$ rpki-client -vvf rpki.apnic.net/member_repository/A91910A8/7B20073E9C4E11ECB1748B68C4F9AE02/82dKiQfpsa6O4m-c88mcR_dUk0w.mft File: 82dKiQfpsa6O4m-c88mcR_dUk0w.mft (raw, json) Hash identifier: AOpKN5LRUXaiAHijLd18LjriAlZB9ogtESw+vBK162k= Subject key identifier: DF:37:D9:DA:96:FD:4F:23:43:65:B3:6C:77:2C:05:17:8E:68:98:10 Authority key identifier: F3:67:4A:89:07:E9:B1:AE:8E:E2:6F:9C:F3:C9:9C:47:F7:54:93:4C Certificate issuer: /CN=A91910A8/serialNumber=F3674A8907E9B1AE8EE26F9CF3C99C47F754934C Certificate serial: 03B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/82dKiQfpsa6O4m-c88mcR_dUk0w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91910A8/7B20073E9C4E11ECB1748B68C4F9AE02/82dKiQfpsa6O4m-c88mcR_dUk0w.mft Manifest number: 03A2 Signing time: Sat 31 May 2025 00:58:25 +0000 Manifest this update: Sat 31 May 2025 00:58:24 +0000 Manifest next update: Sat 07 Jun 2025 00:58:24 +0000 Files and hashes: 1: 82dKiQfpsa6O4m-c88mcR_dUk0w.crl (hash: msZ9o/hcLf8824bCI+73q2Jhla637AO2Wggt82+TqR4=) 2: F47320C4E04111EE8F798E3DC4F9AE02.roa (hash: +qgf84XC7fwqmND33skSgzHGmdhqJ+EK/64iZ97m69g=) 3: 5C27D4DCB0DB11EC87206C69C4F9AE02.roa (hash: M3aykX0j4vteJ7Aeu69jjSSSHCYOZs36DtkdcU8NJ0w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91910A8/7B20073E9C4E11ECB1748B68C4F9AE02/82dKiQfpsa6O4m-c88mcR_dUk0w.crl rsync://rpki.apnic.net/member_repository/A91910A8/7B20073E9C4E11ECB1748B68C4F9AE02/82dKiQfpsa6O4m-c88mcR_dUk0w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/82dKiQfpsa6O4m-c88mcR_dUk0w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 00:58:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 945 (0x3b1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91910A8, serialNumber=F3674A8907E9B1AE8EE26F9CF3C99C47F754934C Validity Not Before: May 31 00:58:24 2025 GMT Not After : Jun 7 00:58:24 2025 GMT Subject: CN=683a5430-a227 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:cd:0f:24:7d:90:30:cd:0e:3b:73:53:fd:ed: f0:0c:bd:47:71:d1:b7:fc:7b:ed:3e:0d:a0:fc:60: e8:bf:98:af:04:6b:8f:44:b6:dd:a5:bf:b4:c1:e6: f8:72:2b:18:86:f3:65:db:f6:23:55:6f:2c:53:aa: 2b:a2:b2:b4:28:da:e8:6d:59:f9:f8:d0:d5:5f:88: 0b:bd:fa:d8:75:b0:6d:2a:c7:59:71:64:cc:ce:90: 17:f7:e0:ec:7e:88:96:84:e2:13:0d:5d:11:22:9b: f3:a8:67:81:a8:1c:4b:78:94:56:c5:69:19:1b:ea: 07:8e:22:d5:b9:0a:cc:43:4f:11:7b:d3:b7:56:aa: 84:76:9a:86:ff:91:4a:fb:a1:67:8f:5f:ae:c3:3d: d8:dc:13:71:71:35:95:27:97:db:0a:ab:00:d1:f2: aa:bd:c9:b5:43:1f:8f:39:a0:56:b4:c7:43:8c:3b: 6c:ab:88:bd:d9:4f:06:51:e0:a7:d3:82:b2:ed:4b: 40:08:85:04:d2:17:c2:b1:2e:e4:28:05:91:9b:99: 36:6a:a2:45:69:1a:19:d0:ab:8b:00:9e:25:f7:d8: 54:73:6f:8d:1d:fb:58:fc:51:a6:93:44:8e:70:c2: 96:00:b3:9f:a5:83:76:f4:b8:cf:be:d3:e5:ed:1e: 2c:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:37:D9:DA:96:FD:4F:23:43:65:B3:6C:77:2C:05:17:8E:68:98:10 X509v3 Authority Key Identifier: keyid:F3:67:4A:89:07:E9:B1:AE:8E:E2:6F:9C:F3:C9:9C:47:F7:54:93:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91910A8/7B20073E9C4E11ECB1748B68C4F9AE02/82dKiQfpsa6O4m-c88mcR_dUk0w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/82dKiQfpsa6O4m-c88mcR_dUk0w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91910A8/7B20073E9C4E11ECB1748B68C4F9AE02/82dKiQfpsa6O4m-c88mcR_dUk0w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:35:58:d1:c7:00:10:64:60:ca:61:60:d0:e2:e6:7c:92:58: 6e:99:58:db:7f:c0:4d:de:32:42:b1:9e:65:16:05:32:96:8d: 62:f5:13:50:73:82:dc:87:f3:09:fb:74:f0:f9:43:ce:30:18: 11:d3:42:35:b7:37:d6:f2:8b:f3:94:82:af:95:43:44:0d:1b: a9:4e:6d:2f:fe:42:fd:59:0c:7e:84:ce:f5:66:f1:45:7f:fa: ee:31:b1:a0:5c:83:63:37:50:c8:fa:e3:99:99:0d:a1:8c:b1: 38:86:e2:ca:5b:f2:d1:1b:20:24:a8:2e:27:59:4e:a2:8e:b5: 3e:57:b7:a4:0e:0a:f5:07:1b:b0:e9:dd:c0:ae:ef:24:bb:ac: f3:38:1d:3e:3b:2c:22:9c:d6:c3:94:e6:3c:69:28:c1:3c:b7: 3d:4c:c9:44:fa:43:f6:20:9b:04:2c:1a:86:11:40:8c:a7:73: 07:28:c3:08:59:b7:e1:cc:7d:35:e6:63:9d:b1:19:f8:7f:d0: cb:d2:be:dc:37:0f:66:b8:5c:db:f9:26:b1:9e:ab:ba:d4:27: 9e:5f:01:a6:5a:1a:05:69:c1:87:e1:6b:4d:46:37:b3:80:38: 4b:5d:3e:b7:81:6a:af:c3:42:8d:34:50:bc:06:fa:8e:9e:85: 86:5d:53:72 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA7EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTEwQTgxMTAvBgNVBAUTKEYzNjc0QTg5MDdFOUIxQUU4RUUyNkY5Q0YzQzk5QzQ3 Rjc1NDkzNEMwHhcNMjUwNTMxMDA1ODI0WhcNMjUwNjA3MDA1ODI0WjAYMRYwFAYD VQQDEw02ODNhNTQzMC1hMjI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0s0PJH2QMM0OO3NT/e3wDL1HcdG3/HvtPg2g/GDov5ivBGuPRLbdpb+0web4 cisYhvNl2/YjVW8sU6ororK0KNrobVn5+NDVX4gLvfrYdbBtKsdZcWTMzpAX9+Ds foiWhOITDV0RIpvzqGeBqBxLeJRWxWkZG+oHjiLVuQrMQ08Re9O3VqqEdpqG/5FK +6Fnj1+uwz3Y3BNxcTWVJ5fbCqsA0fKqvcm1Qx+POaBWtMdDjDtsq4i92U8GUeCn 04Ky7UtACIUE0hfCsS7kKAWRm5k2aqJFaRoZ0KuLAJ4l99hUc2+NHftY/FGmk0SO cMKWALOfpYN29LjPvtPl7R4s8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN832dqW /U8jQ2WzbHcsBReOaJgQMB8GA1UdIwQYMBaAFPNnSokH6bGujuJvnPPJnEf3VJNM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MTBBOC83QjIwMDczRTlD NEUxMUVDQjE3NDhCNjhDNEY5QUUwMi84MmRLaVFmcHNhNk80bS1jODhtY1JfZFVr MHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzgyZEtpUWZwc2E2TzRtLWM4OG1jUl9kVWswdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MTBBOC83QjIwMDczRTlDNEUxMUVDQjE3NDhCNjhDNEY5QUUwMi84MmRLaVFmcHNh Nk80bS1jODhtY1JfZFVrMHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQApNVjRxwAQZGDKYWDQ4uZ8klhumVjbf8BN3jJCsZ5lFgUylo1i9RNQ c4Lch/MJ+3Tw+UPOMBgR00I1tzfW8ovzlIKvlUNEDRupTm0v/kL9WQx+hM71ZvFF f/ruMbGgXINjN1DI+uOZmQ2hjLE4huLKW/LRGyAkqC4nWU6ijrU+V7ekDgr1Bxuw 6d3Aru8ku6zzOB0+OywinNbDlOY8aSjBPLc9TMlE+kP2IJsELBqGEUCMp3MHKMMI WbfhzH015mOdsRn4f9DL0r7cNw9muFzb+Saxnqu61CeeXwGmWhoFacGH4WtNRjez gDhLXT63gWqvw0KNNFC8BvqOnoWGXVNy -----END CERTIFICATE-----Generated at Sat May 31 16:57:46 2025 by rpki-client