$ rpki-client -vvf rpki.apnic.net/member_repository/A91449E2/B6443384EFFF11ED8556EE54C4F9AE02/D0a9vHSQTl34KfAVlbUcqqIBuds.mft File: D0a9vHSQTl34KfAVlbUcqqIBuds.mft (raw, json) Hash identifier: iY6Yfz3oW+K5TZ4xb8xsB0zTKGfImyc5ICGkPiYDjXU= Subject key identifier: A4:A2:17:15:CD:77:80:A6:53:CE:5E:7B:77:42:C3:18:62:C0:73:84 Authority key identifier: 0F:46:BD:BC:74:90:4E:5D:F8:29:F0:15:95:B5:1C:AA:A2:01:B9:DB Certificate issuer: /CN=A91449E2/serialNumber=0F46BDBC74904E5DF829F01595B51CAAA201B9DB Certificate serial: 0185 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D0a9vHSQTl34KfAVlbUcqqIBuds.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91449E2/B6443384EFFF11ED8556EE54C4F9AE02/D0a9vHSQTl34KfAVlbUcqqIBuds.mft Manifest number: 0182 Signing time: Sat 31 May 2025 03:51:36 +0000 Manifest this update: Sat 31 May 2025 03:51:36 +0000 Manifest next update: Sat 07 Jun 2025 03:51:36 +0000 Files and hashes: 1: D0a9vHSQTl34KfAVlbUcqqIBuds.crl (hash: o21a1hiRcVCQGt7tYxN/thhEZzYpnxC9E5plzp7us+o=) 2: 568D8AACF00511ED9239BC6EC4F9AE02.roa (hash: INPCDc0DcqgC408Ka6XEyt5LGDqlBDYRzaUMMyrzKIM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91449E2/B6443384EFFF11ED8556EE54C4F9AE02/D0a9vHSQTl34KfAVlbUcqqIBuds.crl rsync://rpki.apnic.net/member_repository/A91449E2/B6443384EFFF11ED8556EE54C4F9AE02/D0a9vHSQTl34KfAVlbUcqqIBuds.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D0a9vHSQTl34KfAVlbUcqqIBuds.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 03:51:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 389 (0x185) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91449E2, serialNumber=0F46BDBC74904E5DF829F01595B51CAAA201B9DB Validity Not Before: May 31 03:51:36 2025 GMT Not After : Jun 7 03:51:36 2025 GMT Subject: CN=683a7cc8-9f86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:5a:f1:76:63:63:2c:31:cd:64:a7:58:c1:ab: 07:d9:6a:0e:c1:24:42:37:71:bb:f5:f6:74:82:44: 47:dc:41:9b:f5:8a:4d:fe:da:6d:1c:c6:51:c2:19: a6:d7:fc:df:b2:5b:88:48:6a:99:7e:5a:88:88:a3: 52:4a:9e:75:3a:59:e6:62:6b:3d:e2:f8:87:fa:c5: 6c:3e:39:e9:a5:55:b6:97:d4:14:e1:26:04:16:73: 39:5f:e7:b3:a2:b5:08:6b:87:37:b3:8f:50:8d:e8: fc:2f:47:64:28:4f:8a:c2:78:70:f1:f6:fa:51:43: 11:d0:2f:b5:a1:02:ce:c2:84:b1:4b:18:62:f9:df: 4e:11:b9:ad:34:f7:87:44:6f:fd:d3:ca:6d:cd:15: 7f:c7:71:10:34:68:7b:aa:9c:6d:f2:c9:2c:d1:d9: b7:6f:c9:4c:3d:de:7b:ec:82:18:a8:a3:04:9a:e7: c6:2d:ab:57:09:17:08:a3:13:60:2c:9b:93:41:94: 72:d8:64:6a:b6:73:64:a5:28:9f:b2:d6:0c:27:64: a2:ba:de:9b:59:69:7b:fe:9d:b7:55:f6:83:d0:dc: 01:a3:ea:0c:14:d2:08:92:c1:ff:91:e8:c1:43:22: 7d:90:ee:cd:e9:fa:13:22:f0:bd:b6:de:49:ad:1a: 8a:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:A2:17:15:CD:77:80:A6:53:CE:5E:7B:77:42:C3:18:62:C0:73:84 X509v3 Authority Key Identifier: keyid:0F:46:BD:BC:74:90:4E:5D:F8:29:F0:15:95:B5:1C:AA:A2:01:B9:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91449E2/B6443384EFFF11ED8556EE54C4F9AE02/D0a9vHSQTl34KfAVlbUcqqIBuds.