d9:23:cc:5d:e8:83:28:23:94: 9b:3b:b7:4d:6f:8a:69:e0:85:05:b4:b3:67:93:ec:61:f1:12: e8:be:d2:b3:34:7a:fc:ea:dd:4c:02:86:21:e1:e8:fe:6b:f9: 17:ad:f2:9a:7e:fc:33:5f:19:96:c2:e5:59:d0:1a:2d:c2:ae: 55:2a:f0:0b:2d:73:4d:a7:35:65:5b:65:28:dc:34:53:27:c7: ca:ed:c7:36:56:85:cc:83:05:f4:70:a7:c3:d9:36:5a:72:ee: 92:94:54:1c:94:b4:52:5b:f8:26:19:34:65:e0:75:3e:03:cd: 75:6f:13:da:7c:2e:f5:2f:5e:4b:fb:45:08:61:c7:e6:fc:76: 85:86:bd:9d:0a:fd:cc:6f:5d:ef:d9:9d:df:18:4e:28:0f:70: 49:a3:77:96:27:37:e7:a8:03:ae:a9:a7:90:92:de:ad:9d:bb: ec:a2:e6:5c:6b:d2:a3:40:e8:fb:18:86:5c:d1:13:ac:d9:f2: 9a:c8:63:57:2d:f8:46:45:8a:8a:f2:b9:a4:8a:a4:d4:4b:ce: 76:b4:dc:a9:2a:e8:82:8b:3e:3f:a2:db:c9:50:10:9d:06:19: 7a:45:0f:69 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBSDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 NDU5RDExMC8GA1UEBRMoRkI0ODg1NjhFNzUyMEJDNzgyQTExOTg5NzYyOTAzMEVE MDY5NUNEQjAeFw0yNTA1MzEwNjU5MjVaFw0yNTA2MDcwNjU5MjVaMBgxFjAUBgNV BAMTDTY4M2FhOGNlLTA4ZWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDGmSxJFELs714pPClp1P4fG4YpidSy0jt16oh/qZCIGBybb9T49p0jEE+39gjr 5vX6nug/ScrLbTyT2rKS0wDqNzaPIEunzNTpuS1AByUmS+r6Kcs/szjD9y3bLQY2 Nseh5np2B03SfeYVt9vIVy2Z+eUhc++sFUgnsHR8f7rXppoKtyWb4G6brpoHgT/U viFlfG/Ef338tYA8XilDle9pS81MvNjK5Gebv+lbnYKljqs8AxLj1/RE6W19C2IY tP9nJUaKM/hEbXXwYkIrslcBUENR9LNw2wX9ogBFw1lRDkpo6hf92Cfmb9vPX015 ziE7yeKfcZnzrt3S7xDKHRlRAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUoLb9LRDg K5zJW3MZ92cClQd3cNswHwYDVR0jBBgwFoAU+0iFaOdSC8eCoRmJdikDDtBpXNsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ0NTlELzBCM0Y2NjVBRDYw RjExRUZCMEZBNTMzRkM0RjlBRTAyLy0waUZhT2RTQzhlQ29SbUpkaWtERHRCcFhO cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvLTBpRmFPZFNDOGVDb1JtSmRpa0REdEJwWE5zLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ0 NTlELzBCM0Y2NjVBRDYwRjExRUZCMEZBNTMzRkM0RjlBRTAyLy0waUZhT2RTQzhl Q29SbUpkaWtERHRCcFhOcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADWdxxfyKuKNla544xAP/ZTGDzM3Z6kSW4BGVtkjzF3ogygjlJs7t01v imnghQW0s2eT7GHxEui+0rM0evzq3UwChiHh6P5r+Ret8pp+/DNfGZbC5VnQGi3C rlUq8Astc02nNWVbZSjcNFMnx8rtxzZWhcyDBfRwp8PZNlpy7pKUVByUtFJb+CYZ NGXgdT4DzXVvE9p8LvUvXkv7RQhhx+b8doWGvZ0K/cxvXe/Znd8YTigPcEmjd5Yn N+eoA66pp5CS3q2du+yi5lxr0qNA6PsYhlzRE6zZ8prIY1ct+EZFioryuaSKpNRL zna03Kkq6IKLPj+i28lQEJ0GGXpFD2k= -----END CERTIFICATE-----Generated at Sat May 31 17:51:37 2025 by rpki-client