$ rpki-client -vvf rpki.apnic.net/member_repository/A91856C4/A3BAD8E204FF11EA93EE9A23C4F9AE02/mpwxvYeWc4abPI8FWW6IFVgvEdA.mft File: mpwxvYeWc4abPI8FWW6IFVgvEdA.mft (raw, json) Hash identifier: 1Fv6tW1aiyUklSJcynEAEut3EhqFObv6OqPI+uFDHD0= Subject key identifier: A9:1C:5E:1A:CD:35:D6:5C:EF:9F:06:42:75:9F:41:86:E7:EA:6D:80 Authority key identifier: 9A:9C:31:BD:87:96:73:86:9B:3C:8F:05:59:6E:88:15:58:2F:11:D0 Certificate issuer: /CN=A91856C4/serialNumber=9A9C31BD879673869B3C8F05596E8815582F11D0 Certificate serial: 0C4E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mpwxvYeWc4abPI8FWW6IFVgvEdA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91856C4/A3BAD8E204FF11EA93EE9A23C4F9AE02/mpwxvYeWc4abPI8FWW6IFVgvEdA.mft Manifest number: 0C42 Signing time: Fri 30 May 2025 18:37:02 +0000 Manifest this update: Fri 30 May 2025 18:37:01 +0000 Manifest next update: Fri 06 Jun 2025 18:37:01 +0000 Files and hashes: 1: mpwxvYeWc4abPI8FWW6IFVgvEdA.crl (hash: BD2gP4R5FwdrtJPaCGdoDw0+N3YJl5ycnMZ8mp9pG4w=) 2: 58AEC9929C0F11EA9CC4217CC4F9AE02.roa (hash: rjjlCBXic9PjXjyPWM+A+lhdUtqC6LPHHyzyg5jp9Pc=) 3: 98DC875C050111EA9BDD372BC4F9AE02.roa (hash: tUTz8eY+t4ddLMBAcdiLEQQ0A3k/C+6KL0Lp4wdaHaA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91856C4/A3BAD8E204FF11EA93EE9A23C4F9AE02/mpwxvYeWc4abPI8FWW6IFVgvEdA.crl rsync://rpki.apnic.net/member_repository/A91856C4/A3BAD8E204FF11EA93EE9A23C4F9AE02/mpwxvYeWc4abPI8FWW6IFVgvEdA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mpwxvYeWc4abPI8FWW6IFVgvEdA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 18:37:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3150 (0xc4e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91856C4, serialNumber=9A9C31BD879673869B3C8F05596E8815582F11D0 Validity Not Before: May 30 18:37:01 2025 GMT Not After : Jun 6 18:37:01 2025 GMT Subject: CN=6839facd-ffad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:57:9f:16:64:8a:1b:0e:c8:3e:aa:5b:5b:f8: 81:f7:7c:7d:3c:a0:36:40:94:e0:e4:ba:06:9e:bb: bd:77:98:25:a9:df:bc:81:6b:a9:f2:bd:aa:0a:e9: 48:c7:30:e5:b6:2a:67:9d:25:d3:7e:5a:32:4d:54: fb:2e:2d:78:a3:38:0a:24:62:a7:75:d0:d5:d1:9a: 9b:f8:7d:2d:15:a3:96:78:c5:b7:4b:ea:93:73:25: 37:6f:fc:a3:50:99:2e:69:cb:92:76:6a:f6:41:53: 88:fa:46:04:e1:e3:3b:d7:84:0f:56:8e:54:85:1e: 66:47:87:ef:45:29:f2:c9:45:1c:76:8f:de:6c:eb: ec:bb:69:2b:43:99:4c:1b:34:20:64:76:55:07:99: 00:37:ef:65:76:99:cb:2d:de:04:14:bb:37:5a:a1: 49:3c:0f:57:be:61:91:2b:21:5e:8e:c5:12:ab:48: 51:79:58:63:19:6d:08:0a:20:62:da:93:5f:66:b6: 43:99:25:eb:24:9e:76:9c:47:c1:47:98:72:9b:7b: 21:6f:49:40:84:cc:ed:b3:0f:80:4b:14:b9:bb:bf: 2b:90:cd:2e:23:59:1b:f8:43:5e:09:07:f0:e9:e0: ef:01:59:aa:e3:4f:32:0a:96:8b:01:a7:32:4c:5e: 2e:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:1C:5E:1A:CD:35:D6:5C:EF:9F:06:42:75:9F:41:86:E7:EA:6D:80 X509v3 Authority Key Identifier: keyid:9A:9C:31:BD:87:96:73:86:9B:3C:8F:05:59:6E:88:15:58:2F:11:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91856C4/A3BAD8E204FF11EA93EE9A23C4F9AE02/mpwxvYeWc4abPI8FWW6IFVgvEdA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mpwxvYeWc4abPI8FWW6IFVgvEdA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91856C4/A3BAD8E204FF11EA93EE9A23C4F9AE02/mpwxvYeWc4abPI8FWW6IFVgvEdA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:f4:6b:b7:8a:2a:37:10:86:97:7f:6c:f4:93:2e:d4:9d:a3: 59:a5:0f:e7:04:64:a2:0f:9a:b4:e8:e1:44:c8:f5:8f:f3:29: 01:0a:eb:7a:8a:39:cc:ae:e2:0c:68:aa:71:f4:76:cb:4c:dd: 23:3b:84:99:84:1a:46:69:5b:1b:8b:db:6f:a7:16:65:9a:ff: a6:20:f4:27:00:03:19:79:fd:ab:1e:b6:89:23:de:9a:1a:87: d2:b5:eb:13:86:12:2e:de:e8:4f:ec:e4:a8:6c:95:73:3c:52: 05:a2:e1:df:02:9a:6b:79:91:5f:11:09:8b:16:52:47:66:ee: f0:c3:c1:60:32:aa:71:46:70:85:6a:8b:8f:7c:52:fd:39:b5: eb:34:39:6f:f8:cc:bb:22:39:e8:76:0d:9d:97:15:76:c6:a4: ee:07:29:38:a1:83:c5:e9:e0:79:cc:9c:30:4e:cd:3b:1f:ea: c9:41:da:15:63:ba:93:6f:9d:9c:c6:ae:74:43:9d:c2:2e:21: 26:ad:a3:32:e5:13:cc:52:0b:ea:81:d1:4e:94:90:81:94:64: 66:50:2d:f3:4d:fb:e0:db:d1:83:75:bb:5b:19:a8:d8:01:45: dc:3e:14:ac:36:a2:c1:88:86:5f:dc:05:fa:92:57:90:9a:39: df:af:0e:2b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDE4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODU2QzQxMTAvBgNVBAUTKDlBOUMzMUJEODc5NjczODY5QjNDOEYwNTU5NkU4ODE1 NTgyRjExRDAwHhcNMjUwNTMwMTgzNzAxWhcNMjUwNjA2MTgzNzAxWjAYMRYwFAYD VQQDEw02ODM5ZmFjZC1mZmFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsVefFmSKGw7IPqpbW/iB93x9PKA2QJTg5LoGnru9d5glqd+8gWup8r2qCulI xzDltipnnSXTfloyTVT7Li14ozgKJGKnddDV0Zqb+H0tFaOWeMW3S+qTcyU3b/yj UJkuacuSdmr2QVOI+kYE4eM714QPVo5UhR5mR4fvRSnyyUUcdo/ebOvsu2krQ5lM GzQgZHZVB5kAN+9ldpnLLd4EFLs3WqFJPA9XvmGRKyFejsUSq0hReVhjGW0ICiBi 2pNfZrZDmSXrJJ52nEfBR5hym3shb0lAhMztsw+ASxS5u78rkM0uI1kb+ENeCQfw 6eDvAVmq408yCpaLAacyTF4uWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKkcXhrN NdZc758GQnWfQYbn6m2AMB8GA1UdIwQYMBaAFJqcMb2HlnOGmzyPBVluiBVYLxHQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTZDNC9BM0JBRDhFMjA0 RkYxMUVBOTNFRTlBMjNDNEY5QUUwMi9tcHd4dlllV2M0YWJQSThGV1c2SUZWZ3ZF ZEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21wd3h2WWVXYzRhYlBJOEZXVzZJRlZndkVkQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NTZDNC9BM0JBRDhFMjA0RkYxMUVBOTNFRTlBMjNDNEY5QUUwMi9tcHd4dlllV2M0 YWJQSThGV1c2SUZWZ3ZFZEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBV9Gu3iio3EIaXf2z0ky7UnaNZpQ/nBGSiD5q06OFEyPWP8ykBCut6 ijnMruIMaKpx9HbLTN0jO4SZhBpGaVsbi9tvpxZlmv+mIPQnAAMZef2rHraJI96a GofStesThhIu3uhP7OSobJVzPFIFouHfAppreZFfEQmLFlJHZu7ww8FgMqpxRnCF aouPfFL9ObXrNDlv+My7Ijnodg2dlxV2xqTuByk4oYPF6eB5zJwwTs07H+rJQdoV Y7qTb52cxq50Q53CLiEmraMy5RPMUgvqgdFOlJCBlGRmUC3zTfvg29GDdbtbGajY AUXcPhSsNqLBiIZf3AX6kleQmjnfrw4r -----END CERTIFICATE-----Generated at Sat May 31 17:01:13 2025 by rpki-client