$ rpki-client -vvf rpki.apnic.net/member_repository/A91655EF/607729D0FAC111E8BC76D671C4F9AE02/B04WzKCA1UX-9PLYrcuQnw7LIKI.mft File: B04WzKCA1UX-9PLYrcuQnw7LIKI.mft (raw, json) Hash identifier: 7tOYAag41r3VaKZ6lq0ZJRoqH+3nrfsa8NI19PEg6KE= Subject key identifier: D9:90:A6:14:59:1C:73:08:C2:AF:EC:F4:05:BF:B9:10:2C:79:CE:D9 Authority key identifier: 07:4E:16:CC:A0:80:D5:45:FE:F4:F2:D8:AD:CB:90:9F:0E:CB:20:A2 Certificate issuer: /CN=A91655EF/serialNumber=074E16CCA080D545FEF4F2D8ADCB909F0ECB20A2 Certificate serial: 11BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B04WzKCA1UX-9PLYrcuQnw7LIKI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91655EF/607729D0FAC111E8BC76D671C4F9AE02/B04WzKCA1UX-9PLYrcuQnw7LIKI.mft Manifest number: 11A1 Signing time: Fri 30 May 2025 17:23:22 +0000 Manifest this update: Fri 30 May 2025 17:23:22 +0000 Manifest next update: Fri 06 Jun 2025 17:23:22 +0000 Files and hashes: 1: B04WzKCA1UX-9PLYrcuQnw7LIKI.crl (hash: AOJKgVLlRNS39GFp7HzEYWCKYm5TQSExN0WZluZ5cJo=) 2: 70F8E50039AF11EE8486453DC4F9AE02.roa (hash: CQ2YO4KFwTMH/P0kajoe5d8Btg/O5fE6q6xcjIQsWNk=) 3: BA1EA120E6FC11EE96775810C4F9AE02.roa (hash: sB4pmseHL4MX5nc05THnJz70E6W3QfcckHXpmWVSxtQ=) 4: FEDDF63AE6FC11EE8AD61644C4F9AE02.roa (hash: nPDF1Ky8Z4ZJlPWH1PkLPctnsIih8GHSZ5cqXRTU56A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91655EF/607729D0FAC111E8BC76D671C4F9AE02/B04WzKCA1UX-9PLYrcuQnw7LIKI.crl rsync://rpki.apnic.net/member_repository/A91655EF/607729D0FAC111E8BC76D671C4F9AE02/B04WzKCA1UX-9PLYrcuQnw7LIKI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B04WzKCA1UX-9PLYrcuQnw7LIKI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 17:23:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4542 (0x11be) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91655EF, serialNumber=074E16CCA080D545FEF4F2D8ADCB909F0ECB20A2 Validity Not Before: May 30 17:23:22 2025 GMT Not After : Jun 6 17:23:22 2025 GMT Subject: CN=6839e98a-bd2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:a3:eb:bb:3b:c8:88:d8:64:9b:e1:1e:06:41: 08:c1:ac:e3:16:45:d6:e6:e1:a2:48:0e:87:a0:3b: 10:63:8f:f3:0a:78:b6:8f:9e:9d:2a:a7:a0:82:9a: ad:62:d7:2a:c2:f2:22:1d:c9:f9:d1:a7:1a:88:5c: 34:25:ab:d3:e1:69:90:11:c6:35:d1:f9:0b:f6:bc: d3:2d:7e:0d:49:0f:a7:65:03:da:69:52:61:73:5c: 72:d6:fe:0b:45:b1:df:3b:3a:b4:da:99:30:b0:13: 06:57:bf:ee:b7:5e:2b:08:89:66:c6:a1:81:6b:6b: 61:f4:10:11:0b:0d:71:fc:6f:39:1b:5c:dc:b6:5c: fb:b4:bd:ce:67:79:7a:09:b4:79:67:09:40:46:2c: a5:07:72:0f:0b:52:e5:51:83:5f:50:32:0b:6e:ad: 26:16:e6:c8:4a:72:f0:eb:f3:fd:53:15:34:76:e0: e8:08:55:58:d5:03:7e:45:5e:d5:9b:5e:4a:2e:60: fe:f6:35:59:6e:ff:26:bd:7b:17:fe:e3:d5:08:34: 80:e5:af:d1:4f:0d:6b:92:d0:66:9d:a9:79:e1:f7: 02:bb:24:7c:6d:5d:47:a3:e0:e0:ac:0c:0b:e4:72: 5c:47:bd:14:eb:ee:57:b6:05:02:83:09:10:49:37: f6:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:90:A6:14:59:1C:73:08:C2:AF:EC:F4:05:BF:B9:10:2C:79:CE:D9 