$ rpki-client -vvf rpki.apnic.net/member_repository/A918C88D/38AB591E3DC111EAAF2B6735C4F9AE02/MmRDZHmlDtQMz9K3BOYCSWCOQ6g.mft File: MmRDZHmlDtQMz9K3BOYCSWCOQ6g.mft (raw, json) Hash identifier: 0ItUqqo1wP0WT/uXZbLzKdbSfZUSvtOGizRUC08nefs= Subject key identifier: 70:F1:2D:DE:35:5C:0C:B8:70:A5:BB:F4:5D:31:F0:05:13:83:D5:F5 Authority key identifier: 32:64:43:64:79:A5:0E:D4:0C:CF:D2:B7:04:E6:02:49:60:8E:43:A8 Certificate issuer: /CN=A918C88D/serialNumber=3264436479A50ED40CCFD2B704E60249608E43A8 Certificate serial: 0B3D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmRDZHmlDtQMz9K3BOYCSWCOQ6g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918C88D/38AB591E3DC111EAAF2B6735C4F9AE02/MmRDZHmlDtQMz9K3BOYCSWCOQ6g.mft Manifest number: 0B28 Signing time: Fri 30 May 2025 19:25:12 +0000 Manifest this update: Fri 30 May 2025 19:25:12 +0000 Manifest next update: Fri 06 Jun 2025 19:25:12 +0000 Files and hashes: 1: MmRDZHmlDtQMz9K3BOYCSWCOQ6g.crl (hash: 4irwImEU6sNhuDdoGaxeNrYmdIBIrR6wc/wFdSEZad0=) 2: E1EFDAA8F40611EAA5B2244FC4F9AE02.roa (hash: da18YanehMb25ZME1c4CpzCwhlEVLs96RlfGiZoiMxU=) 3: E324E2F6F40611EAA5B2244FC4F9AE02.roa (hash: feQeohVrk3aa2EM/daTKcvI0d6w6k0q2b/efqxvduBI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918C88D/38AB591E3DC111EAAF2B6735C4F9AE02/MmRDZHmlDtQMz9K3BOYCSWCOQ6g.crl rsync://rpki.apnic.net/member_repository/A918C88D/38AB591E3DC111EAAF2B6735C4F9AE02/MmRDZHmlDtQMz9K3BOYCSWCOQ6g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmRDZHmlDtQMz9K3BOYCSWCOQ6g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 19:25:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2877 (0xb3d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918C88D, serialNumber=3264436479A50ED40CCFD2B704E60249608E43A8 Validity Not Before: May 30 19:25:12 2025 GMT Not After : Jun 6 19:25:12 2025 GMT Subject: CN=683a0618-0d78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:9d:bd:99:08:45:ee:af:73:5d:90:0a:a5:f2: f4:1f:26:ab:2c:57:87:85:59:91:3b:7d:90:54:ef: 75:4b:e8:ce:1b:05:1b:65:42:dd:25:13:62:55:9f: d4:45:40:d8:10:96:7e:dd:07:3c:77:34:6e:d6:ad: 9e:86:22:2a:70:28:9a:f1:70:09:df:ae:5f:1e:5e: 2e:8b:5b:96:c0:7c:a6:97:58:6b:7a:4b:91:b9:07: 60:87:26:c7:ca:a9:ec:8e:94:f5:71:ef:56:58:2c: 06:aa:f8:ee:39:67:ee:97:ea:e9:54:9d:2c:98:64: 76:cb:73:1c:28:a9:61:0e:d9:5b:4c:67:07:e0:8b: 92:f3:da:95:e4:27:5e:9d:18:ff:c5:11:99:98:bd: 02:0d:bd:ae:61:97:53:98:ea:f7:02:94:bc:e5:a7: 32:cf:e6:c9:19:e4:d1:42:35:3e:11:fa:f2:c1:50: c9:15:21:68:9e:a1:5e:09:9a:ba:bb:d5:17:45:49: c7:e4:1a:5c:8b:eb:dd:f7:04:ea:9b:af:3a:d6:f7: 35:9c:d6:84:be:83:98:3a:be:c3:e3:8d:94:14:99: 3c:9f:f9:52:e4:22:08:37:38:cd:03:ae:98:a4:3a: 29:14:d9:5e:a5:1a:36:df:d0:bd:11:7d:a9:a6:fa: c7:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:F1:2D:DE:35:5C:0C:B8:70:A5:BB:F4:5D:31:F0:05:13:83:D5:F5 X509v3 Authority Key Identifier: keyid:32:64:43:64:79:A5:0E:D4:0C:CF:D2:B7:04:E6:02:49:60:8E:43:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918C88D/38AB591E3DC111EAAF2B6735C4F9AE02/MmRDZHmlDtQMz9K3BOYCSWCOQ6g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmRDZHmlDtQMz9K3BOYCSWCOQ6g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C88D/38AB591E3DC111EAAF2B6735C4F9AE02/MmRDZHmlDtQMz9K3BOYCSWCOQ6g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:15:26:79:dc:3c:07:c0:9c:91:88:e6:31:a5:1b:9f:47:20: 52:b1:fe:ea:0b:47:c0:55:2c:e6:22:a5:06:b2:92:e5:5f:d4: 4e:c9:06:42:55:1c:dd:18:52:cf:14:29:3e:a9:4a:7f:e0:f6: 8f:9f:fa:49:35:16:f8:b4:bb:5b:28:42:62:6d:fc:62:45:04: f0:36:5d:4f:01:11:44:cf:36:ed:3a:45:34:79:f4:89:6d:59: 2b:32:62:db:10:5c:ce:1e:1c:24:fe:00:cd:31:e1:13:d4:75: 80:f1:37:90:c9:71:1c:27:ab:58:89:d9:e5:95:22:18:05:bf: 9e:ff:eb:3f:f3:43:f8:62:0b:c3:70:8c:c7:2a:8e:14:14:87: 91:00:4c:62:93:eb:78:c0:19:31:f1:30:5b:74:74:1b:95:dd: d6:2f:3d:71:bb:72:6c:68:55:50:90:c5:00:93:2c:a9:73:29: e0:4b:94:2b:a0:06:b1:96:0e:ac:26:b1:a6:37:45:57:1b:22: e9:6d:77:45:7e:fa:53:6b:42:e7:ad:c8:3b:a7:1d:a4:da:e6: 6b:75:bd:2a:2e:ff:0b:ca:2d:83:f5:16:14:a2:62:c1:ef:ee: 86:e0:40:e8:b9:d4:d7:ec:a2:d5:3c:62:8f:9b:b6:df:8e:f0: 7f:78:a9:c8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCz0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEM4OEQxMTAvBgNVBAUTKDMyNjQ0MzY0NzlBNTBFRDQwQ0NGRDJCNzA0RTYwMjQ5 NjA4RTQzQTgwHhcNMjUwNTMwMTkyNTEyWhcNMjUwNjA2MTkyNTEyWjAYMRYwFAYD VQQDEw02ODNhMDYxOC0wZDc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsp29mQhF7q9zXZAKpfL0HyarLFeHhVmRO32QVO91S+jOGwUbZULdJRNiVZ/U RUDYEJZ+3Qc8dzRu1q2ehiIqcCia8XAJ365fHl4ui1uWwHyml1hrekuRuQdghybH yqnsjpT1ce9WWCwGqvjuOWful+rpVJ0smGR2y3McKKlhDtlbTGcH4IuS89qV5Cde nRj/xRGZmL0CDb2uYZdTmOr3ApS85acyz+bJGeTRQjU+EfrywVDJFSFonqFeCZq6 u9UXRUnH5Bpci+vd9wTqm6861vc1nNaEvoOYOr7D442UFJk8n/lS5CIINzjNA66Y pDopFNlepRo239C9EX2ppvrHSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHDxLd41 XAy4cKW79F0x8AUTg9X1MB8GA1UdIwQYMBaAFDJkQ2R5pQ7UDM/StwTmAklgjkOo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Qzg4RC8zOEFCNTkxRTNE QzExMUVBQUYyQjY3MzVDNEY5QUUwMi9NbVJEWkhtbER0UU16OUszQk9ZQ1NXQ09R NmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01tUkRaSG1sRHRRTXo5SzNCT1lDU1dDT1E2Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Qzg4RC8zOEFCNTkxRTNEQzExMUVBQUYyQjY3MzVDNEY5QUUwMi9NbVJEWkhtbER0 UU16OUszQk9ZQ1NXQ09RNmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCLFSZ53DwHwJyRiOYxpRufRyBSsf7qC0fAVSzmIqUGspLlX9ROyQZC VRzdGFLPFCk+qUp/4PaPn/pJNRb4tLtbKEJibfxiRQTwNl1PARFEzzbtOkU0efSJ bVkrMmLbEFzOHhwk/gDNMeET1HWA8TeQyXEcJ6tYidnllSIYBb+e/+s/80P4YgvD cIzHKo4UFIeRAExik+t4wBkx8TBbdHQbld3WLz1xu3JsaFVQkMUAkyypcyngS5Qr oAaxlg6sJrGmN0VXGyLpbXdFfvpTa0Lnrcg7px2k2uZrdb0qLv8Lyi2D9RYUomLB 7+6G4EDoudTX7KLVPGKPm7bfjvB/eKnI -----END CERTIFICATE-----Generated at Sat May 31 17:01:22 2025 by rpki-client