$ rpki-client -vvf rpki.apnic.net/member_repository/A91499BB/AB1CAC86609711E8B74A861AC4F9AE02/8Os9EfDsrmhzaV1az7e0rcVfNFg.mft File: 8Os9EfDsrmhzaV1az7e0rcVfNFg.mft (raw, json) Hash identifier: Jcj52zAj2EOa0fvDyRAF8WdsopEfPveBSEH/Gdqr7uI= Subject key identifier: 64:D6:DD:26:83:32:BF:6D:0E:03:CA:60:E6:01:70:DE:57:86:3D:D3 Authority key identifier: F0:EB:3D:11:F0:EC:AE:68:73:69:5D:5A:CF:B7:B4:AD:C5:5F:34:58 Certificate issuer: /CN=A91499BB/serialNumber=F0EB3D11F0ECAE6873695D5ACFB7B4ADC55F3458 Certificate serial: 14AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Os9EfDsrmhzaV1az7e0rcVfNFg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91499BB/AB1CAC86609711E8B74A861AC4F9AE02/8Os9EfDsrmhzaV1az7e0rcVfNFg.mft Manifest number: 14A1 Signing time: Fri 30 May 2025 17:03:27 +0000 Manifest this update: Fri 30 May 2025 17:03:26 +0000 Manifest next update: Fri 06 Jun 2025 17:03:26 +0000 Files and hashes: 1: 8Os9EfDsrmhzaV1az7e0rcVfNFg.crl (hash: 3sEcAqOdIktVoRP1KOObo03f6YEitzlTDyY8VwDwHtM=) 2: 5F150B08D48611E9A4473984C4F9AE02.roa (hash: oH35QJywcYwQK9w172Dp8G4g95WEClMxQ6f9cBdl364=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91499BB/AB1CAC86609711E8B74A861AC4F9AE02/8Os9EfDsrmhzaV1az7e0rcVfNFg.crl rsync://rpki.apnic.net/member_repository/A91499BB/AB1CAC86609711E8B74A861AC4F9AE02/8Os9EfDsrmhzaV1az7e0rcVfNFg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Os9EfDsrmhzaV1az7e0rcVfNFg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 17:03:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5291 (0x14ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91499BB, serialNumber=F0EB3D11F0ECAE6873695D5ACFB7B4ADC55F3458 Validity Not Before: May 30 17:03:26 2025 GMT Not After : Jun 6 17:03:26 2025 GMT Subject: CN=6839e4df-fc92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:e3:9a:1b:37:63:6c:2b:86:b3:0c:ea:90:16: 14:bc:ff:77:e8:ad:66:de:45:8a:d0:2b:53:4a:bc: 08:e0:15:71:78:be:9d:3c:4d:d6:ca:76:ac:ad:6a: ee:34:c9:89:be:9d:0a:76:52:d2:33:97:65:c4:d3: df:a2:a7:2e:88:c1:10:bc:ba:19:b0:6d:a7:4d:66: 41:17:32:16:f6:96:d8:04:66:49:f2:02:46:15:ba: 60:a6:81:5e:f4:08:3b:55:29:65:7f:16:68:fe:c2: 74:de:4e:09:f9:5e:65:fb:2e:0a:52:15:d1:ab:55: 29:3d:d3:60:e2:5f:0c:58:e1:d0:11:9d:7d:00:07: 18:af:e0:6b:67:b7:00:21:e5:e0:0b:30:75:72:02: ec:ca:9e:7d:34:e1:6f:fb:bd:70:d4:6f:ae:eb:c8: 8c:62:06:f2:43:9b:5d:ab:a2:d7:e4:f9:5f:0a:42: f2:e9:ed:6f:38:50:69:5f:a3:00:11:c4:5e:d7:f1: f5:49:c5:28:11:0e:83:57:ae:0e:14:07:a0:fd:93: 1c:4a:43:04:37:00:dc:34:d2:c6:49:ca:ca:41:d7: 16:e7:69:ec:b3:ac:44:71:e3:69:45:b0:12:ae:3c: 95:6c:85:af:02:56:4b:7a:41:53:d5:de:05:cd:be: 1b:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:D6:DD:26:83:32:BF:6D:0E:03:CA:60:E6:01:70:DE:57:86:3D:D3 X509v3 Authority Key Identifier: keyid:F0:EB:3D:11:F0:EC:AE:68:73:69:5D:5A:CF:B7:B4:AD:C5:5F:34:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91499BB/AB1CAC86609711E8B74A861AC4F9AE02/8Os9EfDsrmhzaV1az7e0rcVfNFg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Os9EfDsrmhzaV1az7e0rcVfNFg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91499BB/AB1CAC86609711E8B74A861AC4F9AE02/8Os9EfDsrmhzaV1az7e0rcVfNFg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:5e:a8:5a:51:ed:99:a1:66:50:7a:62:69:77:12:12:d4:30: 94:cb:3c:78:e2:f7:90:b4:bb:a8:75:4d:76:2f:97:76:1a:85: bd:2d:2c:b9:5f:ba:2f:f5:0f:b9:ba:58:a4:d1:b5:57:49:4e: 27:c8:8e:8e:3b:ce:4f:32:8d:d1:b3:77:a0:df:5a:06:3d:83: 54:4a:80:d0:e0:c7:37:49:99:2e:6e:64:ac:c9:fd:cc:48:c9: e9:2b:1c:71:ec:65:96:b4:19:a6:e2:a3:58:26:c6:a0:a3:54: 83:b4:57:93:03:a8:7c:15:49:2c:be:e3:48:20:9a:e8:69:0d: f5:ae:21:73:b8:c7:d6:ae:92:e9:5f:5b:2a:5d:e6:bf:ef:4c: 6d:04:a9:33:1d:9a:a4:a5:0b:a8:63:c3:37:ba:35:6c:50:ef: a8:a5:33:c9:3f:7a:2e:fe:30:0f:03:de:97:5a:a5:9e:c3:0c: 9f:ad:28:93:4d:ce:f5:80:f9:83:9b:3a:42:67:e0:74:a0:3e: f9:ed:21:c8:95:2e:4f:a4:7b:ff:a7:1a:10:01:2c:e9:72:1c: b1:94:cc:a4:80:3e:31:ec:4d:fc:5b:58:f1:23:83:60:10:32: 5a:91:9f:63:11:41:63:d9:f6:15:52:2e:30:02:27:33:40:13: 2b:97:ab:33 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFKswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDk5QkIxMTAvBgNVBAUTKEYwRUIzRDExRjBFQ0FFNjg3MzY5NUQ1QUNGQjdCNEFE QzU1RjM0NTgwHhcNMjUwNTMwMTcwMzI2WhcNMjUwNjA2MTcwMzI2WjAYMRYwFAYD VQQDEw02ODM5ZTRkZi1mYzkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyeOaGzdjbCuGswzqkBYUvP936K1m3kWK0CtTSrwI4BVxeL6dPE3WynasrWru NMmJvp0KdlLSM5dlxNPfoqcuiMEQvLoZsG2nTWZBFzIW9pbYBGZJ8gJGFbpgpoFe 9Ag7VSllfxZo/sJ03k4J+V5l+y4KUhXRq1UpPdNg4l8MWOHQEZ19AAcYr+BrZ7cA IeXgCzB1cgLsyp59NOFv+71w1G+u68iMYgbyQ5tdq6LX5PlfCkLy6e1vOFBpX6MA EcRe1/H1ScUoEQ6DV64OFAeg/ZMcSkMENwDcNNLGScrKQdcW52nss6xEceNpRbAS rjyVbIWvAlZLekFT1d4Fzb4biwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGTW3SaD Mr9tDgPKYOYBcN5Xhj3TMB8GA1UdIwQYMBaAFPDrPRHw7K5oc2ldWs+3tK3FXzRY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OTlCQi9BQjFDQUM4NjYw OTcxMUU4Qjc0QTg2MUFDNEY5QUUwMi84T3M5RWZEc3JtaHphVjFhejdlMHJjVmZO RmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhPczlFZkRzcm1oemFWMWF6N2UwcmNWZk5GZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OTlCQi9BQjFDQUM4NjYwOTcxMUU4Qjc0QTg2MUFDNEY5QUUwMi84T3M5RWZEc3Jt aHphVjFhejdlMHJjVmZORmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAvXqhaUe2ZoWZQemJpdxIS1DCUyzx44veQtLuodU12L5d2GoW9LSy5 X7ov9Q+5ulik0bVXSU4nyI6OO85PMo3Rs3eg31oGPYNUSoDQ4Mc3SZkubmSsyf3M SMnpKxxx7GWWtBmm4qNYJsago1SDtFeTA6h8FUksvuNIIJroaQ31riFzuMfWrpLp X1sqXea/70xtBKkzHZqkpQuoY8M3ujVsUO+opTPJP3ou/jAPA96XWqWewwyfrSiT Tc71gPmDmzpCZ+B0oD757SHIlS5PpHv/pxoQASzpchyxlMykgD4x7E38W1jxI4Ng EDJakZ9jEUFj2fYVUi4wAiczQBMrl6sz -----END CERTIFICATE-----Generated at Sat May 31 17:50:42 2025 by rpki-client