$ rpki-client -vvf rpki.apnic.net/member_repository/A91931EA/A2398F20C4B411EAA78B422AC4F9AE02/a_ljfFgcU0tLpjjNyHnAp-p6TwI.mft File: a_ljfFgcU0tLpjjNyHnAp-p6TwI.mft (raw, json) Hash identifier: S94P6Qa78H+4FQa1+7RcP9Ir2U8U8g9vhyrjAHpBrOY= Subject key identifier: 54:23:DA:AE:C2:87:48:2D:61:37:54:EB:D0:82:C1:5D:C5:2B:64:DD Authority key identifier: 6B:F9:63:7C:58:1C:53:4B:4B:A6:38:CD:C8:79:C0:A7:EA:7A:4F:02 Certificate issuer: /CN=A91931EA/serialNumber=6BF9637C581C534B4BA638CDC879C0A7EA7A4F02 Certificate serial: 0871 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a_ljfFgcU0tLpjjNyHnAp-p6TwI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91931EA/A2398F20C4B411EAA78B422AC4F9AE02/a_ljfFgcU0tLpjjNyHnAp-p6TwI.mft Manifest number: 086B Signing time: Fri 30 May 2025 20:53:47 +0000 Manifest this update: Fri 30 May 2025 20:53:46 +0000 Manifest next update: Fri 06 Jun 2025 20:53:46 +0000 Files and hashes: 1: a_ljfFgcU0tLpjjNyHnAp-p6TwI.crl (hash: 7PxS59ZTJE9occV64/+H4PFqoI37pWpfitbaHEM0PKY=) 2: D0BC8E28C4B511EA8323912BC4F9AE02.roa (hash: qM1JVSXdUTQJnIVxaVxQsaSGw94EgaLnOqmc/M2SNDY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91931EA/A2398F20C4B411EAA78B422AC4F9AE02/a_ljfFgcU0tLpjjNyHnAp-p6TwI.crl rsync://rpki.apnic.net/member_repository/A91931EA/A2398F20C4B411EAA78B422AC4F9AE02/a_ljfFgcU0tLpjjNyHnAp-p6TwI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a_ljfFgcU0tLpjjNyHnAp-p6TwI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 20:53:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2161 (0x871) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91931EA, serialNumber=6BF9637C581C534B4BA638CDC879C0A7EA7A4F02 Validity Not Before: May 30 20:53:46 2025 GMT Not After : Jun 6 20:53:46 2025 GMT Subject: CN=683a1adb-5dd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:70:45:ff:2e:e3:29:44:63:c7:dc:ff:83:bd: 08:3b:7f:9a:4e:42:ef:53:e8:b3:dc:d9:a2:74:2e: 72:42:b2:e3:1c:76:cb:74:12:44:81:99:a9:23:b9: 6e:65:c0:20:b4:76:59:b2:25:74:cf:47:14:c6:d5: cc:f4:32:b4:b0:34:50:6d:62:aa:80:02:d7:de:3b: 0c:6b:c5:f2:0c:96:97:d9:41:bc:ec:c3:3d:82:4e: 78:1a:93:53:e8:b8:52:86:c5:0f:09:82:8e:bb:d2: 3e:53:d8:3a:4f:3c:25:f8:67:5c:5d:65:0a:6a:d7: 0a:6d:a9:5c:2f:31:80:dc:cd:c2:40:ab:f6:fb:2f: e2:3c:94:53:42:81:09:2d:ba:c1:23:a3:f9:91:ed: c8:30:21:99:29:ad:67:79:1d:b3:a1:07:10:45:9c: b0:e5:53:04:bf:db:f7:93:25:77:b0:90:6b:70:fa: 5c:8c:37:a8:fa:0a:1b:95:f6:0c:13:a6:dd:23:4d: 5d:52:71:dd:2e:e1:7d:f7:c0:d1:24:1c:68:a4:e9: c3:86:0d:34:06:1c:60:a5:e7:ce:43:b3:4e:ac:84: 42:49:d5:8e:8f:be:0a:07:39:24:9f:80:56:fa:23: 98:99:a7:94:29:d6:61:c0:c0:84:35:50:c5:56:bd: 61:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:23:DA:AE:C2:87:48:2D:61:37:54:EB:D0:82:C1:5D:C5:2B:64:DD X509v3 Authority Key Identifier: keyid:6B:F9:63:7C:58:1C:53:4B:4B:A6:38:CD:C8:79:C0:A7:EA:7A:4F:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91931EA/A2398F20C4B411EAA78B422AC4F9AE02/a_ljfFgcU0tLpjjNyHnAp-p6TwI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a_ljfFgcU0tLpjjNyHnAp-p6TwI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91931EA/A2398F20C4B411EAA78B422AC4F9AE02/a_ljfFgcU0tLpjjNyHnAp-p6TwI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:58:1a:0c:c6:5f:1c:47:f8:ba:27:3f:f0:7a:75:ae:c6:60: 76:fe:2a:8d:55:61:93:9d:de:67:1b:1a:89:fc:18:6c:5b:a5: 7f:89:45:3c:92:88:12:67:fc:fb:52:a6:c4:58:db:72:5d:07: aa:ce:f0:cb:03:07:58:12:d7:3d:ac:ff:80:dd:6f:21:5d:85: f9:5c:af:b6:cb:48:72:33:df:ac:55:f9:5f:d5:54:70:a8:2b: c1:7e:2c:da:cf:f0:0b:aa:2f:b1:3c:ff:78:a6:3f:cd:53:55: 97:52:5c:57:ef:27:29:8c:7c:41:26:98:50:ac:83:d1:41:bb: 82:45:66:45:30:7e:86:a8:3d:93:7a:9c:2b:b4:90:eb:57:2a: 02:7c:b1:f9:ac:67:b4:5f:f2:a3:ac:f1:07:62:fd:01:17:61: 15:c9:e8:9c:3f:57:22:1f:1e:cc:75:06:fd:1a:35:94:89:37: 8e:15:b7:ea:07:ec:6e:0b:12:46:87:02:2e:a2:cb:72:3c:7b: f3:e3:36:e6:e0:ba:f7:a3:a1:3c:8c:f5:9d:07:c3:17:50:8a: ec:92:de:f1:e0:71:a6:26:d2:23:0b:6a:31:a3:8e:01:ef:94: 1b:96:1c:f6:13:3f:83:da:73:51:8f:6c:25:4c:ad:c4:b0:2f: e8:c8:7e:a1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCHEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTMxRUExMTAvBgNVBAUTKDZCRjk2MzdDNTgxQzUzNEI0QkE2MzhDREM4NzlDMEE3 RUE3QTRGMDIwHhcNMjUwNTMwMjA1MzQ2WhcNMjUwNjA2MjA1MzQ2WjAYMRYwFAYD VQQDEw02ODNhMWFkYi01ZGQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApHBF/y7jKURjx9z/g70IO3+aTkLvU+iz3NmidC5yQrLjHHbLdBJEgZmpI7lu ZcAgtHZZsiV0z0cUxtXM9DK0sDRQbWKqgALX3jsMa8XyDJaX2UG87MM9gk54GpNT 6LhShsUPCYKOu9I+U9g6Tzwl+GdcXWUKatcKbalcLzGA3M3CQKv2+y/iPJRTQoEJ LbrBI6P5ke3IMCGZKa1neR2zoQcQRZyw5VMEv9v3kyV3sJBrcPpcjDeo+goblfYM E6bdI01dUnHdLuF998DRJBxopOnDhg00BhxgpefOQ7NOrIRCSdWOj74KBzkkn4BW +iOYmaeUKdZhwMCENVDFVr1h4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFQj2q7C h0gtYTdU69CCwV3FK2TdMB8GA1UdIwQYMBaAFGv5Y3xYHFNLS6Y4zch5wKfqek8C MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MzFFQS9BMjM5OEYyMEM0 QjQxMUVBQTc4QjQyMkFDNEY5QUUwMi9hX2xqZkZnY1UwdExwampOeUhuQXAtcDZU d0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FfbGpmRmdjVTB0THBqak55SG5BcC1wNlR3SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MzFFQS9BMjM5OEYyMEM0QjQxMUVBQTc4QjQyMkFDNEY5QUUwMi9hX2xqZkZnY1Uw dExwampOeUhuQXAtcDZUd0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBDWBoMxl8cR/i6Jz/wenWuxmB2/iqNVWGTnd5nGxqJ/BhsW6V/iUU8 kogSZ/z7UqbEWNtyXQeqzvDLAwdYEtc9rP+A3W8hXYX5XK+2y0hyM9+sVflf1VRw qCvBfizaz/ALqi+xPP94pj/NU1WXUlxX7ycpjHxBJphQrIPRQbuCRWZFMH6GqD2T epwrtJDrVyoCfLH5rGe0X/KjrPEHYv0BF2EVyeicP1ciHx7MdQb9GjWUiTeOFbfq B+xuCxJGhwIuostyPHvz4zbm4Lr3o6E8jPWdB8MXUIrskt7x4HGmJtIjC2oxo44B 75Qblhz2Ez+D2nNRj2wlTK3EsC/oyH6h -----END CERTIFICATE-----Generated at Sat May 31 17:57:51 2025 by rpki-client