$ rpki-client -vvf rpki.apnic.net/member_repository/A91984AC/6D026CECF5A111EE98DBCD11C4F9AE02/-8VbLAvgqyNHSPvDYVR_ZL-nUZc.mft File: -8VbLAvgqyNHSPvDYVR_ZL-nUZc.mft (raw, json) Hash identifier: aMwm0phFzrgUYVh6tsH5xUio2JkE8MG902eXucSi378= Subject key identifier: A4:62:A3:81:66:AD:56:05:EA:D8:65:41:16:F7:D7:B8:1A:9A:A2:59 Authority key identifier: FB:C5:5B:2C:0B:E0:AB:23:47:48:FB:C3:61:54:7F:64:BF:A7:51:97 Certificate issuer: /CN=A91984AC/serialNumber=FBC55B2C0BE0AB234748FBC361547F64BFA75197 Certificate serial: E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-8VbLAvgqyNHSPvDYVR_ZL-nUZc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91984AC/6D026CECF5A111EE98DBCD11C4F9AE02/-8VbLAvgqyNHSPvDYVR_ZL-nUZc.mft Manifest number: DC Signing time: Sat 31 May 2025 05:11:57 +0000 Manifest this update: Sat 31 May 2025 05:11:57 +0000 Manifest next update: Sat 07 Jun 2025 05:11:57 +0000 Files and hashes: 1: -8VbLAvgqyNHSPvDYVR_ZL-nUZc.crl (hash: tuG2y198bk+zc+F2elBJeGdimgD7/kgdTiigwO3bQ8E=) 2: 47610B18F5A811EEA84E8049C4F9AE02.roa (hash: oDkekcVc24g24l9w3pqtjUZRiCpSkPIIazs9r2Z2ZIs=) 3: 628C9174B6E011EF87D3F60CC4F9AE02.roa (hash: 66xBTvofN0kw93P5VictZxaCnVByR33mxLgf2xLdWgQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91984AC/6D026CECF5A111EE98DBCD11C4F9AE02/-8VbLAvgqyNHSPvDYVR_ZL-nUZc.crl rsync://rpki.apnic.net/member_repository/A91984AC/6D026CECF5A111EE98DBCD11C4F9AE02/-8VbLAvgqyNHSPvDYVR_ZL-nUZc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-8VbLAvgqyNHSPvDYVR_ZL-nUZc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 05:11:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 228 (0xe4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91984AC, serialNumber=FBC55B2C0BE0AB234748FBC361547F64BFA75197 Validity Not Before: May 31 05:11:57 2025 GMT Not After : Jun 7 05:11:57 2025 GMT Subject: CN=683a8f9d-24e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ed:28:1a:5b:08:94:bb:73:38:14:1a:75:88: c6:c6:27:44:6d:e7:51:46:4c:30:af:83:75:a5:59: e2:c6:1e:94:e0:f1:4a:d5:7b:3f:94:27:6f:25:bb: 32:42:5c:6b:33:dc:a9:ef:f9:8b:2c:dc:16:b6:0a: f1:87:fb:f5:4e:8e:f7:ba:e0:34:71:1d:69:0c:a8: 6d:7e:c0:5e:d7:4b:f8:d9:9f:73:c5:99:67:ac:2c: 4d:7d:7d:47:66:fd:46:91:0c:4d:6c:74:ad:10:44: 1c:50:fe:04:9a:1b:ef:13:ec:11:d9:f1:9a:99:2e: e3:63:6c:38:48:48:2b:61:be:47:47:b9:c7:07:1e: f8:b0:6d:67:cd:67:a3:7c:23:96:28:a9:73:a5:f9: 3c:dc:89:62:66:00:d8:2a:b2:9c:5c:57:1b:11:98: be:58:ee:ba:25:84:c9:6f:eb:0a:c8:18:89:c2:43: 2b:d2:19:0e:cf:8c:d3:82:9f:e0:74:ad:ef:b1:15: e7:f2:6b:7e:ba:f9:df:d4:f2:d3:f9:0e:63:b3:b9: 94:74:1e:f6:cd:9f:a5:61:8a:97:f1:33:26:d5:43: 04:22:af:40:14:df:08:26:de:73:92:0c:c2:57:bb: fc:31:a9:ec:a4:28:53:1c:03:f2:8a:7d:03:55:75: e8:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:62:A3:81:66:AD:56:05:EA:D8:65:41:16:F7:D7:B8:1A:9A:A2:59 X509v3 Authority Key