X509v3 Authority Key Identifier: keyid:07:4E:16:CC:A0:80:D5:45:FE:F4:F2:D8:AD:CB:90:9F:0E:CB:20:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91655EF/607729D0FAC111E8BC76D671C4F9AE02/B04WzKCA1UX-9PLYrcuQnw7LIKI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B04WzKCA1UX-9PLYrcuQnw7LIKI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91655EF/607729D0FAC111E8BC76D671C4F9AE02/B04WzKCA1UX-9PLYrcuQnw7LIKI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:58:38:f9:9a:a2:86:40:28:f8:b2:70:b4:74:af:9e:af:6d: 15:4f:5a:83:44:9a:c5:be:50:be:4b:c4:92:76:14:2e:59:ac: ab:c6:3b:91:26:57:6b:6f:6e:fa:ae:62:f4:ed:1a:b6:36:1f: b2:1e:77:de:b8:28:92:29:3f:f4:cc:7d:bf:02:60:b0:9e:32: 0b:31:5b:34:9e:05:b7:50:38:d4:dd:a4:e0:42:61:2c:5b:89: e6:42:45:1a:5b:aa:6b:24:e4:73:a0:34:81:3a:2e:32:14:5f: 32:b2:4a:e1:48:ed:41:21:3a:78:d7:60:2a:0d:55:7d:c7:86: 99:d2:cf:c9:0f:a1:b0:fb:d9:e2:92:33:af:88:87:6e:f2:a4: 33:db:5c:1a:e9:66:61:97:18:0a:2f:07:e5:91:47:cc:30:bb: b5:0e:93:05:6e:e3:8d:d4:80:f1:d2:ef:cb:60:80:3f:35:1f: fe:10:4b:06:f5:5a:d0:cd:91:c4:3e:23:5a:fa:10:a0:e7:3c: f0:20:9f:91:ed:5a:8c:67:3b:c7:3f:64:f7:2b:9c:2f:bf:79: 1f:88:e1:70:4e:df:e2:c5:5a:ba:59:bf:32:f2:05:bf:03:6a: d1:ba:ee:f2:a1:07:d3:9b:83:fa:1c:88:5c:9e:a6:9a:12:96: b2:f0:f5:14 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEb4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjU1RUYxMTAvBgNVBAUTKDA3NEUxNkNDQTA4MEQ1NDVGRUY0RjJEOEFEQ0I5MDlG MEVDQjIwQTIwHhcNMjUwNTMwMTcyMzIyWhcNMjUwNjA2MTcyMzIyWjAYMRYwFAYD VQQDEw02ODM5ZTk4YS1iZDJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyKPruzvIiNhkm+EeBkEIwazjFkXW5uGiSA6HoDsQY4/zCni2j56dKqeggpqt YtcqwvIiHcn50acaiFw0JavT4WmQEcY10fkL9rzTLX4NSQ+nZQPaaVJhc1xy1v4L RbHfOzq02pkwsBMGV7/ut14rCIlmxqGBa2th9BARCw1x/G85G1zctlz7tL3OZ3l6 CbR5ZwlARiylB3IPC1LlUYNfUDILbq0mFubISnLw6/P9UxU0duDoCFVY1QN+RV7V m15KLmD+9jVZbv8mvXsX/uPVCDSA5a/RTw1rktBmnal54fcCuyR8bV1Ho+DgrAwL 5HJcR70U6+5XtgUCgwkQSTf2lwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNmQphRZ HHMIwq/s9AW/uRAsec7ZMB8GA1UdIwQYMBaAFAdOFsyggNVF/vTy2K3LkJ8OyyCi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTVFRi82MDc3MjlEMEZB QzExMUU4QkM3NkQ2NzFDNEY5QUUwMi9CMDRXektDQTFVWC05UExZcmN1UW53N0xJ S0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0IwNFd6S0NBMVVYLTlQTFlyY3VRbnc3TElLSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NTVFRi82MDc3MjlEMEZBQzExMUU4QkM3NkQ2NzFDNEY5QUUwMi9CMDRXektDQTFV WC05UExZcmN1UW53N0xJS0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBTWDj5mqKGQCj4snC0dK+er20VT1qDRJrFvlC+S8SSdhQuWayrxjuR Jldrb276rmL07Rq2Nh+yHnfeuCiSKT/0zH2/AmCwnjILMVs0ngW3UDjU3aTgQmEs W4nmQkUaW6prJORzoDSBOi4yFF8yskrhSO1BITp412AqDVV9x4aZ0s/JD6Gw+9ni kjOviIdu8qQz21wa6WZhlxgKLwflkUfMMLu1DpMFbuON1IDx0u/LYIA/NR/+EEsG 9VrQzZHEPiNa+hCg5zzwIJ+R7VqMZzvHP2T3K5wvv3kfiOFwTt/ixVq6Wb8y8gW/ A2rRuu7yoQfTm4P6HIhcnqaaEpay8PUU -----END CERTIFICATE-----Generated at Sat May 31 17:02:16 2025 by rpki-client