$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0D9C/9E28300657A811E8B4AC0877C4F9AE02/_j6YxMGnkStakW0WM0d4xKt6ZTA.mft File: _j6YxMGnkStakW0WM0d4xKt6ZTA.mft (raw, json) Hash identifier: iM2MgW2hRKi8hrDd6rs3kwLevr4Jo+CpLb+rEdtM1Ew= Subject key identifier: 3A:DB:6B:2E:BF:7B:33:EA:BD:AF:BF:CB:82:DE:CD:5D:9D:BB:D9:7C Authority key identifier: FE:3E:98:C4:C1:A7:91:2B:5A:91:6D:16:33:47:78:C4:AB:7A:65:30 Certificate issuer: /CN=A91A0D9C/serialNumber=FE3E98C4C1A7912B5A916D16334778C4AB7A6530 Certificate serial: 14E3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_j6YxMGnkStakW0WM0d4xKt6ZTA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A0D9C/9E28300657A811E8B4AC0877C4F9AE02/_j6YxMGnkStakW0WM0d4xKt6ZTA.mft Manifest number: 14D5 Signing time: Fri 30 May 2025 17:01:42 +0000 Manifest this update: Fri 30 May 2025 17:01:41 +0000 Manifest next update: Fri 06 Jun 2025 17:01:41 +0000 Files and hashes: 1: _j6YxMGnkStakW0WM0d4xKt6ZTA.crl (hash: 0u5P6CmjwEoaG5LIDQKP2C7wwVz8lyVCaISAKNsv/8o=) 2: 95DDE9D6909A11EF94AF3B26C4F9AE02.roa (hash: gSL+g9g3YpA7s5XesQRHZm3/7MvyodXEVF116j/i5W8=) 3: 3BA876C457A911E8A8A8B477C4F9AE02.roa (hash: bcEJ56A4BGIoa5B1+6LrUQhbZUOKKFrTO8YQb351Q9Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A0D9C/9E28300657A811E8B4AC0877C4F9AE02/_j6YxMGnkStakW0WM0d4xKt6ZTA.crl rsync://rpki.apnic.net/member_repository/A91A0D9C/9E28300657A811E8B4AC0877C4F9AE02/_j6YxMGnkStakW0WM0d4xKt6ZTA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_j6YxMGnkStakW0WM0d4xKt6ZTA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 17:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5347 (0x14e3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A0D9C, serialNumber=FE3E98C4C1A7912B5A916D16334778C4AB7A6530 Validity Not Before: May 30 17:01:41 2025 GMT Not After : Jun 6 17:01:41 2025 GMT Subject: CN=6839e475-ccf7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:b5:9b:d8:c0:d4:a3:fe:c3:39:f3:02:55:11: 8a:90:5e:8a:b9:4b:85:1b:9c:df:5c:15:f2:d2:98: f9:bb:e6:92:0c:85:c9:bf:66:62:8d:2b:2f:98:61: e6:0d:55:a9:8c:3c:f9:3d:fb:b4:c4:cc:c3:bc:89: 62:0b:6f:4d:2d:13:04:ba:25:9f:7c:a3:d9:22:26: 5a:85:25:ad:18:f7:02:83:cf:24:ec:3f:66:33:4d: 52:0a:d7:a2:48:e4:3d:ea:7e:e1:27:a6:6e:3b:4a: 86:9b:84:2a:e0:31:f0:84:32:e2:da:62:aa:ec:d6: 29:1e:43:06:5f:df:1a:b0:a2:c7:ce:e8:cc:1f:b7: 5a:70:90:71:fc:c7:d2:f2:69:97:75:14:36:aa:f2: 51:86:95:49:cd:7e:42:80:9e:c0:4d:d3:4e:60:2f: 96:67:78:68:b2:47:46:60:f6:67:6f:23:4a:98:ea: c8:ba:d5:a4:e4:ae:40:f6:f2:4f:71:35:b8:36:ba: bb:b4:e0:f6:04:75:71:77:00:70:74:1a:02:95:0e: d5:2e:01:db:37:07:0b:0f:f2:c3:bc:23:fc:a5:95: 5b:74:ee:50:71:21:73:b6:4f:6b:0c:f9:b3:4f:fc: 47:ed:d9:c1:52:74:ca:ef:35:79:32:ce:89:9a:6b: ef:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:DB:6B:2E:BF:7B:33:EA:BD:AF:BF:CB:82:DE:CD:5D:9D:BB:D9:7C X509v3 Authority Key Identifier: keyid:FE:3E:98:C4:C1:A7:91:2B:5A:91:6D:16:33:47:78:C4:AB:7A:65:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A0D9C/9E28300657A811E8B4AC0877C4F9AE02/_j6YxMGnkStakW0WM0d4xKt6ZTA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_j6YxMGnkStakW0WM0d4xKt6ZTA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0D9C/9E28300657A811E8B4AC0877C4F9AE02/_j6YxMGnkStakW0WM0d4xKt6ZTA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:6f:5f:d6:54:66:9e:9a:e9:e3:a7:93:0a:ad:94:f1:fb:1c: a8:b0:d5:81:ec:56:01:71:0c:ee:36:e6:5b:49:5a:b0:3c:92: e2:7f:b6:c3:59:ab:51:b9:65:d8:33:dd:84:0d:e6:9e:2a:60: 32:61:78:f1:18:8c:aa:90:de:da:9c:cd:1e:4a:c6:08:e6:09: b0:89:8b:9b:13:99:42:55:13:b0:32:5a:df:51:f0:ae:fb:a3: e3:6a:77:9f:e0:37:bb:46:28:8c:fd:71:6c:22:3f:d8:28:92: 8b:4b:74:97:7f:8b:48:87:b3:aa:63:91:93:0b:d0:ca:1f:36: 72:52:c9:7f:0d:e1:46:23:a8:a9:1a:61:31:21:90:bc:07:5f: 7a:f9:27:fa:7c:91:7e:65:d7:49:df:92:e8:c6:83:93:8b:23: c7:7f:6d:a2:d8:b2:06:64:12:7c:03:0b:6a:7b:30:bc:d1:21: dd:ca:b0:11:d6:74:d5:99:37:fe:b6:37:91:da:eb:70:6e:25: 51:ba:8b:40:84:39:ac:9f:5a:dd:32:c6:aa:c6:e5:93:2f:47: 0a:0c:55:f8:2b:c2:58:87:4c:53:11:ea:79:e5:d3:7e:db:d4: 87:a6:ac:74:f2:d0:a0:5b:c1:d0:1d:e5:79:ed:8c:b4:eb:6f: 92:81:c6:ff -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFOMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTBEOUMxMTAvBgNVBAUTKEZFM0U5OEM0QzFBNzkxMkI1QTkxNkQxNjMzNDc3OEM0 QUI3QTY1MzAwHhcNMjUwNTMwMTcwMTQxWhcNMjUwNjA2MTcwMTQxWjAYMRYwFAYD VQQDEw02ODM5ZTQ3NS1jY2Y3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0bWb2MDUo/7DOfMCVRGKkF6KuUuFG5zfXBXy0pj5u+aSDIXJv2ZijSsvmGHm DVWpjDz5Pfu0xMzDvIliC29NLRMEuiWffKPZIiZahSWtGPcCg88k7D9mM01SCtei SOQ96n7hJ6ZuO0qGm4Qq4DHwhDLi2mKq7NYpHkMGX98asKLHzujMH7dacJBx/MfS 8mmXdRQ2qvJRhpVJzX5CgJ7ATdNOYC+WZ3hoskdGYPZnbyNKmOrIutWk5K5A9vJP cTW4Nrq7tOD2BHVxdwBwdBoClQ7VLgHbNwcLD/LDvCP8pZVbdO5QcSFztk9rDPmz T/xH7dnBUnTK7zV5Ms6JmmvvHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDrbay6/ ezPqva+/y4LezV2du9l8MB8GA1UdIwQYMBaAFP4+mMTBp5ErWpFtFjNHeMSremUw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMEQ5Qy85RTI4MzAwNjU3 QTgxMUU4QjRBQzA4NzdDNEY5QUUwMi9fajZZeE1HbmtTdGFrVzBXTTBkNHhLdDZa VEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19qNll4TUdua1N0YWtXMFdNMGQ0eEt0NlpUQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MEQ5Qy85RTI4MzAwNjU3QTgxMUU4QjRBQzA4NzdDNEY5QUUwMi9fajZZeE1HbmtT dGFrVzBXTTBkNHhLdDZaVEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCfb1/WVGaemunjp5MKrZTx+xyosNWB7FYBcQzuNuZbSVqwPJLif7bD WatRuWXYM92EDeaeKmAyYXjxGIyqkN7anM0eSsYI5gmwiYubE5lCVROwMlrfUfCu +6Pjanef4De7RiiM/XFsIj/YKJKLS3SXf4tIh7OqY5GTC9DKHzZyUsl/DeFGI6ip GmExIZC8B196+Sf6fJF+ZddJ35LoxoOTiyPHf22i2LIGZBJ8AwtqezC80SHdyrAR 1nTVmTf+tjeR2utwbiVRuotAhDmsn1rdMsaqxuWTL0cKDFX4K8JYh0xTEep55dN+ 29SHpqx08tCgW8HQHeV57Yy062+Sgcb/ -----END CERTIFICATE-----Generated at Sat May 31 15:12:59 2025 by rpki-client