$ rpki-client -vvf rpki.apnic.net/member_repository/A91852AB/2B99854EB8B011EDB4AFD35EC4F9AE02/M2YXmy18l7gmb5tDGASoxtLQkOs.mft File: M2YXmy18l7gmb5tDGASoxtLQkOs.mft (raw, json) Hash identifier: Orq9kRbwIF/PkgA0VeEpqOWfmgUpnEkoClPlKbvKz60= Subject key identifier: F4:E8:E2:E5:D6:FC:ED:E0:D8:A7:96:99:DD:C3:43:22:DB:77:BA:77 Authority key identifier: 33:66:17:9B:2D:7C:97:B8:26:6F:9B:43:18:04:A8:C6:D2:D0:90:EB Certificate issuer: /CN=A91852AB/serialNumber=3366179B2D7C97B8266F9B431804A8C6D2D090EB Certificate serial: 01A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M2YXmy18l7gmb5tDGASoxtLQkOs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91852AB/2B99854EB8B011EDB4AFD35EC4F9AE02/M2YXmy18l7gmb5tDGASoxtLQkOs.mft Manifest number: 01A5 Signing time: Sat 31 May 2025 02:58:13 +0000 Manifest this update: Sat 31 May 2025 02:58:13 +0000 Manifest next update: Sat 07 Jun 2025 02:58:13 +0000 Files and hashes: 1: M2YXmy18l7gmb5tDGASoxtLQkOs.crl (hash: H2MKgdn77TfK38XptFXWBoT2bLjjyTdb+NZbJXw8bKs=) 2: E90A311AB8BE11ED83994B4AC4F9AE02.roa (hash: fdj786LqemSZiJSQFR5Ny/PwTC9eYDtT9LwHAqxwkRU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91852AB/2B99854EB8B011EDB4AFD35EC4F9AE02/M2YXmy18l7gmb5tDGASoxtLQkOs.crl rsync://rpki.apnic.net/member_repository/A91852AB/2B99854EB8B011EDB4AFD35EC4F9AE02/M2YXmy18l7gmb5tDGASoxtLQkOs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M2YXmy18l7gmb5tDGASoxtLQkOs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 02:58:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 424 (0x1a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91852AB, serialNumber=3366179B2D7C97B8266F9B431804A8C6D2D090EB Validity Not Before: May 31 02:58:13 2025 GMT Not After : Jun 7 02:58:13 2025 GMT Subject: CN=683a7045-8b7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:39:3e:e9:34:a8:03:3a:72:6f:fc:53:7e:64: f4:bf:e3:51:dd:28:8f:a3:7f:6c:b9:d7:98:5a:0e: a9:d0:f4:6d:5b:53:7a:9e:d2:b5:69:42:2a:1e:7e: 25:8c:aa:7d:27:a0:87:7c:7c:f8:e0:70:bd:a3:0f: 44:14:5c:87:77:b1:40:5c:a0:7c:b0:86:1b:fd:0c: 8f:a7:ff:7c:d2:8b:95:46:cf:fe:f9:43:91:ac:7c: 3b:4a:af:4d:51:42:32:a3:31:86:8a:a9:59:1b:3f: 88:d1:2a:1f:45:e5:a6:a0:f6:4e:e2:a0:f7:32:8b: 1e:b7:ed:8e:22:21:7f:4f:71:f6:ee:d4:23:d1:9c: 0c:0f:60:5f:98:15:dc:4d:21:29:08:73:bc:41:83: 03:e4:da:c5:6e:0d:ab:b0:66:74:9b:fe:fe:aa:5c: 9f:e1:6b:ab:85:31:56:e1:f2:9a:87:d6:cf:f8:f9: 01:38:89:95:08:32:7e:79:23:28:00:84:b0:99:e2: f7:25:6e:69:cd:40:45:73:36:cc:43:c9:ec:5b:af: 6a:88:ea:bd:91:0e:b6:f4:0e:42:8a:23:84:c6:38: 23:7b:b0:eb:03:85:7b:f5:62:a4:d2:5d:bb:b0:27: 09:67:62:c5:3e:9f:63:67:b8:0c:cc:d2:80:db:a1: 0b:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:E8:E2:E5:D6:FC:ED:E0:D8:A7:96:99:DD:C3:43:22:DB:77:BA:77 X509v3 Authority Key Identifier: