$ rpki-client -vvf rpki.apnic.net/member_repository/A91555EA/7C60B9F63B6E11EAAE5F166BC4F9AE02/l42uLBCnLtBPlBKP_F6Mt9EC6so.mft File: l42uLBCnLtBPlBKP_F6Mt9EC6so.mft (raw, json) Hash identifier: SZcOtmve+rw1LPVdR7PpBQV4wfkKtFXqRbUpPlEYjHw= Subject key identifier: 99:79:DE:F9:86:6F:97:82:21:AF:AB:42:23:7A:77:8F:AE:0B:7B:CE Authority key identifier: 97:8D:AE:2C:10:A7:2E:D0:4F:94:12:8F:FC:5E:8C:B7:D1:02:EA:CA Certificate issuer: /CN=A91555EA/serialNumber=978DAE2C10A72ED04F94128FFC5E8CB7D102EACA Certificate serial: 0B43 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l42uLBCnLtBPlBKP_F6Mt9EC6so.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91555EA/7C60B9F63B6E11EAAE5F166BC4F9AE02/l42uLBCnLtBPlBKP_F6Mt9EC6so.mft Manifest number: 0B32 Signing time: Fri 30 May 2025 19:23:04 +0000 Manifest this update: Fri 30 May 2025 19:23:03 +0000 Manifest next update: Fri 06 Jun 2025 19:23:03 +0000 Files and hashes: 1: l42uLBCnLtBPlBKP_F6Mt9EC6so.crl (hash: bZesng4f4WEroYeSUCDeJ2+E85EVAsBj9YFszdHJIs4=) 2: 436398BA3B7011EAA14F566EC4F9AE02.roa (hash: isFXn22manatugHafRu2hqpuY348jCwEcI/j4K+wcRU=) 3: 0D3A7A803B7311EA80E1F877C4F9AE02.roa (hash: EpjCnlsJkfHNtp2vFgzZPfvRv085L5br2n3beV/fvF0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91555EA/7C60B9F63B6E11EAAE5F166BC4F9AE02/l42uLBCnLtBPlBKP_F6Mt9EC6so.crl rsync://rpki.apnic.net/member_repository/A91555EA/7C60B9F63B6E11EAAE5F166BC4F9AE02/l42uLBCnLtBPlBKP_F6Mt9EC6so.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l42uLBCnLtBPlBKP_F6Mt9EC6so.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 19:23:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2883 (0xb43) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91555EA, serialNumber=978DAE2C10A72ED04F94128FFC5E8CB7D102EACA Validity Not Before: May 30 19:23:03 2025 GMT Not After : Jun 6 19:23:03 2025 GMT Subject: CN=683a0598-4bfc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:af:f3:de:43:cb:c1:a5:2d:2f:c5:9b:9a:6f: 27:dc:96:9c:63:47:49:05:dd:e7:99:87:55:43:be: 8e:4f:b4:66:1d:ef:54:1d:9e:53:97:e7:19:34:4b: 5f:34:dc:c7:34:9a:33:36:29:70:ef:2e:59:6e:df: d1:65:5a:00:72:ab:59:87:b5:9d:4f:cc:67:17:02: a4:4f:df:d3:39:3c:33:0a:1e:14:56:d5:8c:c8:d1: ab:46:ea:d2:3d:4a:fe:d4:e1:cc:d3:f4:75:a0:74: 97:4d:71:22:65:16:40:26:d1:6e:8a:e2:97:67:66: 91:61:76:bc:48:cc:c9:cc:11:da:f5:f1:52:c0:a6: 35:48:9e:d8:23:2b:e9:8d:e9:bb:49:20:35:cf:eb: 71:85:80:15:b2:5a:36:1d:48:54:c2:43:d6:71:29: 0b:14:33:70:97:96:92:75:13:95:01:3c:58:d3:f0: b3:bf:d7:f0:7f:15:bf:4a:4e:30:7c:7b:61:60:0c: 71:bb:73:9f:05:67:71:e0:c0:ae:e0:b6:7c:69:0d: 69:ee:65:bd:ac:aa:24:91:2f:9d:36:6c:6f:25:c2: 49:f0:06:c9:fc:10:72:e6:80:b2:f9:f1:01:6e:f8: e1:cf:c0:27:b4:5b:29:c3:ed:60:5c:53:ff:8b:f5: 31:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:79:DE:F9:86:6F:97:82:21:AF:AB:42:23:7A:77:8F:AE:0B:7B:CE X509v3 Authority Key Identifier: keyid:97:8D:AE:2C:10:A7:2E:D0:4F:94:12:8F:FC:5E:8C:B7:D1:02:EA:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91555EA/7C60B9F63B6E11EAAE5F166BC4F9AE02/l42uLBCnLtBPlBKP_F6Mt9EC6so.