$ rpki-client -vvf rpki.apnic.net/member_repository/A91623B9/78CEACBC2B3611ECAD595B7CC4F9AE02/mOHsvUXXh5-byUOfTGwvJxStNvU.mft File: mOHsvUXXh5-byUOfTGwvJxStNvU.mft (raw, json) Hash identifier: 9sAXLsH0q3toj9Rw9RMAnVy6dY/10TAD4JZDxwj+d/w= Subject key identifier: E1:4E:9E:34:CE:69:53:DF:1B:29:47:0F:83:0B:5F:3B:44:23:BC:CC Authority key identifier: 98:E1:EC:BD:45:D7:87:9F:9B:C9:43:9F:4C:6C:2F:27:14:AD:36:F5 Certificate issuer: /CN=A91623B9/serialNumber=98E1ECBD45D7879F9BC9439F4C6C2F2714AD36F5 Certificate serial: 04FB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOHsvUXXh5-byUOfTGwvJxStNvU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91623B9/78CEACBC2B3611ECAD595B7CC4F9AE02/mOHsvUXXh5-byUOfTGwvJxStNvU.mft Manifest number: 04D8 Signing time: Sat 31 May 2025 00:03:49 +0000 Manifest this update: Sat 31 May 2025 00:03:49 +0000 Manifest next update: Sat 07 Jun 2025 00:03:49 +0000 Files and hashes: 1: mOHsvUXXh5-byUOfTGwvJxStNvU.crl (hash: KYoXsfj1+PHzkebXFEwFEA7G46n3qfeCrA+859pALFY=) 2: 4C304B9EA12F11EFBF514933C4F9AE02.roa (hash: lIJvzLYrLtuFIE0gyMhPk2/yxHi1SCB/LUlp5AIoj+E=) 3: 3B943DB8A12F11EF8A121F33C4F9AE02.roa (hash: wlCYlDts3RjNxBy/eT/e5B1Vtzz4yVgtwvYVdQThmhs=) 4: 6762893A976211EFA4D0606CC4F9AE02.roa (hash: /gYeqqbk6WlA+N6Yv/cuDVmH4COmNboDX4ybOjU2VTk=) 5: 5A67D452A12F11EF8CA59833C4F9AE02.roa (hash: u0zCnyDN76eHB+CmzgwmvJ+3FVkHG07LYemqATFaMtk=) 6: 29B935BCA12F11EF9FAFE232C4F9AE02.roa (hash: DkBXKwosqunys840APEr3udcdpKlpKYanK0TdpOCbNM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91623B9/78CEACBC2B3611ECAD595B7CC4F9AE02/mOHsvUXXh5-byUOfTGwvJxStNvU.crl rsync://rpki.apnic.net/member_repository/A91623B9/78CEACBC2B3611ECAD595B7CC4F9AE02/mOHsvUXXh5-byUOfTGwvJxStNvU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOHsvUXXh5-byUOfTGwvJxStNvU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 00:03:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1275 (0x4fb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91623B9, serialNumber=98E1ECBD45D7879F9BC9439F4C6C2F2714AD36F5 Validity Not Before: May 31 00:03:49 2025 GMT Not After : Jun 7 00:03:49 2025 GMT Subject: CN=683a4765-5fed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:2e:43:ae:bf:35:26:d8:bd:9e:87:bb:77:3a: 65:98:84:ba:b5:10:db:2f:33:6b:a8:1f:41:d9:3d: fb:a8:b5:ae:a4:b2:f5:66:70:ec:9b:05:ac:9a:60: c5:5d:71:b4:0e:56:cd:7a:0e:9d:61:e0:96:0a:2c: e5:4b:7c:5f:ae:02:fb:11:ff:83:57:0b:4b:ec:d2: 04:a8:86:6f:d7:c6:84:66:c5:5c:06:13:9f:f6:30: 16:1d:f7:8e:2a:7a:3a:ae:d1:29:77:aa:a4:70:5c: 2f:83:48:da:fe:8e:ff:49:5b:d5:e9:f9:2e:25:a0: 8b:9a:52:2d:68:83:42:09:40:eb:47:08:ea:7c:8b: 78:25:c5:03:5b:05:83:ef:5f:ad:49:dc:25:5b:36: 3c:58:ab:7f:32:d0:d4:ba:dd:63:28:7d:ff:c7:03: e8:2a:28:d7:4c:89:a5:ec:6c:69:5d:40:de:9e:52: 36:ee:03:54:81:32:24:24:21:d5:53:97:ef:a7:56: 17:ba:db:48:9e:11:7f:17:ff:7f:50:51:63:ae:1b: 8a:b3:88:2d:1d:19:5f:1e:f2:58:b3:6f:3e:f3:30: a4:3d:63:5f:13:4c:04:8d:32:11:0e:06:8b:e8:0f: dc:7b:df:0b:79:03:65:1b:f6:f6:4a:ed:c8:af:53: