$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3430/86AC89D0E87B11E9A1ED5B47C4F9AE02/fSkuhkI7U8Czc7eZZYghkTSp5hA.mft File: fSkuhkI7U8Czc7eZZYghkTSp5hA.mft (raw, json) Hash identifier: jbf9yB0FIWAE7IaFUsYVfy2XGatwJXe1G8tFDb+T42s= Subject key identifier: E1:42:38:62:D5:18:CE:5E:C5:AE:A9:AA:D7:BE:24:CE:B8:5F:FF:A2 Authority key identifier: 7D:29:2E:86:42:3B:53:C0:B3:73:B7:99:65:88:21:91:34:A9:E6:10 Certificate issuer: /CN=A91A3430/serialNumber=7D292E86423B53C0B373B7996588219134A9E610 Certificate serial: 0CE1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSkuhkI7U8Czc7eZZYghkTSp5hA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A3430/86AC89D0E87B11E9A1ED5B47C4F9AE02/fSkuhkI7U8Czc7eZZYghkTSp5hA.mft Manifest number: 0CD8 Signing time: Fri 30 May 2025 18:19:15 +0000 Manifest this update: Fri 30 May 2025 18:19:14 +0000 Manifest next update: Fri 06 Jun 2025 18:19:14 +0000 Files and hashes: 1: fSkuhkI7U8Czc7eZZYghkTSp5hA.crl (hash: Zrz/YkBxGYr71nKjSuwyJrXeE69Nw8fFplrXCJwzdxw=) 2: 7B3163F0072A11EA9E314D4CC4F9AE02.roa (hash: 8KRCIYlWeIU1RFVFOTA+MnkOIQ/xaefXlo2pRQaFi20=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A3430/86AC89D0E87B11E9A1ED5B47C4F9AE02/fSkuhkI7U8Czc7eZZYghkTSp5hA.crl rsync://rpki.apnic.net/member_repository/A91A3430/86AC89D0E87B11E9A1ED5B47C4F9AE02/fSkuhkI7U8Czc7eZZYghkTSp5hA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSkuhkI7U8Czc7eZZYghkTSp5hA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 18:19:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3297 (0xce1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A3430, serialNumber=7D292E86423B53C0B373B7996588219134A9E610 Validity Not Before: May 30 18:19:14 2025 GMT Not After : Jun 6 18:19:14 2025 GMT Subject: CN=6839f6a2-0595 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:84:2c:89:db:53:ef:34:1f:21:a3:e0:c0:16: 45:97:24:4f:b4:f2:8f:da:2f:c2:05:49:c1:c1:05: 47:c5:64:d1:2e:8a:e3:50:cc:05:9b:6b:99:85:ae: 4a:a2:73:ef:1f:35:ea:f8:00:f9:2f:63:2c:ba:a7: 35:ac:c8:46:d8:b2:47:46:8d:70:2d:38:84:5b:6e: dc:d3:6e:b7:41:78:3a:8e:9e:4b:c6:cb:8f:dd:18: 3b:5a:13:90:42:17:f6:6d:29:53:72:ec:29:bd:4e: 2b:29:be:b7:f6:43:31:6d:9f:6d:53:bc:05:e8:bb: d7:f9:68:92:0c:82:fd:4b:93:d9:c4:48:cc:93:ad: 32:7d:78:a2:68:36:68:1b:99:b8:d9:80:6c:42:5b: 4f:d3:47:cc:83:da:0e:d3:36:62:46:5a:bf:e4:06: 75:54:46:94:e5:16:13:35:6d:97:41:5e:f6:b3:24: e0:d2:79:11:09:22:59:be:1e:6d:59:4f:a3:fc:90: bf:f9:a1:83:8b:c5:d5:33:5e:91:92:ca:9d:7d:e5: e2:1a:38:40:92:96:1a:17:9b:3b:22:9e:b9:c3:97: 48:ab:50:86:f6:d8:c0:64:35:dd:a7:96:1d:07:31: 20:eb:7a:95:05:81:9c:e6:f0:72:84:91:95:02:df: d7:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:42:38:62:D5:18:CE:5E:C5:AE:A9:AA:D7:BE:24:CE:B8:5F:FF:A2 X509v3 Authority Key Identifier: keyid:7D:29:2E:86:42:3B:53:C0:B3:73:B7:99:65:88:21:91:34:A9:E6:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A3430/86AC89D0E87B11E9A1ED5B47C4F9AE02/fSkuhkI7U8Czc7eZZYghkTSp5hA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSkuhkI7U8Czc7eZZYghkTSp5hA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3430/86AC89D0E87B11E9A1ED5B47C4F9AE02/fSkuhkI7U8Czc7eZZYghkTSp5hA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:0a:d3:da:35:ff:01:df:56:c3:1b:60:c8:9a:9a:10:47:95: 47:dc:44:09:3c:4b:10:af:e6:e4:34:0f:3c:60:7c:79:ca:7d: 77:4e:07:c3:39:62:7c:17:62:8e:08:03:0c:a4:30:eb:7e:93: 0b:62:9c:ba:cd:6f:d2:fa:34:5e:5a:1b:40:a3:e0:ac:f6:ff: 02:2f:fe:61:f9:09:79:38:d6:cb:fc:9b:1c:28:d7:8a:cb:1f: 26:5c:ca:8b:94:d0:a0:fa:8d:c8:88:7e:13:9e:c0:10:d9:36: 60:35:0e:3f:40:e3:ec:9c:0f:29:4d:21:fb:a2:93:70:82:80: e5:08:df:5e:85:8d:06:6f:77:e0:92:34:c4:59:80:c7:e8:69: c7:88:bc:8f:a5:dc:67:ad:5f:b1:1d:ac:ff:10:09:21:22:89: 68:3d:6c:0b:37:d5:b3:c8:84:d2:1f:79:1b:db:b3:04:b4:af: 37:0d:0e:81:3a:35:6a:45:ad:e3:b6:90:4b:1b:aa:ba:84:3b: f0:a0:52:f6:05:6d:38:1a:b4:6b:80:e9:78:d5:a6:1c:37:13: 46:01:2d:16:42:32:bc:a6:8d:1a:12:61:b7:19:04:f7:3a:69: 13:0e:b0:51:ce:0a:d7:62:91:78:a6:7f:4a:4e:9d:66:62:44: 78:fe:0c:5f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDOEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTM0MzAxMTAvBgNVBAUTKDdEMjkyRTg2NDIzQjUzQzBCMzczQjc5OTY1ODgyMTkx MzRBOUU2MTAwHhcNMjUwNTMwMTgxOTE0WhcNMjUwNjA2MTgxOTE0WjAYMRYwFAYD VQQDEw02ODM5ZjZhMi0wNTk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyoQsidtT7zQfIaPgwBZFlyRPtPKP2i/CBUnBwQVHxWTRLorjUMwFm2uZha5K onPvHzXq+AD5L2Msuqc1rMhG2LJHRo1wLTiEW27c0263QXg6jp5LxsuP3Rg7WhOQ Qhf2bSlTcuwpvU4rKb639kMxbZ9tU7wF6LvX+WiSDIL9S5PZxEjMk60yfXiiaDZo G5m42YBsQltP00fMg9oO0zZiRlq/5AZ1VEaU5RYTNW2XQV72syTg0nkRCSJZvh5t WU+j/JC/+aGDi8XVM16RksqdfeXiGjhAkpYaF5s7Ip65w5dIq1CG9tjAZDXdp5Yd BzEg63qVBYGc5vByhJGVAt/XmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOFCOGLV GM5exa6pqte+JM64X/+iMB8GA1UdIwQYMBaAFH0pLoZCO1PAs3O3mWWIIZE0qeYQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMzQzMC84NkFDODlEMEU4 N0IxMUU5QTFFRDVCNDdDNEY5QUUwMi9mU2t1aGtJN1U4Q3pjN2VaWllnaGtUU3A1 aEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZTa3Voa0k3VThDemM3ZVpaWWdoa1RTcDVoQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MzQzMC84NkFDODlEMEU4N0IxMUU5QTFFRDVCNDdDNEY5QUUwMi9mU2t1aGtJN1U4 Q3pjN2VaWllnaGtUU3A1aEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAwCtPaNf8B31bDG2DImpoQR5VH3EQJPEsQr+bkNA88YHx5yn13TgfD OWJ8F2KOCAMMpDDrfpMLYpy6zW/S+jReWhtAo+Cs9v8CL/5h+Ql5ONbL/JscKNeK yx8mXMqLlNCg+o3IiH4TnsAQ2TZgNQ4/QOPsnA8pTSH7opNwgoDlCN9ehY0Gb3fg kjTEWYDH6GnHiLyPpdxnrV+xHaz/EAkhIoloPWwLN9WzyITSH3kb27MEtK83DQ6B OjVqRa3jtpBLG6q6hDvwoFL2BW04GrRrgOl41aYcNxNGAS0WQjK8po0aEmG3GQT3 OmkTDrBRzgrXYpF4pn9KTp1mYkR4/gxf -----END CERTIFICATE-----Generated at Sat May 31 17:01:23 2025 by rpki-client