$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5FCF/B84C603A1E5F11F09E6A6B4FC4F9AE02/mK6VbUJuFgLO2LtyWI9io9oSqVU.mft File: mK6VbUJuFgLO2LtyWI9io9oSqVU.mft (raw, json) Hash identifier: DtzxtDffPlAflMGjqyaOWMgiK2a0669GjCG9l5VGV4s= Subject key identifier: 11:86:14:C6:C6:9F:42:9F:1D:1F:FD:16:E0:16:AA:A4:61:EC:3A:7E Authority key identifier: 98:AE:95:6D:42:6E:16:02:CE:D8:BB:72:58:8F:62:A3:DA:12:A9:55 Certificate issuer: /CN=A91A5FCF/serialNumber=98AE956D426E1602CED8BB72588F62A3DA12A955 Certificate serial: 15 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mK6VbUJuFgLO2LtyWI9io9oSqVU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5FCF/B84C603A1E5F11F09E6A6B4FC4F9AE02/mK6VbUJuFgLO2LtyWI9io9oSqVU.mft Manifest number: 14 Signing time: Sat 31 May 2025 07:33:29 +0000 Manifest this update: Sat 31 May 2025 07:33:28 +0000 Manifest next update: Sat 07 Jun 2025 07:33:28 +0000 Files and hashes: 1: mK6VbUJuFgLO2LtyWI9io9oSqVU.crl (hash: 1/m9AkJNr9EWHDW/OuqxCxbKbG36zw/neZC6eksYqQM=) 2: 943B92961E6011F0B81D3A54C4F9AE02.roa (hash: OpKLsw9gUBvgDq3xLq9YboZIcPYYkBwvYdkkqKU3FB4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5FCF/B84C603A1E5F11F09E6A6B4FC4F9AE02/mK6VbUJuFgLO2LtyWI9io9oSqVU.crl rsync://rpki.apnic.net/member_repository/A91A5FCF/B84C603A1E5F11F09E6A6B4FC4F9AE02/mK6VbUJuFgLO2LtyWI9io9oSqVU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mK6VbUJuFgLO2LtyWI9io9oSqVU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 07:33:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21 (0x15) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5FCF, serialNumber=98AE956D426E1602CED8BB72588F62A3DA12A955 Validity Not Before: May 31 07:33:28 2025 GMT Not After : Jun 7 07:33:28 2025 GMT Subject: CN=683ab0c8-4659 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:e3:75:b1:e1:69:14:c9:ac:d2:f5:b9:4f:e7: 93:99:5d:4e:18:28:72:5f:02:75:69:37:3b:da:3a: fb:67:99:f7:89:56:3a:0e:b5:f0:03:9b:4d:63:1b: 21:43:77:55:0a:98:db:35:9e:08:bf:a9:12:f4:e0: d2:65:e8:7d:da:9d:5d:35:e6:d1:54:22:3e:8a:25: 6c:f9:68:df:1e:11:1c:65:a1:04:69:f4:c3:12:78: be:3d:2c:9a:94:00:e7:f7:b8:c0:af:ff:55:9f:26: 9f:8c:f2:1e:a1:9a:6f:94:b2:a8:2f:e8:eb:c3:50: e0:6c:3d:57:e0:2c:8f:b1:87:68:b1:42:1f:1b:20: 05:1b:38:4b:6f:ec:f2:42:13:07:2f:b8:ab:10:dd: aa:27:17:f1:28:80:55:33:97:2c:ea:d8:9e:a5:42: fd:56:6a:6d:86:49:82:4a:bd:4f:2d:4f:81:1e:91: c8:f6:ce:ca:f0:65:1f:c5:2b:2d:3d:74:39:62:c7: f9:8a:0f:a5:db:07:f2:06:f9:7e:f3:e4:19:42:13: 4d:50:47:1f:1a:6b:5a:19:f1:57:81:1e:1a:70:71: c3:f1:68:02:7a:21:3e:e9:a5:70:75:57:bd:27:55: 0c:4c:19:cf:8b:05:cb:3f:41:54:4c:61:d2:7b:bf: cd:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:86:14:C6:C6:9F:42:9F:1D:1F:FD:16:E0:16:AA:A4:61:EC:3A:7E X509v3 Authority Key Identifier: keyid:98:AE:95:6D:42:6E:16:02:CE:D8:BB:72:58:8F:62:A3:DA:12:A9:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5FCF/B84C603A1E5F11F09E6A6B4FC4F9AE02/mK6VbUJuFgLO2LtyWI9io9oSqVU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mK6VbUJuFgLO2LtyWI9io9oSqVU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5FCF/B84C603A1E5F11F09E6A6B4FC4F9AE02/mK6VbUJuFgLO2LtyWI9io9oSqVU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:75:78:26:2b:f9:a1:8f:0d:58:80:fb:86:6b:08:df:32:6d: de:b3:49:a8:05:36:89:c7:7d:4c:3e:6f:85:b2:db:d3:3d:7e: 8f:e8:ab:3d:30:a2:1b:0e:b6:ce:a9:06:39:92:0d:15:f1:44: 3f:a4:8d:67:6c:fd:eb:96:1d:3c:8d:61:62:92:7f:e1:a4:6d: 76:c5:20:04:90:d0:0a:6e:40:99:b7:10:59:ec:8d:55:1b:a8: 02:a0:83:29:d4:56:52:8c:f4:2b:3f:2c:9a:b5:ec:cb:bb:05: f6:20:de:47:ac:4c:41:fd:af:9e:cd:ff:17:0a:f1:24:ac:a5: 78:e9:e8:61:ee:5b:b9:19:cc:23:a4:0a:ad:b3:34:2a:02:52: 08:fa:f2:3d:5f:22:fc:1d:0f:5f:1c:42:3e:b2:09:89:70:62: 66:d8:45:9b:3e:ff:72:1f:1a:af:11:5e:4d:08:2d:fc:d7:3a: d1:3b:87:77:39:b7:f6:d3:17:13:94:ec:4b:8e:11:12:b6:55: 97:ee:78:19:90:b8:8b:b8:dd:67:18:66:38:8c:db:17:1b:d0: 39:ab:6e:97:f8:72:69:6e:c1:4e:cb:71:e6:e4:6f:f4:8f:1f: b0:a4:cd:51:6c:b9:26:d2:0e:16:ed:c3:59:85:6e:10:1c:14: 2f:30:a3:dc -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB NUZDRjExMC8GA1UEBRMoOThBRTk1NkQ0MjZFMTYwMkNFRDhCQjcyNTg4RjYyQTNE QTEyQTk1NTAeFw0yNTA1MzEwNzMzMjhaFw0yNTA2MDcwNzMzMjhaMBgxFjAUBgNV BAMTDTY4M2FiMGM4LTQ2NTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDT43Wx4WkUyazS9blP55OZXU4YKHJfAnVpNzvaOvtnmfeJVjoOtfADm01jGyFD d1UKmNs1ngi/qRL04NJl6H3anV015tFUIj6KJWz5aN8eERxloQRp9MMSeL49LJqU AOf3uMCv/1WfJp+M8h6hmm+Usqgv6OvDUOBsPVfgLI+xh2ixQh8bIAUbOEtv7PJC EwcvuKsQ3aonF/EogFUzlyzq2J6lQv1Wam2GSYJKvU8tT4Eekcj2zsrwZR/FKy09 dDlix/mKD6XbB/IG+X7z5BlCE01QRx8aa1oZ8VeBHhpwccPxaAJ6IT7ppXB1V70n VQxMGc+LBcs/QVRMYdJ7v80dAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUEYYUxsaf Qp8dH/0W4BaqpGHsOn4wHwYDVR0jBBgwFoAUmK6VbUJuFgLO2LtyWI9io9oSqVUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE1RkNGL0I4NEM2MDNBMUU1 RjExRjA5RTZBNkI0RkM0RjlBRTAyL21LNlZiVUp1RmdMTzJMdHlXSTlpbzlvU3FW VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbUs2VmJVSnVGZ0xPMkx0eVdJOWlvOW9TcVZVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE1 RkNGL0I4NEM2MDNBMUU1RjExRjA5RTZBNkI0RkM0RjlBRTAyL21LNlZiVUp1RmdM TzJMdHlXSTlpbzlvU3FWVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKp1eCYr+aGPDViA+4ZrCN8ybd6zSagFNonHfUw+b4Wy29M9fo/oqz0w ohsOts6pBjmSDRXxRD+kjWds/euWHTyNYWKSf+GkbXbFIASQ0ApuQJm3EFnsjVUb qAKggynUVlKM9Cs/LJq17Mu7BfYg3kesTEH9r57N/xcK8SSspXjp6GHuW7kZzCOk Cq2zNCoCUgj68j1fIvwdD18cQj6yCYlwYmbYRZs+/3IfGq8RXk0ILfzXOtE7h3c5 t/bTFxOU7EuOERK2VZfueBmQuIu43WcYZjiM2xcb0Dmrbpf4cmluwU7Lcebkb/SP H7CkzVFsuSbSDhbtw1mFbhAcFC8wo9w= -----END CERTIFICATE-----Generated at Sat May 31 16:49:12 2025 by rpki-client