$ rpki-client -vvf rpki.apnic.net/member_repository/A91534B8/A86B375A094411ED8DD10971C4F9AE02/loAFcwGMfC-1oAgeY8Y_TaRAPLY.mft File: loAFcwGMfC-1oAgeY8Y_TaRAPLY.mft (raw, json) Hash identifier: 6WxYZRKaYcxkIK4O5IEIJ6iYmAdd5y6UfNfDTejdwoI= Subject key identifier: 51:2F:CF:C4:CE:51:34:F3:C0:B9:FE:B3:DD:CD:21:4C:F4:20:2F:32 Authority key identifier: 96:80:05:73:01:8C:7C:2F:B5:A0:08:1E:63:C6:3F:4D:A4:40:3C:B6 Certificate issuer: /CN=A91534B8/serialNumber=96800573018C7C2FB5A0081E63C63F4DA4403CB6 Certificate serial: 0296 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/loAFcwGMfC-1oAgeY8Y_TaRAPLY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91534B8/A86B375A094411ED8DD10971C4F9AE02/loAFcwGMfC-1oAgeY8Y_TaRAPLY.mft Manifest number: 0292 Signing time: Sat 31 May 2025 01:49:54 +0000 Manifest this update: Sat 31 May 2025 01:49:53 +0000 Manifest next update: Sat 07 Jun 2025 01:49:53 +0000 Files and hashes: 1: loAFcwGMfC-1oAgeY8Y_TaRAPLY.crl (hash: AKg1NfR5Uem0gf0NyoMcNN7/ply5T20B5gX6gGJYcyk=) 2: E52CB968094711EDA5B20C0AC4F9AE02.roa (hash: +DAM4u0XWzGXzujdBmpBOJBuyDMu2NVi0XXcoENn480=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91534B8/A86B375A094411ED8DD10971C4F9AE02/loAFcwGMfC-1oAgeY8Y_TaRAPLY.crl rsync://rpki.apnic.net/member_repository/A91534B8/A86B375A094411ED8DD10971C4F9AE02/loAFcwGMfC-1oAgeY8Y_TaRAPLY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/loAFcwGMfC-1oAgeY8Y_TaRAPLY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 01:49:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 662 (0x296) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91534B8, serialNumber=96800573018C7C2FB5A0081E63C63F4DA4403CB6 Validity Not Before: May 31 01:49:53 2025 GMT Not After : Jun 7 01:49:53 2025 GMT Subject: CN=683a6041-be77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:b0:8b:57:ae:a9:f5:b6:51:5e:19:96:3f:4b: 48:23:fb:21:e9:ff:2b:ca:e4:2d:f0:69:ac:f3:0b: 0f:fb:ef:00:c0:f0:fd:b9:ad:eb:f2:74:b9:87:d3: 8c:cb:0a:d5:20:10:31:af:4b:40:a1:42:94:1f:39: 96:fc:b2:a7:c9:5e:3a:96:95:ee:a2:cd:40:24:97: 5a:56:5a:a8:23:4a:3c:ba:37:f9:ed:56:31:a7:47: c6:2b:75:0f:30:1d:47:b3:61:4c:db:f8:4e:3f:bf: 0a:c4:40:91:00:9f:e2:a3:38:da:a2:c2:ca:45:fb: 9a:3f:a1:b1:68:c8:b2:74:71:b2:32:8d:b3:59:84: d2:c9:40:4c:18:60:06:43:26:14:68:f2:e5:7e:85: 82:80:f4:b1:e3:8e:14:78:22:95:f1:ef:05:51:5c: e0:81:5e:e6:62:93:b6:2f:00:c2:69:d0:61:65:84: 9e:a2:95:85:0e:c2:bb:98:c3:03:6c:f1:a3:dd:af: af:82:47:ad:85:05:b3:ea:a3:9c:78:1a:02:22:0d: 7a:ab:35:9d:41:d4:e5:fe:82:6f:9c:a7:f0:fc:e1: 7f:a3:d5:09:da:56:01:dd:fa:51:c2:19:38:3b:fd: 23:68:70:db:9d:91:da:13:8e:5d:b6:de:ea:aa:2b: 09:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:2F:CF:C4:CE:51:34:F3:C0:B9:FE:B3:DD:CD:21:4C:F4:20:2F:32 X509v3 Authority Key Identifier: keyid:96:80:05:73:01:8C:7C:2F:B5:A0:08:1E:63:C6:3F:4D:A4:40:3C:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91534B8/A86B375A094411ED8DD10971C4F9AE02/loAFcwGMfC-1oAgeY8Y_TaRAPLY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/loAFcwGMfC-1oAgeY8Y_TaRAPLY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91534B8/A86B375A094411ED8DD10971C4F9AE02/loAFcwGMfC-1oAgeY8Y_TaRAPLY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b9:16:3a:58:b0:a6:c0:1c:7e:a2:b3:d3:59:b2:b2:1e:f9:da: b3:0f:33:73:15:3a:06:d8:05:77:83:b3:72:82:44:c8:5c:2a: 71:7b:1f:29:4c:be:0a:59:5d:31:57:a5:9d:bc:92:30:b2:0c: 58:b5:a2:7f:fd:ca:1f:94:dc:b2:4b:cd:70:43:ba:7b:26:c6: 6c:9f:0c:63:11:1e:b3:9f:a0:4c:83:c9:79:cd:23:a7:84:40: 63:9a:16:03:d1:44:56:4d:43:b3:bb:1d:13:e2:ad:c4:9a:27: f8:50:f0:22:ed:0e:24:ab:c4:c0:0e:fb:c7:f2:20:d8:a2:0c: b8:56:f3:b1:c7:17:bd:e8:ca:a5:52:af:b1:23:30:7a:7f:d5: f9:46:07:c5:17:05:a4:f9:71:5a:0c:35:ba:b3:80:7e:5c:96: 14:16:dc:58:d4:0c:eb:da:20:36:c6:7c:90:d7:7c:c1:d8:62: 82:d5:c8:f2:cc:4d:67:19:11:e4:c9:6b:ef:cd:a3:1b:0d:22: be:23:d6:71:d6:76:2f:da:8e:cc:48:01:0e:ff:be:1e:19:fa: 31:6b:ef:32:63:e4:30:a4:a4:05:38:6a:ff:8f:af:9e:3f:c3: d3:21:51:36:c3:71:be:59:5f:dd:21:7b:b8:f3:8e:ad:6d:55: da:50:4e:2a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICApYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTM0QjgxMTAvBgNVBAUTKDk2ODAwNTczMDE4QzdDMkZCNUEwMDgxRTYzQzYzRjRE QTQ0MDNDQjYwHhcNMjUwNTMxMDE0OTUzWhcNMjUwNjA3MDE0OTUzWjAYMRYwFAYD VQQDEw02ODNhNjA0MS1iZTc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA27CLV66p9bZRXhmWP0tII/sh6f8ryuQt8Gms8wsP++8AwPD9ua3r8nS5h9OM ywrVIBAxr0tAoUKUHzmW/LKnyV46lpXuos1AJJdaVlqoI0o8ujf57VYxp0fGK3UP MB1Hs2FM2/hOP78KxECRAJ/iozjaosLKRfuaP6GxaMiydHGyMo2zWYTSyUBMGGAG QyYUaPLlfoWCgPSx444UeCKV8e8FUVzggV7mYpO2LwDCadBhZYSeopWFDsK7mMMD bPGj3a+vgkethQWz6qOceBoCIg16qzWdQdTl/oJvnKfw/OF/o9UJ2lYB3fpRwhk4 O/0jaHDbnZHaE45dtt7qqisJfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFEvz8TO UTTzwLn+s93NIUz0IC8yMB8GA1UdIwQYMBaAFJaABXMBjHwvtaAIHmPGP02kQDy2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MzRCOC9BODZCMzc1QTA5 NDQxMUVEOEREMTA5NzFDNEY5QUUwMi9sb0FGY3dHTWZDLTFvQWdlWThZX1RhUkFQ TFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xvQUZjd0dNZkMtMW9BZ2VZOFlfVGFSQVBMWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MzRCOC9BODZCMzc1QTA5NDQxMUVEOEREMTA5NzFDNEY5QUUwMi9sb0FGY3dHTWZD LTFvQWdlWThZX1RhUkFQTFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC5FjpYsKbAHH6is9NZsrIe+dqzDzNzFToG2AV3g7NygkTIXCpxex8p TL4KWV0xV6WdvJIwsgxYtaJ//coflNyyS81wQ7p7JsZsnwxjER6zn6BMg8l5zSOn hEBjmhYD0URWTUOzux0T4q3Emif4UPAi7Q4kq8TADvvH8iDYogy4VvOxxxe96Mql Uq+xIzB6f9X5RgfFFwWk+XFaDDW6s4B+XJYUFtxY1Azr2iA2xnyQ13zB2GKC1cjy zE1nGRHkyWvvzaMbDSK+I9Zx1nYv2o7MSAEO/74eGfoxa+8yY+QwpKQFOGr/j6+e P8PTIVE2w3G+WV/dIXu4846tbVXaUE4q -----END CERTIFICATE-----Generated at Sat May 31 16:38:47 2025 by rpki-client