Identifier: keyid:FB:C5:5B:2C:0B:E0:AB:23:47:48:FB:C3:61:54:7F:64:BF:A7:51:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91984AC/6D026CECF5A111EE98DBCD11C4F9AE02/-8VbLAvgqyNHSPvDYVR_ZL-nUZc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-8VbLAvgqyNHSPvDYVR_ZL-nUZc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91984AC/6D026CECF5A111EE98DBCD11C4F9AE02/-8VbLAvgqyNHSPvDYVR_ZL-nUZc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:a6:fd:c1:0d:00:06:8d:c9:32:ba:5c:18:3e:d8:6e:a0:29: c6:78:4b:f8:f2:66:4d:77:b0:d3:c6:8d:1c:15:76:82:4e:a6: 18:ad:ca:4e:38:8e:52:4d:fd:f7:aa:25:d6:63:51:3f:3d:fe: cd:ed:1b:17:3d:83:b1:1c:60:5f:25:a5:47:49:77:7c:5d:f1: d8:53:fb:70:25:b6:7b:d4:ac:2a:fd:85:24:f1:70:f0:ec:8d: fe:7f:9e:1c:93:51:39:a5:30:7b:3d:e0:00:95:56:98:b2:c1: 36:96:78:88:36:8f:e7:6d:4f:42:2d:41:5e:95:96:8d:a5:01: cd:e0:f0:ad:b0:3a:4d:b9:70:dd:87:ad:30:1f:b0:71:6a:5d: 84:89:3c:d2:14:37:04:c8:68:82:33:df:e5:15:f5:70:60:53: 0b:7f:6d:a9:8a:01:d7:89:99:eb:41:14:f7:75:35:a5:32:49: 2c:fc:ed:f8:bc:36:70:f2:0a:5b:e3:14:93:65:0a:a5:28:70: bf:56:c1:70:65:9f:a0:35:4f:49:33:fb:ef:21:90:ef:a0:ba: eb:bb:c1:0e:c1:5d:cf:28:e5:35:59:cf:58:9b:c6:b9:7d:f6: 7b:1d:20:8c:25:87:7b:9b:a2:a9:65:ff:19:75:78:97:df:d8: 44:bd:ab:87 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTg0QUMxMTAvBgNVBAUTKEZCQzU1QjJDMEJFMEFCMjM0NzQ4RkJDMzYxNTQ3RjY0 QkZBNzUxOTcwHhcNMjUwNTMxMDUxMTU3WhcNMjUwNjA3MDUxMTU3WjAYMRYwFAYD VQQDEw02ODNhOGY5ZC0yNGUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu+0oGlsIlLtzOBQadYjGxidEbedRRkwwr4N1pVnixh6U4PFK1Xs/lCdvJbsy QlxrM9yp7/mLLNwWtgrxh/v1To73uuA0cR1pDKhtfsBe10v42Z9zxZlnrCxNfX1H Zv1GkQxNbHStEEQcUP4EmhvvE+wR2fGamS7jY2w4SEgrYb5HR7nHBx74sG1nzWej fCOWKKlzpfk83IliZgDYKrKcXFcbEZi+WO66JYTJb+sKyBiJwkMr0hkOz4zTgp/g dK3vsRXn8mt+uvnf1PLT+Q5js7mUdB72zZ+lYYqX8TMm1UMEIq9AFN8IJt5zkgzC V7v8ManspChTHAPyin0DVXXopwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKRio4Fm rVYF6thlQRb317gamqJZMB8GA1UdIwQYMBaAFPvFWywL4KsjR0j7w2FUf2S/p1GX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODRBQy82RDAyNkNFQ0Y1 QTExMUVFOThEQkNEMTFDNEY5QUUwMi8tOFZiTEF2Z3F5TkhTUHZEWVZSX1pMLW5V WmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy04VmJMQXZncXlOSFNQdkRZVlJfWkwtblVaYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 ODRBQy82RDAyNkNFQ0Y1QTExMUVFOThEQkNEMTFDNEY5QUUwMi8tOFZiTEF2Z3F5 TkhTUHZEWVZSX1pMLW5VWmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJpv3BDQAGjckyulwYPthuoCnGeEv48mZNd7DTxo0cFXaCTqYYrcpO OI5STf33qiXWY1E/Pf7N7RsXPYOxHGBfJaVHSXd8XfHYU/twJbZ71Kwq/YUk8XDw 7I3+f54ck1E5pTB7PeAAlVaYssE2lniINo/nbU9CLUFelZaNpQHN4PCtsDpNuXDd h60wH7Bxal2EiTzSFDcEyGiCM9/lFfVwYFMLf22pigHXiZnrQRT3dTWlMkks/O34 vDZw8gpb4xSTZQqlKHC/VsFwZZ+gNU9JM/vvIZDvoLrru8EOwV3PKOU1Wc9Ym8a5 ffZ7HSCMJYd7m6KpZf8ZdXiX39hEvauH -----END CERTIFICATE-----Generated at Sat May 31 16:55:10 2025 by rpki-client