$ rpki-client -vvf rpki.apnic.net/member_repository/A91758DF/8673608047FE11EC9CDF4B0AC4F9AE02/M_iOrx5M4PGhh31J75fA5_7cA5o.mft File: M_iOrx5M4PGhh31J75fA5_7cA5o.mft (raw, json) Hash identifier: TjP2vZ9an6I9GExaNtncJcA3FER1R4jD3RN1Iw1MRME= Subject key identifier: B6:46:69:E9:9B:61:B8:A5:FB:71:92:52:82:73:13:20:F7:BF:01:1B Authority key identifier: 33:F8:8E:AF:1E:4C:E0:F1:A1:87:7D:49:EF:97:C0:E7:FE:DC:03:9A Certificate issuer: /CN=A91758DF/serialNumber=33F88EAF1E4CE0F1A1877D49EF97C0E7FEDC039A Certificate serial: 048F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M_iOrx5M4PGhh31J75fA5_7cA5o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91758DF/8673608047FE11EC9CDF4B0AC4F9AE02/M_iOrx5M4PGhh31J75fA5_7cA5o.mft Manifest number: 0485 Signing time: Mon 02 Jun 2025 21:03:47 +0000 Manifest this update: Mon 02 Jun 2025 21:03:47 +0000 Manifest next update: Mon 09 Jun 2025 21:03:47 +0000 Files and hashes: 1: M_iOrx5M4PGhh31J75fA5_7cA5o.crl (hash: PQxbuYn8dQdLPihgMDTjsYU/ppkWWgf1KyPSBKcgDcc=) 2: E763AA76A3E811EC8665D621C4F9AE02.roa (hash: Ao2xYTosLdprmQ1iWk+n5IxTYfK7aKOeNtfro7ROk4k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91758DF/8673608047FE11EC9CDF4B0AC4F9AE02/M_iOrx5M4PGhh31J75fA5_7cA5o.crl rsync://rpki.apnic.net/member_repository/A91758DF/8673608047FE11EC9CDF4B0AC4F9AE02/M_iOrx5M4PGhh31J75fA5_7cA5o.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M_iOrx5M4PGhh31J75fA5_7cA5o.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 21:03:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1167 (0x48f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91758DF, serialNumber=33F88EAF1E4CE0F1A1877D49EF97C0E7FEDC039A Validity Not Before: Jun 2 21:03:47 2025 GMT Not After : Jun 9 21:03:47 2025 GMT Subject: CN=683e11b3-cc02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:5d:50:b8:28:54:c9:a3:89:bd:dc:65:c9:8b: 75:64:6f:0d:45:b9:e2:f3:d0:d4:58:44:01:09:ed: b9:5b:d1:dc:b7:0d:69:a0:0b:43:e1:e0:b5:ea:ae: 5b:16:72:bc:fe:4c:d3:54:5d:43:0c:2a:0e:f8:e1: c5:ab:9e:43:93:0b:0e:31:7d:ce:98:57:8f:c6:2b: 7f:66:1e:f7:f1:ea:01:ea:8b:10:c8:b8:72:5d:6e: 7a:d5:1d:16:9b:f0:c8:1d:0e:db:25:a3:2c:9b:92: 8f:ae:62:07:7f:9c:60:0d:9f:21:18:18:c3:36:c6: 88:d1:75:0e:45:6f:b7:94:de:87:6a:7a:fa:40:ac: a2:1f:9a:5a:3f:89:1e:b4:e0:d5:58:3c:57:bb:fe: cd:07:a8:0b:c1:63:44:bf:c3:90:80:95:32:4c:d9: 69:aa:db:84:aa:bb:f1:c7:e9:e8:ed:ea:63:bd:08: 07:5d:3d:4b:9b:91:06:d4:04:96:bb:06:71:76:9f: 22:60:a0:da:28:d2:e0:11:b9:24:e4:49:fe:62:a2: 09:64:c3:74:5c:d1:f3:d2:05:1f:78:41:d5:ae:6c: b8:12:78:6c:88:fe:4e:25:ca:9f:c4:64:3d:13:40: 86:f9:1a:33:47:f4:db:1c:31:23:f2:3e:97:23:90: 17:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:46:69:E9:9B:61:B8:A5:FB:71:92:52:82:73:13:20:F7:BF:01:1B X509v3 Authority Key Identifier: keyid:33:F8:8E:AF:1E:4C:E0:F1:A1:87:7D:49:EF:97:C0:E7:FE:DC:03:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91758DF/8673608047FE11EC9CDF4B0AC4F9AE02/M_iOrx5M4PGhh31J75fA5_7cA5o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M_iOrx5M4PGhh31J75fA5_7cA5o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91758DF/8673608047FE11EC9CDF4B0AC4F9AE02/M_iOrx5M4PGhh31J75fA5_7cA5o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b9:00:db:b6:3b:2c:a1:82:49:0d:b6:00:5a:ce:da:8e:1e:0f: 4e:ef:ba:e6:7d:be:e1:f7:16:31:80:de:89:29:be:08:4b:66: 37:af:ca:2c:a0:d4:09:e6:cc:e3:ca:3a:21:84:21:65:a6:dd: 77:5f:f0:c6:ee:3b:8d:cb:5e:02:8f:6d:1b:77:4b:a2:05:2c: 53:bb:58:47:8b:09:67:8d:08:2d:87:d1:02:f9:b9:60:64:1a: fc:1d:c0:80:d2:9c:01:34:6e:b5:7c:e4:43:5c:85:91:6b:7a: 81:69:4b:2b:94:61:62:b2:63:54:12:b0:e8:9f:cd:07:6b:9c: e5:68:a1:df:74:4e:46:df:d0:dc:9a:ea:93:43:f8:02:9d:9f: 12:0a:a4:34:af:27:fe:12:d8:2a:f0:c9:2b:b7:ea:ba:a9:bf: bf:5f:f5:5e:ad:a9:b1:4b:f6:08:a1:aa:b1:e2:40:43:71:d2: b0:f0:64:8e:ae:93:4a:53:e0:ab:ba:2d:fe:e3:39:8d:cd:59: 28:eb:db:80:2a:a4:5d:65:ea:d9:37:b3:e0:c6:4c:92:3f:1d: e4:f2:e9:35:23:68:e5:6b:6b:14:93:4a:43:7d:5f:cf:a0:4c: c1:6d:2b:e9:b4:a8:9f:32:4e:e8:e6:d2:0f:f6:e5:e4:33:0e: 08:04:5d:21 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBI8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzU4REYxMTAvBgNVBAUTKDMzRjg4RUFGMUU0Q0UwRjFBMTg3N0Q0OUVGOTdDMEU3 RkVEQzAzOUEwHhcNMjUwNjAyMjEwMzQ3WhcNMjUwNjA5MjEwMzQ3WjAYMRYwFAYD VQQDEw02ODNlMTFiMy1jYzAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxV1QuChUyaOJvdxlyYt1ZG8NRbni89DUWEQBCe25W9Hctw1poAtD4eC16q5b FnK8/kzTVF1DDCoO+OHFq55DkwsOMX3OmFePxit/Zh738eoB6osQyLhyXW561R0W m/DIHQ7bJaMsm5KPrmIHf5xgDZ8hGBjDNsaI0XUORW+3lN6Hanr6QKyiH5paP4ke tODVWDxXu/7NB6gLwWNEv8OQgJUyTNlpqtuEqrvxx+no7epjvQgHXT1Lm5EG1ASW uwZxdp8iYKDaKNLgEbkk5En+YqIJZMN0XNHz0gUfeEHVrmy4EnhsiP5OJcqfxGQ9 E0CG+RozR/TbHDEj8j6XI5AXJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLZGaemb Ybil+3GSUoJzEyD3vwEbMB8GA1UdIwQYMBaAFDP4jq8eTODxoYd9Se+XwOf+3AOa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NThERi84NjczNjA4MDQ3 RkUxMUVDOUNERjRCMEFDNEY5QUUwMi9NX2lPcng1TTRQR2hoMzFKNzVmQTVfN2NB NW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL01faU9yeDVNNFBHaGgzMUo3NWZBNV83Y0E1by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NThERi84NjczNjA4MDQ3RkUxMUVDOUNERjRCMEFDNEY5QUUwMi9NX2lPcng1TTRQ R2hoMzFKNzVmQTVfN2NBNW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC5ANu2OyyhgkkNtgBaztqOHg9O77rmfb7h9xYxgN6JKb4IS2Y3r8os oNQJ5szjyjohhCFlpt13X/DG7juNy14Cj20bd0uiBSxTu1hHiwlnjQgth9EC+blg ZBr8HcCA0pwBNG61fORDXIWRa3qBaUsrlGFismNUErDon80Ha5zlaKHfdE5G39Dc muqTQ/gCnZ8SCqQ0ryf+Etgq8Mkrt+q6qb+/X/VeramxS/YIoaqx4kBDcdKw8GSO rpNKU+Crui3+4zmNzVko69uAKqRdZerZN7PgxkySPx3k8uk1I2jla2sUk0pDfV/P oEzBbSvptKifMk7o5tIP9uXkMw4IBF0h -----END CERTIFICATE-----Generated at Tue Jun 3 23:43:49 2025 by rpki-client