c0:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:4E:9E:34:CE:69:53:DF:1B:29:47:0F:83:0B:5F:3B:44:23:BC:CC X509v3 Authority Key Identifier: keyid:98:E1:EC:BD:45:D7:87:9F:9B:C9:43:9F:4C:6C:2F:27:14:AD:36:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91623B9/78CEACBC2B3611ECAD595B7CC4F9AE02/mOHsvUXXh5-byUOfTGwvJxStNvU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOHsvUXXh5-byUOfTGwvJxStNvU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91623B9/78CEACBC2B3611ECAD595B7CC4F9AE02/mOHsvUXXh5-byUOfTGwvJxStNvU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:69:48:6e:1c:be:f6:3e:8f:09:f8:91:79:0d:26:f6:f6:92: ef:b2:20:84:98:c5:15:e7:84:63:08:14:a9:3c:a1:d6:d6:4a: 89:e9:17:59:a2:c2:ce:5a:4c:3b:07:61:e4:c3:40:28:1d:f9: 66:0a:a1:b4:58:a4:88:f0:76:2c:dd:a1:26:55:8d:0c:79:99: 8c:3e:a5:ae:72:bd:84:0a:4b:32:e3:08:18:eb:39:09:b7:81: a6:da:81:9c:37:fa:77:13:76:01:45:9a:52:34:32:1d:8b:59: a2:13:0a:c4:a9:39:be:4f:ae:8b:18:25:6b:78:a3:6e:14:8d: 7d:61:16:38:d7:8b:1f:1b:a7:40:9d:30:67:90:70:f1:ad:19: 5a:cb:a7:4c:dd:3e:6f:af:2f:4c:c7:fe:79:d0:82:80:ce:ee: e5:26:1c:92:16:38:17:49:33:1e:24:19:4f:b4:ac:31:aa:ea: 2d:31:84:17:3c:a7:d9:7a:dc:07:e4:99:e7:8f:34:3c:4b:61: 45:af:d6:28:12:b8:40:f4:ea:bd:9a:1e:24:8a:f1:b7:57:1b: 31:05:86:61:ea:d5:3b:e6:9a:52:4e:40:46:91:45:d7:67:0a: 95:ad:ec:87:b5:1f:31:b2:fb:22:4c:ce:c7:c3:a8:96:74:b3: 7c:bb:e3:6e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBPswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjIzQjkxMTAvBgNVBAUTKDk4RTFFQ0JENDVENzg3OUY5QkM5NDM5RjRDNkMyRjI3 MTRBRDM2RjUwHhcNMjUwNTMxMDAwMzQ5WhcNMjUwNjA3MDAwMzQ5WjAYMRYwFAYD VQQDEw02ODNhNDc2NS01ZmVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAti5Drr81Jti9noe7dzplmIS6tRDbLzNrqB9B2T37qLWupLL1ZnDsmwWsmmDF XXG0DlbNeg6dYeCWCizlS3xfrgL7Ef+DVwtL7NIEqIZv18aEZsVcBhOf9jAWHfeO Kno6rtEpd6qkcFwvg0ja/o7/SVvV6fkuJaCLmlItaINCCUDrRwjqfIt4JcUDWwWD 71+tSdwlWzY8WKt/MtDUut1jKH3/xwPoKijXTIml7GxpXUDenlI27gNUgTIkJCHV U5fvp1YXuttInhF/F/9/UFFjrhuKs4gtHRlfHvJYs28+8zCkPWNfE0wEjTIRDgaL 6A/ce98LeQNlG/b2Su3Ir1PA7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOFOnjTO aVPfGylHD4MLXztEI7zMMB8GA1UdIwQYMBaAFJjh7L1F14efm8lDn0xsLycUrTb1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MjNCOS83OENFQUNCQzJC MzYxMUVDQUQ1OTVCN0NDNEY5QUUwMi9tT0hzdlVYWGg1LWJ5VU9mVEd3dkp4U3RO dlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21PSHN2VVhYaDUtYnlVT2ZUR3d2SnhTdE52VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MjNCOS83OENFQUNCQzJCMzYxMUVDQUQ1OTVCN0NDNEY5QUUwMi9tT0hzdlVYWGg1 LWJ5VU9mVEd3dkp4U3ROdlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZaUhuHL72Po8J+JF5DSb29pLvsiCEmMUV54RjCBSpPKHW1kqJ6RdZ osLOWkw7B2Hkw0AoHflmCqG0WKSI8HYs3aEmVY0MeZmMPqWucr2ECksy4wgY6zkJ t4Gm2oGcN/p3E3YBRZpSNDIdi1miEwrEqTm+T66LGCVreKNuFI19YRY414sfG6dA nTBnkHDxrRlay6dM3T5vry9Mx/550IKAzu7lJhySFjgXSTMeJBlPtKwxquotMYQX PKfZetwH5JnnjzQ8S2FFr9YoErhA9Oq9mh4kivG3VxsxBYZh6tU75ppSTkBGkUXX ZwqVreyHtR8xsvsiTM7Hw6iWdLN8u+Nu -----END CERTIFICATE-----Generated at Sat May 31 16:53:40 2025 by rpki-client