$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5849/DBAD384EF79E11EEA45AAE2CC4F9AE02/U2v43c6AJmc3j0e9SVSpC3xwCcE.mft File: U2v43c6AJmc3j0e9SVSpC3xwCcE.mft (raw, json) Hash identifier: ASgC4EPlWlQrpaA2e4R47C49UJJVkmgtIE7gJhGRpd0= Subject key identifier: 96:5B:7A:61:7E:A5:D2:6D:F4:99:EB:05:87:32:96:28:3E:92:59:2F Authority key identifier: 53:6B:F8:DD:CE:80:26:67:37:8F:47:BD:49:54:A9:0B:7C:70:09:C1 Certificate issuer: /CN=A91A5849/serialNumber=536BF8DDCE802667378F47BD4954A90B7C7009C1 Certificate serial: DA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U2v43c6AJmc3j0e9SVSpC3xwCcE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5849/DBAD384EF79E11EEA45AAE2CC4F9AE02/U2v43c6AJmc3j0e9SVSpC3xwCcE.mft Manifest number: D5 Signing time: Sat 31 May 2025 05:13:06 +0000 Manifest this update: Sat 31 May 2025 05:13:05 +0000 Manifest next update: Sat 07 Jun 2025 05:13:05 +0000 Files and hashes: 1: U2v43c6AJmc3j0e9SVSpC3xwCcE.crl (hash: UfZ8jZUDzG9XhSSi5iwaFWZsaIoEmSSgbsZb9UxBjHk=) 2: D8346320F7A011EE8BE8843BC4F9AE02.roa (hash: w5ofhzUzRvCot65WQ4cidA6AcgZbPr0ZDlGiXy64td8=) 3: FA3B5DCAF7A011EEBAC1E03BC4F9AE02.roa (hash: G4iwG5XMEp5g2eV1gP3t6eKMuKxcRTnnbvUBF3nUwk4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5849/DBAD384EF79E11EEA45AAE2CC4F9AE02/U2v43c6AJmc3j0e9SVSpC3xwCcE.crl rsync://rpki.apnic.net/member_repository/A91A5849/DBAD384EF79E11EEA45AAE2CC4F9AE02/U2v43c6AJmc3j0e9SVSpC3xwCcE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U2v43c6AJmc3j0e9SVSpC3xwCcE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 05:13:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 218 (0xda) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5849, serialNumber=536BF8DDCE802667378F47BD4954A90B7C7009C1 Validity Not Before: May 31 05:13:05 2025 GMT Not After : Jun 7 05:13:05 2025 GMT Subject: CN=683a8fe2-a1b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:09:cf:2e:fd:6c:da:ee:e3:f5:7b:ea:23:ff: 29:03:b9:52:a5:2f:2e:75:f3:eb:e0:e6:91:c1:68: 2f:23:0a:52:f8:fe:c5:dd:1d:77:d8:ea:9b:f1:41: ec:b7:90:9e:ac:74:33:12:13:77:8c:2c:fb:7e:fd: 6e:7c:42:29:f4:b5:e7:e0:1b:7f:ef:f9:40:3c:21: fd:bf:4b:7b:36:a8:ad:95:ab:e6:56:7f:bf:92:94: 56:b1:15:fd:4b:3b:3b:2c:54:52:4d:f3:0d:94:63: 91:03:b1:f0:da:4f:2e:fc:2a:d5:34:a4:a1:42:0d: 94:ee:cc:54:69:b7:6e:62:d9:3b:31:03:1a:87:ee: 99:e0:ab:df:35:7c:c0:83:b7:78:60:67:92:58:a8: bc:99:43:1c:80:9a:d6:a0:81:81:62:50:0d:c5:95: e6:45:8f:49:a5:b1:e4:62:6a:8f:a0:d7:c1:48:1a: df:81:a7:6f:22:48:64:ea:89:db:19:72:05:5c:84: 8b:b0:aa:2a:05:ca:d3:46:c0:88:be:ba:b0:db:8d: e5:e1:5f:3b:46:da:a5:aa:4e:8b:0b:ba:7b:cb:c1: 46:25:ee:10:10:30:9c:09:b6:98:3f:3d:1e:3b:a2: 6f:d3:9f:07:29:88:9f:0d:46:d7:38:d3:fc:70:ba: 90:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:5B:7A:61:7E:A5:D2:6D:F4:99:EB:05:87:32:96:28:3E:92:59:2F X509v3 Authority Key