$ rpki-client -vvf rpki.apnic.net/member_repository/A919CDE4/B5A47390C99311ED9B4B3B10C4F9AE02/91rI3ARJV7GxWgsVxu2jGLI7QDM.mft File: 91rI3ARJV7GxWgsVxu2jGLI7QDM.mft (raw, json) Hash identifier: rElx31YBcK0SRQPeOc0KAwiNLgV544fnV+M+oek9GyI= Subject key identifier: E8:8C:ED:D8:A3:60:72:BA:34:4C:3E:5E:F8:E1:3C:70:E5:44:41:91 Authority key identifier: F7:5A:C8:DC:04:49:57:B1:B1:5A:0B:15:C6:ED:A3:18:B2:3B:40:33 Certificate issuer: /CN=A919CDE4/serialNumber=F75AC8DC044957B1B15A0B15C6EDA318B23B4033 Certificate serial: 019F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/91rI3ARJV7GxWgsVxu2jGLI7QDM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919CDE4/B5A47390C99311ED9B4B3B10C4F9AE02/91rI3ARJV7GxWgsVxu2jGLI7QDM.mft Manifest number: 019C Signing time: Sat 31 May 2025 03:05:30 +0000 Manifest this update: Sat 31 May 2025 03:05:30 +0000 Manifest next update: Sat 07 Jun 2025 03:05:30 +0000 Files and hashes: 1: 91rI3ARJV7GxWgsVxu2jGLI7QDM.crl (hash: fr0Xos9RqGAB0h7lhxByJyV9JSBrjrHbiAtsKQJ60EU=) 2: 955C43AAC99E11ED98E9BE5BC4F9AE02.roa (hash: sO+2+/cvQ7fG/IUMq+A+e08x9da5+jbIe5T9qmjARBg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919CDE4/B5A47390C99311ED9B4B3B10C4F9AE02/91rI3ARJV7GxWgsVxu2jGLI7QDM.crl rsync://rpki.apnic.net/member_repository/A919CDE4/B5A47390C99311ED9B4B3B10C4F9AE02/91rI3ARJV7GxWgsVxu2jGLI7QDM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/91rI3ARJV7GxWgsVxu2jGLI7QDM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 03:05:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 415 (0x19f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919CDE4, serialNumber=F75AC8DC044957B1B15A0B15C6EDA318B23B4033 Validity Not Before: May 31 03:05:30 2025 GMT Not After : Jun 7 03:05:30 2025 GMT Subject: CN=683a71fa-1818 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:af:56:18:6d:59:40:fd:e6:f2:8d:d5:b0:87: c0:bb:67:85:8c:1b:63:02:b6:ad:44:04:67:c0:e5: 52:b2:2c:6a:d6:16:6b:49:5d:ee:3c:af:fd:81:96: c4:62:07:82:50:64:25:5e:39:32:64:64:3f:7d:fe: 5a:3e:24:52:ba:e3:05:64:bf:47:a1:d5:01:9e:f6: 1b:5a:8d:13:70:73:3f:64:c4:c6:a2:60:52:a0:6d: 9f:86:27:dc:c0:f6:87:ee:97:e8:06:01:1a:07:ed: 41:fc:99:65:85:a8:74:fe:c2:52:41:5e:1d:2f:ac: 40:76:5d:15:3e:05:da:eb:dd:44:06:47:58:6f:33: a5:3c:d6:90:aa:e2:c1:e9:4c:4e:90:cc:31:3f:c9: 61:88:c0:ae:a0:bd:86:24:52:43:f1:f9:5b:ef:73: ec:02:37:32:88:84:4c:f6:24:f7:3c:70:54:28:7b: 83:0c:e1:09:19:c1:7d:e1:33:1f:fb:e5:53:e0:ad: 38:0d:3c:09:4c:dd:c1:78:a7:ab:50:d7:09:21:4f: eb:b1:af:22:7d:30:1b:62:6b:f7:cb:26:1b:bc:eb: 06:f0:84:8f:a5:cc:1f:7a:64:44:eb:58:d0:22:00: 35:20:9e:b0:69:bc:1b:29:d1:47:55:a9:fe:19:06: 10:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:8C:ED:D8:A3:60:72:BA:34:4C:3E:5E:F8:E1:3C:70:E5:44:41:91 X509v3 Authority Key Identifier: