$ rpki-client -vvf rpki.apnic.net/member_repository/A91A657F/E94BCC48603211EFA5F8EE7EC4F9AE02/R_rmMixRsd0CJJdveh0rkibQkOo.mft File: R_rmMixRsd0CJJdveh0rkibQkOo.mft (raw, json) Hash identifier: nNqI3mq0y0nZX/wNoa/Enh/ph/mDmBCLR8/GTu2lJhM= Subject key identifier: CA:D1:F5:C2:C1:04:80:1D:B5:A6:93:97:7E:7F:5E:7A:17:BF:AE:6F Authority key identifier: 47:FA:E6:32:2C:51:B1:DD:02:24:97:6F:7A:1D:2B:92:26:D0:90:EA Certificate issuer: /CN=A91A657F/serialNumber=47FAE6322C51B1DD0224976F7A1D2B9226D090EA Certificate serial: 9B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R_rmMixRsd0CJJdveh0rkibQkOo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A657F/E94BCC48603211EFA5F8EE7EC4F9AE02/R_rmMixRsd0CJJdveh0rkibQkOo.mft Manifest number: 97 Signing time: Sat 31 May 2025 06:00:28 +0000 Manifest this update: Sat 31 May 2025 06:00:27 +0000 Manifest next update: Sat 07 Jun 2025 06:00:27 +0000 Files and hashes: 1: R_rmMixRsd0CJJdveh0rkibQkOo.crl (hash: c2x08Oqzty2YTgSTzCiZPx0fVcHSNoBgpu9Mf8A28sA=) 2: 7564FD08603311EFA997483AC4F9AE02.roa (hash: j5L2oMlmz/AOJc/zBZV6x799FBe2Mb9/ypYCcp0WrrY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A657F/E94BCC48603211EFA5F8EE7EC4F9AE02/R_rmMixRsd0CJJdveh0rkibQkOo.crl rsync://rpki.apnic.net/member_repository/A91A657F/E94BCC48603211EFA5F8EE7EC4F9AE02/R_rmMixRsd0CJJdveh0rkibQkOo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R_rmMixRsd0CJJdveh0rkibQkOo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 06:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 155 (0x9b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A657F, serialNumber=47FAE6322C51B1DD0224976F7A1D2B9226D090EA Validity Not Before: May 31 06:00:27 2025 GMT Not After : Jun 7 06:00:27 2025 GMT Subject: CN=683a9afb-b8e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:db:e5:b2:c6:4a:b2:5f:19:02:9e:83:20:d8: 79:07:3d:5b:c4:1f:16:79:39:26:7c:6e:be:8c:40: c2:fb:31:ad:ad:fa:2f:13:02:bf:60:6b:4c:75:fe: bd:81:5e:7f:51:69:ff:c0:0b:7b:ba:e0:70:f0:cb: 97:0f:c0:2d:93:69:2e:2c:a2:56:25:70:53:7f:10: 6d:f4:aa:74:27:8a:c1:93:e8:7b:cb:38:de:99:3d: 67:19:12:de:5f:ca:8f:15:59:8e:99:d7:d7:70:6a: f2:13:be:76:6e:9b:b5:e8:82:13:14:3e:18:89:ba: 11:45:a5:b6:e9:df:a1:b8:c9:04:eb:9e:93:1c:9a: 0a:87:28:a2:d9:a1:1c:75:ba:e2:09:dc:2f:e5:9a: c5:aa:25:c8:5d:59:f8:07:83:fa:4a:74:b2:b8:b9: 00:c3:ee:77:3c:5a:db:a3:f3:54:b2:cb:b5:8f:7b: 24:8f:0b:32:be:d8:ec:1a:cb:cd:46:c1:f6:c6:34: 37:36:52:4d:11:c7:40:ac:53:b5:58:58:17:97:90: 90:c0:7f:cd:30:6b:ca:ca:7a:10:4e:39:64:cd:3a: 02:34:fc:75:2e:72:3d:2f:64:b8:12:59:51:5f:52: cf:b8:c8:e6:ea:3f:9a:8f:3f:67:72:cf:11:06:23: 5c:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:D1:F5:C2:C1:04:80:1D:B5:A6:93:97:7E:7F:5E:7A:17:BF:AE:6F X509v3 Authority Key Identifier: