$ rpki-client -vvf rpki.apnic.net/member_repository/A916F7BE/09CE32649CFE11EF8EEC904AC4F9AE02/D5qo3lPwhe6GWh490qI0TiEwrxQ.mft File: D5qo3lPwhe6GWh490qI0TiEwrxQ.mft (raw, json) Hash identifier: Byh4HvUPIAgbR8kiG3/WzVLvym1ubN/HbJSrspAikrk= Subject key identifier: D9:62:79:2D:DC:C2:82:BB:44:7C:05:B3:AC:D4:79:83:F8:F2:62:E1 Authority key identifier: 0F:9A:A8:DE:53:F0:85:EE:86:5A:1E:3D:D2:A2:34:4E:21:30:AF:14 Certificate issuer: /CN=A916F7BE/serialNumber=0F9AA8DE53F085EE865A1E3DD2A2344E2130AF14 Certificate serial: 71 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D5qo3lPwhe6GWh490qI0TiEwrxQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916F7BE/09CE32649CFE11EF8EEC904AC4F9AE02/D5qo3lPwhe6GWh490qI0TiEwrxQ.mft Manifest number: 6D Signing time: Sat 31 May 2025 06:30:46 +0000 Manifest this update: Sat 31 May 2025 06:30:45 +0000 Manifest next update: Sat 07 Jun 2025 06:30:45 +0000 Files and hashes: 1: D5qo3lPwhe6GWh490qI0TiEwrxQ.crl (hash: IfHu1l4UpV8XY8sFhqkpXR8YKNZi959nGXUscBkfSoY=) 2: 310E8C36A30A11EFB999C96CC4F9AE02.roa (hash: pFRSFI6h6cepGXA89QRHkbEToNAY1QtSMdW9gUz8rz8=) 3: 9AEE04EAA30C11EFB8323D14C4F9AE02.roa (hash: Zk4O88j1RIZ+Ku3IeZORoghBRdg89wRXcbXPFK1V55c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916F7BE/09CE32649CFE11EF8EEC904AC4F9AE02/D5qo3lPwhe6GWh490qI0TiEwrxQ.crl rsync://rpki.apnic.net/member_repository/A916F7BE/09CE32649CFE11EF8EEC904AC4F9AE02/D5qo3lPwhe6GWh490qI0TiEwrxQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D5qo3lPwhe6GWh490qI0TiEwrxQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 06:30:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 113 (0x71) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916F7BE, serialNumber=0F9AA8DE53F085EE865A1E3DD2A2344E2130AF14 Validity Not Before: May 31 06:30:45 2025 GMT Not After : Jun 7 06:30:45 2025 GMT Subject: CN=683aa215-e97b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:9b:35:a9:cb:63:57:27:e3:d5:66:cb:bd:98: 4f:1e:fd:42:7e:a3:ae:f6:01:26:13:6b:4e:21:96: c7:01:91:16:30:c3:83:69:13:50:54:fb:7c:87:93: 12:c3:31:e3:93:47:a0:d8:37:95:cb:87:cf:09:b3: 92:86:53:59:ae:01:a5:01:b8:a2:2b:d3:79:ba:8e: bb:ed:74:e0:fb:3c:f5:16:05:b5:74:4b:b7:34:09: 0e:9e:9c:ec:da:d5:53:a1:4e:57:82:e0:ef:20:61: 26:88:06:75:61:c3:35:c7:0b:c1:ca:ea:55:74:52: f1:97:2f:d4:e6:c3:ec:8d:fc:3a:cf:d7:ee:0f:3d: c0:7f:e2:c7:76:8c:9c:39:78:b8:97:ec:5a:b3:f0: 46:98:1d:db:ba:c5:c3:84:4f:d4:14:71:bb:74:c6: 9c:2d:af:0f:ce:99:f7:d1:15:10:49:3a:4c:02:45: 73:ae:16:24:42:37:68:b7:2a:c2:ed:20:27:58:b6: ca:90:32:a1:e1:c2:f2:bd:b7:e7:0c:00:12:5a:b1: 11:06:29:28:9e:fb:48:8d:58:86:97:e3:a1:fb:04: 66:3d:80:1a:48:c3:0d:f0:56:af:df:c6:cb:a2:7e: 3a:68:a8:55:9b:b1:44:93:4b:4f:ff:7d:43:05:7c: 19:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:62:79:2D:DC:C2:82:BB:44:7C:05:B3:AC:D4:79:83:F8:F2:62:E1 X509v3 Authority Key Identifier: keyid:0F:9A:A8:DE:53:F0:85:EE:86:5A:1E:3D:D2:A2:34:4E:21:30:AF:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916F7BE/09CE32649CFE11EF8EEC904AC4F9AE02/D5qo3lPwhe6GWh490qI0TiEwrxQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D5qo3lPwhe6GWh490qI0TiEwrxQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916F7BE/09CE32649CFE11EF8EEC904AC4F9AE02/D5qo3lPwhe6GWh490qI0TiEwrxQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:ad:3d:53:9d:27:22:96:27:ed:42:7e:6e:b0:4b:70:16:0b: db:70:e5:39:f7:25:de:56:57:cd:65:21:40:4c:1e:4e:e3:22: 66:b2:02:a6:8b:3c:b0:ce:15:89:cd:0a:74:1b:cb:bc:98:9a: e8:5a:eb:61:85:5e:8f:14:46:f8:6d:a6:e6:8c:63:f1:33:5f: 65:30:91:f9:9b:58:cf:97:0a:3e:5c:7d:8c:9b:25:a6:35:f8: 30:f8:c9:1e:1b:2b:d0:5c:5b:37:98:4a:80:7a:bf:fa:a0:25: 01:c0:9c:41:2c:b1:01:3f:f7:b9:18:34:cb:d1:41:50:e3:f7: e6:9e:46:6e:61:08:9d:66:68:61:16:40:a0:27:09:bb:f2:2b: 66:13:fb:24:c6:d7:72:18:7f:09:36:74:a9:1b:2d:2f:33:eb: 9e:c4:1a:da:ba:0e:b0:07:c3:cf:da:ae:13:75:3f:a0:56:72: 0d:93:63:92:ca:30:48:a8:84:c0:b8:84:c5:fb:51:1b:a6:15: fa:2d:85:ec:3d:f3:13:12:f0:24:79:9a:97:e0:b8:94:9f:f0: d3:ce:dd:d3:cc:4b:53:75:49:59:f9:cc:e9:06:39:68:55:9e: f8:4e:c9:77:7b:b7:ea:11:fa:d3:21:73:c0:07:da:21:a9:09: a1:58:d8:7a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBcTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 RjdCRTExMC8GA1UEBRMoMEY5QUE4REU1M0YwODVFRTg2NUExRTNERDJBMjM0NEUy MTMwQUYxNDAeFw0yNTA1MzEwNjMwNDVaFw0yNTA2MDcwNjMwNDVaMBgxFjAUBgNV BAMTDTY4M2FhMjE1LWU5N2IwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCZmzWpy2NXJ+PVZsu9mE8e/UJ+o672ASYTa04hlscBkRYww4NpE1BU+3yHkxLD MeOTR6DYN5XLh88Js5KGU1muAaUBuKIr03m6jrvtdOD7PPUWBbV0S7c0CQ6enOza 1VOhTleC4O8gYSaIBnVhwzXHC8HK6lV0UvGXL9Tmw+yN/DrP1+4PPcB/4sd2jJw5 eLiX7Fqz8EaYHdu6xcOET9QUcbt0xpwtrw/OmffRFRBJOkwCRXOuFiRCN2i3KsLt ICdYtsqQMqHhwvK9t+cMABJasREGKSie+0iNWIaX46H7BGY9gBpIww3wVq/fxsui fjpoqFWbsUSTS0//fUMFfBmBAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU2WJ5LdzC grtEfAWzrNR5g/jyYuEwHwYDVR0jBBgwFoAUD5qo3lPwhe6GWh490qI0TiEwrxQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZGN0JFLzA5Q0UzMjY0OUNG RTExRUY4RUVDOTA0QUM0RjlBRTAyL0Q1cW8zbFB3aGU2R1doNDkwcUkwVGlFd3J4 US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRDVxbzNsUHdoZTZHV2g0OTBxSTBUaUV3cnhRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZG N0JFLzA5Q0UzMjY0OUNGRTExRUY4RUVDOTA0QUM0RjlBRTAyL0Q1cW8zbFB3aGU2 R1doNDkwcUkwVGlFd3J4US5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACKtPVOdJyKWJ+1Cfm6wS3AWC9tw5Tn3Jd5WV81lIUBMHk7jImayAqaL PLDOFYnNCnQby7yYmuha62GFXo8URvhtpuaMY/EzX2UwkfmbWM+XCj5cfYybJaY1 +DD4yR4bK9BcWzeYSoB6v/qgJQHAnEEssQE/97kYNMvRQVDj9+aeRm5hCJ1maGEW QKAnCbvyK2YT+yTG13IYfwk2dKkbLS8z657EGtq6DrAHw8/arhN1P6BWcg2TY5LK MEiohMC4hMX7URumFfothew98xMS8CR5mpfguJSf8NPO3dPMS1N1SVn5zOkGOWhV nvhOyXd7t+oR+tMhc8AH2iGpCaFY2Ho= -----END CERTIFICATE-----Generated at Sat May 31 17:49:40 2025 by rpki-client