keyid:33:66:17:9B:2D:7C:97:B8:26:6F:9B:43:18:04:A8:C6:D2:D0:90:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91852AB/2B99854EB8B011EDB4AFD35EC4F9AE02/M2YXmy18l7gmb5tDGASoxtLQkOs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M2YXmy18l7gmb5tDGASoxtLQkOs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91852AB/2B99854EB8B011EDB4AFD35EC4F9AE02/M2YXmy18l7gmb5tDGASoxtLQkOs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:2c:4c:c5:30:6e:9f:d4:7d:d5:de:75:bc:1f:eb:94:36:09: fc:be:70:2e:50:2d:4e:f2:3b:8e:30:40:be:d5:aa:13:b7:51: 0f:8f:87:80:4a:ee:8f:6c:df:9a:cc:88:cd:b8:3b:b8:30:75: 1a:b6:f6:95:1b:3d:a3:87:4b:36:a6:8e:9d:9a:20:bf:3b:0e: 48:70:4e:3e:e7:e5:53:38:ca:8f:7f:01:bf:74:f4:cd:70:fa: ce:b0:6e:e0:a1:e3:0d:f6:49:08:b6:13:b2:d2:a9:48:79:2a: 8a:45:d3:67:9d:e2:39:be:5d:94:03:11:f6:ca:95:a3:c3:b1: 94:56:04:36:c7:e1:11:2d:ac:7e:aa:f9:60:36:7d:e6:a7:6a: 89:79:82:4d:48:5a:e6:ad:d7:26:c7:86:ac:1d:e1:5c:bd:0e: 43:50:01:dc:56:8b:8e:11:ff:78:1d:31:0e:9b:8d:67:a9:07: 57:5d:9c:21:80:c5:64:ec:60:57:17:72:b8:b6:eb:b4:12:85: fd:8a:51:9e:1e:07:ed:78:76:c8:a9:8c:c6:da:4e:88:d7:35: d0:94:ee:e0:99:28:58:26:1a:6f:7d:00:67:71:b8:bb:66:e0: 74:1b:18:53:08:3a:48:d1:dc:f8:39:5b:82:10:b6:83:f2:03: c1:b2:0c:5a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAagwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODUyQUIxMTAvBgNVBAUTKDMzNjYxNzlCMkQ3Qzk3QjgyNjZGOUI0MzE4MDRBOEM2 RDJEMDkwRUIwHhcNMjUwNTMxMDI1ODEzWhcNMjUwNjA3MDI1ODEzWjAYMRYwFAYD VQQDEw02ODNhNzA0NS04YjdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwjk+6TSoAzpyb/xTfmT0v+NR3SiPo39sudeYWg6p0PRtW1N6ntK1aUIqHn4l jKp9J6CHfHz44HC9ow9EFFyHd7FAXKB8sIYb/QyPp/980ouVRs/++UORrHw7Sq9N UUIyozGGiqlZGz+I0SofReWmoPZO4qD3Moset+2OIiF/T3H27tQj0ZwMD2BfmBXc TSEpCHO8QYMD5NrFbg2rsGZ0m/7+qlyf4WurhTFW4fKah9bP+PkBOImVCDJ+eSMo AISwmeL3JW5pzUBFczbMQ8nsW69qiOq9kQ629A5CiiOExjgje7DrA4V79WKk0l27 sCcJZ2LFPp9jZ7gMzNKA26ELLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPTo4uXW /O3g2KeWmd3DQyLbd7p3MB8GA1UdIwQYMBaAFDNmF5stfJe4Jm+bQxgEqMbS0JDr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTJBQi8yQjk5ODU0RUI4 QjAxMUVEQjRBRkQzNUVDNEY5QUUwMi9NMllYbXkxOGw3Z21iNXRER0FTb3h0TFFr T3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL00yWVhteTE4bDdnbWI1dERHQVNveHRMUWtPcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NTJBQi8yQjk5ODU0RUI4QjAxMUVEQjRBRkQzNUVDNEY5QUUwMi9NMllYbXkxOGw3 Z21iNXRER0FTb3h0TFFrT3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBTLEzFMG6f1H3V3nW8H+uUNgn8vnAuUC1O8juOMEC+1aoTt1EPj4eA Su6PbN+azIjNuDu4MHUatvaVGz2jh0s2po6dmiC/Ow5IcE4+5+VTOMqPfwG/dPTN cPrOsG7goeMN9kkIthOy0qlIeSqKRdNnneI5vl2UAxH2ypWjw7GUVgQ2x+ERLax+ qvlgNn3mp2qJeYJNSFrmrdcmx4asHeFcvQ5DUAHcVouOEf94HTEOm41nqQdXXZwh gMVk7GBXF3K4tuu0EoX9ilGeHgfteHbIqYzG2k6I1zXQlO7gmShYJhpvfQBncbi7 ZuB0GxhTCDpI0dz4OVuCELaD8gPBsgxa -----END CERTIFICATE-----Generated at Sat May 31 15:02:51 2025 by rpki-client