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D0a9vHSQTl34KfAVlbUcqqIBuds.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91449E2/B6443384EFFF11ED8556EE54C4F9AE02/D0a9vHSQTl34KfAVlbUcqqIBuds.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption dd:66:ec:10:33:b5:59:6d:f7:6b:fe:89:68:18:21:73:28:6b: b9:b1:25:c2:3e:18:05:12:78:29:1a:29:9d:dc:37:ef:b6:e5: a1:57:e9:a7:fa:c4:e3:a0:b6:a4:0a:55:40:1c:23:16:b2:ef: bd:74:59:7f:bc:7b:df:b7:ff:5c:ab:1a:e1:7f:2c:2b:c6:9c: 47:16:e3:14:7c:2a:b8:e0:c3:38:12:76:30:ba:92:20:ff:67: 34:e1:ad:00:0e:5e:e1:ea:08:58:81:8a:9d:ce:a6:90:02:f8: c3:24:56:e5:72:d2:cb:f9:67:84:d2:21:f3:30:25:29:de:85: a6:6f:b5:79:06:80:b7:64:e5:3c:00:37:9c:2f:88:f8:4a:dd: 53:fd:2b:f9:23:e1:5b:96:d7:fe:3b:01:00:f6:b8:d6:c5:c3: 49:30:de:e6:ae:6d:b4:c6:78:f8:c7:68:ed:f0:88:d6:17:f6: 62:41:3d:c2:70:56:4d:f4:d9:ec:17:48:83:46:d3:8e:8b:cb: 24:1b:09:ca:f2:7d:fd:04:bb:13:6d:27:63:83:1d:c3:6c:f5: be:be:a1:59:79:1b:bf:6a:3f:87:db:e7:43:13:b2:8b:54:a5: 5f:18:fa:e8:ba:29:dd:3f:a7:cc:73:ca:44:df:51:09:d7:33: 9f:fd:fe:0e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDQ5RTIxMTAvBgNVBAUTKDBGNDZCREJDNzQ5MDRFNURGODI5RjAxNTk1QjUxQ0FB QTIwMUI5REIwHhcNMjUwNTMxMDM1MTM2WhcNMjUwNjA3MDM1MTM2WjAYMRYwFAYD VQQDEw02ODNhN2NjOC05Zjg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0VrxdmNjLDHNZKdYwasH2WoOwSRCN3G79fZ0gkRH3EGb9YpN/tptHMZRwhmm 1/zfsluISGqZflqIiKNSSp51OlnmYms94viH+sVsPjnppVW2l9QU4SYEFnM5X+ez orUIa4c3s49Qjej8L0dkKE+Kwnhw8fb6UUMR0C+1oQLOwoSxSxhi+d9OEbmtNPeH RG/908ptzRV/x3EQNGh7qpxt8sks0dm3b8lMPd577IIYqKMEmufGLatXCRcIoxNg LJuTQZRy2GRqtnNkpSifstYMJ2Siut6bWWl7/p23VfaD0NwBo+oMFNIIksH/kejB QyJ9kO7N6foTIvC9tt5JrRqKbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKSiFxXN d4CmU85ee3dCwxhiwHOEMB8GA1UdIwQYMBaAFA9Gvbx0kE5d+CnwFZW1HKqiAbnb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDlFMi9CNjQ0MzM4NEVG RkYxMUVEODU1NkVFNTRDNEY5QUUwMi9EMGE5dkhTUVRsMzRLZkFWbGJVY3FxSUJ1 ZHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0QwYTl2SFNRVGwzNEtmQVZsYlVjcXFJQnVkcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NDlFMi9CNjQ0MzM4NEVGRkYxMUVEODU1NkVFNTRDNEY5QUUwMi9EMGE5dkhTUVRs MzRLZkFWbGJVY3FxSUJ1ZHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDdZuwQM7VZbfdr/oloGCFzKGu5sSXCPhgFEngpGimd3DfvtuWhV+mn +sTjoLakClVAHCMWsu+9dFl/vHvft/9cqxrhfywrxpxHFuMUfCq44MM4EnYwupIg /2c04a0ADl7h6ghYgYqdzqaQAvjDJFblctLL+WeE0iHzMCUp3oWmb7V5BoC3ZOU8 ADecL4j4St1T/Sv5I+Fbltf+OwEA9rjWxcNJMN7mrm20xnj4x2jt8IjWF/ZiQT3C cFZN9NnsF0iDRtOOi8skGwnK8n39BLsTbSdjgx3DbPW+vqFZeRu/aj+H2+dDE7KL VKVfGProuindP6fMc8pE31EJ1zOf/f4O -----END CERTIFICATE-----Generated at Sat May 31 17:01:19 2025 by rpki-client