$ rpki-client -vvf rpki.apnic.net/member_repository/A91689C8/38B38E5E8DD711ED85225A7EC4F9AE02/rdsr88QYJtbQ--jSvy8FLZil2Uk.mft File: rdsr88QYJtbQ--jSvy8FLZil2Uk.mft (raw, json) Hash identifier: K0wyuZvY+TyDQvHnZ4yeyzKw/1cJqMlTsMU2JT3MfMY= Subject key identifier: B8:32:C6:3D:3E:52:3C:26:16:75:0F:34:9A:FD:A7:D1:0A:BD:1F:14 Authority key identifier: AD:DB:2B:F3:C4:18:26:D6:D0:FB:E8:D2:BF:2F:05:2D:98:A5:D9:49 Certificate issuer: /CN=A91689C8/serialNumber=ADDB2BF3C41826D6D0FBE8D2BF2F052D98A5D949 Certificate serial: 24 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdsr88QYJtbQ--jSvy8FLZil2Uk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91689C8/38B38E5E8DD711ED85225A7EC4F9AE02/rdsr88QYJtbQ--jSvy8FLZil2Uk.mft Manifest number: 01E4 Signing time: Sat 31 May 2025 02:44:35 +0000 Manifest this update: Sat 31 May 2025 02:44:35 +0000 Manifest next update: Sat 07 Jun 2025 02:44:35 +0000 Files and hashes: 1: rdsr88QYJtbQ--jSvy8FLZil2Uk.crl (hash: +MFbAZ9j9mVqm1bp1SObSZelSfJCQT1+qIXaV6P55EI=) 2: 3BB70A86092211F08BA72686C4F9AE02.roa (hash: 2J/4S4P7iHBoNIa8ALxa/H8YBNXVUqoF1W5QLX0G6vs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91689C8/38B38E5E8DD711ED85225A7EC4F9AE02/rdsr88QYJtbQ--jSvy8FLZil2Uk.crl rsync://rpki.apnic.net/member_repository/A91689C8/38B38E5E8DD711ED85225A7EC4F9AE02/rdsr88QYJtbQ--jSvy8FLZil2Uk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdsr88QYJtbQ--jSvy8FLZil2Uk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 02:44:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36 (0x24) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91689C8, serialNumber=ADDB2BF3C41826D6D0FBE8D2BF2F052D98A5D949 Validity Not Before: May 31 02:44:35 2025 GMT Not After : Jun 7 02:44:35 2025 GMT Subject: CN=683a6d13-355e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:e6:49:e2:05:6a:9c:ca:f2:61:cc:7c:d2:ae: aa:ad:89:20:b7:3f:ae:51:76:0c:c7:dc:2d:cb:b2: ea:2f:f6:79:4e:f4:69:07:61:81:91:8c:a7:31:b0: b7:e2:06:5e:04:cc:f1:f0:ec:f2:46:5a:f2:98:29: 0d:d4:49:3e:db:02:3a:c7:84:d3:c4:4b:b7:ac:ce: 5e:39:80:3b:b1:72:d7:7d:e5:20:93:b5:e3:00:30: d8:71:5d:c6:5a:02:a0:51:ac:9c:2e:27:94:21:6b: c5:8b:1b:58:25:fa:22:31:47:0c:44:3d:07:11:fa: 2b:cd:f5:a2:d7:0d:81:28:d2:93:6f:c4:75:c0:88: 58:57:9e:b8:de:05:c7:f4:39:25:e4:09:df:54:67: 65:d5:dd:11:9d:ab:78:19:50:ba:f9:3c:f5:ca:80: 9c:a9:1f:f7:f5:07:f7:22:c0:01:86:71:d6:0d:f7: c1:74:1c:7f:4d:16:b4:fb:cc:3c:b0:98:25:52:54: 0c:5d:ff:3e:4d:0a:4a:21:98:4d:4d:5d:a0:28:15: f2:ef:ae:03:9c:01:40:77:c5:da:ce:ad:cf:f3:31: 9a:67:30:69:09:d9:ac:3c:cd:61:38:8b:b2:4d:2b: 75:40:2e:0d:87:65:5e:b5:94:f8:1d:1b:8c:a3:86: ab:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:32:C6:3D:3E:52:3C:26:16:75:0F:34:9A:FD:A7:D1:0A:BD:1F:14 X509v3 Authority Key Identifier: keyid:AD:DB:2B:F3:C4:18:26:D6:D0:FB:E8:D2:BF:2F:05:2D:98:A5:D9:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91689C8/38B38E5E8DD711ED85225A7EC4F9AE02/rdsr88QYJtbQ--jSvy8FLZil2Uk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdsr88QYJtbQ--jSvy8FLZil2Uk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91689C8/38B38E5E8DD711ED85225A7EC4F9AE02/rdsr88QYJtbQ--jSvy8FLZil2Uk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:b5:db:83:d9:8d:44:02:1e:06:5c:e0:36:3e:a5:f6:79:17: 55:5c:13:10:4f:66:0e:d5:ac:c3:3f:27:27:6b:89:70:60:ef: 4c:3f:07:d2:bb:7d:66:6e:95:ac:d2:a4:c4:df:27:46:83:65: a1:a5:08:a4:c5:37:15:d2:d0:28:ae:1c:bd:86:2d:4c:31:23: 36:22:86:6e:55:ec:50:10:b8:28:67:a2:6f:78:31:cb:f3:7c: 02:7d:52:98:fa:c3:6d:b5:18:f9:77:1f:7a:3e:a3:fd:d5:cb: 26:c1:0c:e4:60:f3:49:c2:9d:88:d1:69:f0:47:b2:60:5d:24: 95:ee:94:50:c6:9c:ba:3c:44:a1:c0:89:17:f1:17:2c:d7:e3: 24:84:c4:89:38:e2:c0:0d:f9:52:03:51:63:7f:d1:cc:80:e8: c3:84:23:79:4d:8d:34:97:69:8e:28:33:fe:c5:37:d3:b6:b7: cf:8f:94:a5:18:4a:3c:a7:80:5f:93:13:73:62:d1:57:8e:25: e1:69:52:fa:e3:29:6d:e6:1d:01:3c:ac:dc:37:80:3c:89:be: 1f:1e:82:69:06:f9:bc:25:37:37:0e:7d:2b:b0:ec:e2:8b:fd: 95:13:17:b9:37:ea:66:fb:c1:7f:da:98:85:a8:0b:53:04:e4: f5:95:ef:13 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBJDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 ODlDODExMC8GA1UEBRMoQUREQjJCRjNDNDE4MjZENkQwRkJFOEQyQkYyRjA1MkQ5 OEE1RDk0OTAeFw0yNTA1MzEwMjQ0MzVaFw0yNTA2MDcwMjQ0MzVaMBgxFjAUBgNV BAMTDTY4M2E2ZDEzLTM1NWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCU5kniBWqcyvJhzHzSrqqtiSC3P65RdgzH3C3Lsuov9nlO9GkHYYGRjKcxsLfi Bl4EzPHw7PJGWvKYKQ3UST7bAjrHhNPES7eszl45gDuxctd95SCTteMAMNhxXcZa AqBRrJwuJ5Qha8WLG1gl+iIxRwxEPQcR+ivN9aLXDYEo0pNvxHXAiFhXnrjeBcf0 OSXkCd9UZ2XV3RGdq3gZULr5PPXKgJypH/f1B/ciwAGGcdYN98F0HH9NFrT7zDyw mCVSVAxd/z5NCkohmE1NXaAoFfLvrgOcAUB3xdrOrc/zMZpnMGkJ2aw8zWE4i7JN K3VALg2HZV61lPgdG4yjhqs9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUuDLGPT5S PCYWdQ80mv2n0Qq9HxQwHwYDVR0jBBgwFoAUrdsr88QYJtbQ++jSvy8FLZil2Ukw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY4OUM4LzM4QjM4RTVFOERE NzExRUQ4NTIyNUE3RUM0RjlBRTAyL3Jkc3I4OFFZSnRiUS0talN2eThGTFppbDJV ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcmRzcjg4UVlKdGJRLS1qU3Z5OEZMWmlsMlVrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY4 OUM4LzM4QjM4RTVFOERENzExRUQ4NTIyNUE3RUM0RjlBRTAyL3Jkc3I4OFFZSnRi US0talN2eThGTFppbDJVay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADK124PZjUQCHgZc4DY+pfZ5F1VcExBPZg7VrMM/JydriXBg70w/B9K7 fWZulazSpMTfJ0aDZaGlCKTFNxXS0CiuHL2GLUwxIzYihm5V7FAQuChnom94Mcvz fAJ9Upj6w221GPl3H3o+o/3VyybBDORg80nCnYjRafBHsmBdJJXulFDGnLo8RKHA iRfxFyzX4ySExIk44sAN+VIDUWN/0cyA6MOEI3lNjTSXaY4oM/7FN9O2t8+PlKUY SjyngF+TE3Ni0VeOJeFpUvrjKW3mHQE8rNw3gDyJvh8egmkG+bwlNzcOfSuw7OKL /ZUTF7k36mb7wX/amIWoC1ME5PWV7xM= -----END CERTIFICATE-----Generated at Sat May 31 16:32:19 2025 by rpki-client