$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4690/409C970A5AE011EF8582707FC4F9AE02/As_3eY8FPpyB_czteWLsu3bB0ho.mft File: As_3eY8FPpyB_czteWLsu3bB0ho.mft (raw, json) Hash identifier: WtskTaCoivEl01AxEdrJoVdyjbeAduaGJSWnkjZbSfk= Subject key identifier: C3:96:5F:7D:F0:AA:CB:69:A8:60:C2:7E:BC:62:A3:CD:63:57:B0:8F Authority key identifier: 02:CF:F7:79:8F:05:3E:9C:81:FD:CC:ED:79:62:EC:BB:76:C1:D2:1A Certificate issuer: /CN=A91A4690/serialNumber=02CFF7798F053E9C81FDCCED7962ECBB76C1D21A Certificate serial: 98 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/As_3eY8FPpyB_czteWLsu3bB0ho.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4690/409C970A5AE011EF8582707FC4F9AE02/As_3eY8FPpyB_czteWLsu3bB0ho.mft Manifest number: 96 Signing time: Sat 31 May 2025 05:54:43 +0000 Manifest this update: Sat 31 May 2025 05:54:43 +0000 Manifest next update: Sat 07 Jun 2025 05:54:43 +0000 Files and hashes: 1: As_3eY8FPpyB_czteWLsu3bB0ho.crl (hash: lJAKOPBr6mNz1NOM+0Ge8Xyj1MQlA8WicOVdK9UIFhw=) 2: 7DAE5EB25AE011EFBA58F07FC4F9AE02.roa (hash: Wp/6wyEXkRXlx5jv/S/ukoLxXoe3Zkz5HAA1XVAZayI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4690/409C970A5AE011EF8582707FC4F9AE02/As_3eY8FPpyB_czteWLsu3bB0ho.crl rsync://rpki.apnic.net/member_repository/A91A4690/409C970A5AE011EF8582707FC4F9AE02/As_3eY8FPpyB_czteWLsu3bB0ho.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/As_3eY8FPpyB_czteWLsu3bB0ho.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 05:54:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 152 (0x98) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4690, serialNumber=02CFF7798F053E9C81FDCCED7962ECBB76C1D21A Validity Not Before: May 31 05:54:43 2025 GMT Not After : Jun 7 05:54:43 2025 GMT Subject: CN=683a99a3-e9ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:0d:9d:03:27:39:81:05:9a:6e:2b:5f:eb:fb: 96:10:f7:56:de:06:c0:3b:e2:db:d1:3c:4f:63:a0: 0d:78:94:0f:da:27:52:44:26:2c:c6:27:d6:5c:0c: 26:20:84:bc:18:8b:77:4d:83:7a:3e:6b:5c:62:4d: 82:42:8a:6e:59:78:2a:ac:f1:76:6f:64:a4:a3:de: d3:d5:de:39:ff:39:13:06:3b:45:e2:82:6b:79:10: 7b:95:a6:e5:3f:bd:a5:59:b5:4c:a7:dc:a9:28:ac: 18:3c:8a:46:53:90:60:78:53:42:fc:c3:e2:fb:46: 96:16:f1:58:6f:35:dc:1c:df:1a:90:fa:ba:43:26: 14:16:ae:7c:7a:62:d7:74:53:c4:6c:cc:55:1d:8f: 68:b1:9e:1f:52:b1:a7:c2:b5:13:dc:34:d7:45:a8: ba:96:41:07:96:46:5b:f1:48:7c:dd:ff:10:8f:db: 64:f6:1b:d7:ce:69:e0:00:6d:55:5e:91:84:9c:e1: 60:d3:71:79:85:73:2c:9b:d3:e8:6e:f3:da:e7:0e: 5d:8d:2c:1b:b6:09:bd:c3:ac:43:d9:89:ec:d7:1c: be:be:ad:f1:b1:bc:b4:8e:22:33:47:36:55:e0:f6: 2a:63:9c:f5:1d:a1:2a:bb:ec:02:8e:02:b9:4e:24: d0:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:96:5F:7D:F0:AA:CB:69:A8:60:C2:7E:BC:62:A3:CD:63:57:B0:8F X509v3 Authority Key Identifier: keyid:02:CF:F7:79:8F:05:3E:9C:81:FD:CC:ED:79:62:EC:BB:76:C1:D2:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4690/409C970A5AE011EF8582707FC4F9AE02/As_3eY8FPpyB_czteWLsu3bB0ho.