Identifier: keyid:53:6B:F8:DD:CE:80:26:67:37:8F:47:BD:49:54:A9:0B:7C:70:09:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5849/DBAD384EF79E11EEA45AAE2CC4F9AE02/U2v43c6AJmc3j0e9SVSpC3xwCcE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U2v43c6AJmc3j0e9SVSpC3xwCcE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5849/DBAD384EF79E11EEA45AAE2CC4F9AE02/U2v43c6AJmc3j0e9SVSpC3xwCcE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:50:b5:09:74:bf:28:65:3d:ff:4d:d7:f7:8e:17:93:b5:7c: d8:de:c0:9e:79:f6:46:6e:28:a7:41:b0:49:25:90:bb:46:3d: ac:30:d6:5b:f5:d7:43:db:e4:92:0b:13:26:fb:68:10:9c:d1: d9:4d:2c:ed:cf:c1:23:2b:58:d8:48:5c:90:23:b4:9c:87:ec: 6f:b3:24:cb:c8:8a:31:2b:83:ae:aa:66:04:ce:94:24:aa:dd: 86:fc:a2:4a:a7:8d:cf:a8:6c:60:b2:71:c9:8e:1b:e3:c7:6e: 1e:ad:18:eb:d5:48:69:4e:90:a2:02:ce:c5:64:dc:69:63:ad: fc:e1:a4:d1:73:57:14:bd:2a:2c:15:b8:6c:35:90:f8:f6:fe: 3e:22:e7:b9:09:85:6c:e6:a2:a4:16:ff:39:43:50:6a:b8:0e: 05:42:89:8c:5f:4e:7e:c8:75:2e:9a:61:fe:35:cf:f3:9c:e7: e9:98:cb:4c:41:4e:ec:af:f6:31:15:9e:fd:4f:e2:19:01:ad: b1:b5:fb:ce:ec:5b:da:d5:6c:82:fc:10:a0:a1:c8:51:71:93: 62:c7:21:5b:76:84:0c:b4:fc:32:69:bd:c3:cd:2c:b3:5c:6c: 7a:3f:e7:76:58:5a:bd:50:7e:e1:c5:dc:b4:69:7d:fb:5a:1e: f3:09:70:a2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU4NDkxMTAvBgNVBAUTKDUzNkJGOEREQ0U4MDI2NjczNzhGNDdCRDQ5NTRBOTBC N0M3MDA5QzEwHhcNMjUwNTMxMDUxMzA1WhcNMjUwNjA3MDUxMzA1WjAYMRYwFAYD VQQDEw02ODNhOGZlMi1hMWIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4gnPLv1s2u7j9XvqI/8pA7lSpS8udfPr4OaRwWgvIwpS+P7F3R132Oqb8UHs t5CerHQzEhN3jCz7fv1ufEIp9LXn4Bt/7/lAPCH9v0t7NqitlavmVn+/kpRWsRX9 Szs7LFRSTfMNlGORA7Hw2k8u/CrVNKShQg2U7sxUabduYtk7MQMah+6Z4KvfNXzA g7d4YGeSWKi8mUMcgJrWoIGBYlANxZXmRY9JpbHkYmqPoNfBSBrfgadvIkhk6onb GXIFXISLsKoqBcrTRsCIvrqw243l4V87Rtqlqk6LC7p7y8FGJe4QEDCcCbaYPz0e O6Jv058HKYifDUbXONP8cLqQ2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJZbemF+ pdJt9JnrBYcylig+klkvMB8GA1UdIwQYMBaAFFNr+N3OgCZnN49HvUlUqQt8cAnB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTg0OS9EQkFEMzg0RUY3 OUUxMUVFQTQ1QUFFMkNDNEY5QUUwMi9VMnY0M2M2QUptYzNqMGU5U1ZTcEMzeHdD Y0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1UydjQzYzZBSm1jM2owZTlTVlNwQzN4d0NjRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NTg0OS9EQkFEMzg0RUY3OUUxMUVFQTQ1QUFFMkNDNEY5QUUwMi9VMnY0M2M2QUpt YzNqMGU5U1ZTcEMzeHdDY0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAWULUJdL8oZT3/Tdf3jheTtXzY3sCeefZGbiinQbBJJZC7Rj2sMNZb 9ddD2+SSCxMm+2gQnNHZTSztz8EjK1jYSFyQI7Sch+xvsyTLyIoxK4OuqmYEzpQk qt2G/KJKp43PqGxgsnHJjhvjx24erRjr1UhpTpCiAs7FZNxpY6384aTRc1cUvSos FbhsNZD49v4+Iue5CYVs5qKkFv85Q1BquA4FQomMX05+yHUummH+Nc/znOfpmMtM QU7sr/YxFZ79T+IZAa2xtfvO7Fva1WyC/BCgochRcZNixyFbdoQMtPwyab3DzSyz XGx6P+d2WFq9UH7hxdy0aX37Wh7zCXCi -----END CERTIFICATE-----Generated at Sat May 31 16:36:55 2025 by rpki-client