$ rpki-client -vvf rpki.apnic.net/member_repository/A91734C9/6736024A225D11EABACFC960C4F9AE02/40gJvFtFT8eZSH_u2tcCEkAkYjo.mft File: 40gJvFtFT8eZSH_u2tcCEkAkYjo.mft (raw, json) Hash identifier: L/sAymmKUcTPbfLlVgszLjSrVJYok39a2h5nMvDGhF8= Subject key identifier: 28:D6:4C:75:FE:80:9E:51:59:C5:5F:7F:E1:B9:48:D1:79:36:0E:26 Authority key identifier: E3:48:09:BC:5B:45:4F:C7:99:48:7F:EE:DA:D7:02:12:40:24:62:3A Certificate issuer: /CN=A91734C9/serialNumber=E34809BC5B454FC799487FEEDAD702124024623A Certificate serial: 0BBF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40gJvFtFT8eZSH_u2tcCEkAkYjo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91734C9/6736024A225D11EABACFC960C4F9AE02/40gJvFtFT8eZSH_u2tcCEkAkYjo.mft Manifest number: 0BAF Signing time: Fri 30 May 2025 19:09:44 +0000 Manifest this update: Fri 30 May 2025 19:09:43 +0000 Manifest next update: Fri 06 Jun 2025 19:09:43 +0000 Files and hashes: 1: 40gJvFtFT8eZSH_u2tcCEkAkYjo.crl (hash: DLTotd0OOa0Q3DXpuDlt+lIVbXv2d42yHGVk3vnGFQk=) 2: 783907BC225E11EA8BD18A62C4F9AE02.roa (hash: Myi9k4IrBdVLRWD9OtQqLIwtmIphhX+YDXYJBcNy/bw=) 3: 78CFD3CC225E11EA8BD18A62C4F9AE02.roa (hash: MyUFtJY4lLof0Zwtdhx7AIg2aYopA1OEBl/K6VizYaU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91734C9/6736024A225D11EABACFC960C4F9AE02/40gJvFtFT8eZSH_u2tcCEkAkYjo.crl rsync://rpki.apnic.net/member_repository/A91734C9/6736024A225D11EABACFC960C4F9AE02/40gJvFtFT8eZSH_u2tcCEkAkYjo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40gJvFtFT8eZSH_u2tcCEkAkYjo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 19:09:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3007 (0xbbf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91734C9, serialNumber=E34809BC5B454FC799487FEEDAD702124024623A Validity Not Before: May 30 19:09:43 2025 GMT Not After : Jun 6 19:09:43 2025 GMT Subject: CN=683a0277-91f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:88:61:8a:e7:ae:eb:e9:0e:96:52:8f:4c:74: a1:e9:ed:7c:7e:db:06:3c:d0:20:2a:8c:3a:c4:69: ca:fa:6c:71:8f:ad:df:a9:ac:da:d5:b4:29:93:9b: f5:ac:02:6d:f3:21:e4:1a:c9:d0:37:74:c0:01:18: 06:b8:68:2d:47:36:1f:33:b1:15:48:16:87:a5:60: 2b:99:e5:cc:b1:c3:b0:26:fa:d5:f8:e8:78:23:ba: ab:aa:8b:e1:43:7b:55:86:8a:ea:1d:15:cb:fc:ee: 0f:89:de:4b:f3:9b:05:d9:59:61:e2:4e:9c:35:73: dc:05:e8:96:d2:02:c2:f6:83:c3:14:22:40:5a:54: 12:19:a5:e3:8b:e7:16:de:2b:d6:a3:c1:45:f4:76: 32:58:ce:7b:de:11:fb:7e:c1:5d:5e:60:7b:66:2f: 2e:43:9f:eb:ef:37:35:6d:c2:a4:fe:ef:5d:21:03: 18:8e:7e:f9:f0:bb:c4:81:6f:b0:4f:9b:cc:16:91: 07:7d:62:4f:54:9a:4a:89:2e:c0:a9:38:36:09:63: 37:16:5e:4c:4b:c5:d1:94:0b:30:86:3b:c2:55:ba: 43:4a:5f:16:b3:74:0b:de:75:0f:4a:53:69:08:db: b0:39:f5:7a:af:1e:19:a0:ee:ac:87:24:82:f5:b4: 98:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:D6:4C:75:FE:80:9E:51:59:C5:5F:7F:E1:B9:48:D1:79:36:0E:26 X509v3 Authority Key Identifier: keyid:E3:48:09:BC:5B:45:4F:C7:99:48:7F:EE:DA:D7:02:12:40:24:62:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91734C9/6736024A225D11EABACFC960C4F9AE02/40gJvFtFT8eZSH_u2tcCEkAkYjo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40gJvFtFT8eZSH_u2tcCEkAkYjo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91734C9/6736024A225D11EABACFC960C4F9AE02/40gJvFtFT8eZSH_u2tcCEkAkYjo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:de:b4:af:24:7d:82:67:82:9c:c5:61:27:b5:e1:8c:b8:7c: 2b:ec:b9:85:ad:27:75:4c:42:0e:f8:41:1e:cb:92:89:b9:3f: eb:e0:14:95:ca:09:4c:ad:22:4d:e9:19:24:31:08:2d:8e:b0: 9d:5f:f0:52:da:31:7e:22:19:33:d0:1f:3e:e1:f7:3f:f9:7e: 55:1f:02:49:b4:85:f4:d8:7f:57:7c:e0:22:33:73:c8:ed:cb: 67:00:73:75:45:bd:b9:74:bb:68:86:4a:20:63:6d:ca:65:6b: 59:27:c7:af:5c:fe:8c:87:07:18:3e:0c:a3:42:4a:a6:13:d6: 99:22:e2:b3:0a:14:5f:d9:41:45:a6:f4:63:fe:77:c7:64:e4: 8f:4b:f5:99:97:34:7e:bc:5a:59:83:c2:d0:c4:64:db:42:05: 48:03:4a:86:0e:31:80:67:c8:5e:4b:e9:30:35:05:a6:6c:93: 16:bf:7d:32:54:17:50:7c:4b:a1:a4:66:2d:fb:3b:b7:77:00: 2b:0d:ab:2d:38:79:84:31:69:c7:74:f2:33:db:36:0f:31:98: 4b:d9:4d:24:39:a6:4a:bb:da:54:c7:62:10:20:21:73:50:bf: 87:f8:b0:e7:c2:38:55:55:10:8a:2d:b0:21:7a:cd:7c:c6:71: 37:51:ca:cc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC78wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzM0QzkxMTAvBgNVBAUTKEUzNDgwOUJDNUI0NTRGQzc5OTQ4N0ZFRURBRDcwMjEy NDAyNDYyM0EwHhcNMjUwNTMwMTkwOTQzWhcNMjUwNjA2MTkwOTQzWjAYMRYwFAYD VQQDEw02ODNhMDI3Ny05MWYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwohhiueu6+kOllKPTHSh6e18ftsGPNAgKow6xGnK+mxxj63fqaza1bQpk5v1 rAJt8yHkGsnQN3TAARgGuGgtRzYfM7EVSBaHpWArmeXMscOwJvrV+Oh4I7qrqovh Q3tVhorqHRXL/O4Pid5L85sF2Vlh4k6cNXPcBeiW0gLC9oPDFCJAWlQSGaXji+cW 3ivWo8FF9HYyWM573hH7fsFdXmB7Zi8uQ5/r7zc1bcKk/u9dIQMYjn758LvEgW+w T5vMFpEHfWJPVJpKiS7AqTg2CWM3Fl5MS8XRlAswhjvCVbpDSl8Ws3QL3nUPSlNp CNuwOfV6rx4ZoO6shySC9bSYZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCjWTHX+ gJ5RWcVff+G5SNF5Ng4mMB8GA1UdIwQYMBaAFONICbxbRU/HmUh/7trXAhJAJGI6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MzRDOS82NzM2MDI0QTIy NUQxMUVBQkFDRkM5NjBDNEY5QUUwMi80MGdKdkZ0RlQ4ZVpTSF91MnRjQ0VrQWtZ am8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzQwZ0p2RnRGVDhlWlNIX3UydGNDRWtBa1lqby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MzRDOS82NzM2MDI0QTIyNUQxMUVBQkFDRkM5NjBDNEY5QUUwMi80MGdKdkZ0RlQ4 ZVpTSF91MnRjQ0VrQWtZam8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBz3rSvJH2CZ4KcxWEnteGMuHwr7LmFrSd1TEIO+EEey5KJuT/r4BSV yglMrSJN6RkkMQgtjrCdX/BS2jF+Ihkz0B8+4fc/+X5VHwJJtIX02H9XfOAiM3PI 7ctnAHN1Rb25dLtohkogY23KZWtZJ8evXP6MhwcYPgyjQkqmE9aZIuKzChRf2UFF pvRj/nfHZOSPS/WZlzR+vFpZg8LQxGTbQgVIA0qGDjGAZ8heS+kwNQWmbJMWv30y VBdQfEuhpGYt+zu3dwArDastOHmEMWnHdPIz2zYPMZhL2U0kOaZKu9pUx2IQICFz UL+H+LDnwjhVVRCKLbAhes18xnE3UcrM -----END CERTIFICATE-----Generated at Sat May 31 16:45:52 2025 by rpki-client