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/As_3eY8FPpyB_czteWLsu3bB0ho.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4690/409C970A5AE011EF8582707FC4F9AE02/As_3eY8FPpyB_czteWLsu3bB0ho.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:42:f6:20:9a:60:88:b4:c2:2b:ec:34:11:52:60:45:6b:34: 5d:b6:17:08:01:0f:7d:80:ab:e6:02:9f:8d:79:db:0f:a5:1e: 3c:2d:3b:27:3d:d0:0e:7b:75:cb:b6:64:0d:31:56:a2:35:9d: d6:24:1c:a4:94:6f:e9:ef:82:2d:d7:bc:7e:78:b9:aa:11:71: 11:e6:21:c6:ef:c9:fb:42:1d:18:b9:42:45:84:4b:43:41:18: 37:16:cf:58:7e:0f:f4:27:c6:06:5b:e5:41:2d:a8:96:20:ee: 81:2e:dd:d0:86:78:35:0d:c3:89:d5:ce:26:97:44:f4:91:8d: ab:5d:10:76:1d:85:6e:3f:ab:80:e5:6c:95:00:26:a8:64:4a: f6:12:b9:43:f7:a7:81:a1:4b:03:c7:69:9f:99:60:d8:b1:89: 42:a7:0b:c7:a4:46:a6:0d:c9:c6:c7:e7:c4:98:af:72:49:2c: 20:6a:6b:6e:30:34:a3:4a:72:ff:1b:84:d3:b6:51:49:ad:4c: 73:35:cd:3d:89:65:a9:98:e3:0f:a0:10:f8:f4:20:8d:f3:49: 06:2e:b9:7c:8b:af:50:ad:df:77:34:66:f3:72:5d:88:19:aa: 6b:90:83:fe:d7:55:a0:f2:f0:ef:77:02:92:a7:64:34:b3:5a: 96:15:2f:f4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ2OTAxMTAvBgNVBAUTKDAyQ0ZGNzc5OEYwNTNFOUM4MUZEQ0NFRDc5NjJFQ0JC NzZDMUQyMUEwHhcNMjUwNTMxMDU1NDQzWhcNMjUwNjA3MDU1NDQzWjAYMRYwFAYD VQQDEw02ODNhOTlhMy1lOWJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxA2dAyc5gQWabitf6/uWEPdW3gbAO+Lb0TxPY6ANeJQP2idSRCYsxifWXAwm IIS8GIt3TYN6PmtcYk2CQopuWXgqrPF2b2Sko97T1d45/zkTBjtF4oJreRB7labl P72lWbVMp9ypKKwYPIpGU5BgeFNC/MPi+0aWFvFYbzXcHN8akPq6QyYUFq58emLX dFPEbMxVHY9osZ4fUrGnwrUT3DTXRai6lkEHlkZb8Uh83f8Qj9tk9hvXzmngAG1V XpGEnOFg03F5hXMsm9PobvPa5w5djSwbtgm9w6xD2Yns1xy+vq3xsby0jiIzRzZV 4PYqY5z1HaEqu+wCjgK5TiTQUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMOWX33w qstpqGDCfrxio81jV7CPMB8GA1UdIwQYMBaAFALP93mPBT6cgf3M7Xli7Lt2wdIa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDY5MC80MDlDOTcwQTVB RTAxMUVGODU4MjcwN0ZDNEY5QUUwMi9Bc18zZVk4RlBweUJfY3p0ZVdMc3UzYkIw aG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FzXzNlWThGUHB5Ql9jenRlV0xzdTNiQjBoby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDY5MC80MDlDOTcwQTVBRTAxMUVGODU4MjcwN0ZDNEY5QUUwMi9Bc18zZVk4RlBw eUJfY3p0ZVdMc3UzYkIwaG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBBQvYgmmCItMIr7DQRUmBFazRdthcIAQ99gKvmAp+NedsPpR48LTsn PdAOe3XLtmQNMVaiNZ3WJByklG/p74It17x+eLmqEXER5iHG78n7Qh0YuUJFhEtD QRg3Fs9Yfg/0J8YGW+VBLaiWIO6BLt3Qhng1DcOJ1c4ml0T0kY2rXRB2HYVuP6uA 5WyVACaoZEr2ErlD96eBoUsDx2mfmWDYsYlCpwvHpEamDcnGx+fEmK9ySSwgamtu MDSjSnL/G4TTtlFJrUxzNc09iWWpmOMPoBD49CCN80kGLrl8i69Qrd93NGbzcl2I GaprkIP+11Wg8vDvdwKSp2Q0s1qWFS/0 -----END CERTIFICATE-----Generated at Sat May 31 17:10:19 2025 by rpki-client