keyid:47:FA:E6:32:2C:51:B1:DD:02:24:97:6F:7A:1D:2B:92:26:D0:90:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A657F/E94BCC48603211EFA5F8EE7EC4F9AE02/R_rmMixRsd0CJJdveh0rkibQkOo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R_rmMixRsd0CJJdveh0rkibQkOo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A657F/E94BCC48603211EFA5F8EE7EC4F9AE02/R_rmMixRsd0CJJdveh0rkibQkOo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:8b:4a:81:d2:b3:1a:b5:0a:e3:61:a8:82:56:c4:e0:8b:e2: 4d:cf:19:83:a1:76:16:37:ae:2d:d4:45:e3:5e:85:f3:53:94: c3:65:56:0e:c2:9b:8b:c9:5a:ef:33:8d:f2:9c:0c:e8:0d:12: 98:df:73:61:07:d2:1d:1e:bd:a9:43:c9:d8:31:ea:f9:b3:eb: 5a:f1:a1:87:b1:23:a7:22:b9:e0:f3:ba:b9:47:e3:81:fe:0f: 9b:6c:91:e1:e7:46:b9:5b:ea:71:ac:dc:ec:57:10:72:55:b4: c2:e6:d7:e7:b7:0a:a9:3d:1f:00:5a:bd:99:53:35:fd:f9:50: 73:06:dd:6d:23:d3:7f:31:4a:bd:91:fa:ec:49:e5:60:43:79: 9c:fa:a4:82:f4:5b:79:2e:a0:19:db:3f:7b:da:7a:bd:4c:ce: 90:f0:eb:9c:2f:de:4a:05:f0:f3:5f:1c:7d:f1:c7:e9:c4:14: ed:cf:95:74:71:26:e4:ad:64:b7:a1:f3:ea:f8:db:86:ae:be: 52:c6:e4:93:46:c8:43:83:39:5a:d5:b8:38:74:04:38:02:d1: 35:6e:27:ce:7d:9a:62:5d:62:17:e9:27:72:e3:0d:f6:4f:7f: 05:07:bc:4c:86:25:c8:64:96:d0:7c:6a:3b:81:6e:0a:bf:26: 65:43:10:1c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTY1N0YxMTAvBgNVBAUTKDQ3RkFFNjMyMkM1MUIxREQwMjI0OTc2RjdBMUQyQjky MjZEMDkwRUEwHhcNMjUwNTMxMDYwMDI3WhcNMjUwNjA3MDYwMDI3WjAYMRYwFAYD VQQDEw02ODNhOWFmYi1iOGUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4dvlssZKsl8ZAp6DINh5Bz1bxB8WeTkmfG6+jEDC+zGtrfovEwK/YGtMdf69 gV5/UWn/wAt7uuBw8MuXD8Atk2kuLKJWJXBTfxBt9Kp0J4rBk+h7yzjemT1nGRLe X8qPFVmOmdfXcGryE752bpu16IITFD4YiboRRaW26d+huMkE656THJoKhyii2aEc dbriCdwv5ZrFqiXIXVn4B4P6SnSyuLkAw+53PFrbo/NUssu1j3skjwsyvtjsGsvN RsH2xjQ3NlJNEcdArFO1WFgXl5CQwH/NMGvKynoQTjlkzToCNPx1LnI9L2S4EllR X1LPuMjm6j+ajz9ncs8RBiNcTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMrR9cLB BIAdtaaTl35/XnoXv65vMB8GA1UdIwQYMBaAFEf65jIsUbHdAiSXb3odK5Im0JDq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNjU3Ri9FOTRCQ0M0ODYw MzIxMUVGQTVGOEVFN0VDNEY5QUUwMi9SX3JtTWl4UnNkMENKSmR2ZWgwcmtpYlFr T28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Jfcm1NaXhSc2QwQ0pKZHZlaDBya2liUWtPby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NjU3Ri9FOTRCQ0M0ODYwMzIxMUVGQTVGOEVFN0VDNEY5QUUwMi9SX3JtTWl4UnNk MENKSmR2ZWgwcmtpYlFrT28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCsi0qB0rMatQrjYaiCVsTgi+JNzxmDoXYWN64t1EXjXoXzU5TDZVYO wpuLyVrvM43ynAzoDRKY33NhB9IdHr2pQ8nYMer5s+ta8aGHsSOnIrng87q5R+OB /g+bbJHh50a5W+pxrNzsVxByVbTC5tfntwqpPR8AWr2ZUzX9+VBzBt1tI9N/MUq9 kfrsSeVgQ3mc+qSC9Ft5LqAZ2z972nq9TM6Q8OucL95KBfDzXxx98cfpxBTtz5V0 cSbkrWS3ofPq+NuGrr5SxuSTRshDgzla1bg4dAQ4AtE1bifOfZpiXWIX6Sdy4w32 T38FB7xMhiXIZJbQfGo7gW4KvyZlQxAc -----END CERTIFICATE-----Generated at Sat May 31 15:01:21 2025 by rpki-client