keyid:F7:5A:C8:DC:04:49:57:B1:B1:5A:0B:15:C6:ED:A3:18:B2:3B:40:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919CDE4/B5A47390C99311ED9B4B3B10C4F9AE02/91rI3ARJV7GxWgsVxu2jGLI7QDM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/91rI3ARJV7GxWgsVxu2jGLI7QDM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919CDE4/B5A47390C99311ED9B4B3B10C4F9AE02/91rI3ARJV7GxWgsVxu2jGLI7QDM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:e9:c3:c3:1c:c3:2c:16:28:40:33:d3:ec:10:aa:d5:55:aa: 4c:d3:3d:44:58:45:fc:89:d3:c3:9f:c4:22:98:0d:b9:d6:40: d6:1d:5a:82:5c:21:c9:86:94:ee:60:b7:01:96:50:d7:32:fe: 6c:0a:be:1d:dd:32:7c:e7:2f:a3:26:b4:0c:f0:5c:f2:59:da: 2c:b9:0c:fa:d3:33:31:5f:a5:d7:ba:1e:b9:6d:62:99:73:2f: 4f:24:19:b8:3b:d3:2f:d8:96:2b:d6:3f:50:34:73:f8:a7:62: 2a:7f:01:fc:86:8b:7e:a4:b5:7b:83:82:a0:64:0d:3c:c1:7e: da:70:e8:ba:dc:08:cc:47:2f:22:95:c1:5f:65:cc:db:d6:ea: 91:54:a6:32:cd:b1:9e:59:93:bb:9c:f7:b1:d1:be:c6:dc:92: 3f:27:da:fe:38:ab:77:10:cb:63:d5:5c:5a:cd:9f:f6:86:c4: bc:2f:bf:f2:38:6f:9e:74:d9:0b:14:5b:62:1d:d3:e3:79:da: 0b:5b:35:36:a6:ba:bc:d7:53:16:c6:da:ac:6e:98:33:34:00: e0:4b:c4:d0:29:78:93:f5:de:d6:e1:50:ba:12:b8:3a:df:29: 36:07:28:93:18:02:c5:b8:68:b6:e9:f0:f1:9f:c4:ea:4d:16: 53:35:8f:13 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUNERTQxMTAvBgNVBAUTKEY3NUFDOERDMDQ0OTU3QjFCMTVBMEIxNUM2RURBMzE4 QjIzQjQwMzMwHhcNMjUwNTMxMDMwNTMwWhcNMjUwNjA3MDMwNTMwWjAYMRYwFAYD VQQDEw02ODNhNzFmYS0xODE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvK9WGG1ZQP3m8o3VsIfAu2eFjBtjAratRARnwOVSsixq1hZrSV3uPK/9gZbE YgeCUGQlXjkyZGQ/ff5aPiRSuuMFZL9HodUBnvYbWo0TcHM/ZMTGomBSoG2fhifc wPaH7pfoBgEaB+1B/Jllhah0/sJSQV4dL6xAdl0VPgXa691EBkdYbzOlPNaQquLB 6UxOkMwxP8lhiMCuoL2GJFJD8flb73PsAjcyiIRM9iT3PHBUKHuDDOEJGcF94TMf ++VT4K04DTwJTN3BeKerUNcJIU/rsa8ifTAbYmv3yyYbvOsG8ISPpcwfemRE61jQ IgA1IJ6wabwbKdFHVan+GQYQIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOiM7dij YHK6NEw+XvjhPHDlREGRMB8GA1UdIwQYMBaAFPdayNwESVexsVoLFcbtoxiyO0Az MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5Q0RFNC9CNUE0NzM5MEM5 OTMxMUVEOUI0QjNCMTBDNEY5QUUwMi85MXJJM0FSSlY3R3hXZ3NWeHUyakdMSTdR RE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzkxckkzQVJKVjdHeFdnc1Z4dTJqR0xJN1FETS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 Q0RFNC9CNUE0NzM5MEM5OTMxMUVEOUI0QjNCMTBDNEY5QUUwMi85MXJJM0FSSlY3 R3hXZ3NWeHUyakdMSTdRRE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA96cPDHMMsFihAM9PsEKrVVapM0z1EWEX8idPDn8QimA251kDWHVqC XCHJhpTuYLcBllDXMv5sCr4d3TJ85y+jJrQM8FzyWdosuQz60zMxX6XXuh65bWKZ cy9PJBm4O9Mv2JYr1j9QNHP4p2IqfwH8hot+pLV7g4KgZA08wX7acOi63AjMRy8i lcFfZczb1uqRVKYyzbGeWZO7nPex0b7G3JI/J9r+OKt3EMtj1VxazZ/2hsS8L7/y OG+edNkLFFtiHdPjedoLWzU2prq811MWxtqsbpgzNADgS8TQKXiT9d7W4VC6Erg6 3yk2ByiTGALFuGi26fDxn8TqTRZTNY8T -----END CERTIFICATE-----Generated at Sat May 31 17:42:43 2025 by rpki-client