$ rpki-client -vvf rpki.apnic.net/member_repository/A91814E9/FE57C2BC083011EBBFE4C732C4F9AE02/xC_x0v81KYG8X4IkDsk5TvqzEYY.mft File: xC_x0v81KYG8X4IkDsk5TvqzEYY.mft (raw, json) Hash identifier: JV/ZtZ5Ryu3DTmJDz96KAP32lgi9kIbw1gvvwpQiM2M= Subject key identifier: DD:DA:19:CA:9C:2C:4D:31:DE:F4:F8:20:C7:0C:08:13:12:59:AF:87 Authority key identifier: C4:2F:F1:D2:FF:35:29:81:BC:5F:82:24:0E:C9:39:4E:FA:B3:11:86 Certificate issuer: /CN=A91814E9/serialNumber=C42FF1D2FF352981BC5F82240EC9394EFAB31186 Certificate serial: 07A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xC_x0v81KYG8X4IkDsk5TvqzEYY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91814E9/FE57C2BC083011EBBFE4C732C4F9AE02/xC_x0v81KYG8X4IkDsk5TvqzEYY.mft Manifest number: 079A Signing time: Fri 30 May 2025 21:32:34 +0000 Manifest this update: Fri 30 May 2025 21:32:33 +0000 Manifest next update: Fri 06 Jun 2025 21:32:33 +0000 Files and hashes: 1: xC_x0v81KYG8X4IkDsk5TvqzEYY.crl (hash: xfG9X0vqw+5tg2sDMhQ1YUbE0kRcKp/yuG27t8wbDsU=) 2: 24D4F9F0E61B11EBBAE35771C4F9AE02.roa (hash: pAxKOEsb1/KFe+q3FlaBgvrNZLF2dQ46tY3qWb9WHrw=) 3: 21EE9510083211EB81509633C4F9AE02.roa (hash: wjVXkLI0cRiF7TL9Zg9ZcPtd+sgFgSN+IcqPU2UoUBo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91814E9/FE57C2BC083011EBBFE4C732C4F9AE02/xC_x0v81KYG8X4IkDsk5TvqzEYY.crl rsync://rpki.apnic.net/member_repository/A91814E9/FE57C2BC083011EBBFE4C732C4F9AE02/xC_x0v81KYG8X4IkDsk5TvqzEYY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xC_x0v81KYG8X4IkDsk5TvqzEYY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 21:32:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1957 (0x7a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91814E9, serialNumber=C42FF1D2FF352981BC5F82240EC9394EFAB31186 Validity Not Before: May 30 21:32:33 2025 GMT Not After : Jun 6 21:32:33 2025 GMT Subject: CN=683a23f2-fa86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:dc:0f:ca:9b:dc:31:e6:09:42:1c:f7:4d:45: 0d:7e:e5:c2:a7:5a:13:3c:e2:9a:1c:29:d8:0b:e7: 10:be:9f:7d:82:b8:8a:86:6c:c4:94:0c:4d:e9:b0: 9e:71:63:b5:d4:fe:29:fa:86:de:4e:3e:31:75:a4: 8f:0c:e2:4c:bc:a9:4c:44:49:4a:b7:fd:f9:d0:d4: d1:90:c5:5d:e8:a7:d7:56:05:8b:53:99:4b:cd:31: 0a:d1:18:4a:de:c5:4d:82:f2:a0:4c:34:07:d1:7d: 47:cf:ff:4e:cf:8f:c7:d1:de:cd:8e:74:91:86:7f: 5c:e3:5f:13:9e:8e:2c:3c:45:90:cb:76:b8:04:30: 2f:32:e0:f2:ea:1f:bd:27:7f:0f:6c:58:f3:5a:5f: 58:02:a2:5e:1e:86:d2:ba:08:00:3f:a3:01:dc:3d: cf:59:f8:c3:01:ab:50:58:85:3e:47:cd:b0:1b:79: 12:5f:cd:63:5e:73:6e:3e:14:57:31:6d:05:5b:42: 98:21:b0:11:6c:a8:e4:cc:11:ce:b0:90:80:2e:f4: 43:9c:0d:57:d9:c9:8f:56:99:ca:08:bf:f2:bd:f1: 2b:71:18:c8:93:1a:e5:9e:9c:7e:b4:d8:7f:7e:b3: b7:7e:84:a5:45:2c:fe:e4:24:e1:c2:70:c1:59:ca: 71:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:DA:19:CA:9C:2C:4D:31:DE:F4:F8:20:C7:0C:08:13:12:59:AF:87 X509v3 Authority Key Identifier: keyid:C4:2F:F1:D2:FF:35:29:81:BC:5F:82:24:0E:C9:39:4E:FA:B3:11:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91814E9/FE57C2BC083011EBBFE4C732C4F9AE02/xC_x0v81KYG8X4IkDsk5TvqzEYY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xC_x0v81KYG8X4IkDsk5TvqzEYY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91814E9/FE57C2BC083011EBBFE4C732C4F9AE02/xC_x0v81KYG8X4IkDsk5TvqzEYY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:d2:ce:4d:1a:68:f6:df:28:a5:c0:39:f8:92:63:44:43:e0: 6e:28:b7:dd:d9:08:46:95:16:d3:ff:2c:92:04:d3:9b:24:55: d1:16:5d:6c:c2:c3:36:f2:b1:43:6e:54:77:4f:59:4a:c9:ba: 07:d3:53:eb:aa:4b:8c:8f:b6:5b:bb:a9:47:85:b9:6a:54:72: 87:bf:6f:b6:7f:ec:c9:2e:ce:5d:d6:f1:e8:1b:5d:cf:74:19: 08:60:c6:13:f3:15:5b:1f:0b:ce:66:b2:a4:f1:e7:42:cb:c9: 01:a3:57:f0:9d:dc:73:12:66:49:d9:11:c9:03:c7:46:43:ec: 3c:89:74:67:c3:4a:72:f7:84:a2:cd:30:24:88:90:f1:fe:5c: d1:9a:2e:65:01:ea:52:25:be:ff:2e:17:14:94:be:45:81:ea: f1:9a:6f:b2:40:36:d2:df:f1:c8:27:0c:06:f6:d8:7d:62:50: 57:76:31:2e:be:52:ce:bd:df:37:05:27:cd:c6:da:9c:37:27: 80:d0:84:36:42:bd:72:7c:c8:7a:fa:8c:94:c1:51:aa:52:76: d2:d3:d6:a4:e4:95:74:e5:fe:eb:57:35:2d:65:17:f7:6a:0c: 7b:f8:9c:0d:e0:ad:87:e6:3f:a8:fb:80:a1:b2:75:90:2d:7d: 67:39:18:06 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB6UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODE0RTkxMTAvBgNVBAUTKEM0MkZGMUQyRkYzNTI5ODFCQzVGODIyNDBFQzkzOTRF RkFCMzExODYwHhcNMjUwNTMwMjEzMjMzWhcNMjUwNjA2MjEzMjMzWjAYMRYwFAYD VQQDEw02ODNhMjNmMi1mYTg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7dwPypvcMeYJQhz3TUUNfuXCp1oTPOKaHCnYC+cQvp99griKhmzElAxN6bCe cWO11P4p+obeTj4xdaSPDOJMvKlMRElKt/350NTRkMVd6KfXVgWLU5lLzTEK0RhK 3sVNgvKgTDQH0X1Hz/9Oz4/H0d7NjnSRhn9c418Tno4sPEWQy3a4BDAvMuDy6h+9 J38PbFjzWl9YAqJeHobSuggAP6MB3D3PWfjDAatQWIU+R82wG3kSX81jXnNuPhRX MW0FW0KYIbARbKjkzBHOsJCALvRDnA1X2cmPVpnKCL/yvfErcRjIkxrlnpx+tNh/ frO3foSlRSz+5CThwnDBWcpxIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN3aGcqc LE0x3vT4IMcMCBMSWa+HMB8GA1UdIwQYMBaAFMQv8dL/NSmBvF+CJA7JOU76sxGG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MTRFOS9GRTU3QzJCQzA4 MzAxMUVCQkZFNEM3MzJDNEY5QUUwMi94Q194MHY4MUtZRzhYNElrRHNrNVR2cXpF WVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hDX3gwdjgxS1lHOFg0SWtEc2s1VHZxekVZWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MTRFOS9GRTU3QzJCQzA4MzAxMUVCQkZFNEM3MzJDNEY5QUUwMi94Q194MHY4MUtZ RzhYNElrRHNrNVR2cXpFWVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA70s5NGmj23yilwDn4kmNEQ+BuKLfd2QhGlRbT/yySBNObJFXRFl1s wsM28rFDblR3T1lKyboH01PrqkuMj7Zbu6lHhblqVHKHv2+2f+zJLs5d1vHoG13P dBkIYMYT8xVbHwvOZrKk8edCy8kBo1fwndxzEmZJ2RHJA8dGQ+w8iXRnw0py94Si zTAkiJDx/lzRmi5lAepSJb7/LhcUlL5Fgerxmm+yQDbS3/HIJwwG9th9YlBXdjEu vlLOvd83BSfNxtqcNyeA0IQ2Qr1yfMh6+oyUwVGqUnbS09ak5JV05f7rVzUtZRf3 agx7+JwN4K2H5j+o+4ChsnWQLX1nORgG -----END CERTIFICATE-----Generated at Sat May 31 16:59:22 2025 by rpki-client