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l42uLBCnLtBPlBKP_F6Mt9EC6so.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91555EA/7C60B9F63B6E11EAAE5F166BC4F9AE02/l42uLBCnLtBPlBKP_F6Mt9EC6so.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:3f:36:ab:61:a6:fa:ae:61:fe:f4:8f:b0:90:23:a4:c0:6d: d9:18:74:50:02:08:7d:8e:37:4b:af:f5:4a:d9:5a:24:64:ad: fa:b5:14:d4:5b:68:86:4c:bc:62:4b:35:09:64:59:1c:c1:03: 28:fa:da:85:8e:b8:6d:99:06:8e:7d:91:69:da:39:d7:47:37: f8:18:7d:1c:91:9a:fc:4a:a2:6f:da:57:db:e7:6b:ef:aa:a9: df:fa:73:c9:97:3c:72:f2:e4:e6:12:a8:56:ef:e1:26:56:8b: 5d:19:33:8d:4d:b9:6d:39:d6:d3:46:d9:df:3d:75:03:4a:18: ac:1b:37:d0:2e:77:92:89:88:89:92:fd:f0:f7:36:4f:d1:98: e4:c9:6b:cc:c9:24:09:93:70:2e:d7:ab:02:c8:20:e9:98:bf: 96:13:1b:f4:60:51:93:0d:db:59:4f:cd:51:55:19:26:fc:b6: 7a:c3:e4:46:ba:7c:9a:44:d8:41:81:3b:1b:1a:86:0c:14:27: 26:9f:5e:be:80:1f:b6:ee:7c:6f:88:ff:6c:0a:b5:9c:7e:6d: 25:fd:0d:0c:39:fb:6c:25:aa:bb:78:e7:46:e4:06:9e:cc:35: ba:e5:cd:26:dc:53:27:47:06:bd:a8:e6:39:f2:2e:c7:97:04: 2a:39:90:f8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC0MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTU1RUExMTAvBgNVBAUTKDk3OERBRTJDMTBBNzJFRDA0Rjk0MTI4RkZDNUU4Q0I3 RDEwMkVBQ0EwHhcNMjUwNTMwMTkyMzAzWhcNMjUwNjA2MTkyMzAzWjAYMRYwFAYD VQQDEw02ODNhMDU5OC00YmZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtq/z3kPLwaUtL8Wbmm8n3JacY0dJBd3nmYdVQ76OT7RmHe9UHZ5Tl+cZNEtf NNzHNJozNilw7y5Zbt/RZVoAcqtZh7WdT8xnFwKkT9/TOTwzCh4UVtWMyNGrRurS PUr+1OHM0/R1oHSXTXEiZRZAJtFuiuKXZ2aRYXa8SMzJzBHa9fFSwKY1SJ7YIyvp jem7SSA1z+txhYAVslo2HUhUwkPWcSkLFDNwl5aSdROVATxY0/Czv9fwfxW/Sk4w fHthYAxxu3OfBWdx4MCu4LZ8aQ1p7mW9rKokkS+dNmxvJcJJ8AbJ/BBy5oCy+fEB bvjhz8AntFspw+1gXFP/i/UxPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJl53vmG b5eCIa+rQiN6d4+uC3vOMB8GA1UdIwQYMBaAFJeNriwQpy7QT5QSj/xejLfRAurK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTVFQS83QzYwQjlGNjNC NkUxMUVBQUU1RjE2NkJDNEY5QUUwMi9sNDJ1TEJDbkx0QlBsQktQX0Y2TXQ5RUM2 c28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2w0MnVMQkNuTHRCUGxCS1BfRjZNdDlFQzZzby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NTVFQS83QzYwQjlGNjNCNkUxMUVBQUU1RjE2NkJDNEY5QUUwMi9sNDJ1TEJDbkx0 QlBsQktQX0Y2TXQ5RUM2c28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAFPzarYab6rmH+9I+wkCOkwG3ZGHRQAgh9jjdLr/VK2VokZK36tRTU W2iGTLxiSzUJZFkcwQMo+tqFjrhtmQaOfZFp2jnXRzf4GH0ckZr8SqJv2lfb52vv qqnf+nPJlzxy8uTmEqhW7+EmVotdGTONTbltOdbTRtnfPXUDShisGzfQLneSiYiJ kv3w9zZP0ZjkyWvMySQJk3Au16sCyCDpmL+WExv0YFGTDdtZT81RVRkm/LZ6w+RG unyaRNhBgTsbGoYMFCcmn16+gB+27nxviP9sCrWcfm0l/Q0MOftsJaq7eOdG5Aae zDW65c0m3FMnRwa9qOY58i7HlwQqOZD4 -----END CERTIFICATE-----Generated at Sat May 31 17:47:23 2025 by rpki-client