$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6D8B/B2F235B2672011EEA146C22DC4F9AE02/mraG48KZqn5EVUk0lbRrpadECZ0.mft File: mraG48KZqn5EVUk0lbRrpadECZ0.mft (raw, json) Hash identifier: RYr/lfsU7SbvrWYqgIJNMrqyht+a1EhJ5h1PtIKeR54= Subject key identifier: 16:D7:8C:5C:E0:74:97:90:91:8A:07:9E:E3:38:62:BC:B2:41:AE:53 Authority key identifier: 9A:B6:86:E3:C2:99:AA:7E:44:55:49:34:95:B4:6B:A5:A7:44:09:9D Certificate issuer: /CN=A91A6D8B/serialNumber=9AB686E3C299AA7E4455493495B46BA5A744099D Certificate serial: 013E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mraG48KZqn5EVUk0lbRrpadECZ0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A6D8B/B2F235B2672011EEA146C22DC4F9AE02/mraG48KZqn5EVUk0lbRrpadECZ0.mft Manifest number: 013A Signing time: Sat 07 Jun 2025 04:00:30 +0000 Manifest this update: Sat 07 Jun 2025 04:00:29 +0000 Manifest next update: Sat 14 Jun 2025 04:00:29 +0000 Files and hashes: 1: mraG48KZqn5EVUk0lbRrpadECZ0.crl (hash: 8eLbIuLTeQA9UbvvXu/0fqF4Xai8MjcPzhwx9I/fMk0=) 2: D633730A5AD711EF8665FF81C4F9AE02.roa (hash: qDjDjx/58q+LWkw/PFVn1wwvsxzD4HwajEOfZNh5ZU0=) 3: D6A69CF45AD711EF8665FF81C4F9AE02.roa (hash: bQFYc9TGCv39aWTUTfzRcDtHtMAg4CgWesOizIV+Kko=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A6D8B/B2F235B2672011EEA146C22DC4F9AE02/mraG48KZqn5EVUk0lbRrpadECZ0.crl rsync://rpki.apnic.net/member_repository/A91A6D8B/B2F235B2672011EEA146C22DC4F9AE02/mraG48KZqn5EVUk0lbRrpadECZ0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mraG48KZqn5EVUk0lbRrpadECZ0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 14 Jun 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 318 (0x13e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A6D8B, serialNumber=9AB686E3C299AA7E4455493495B46BA5A744099D Validity Not Before: Jun 7 04:00:29 2025 GMT Not After : Jun 14 04:00:29 2025 GMT Subject: CN=6843b95e-023f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:45:8d:c7:fc:6a:7d:1f:ab:98:bd:a4:ea:60: 18:db:b1:1f:a4:f3:af:74:a6:47:d8:fd:6c:7f:a5: 91:a0:8a:a0:23:29:32:83:b5:3e:7a:98:16:29:7f: ed:59:4d:16:36:a6:0b:7b:ea:50:d6:2b:e2:aa:e3: 81:b4:b6:30:dd:a6:2a:5b:a7:c1:af:f4:bc:d2:a0: 2e:7b:f3:1a:99:c7:ec:74:b8:87:9d:4f:db:3c:37: e3:8a:a8:4d:80:76:b6:b8:22:c0:1a:0d:05:de:21: 16:2f:7d:a8:9a:32:12:bb:e8:6c:25:0a:69:99:59: 56:b8:26:b6:f2:ba:ef:cd:a6:59:d2:94:11:53:9b: 36:75:51:21:d7:69:fc:70:64:94:1f:cf:3f:3d:80: 7e:91:30:7a:cc:cc:10:5c:a6:d1:3d:62:35:49:92: c2:1c:e3:38:72:e7:e9:42:8b:5d:f9:61:57:6d:30: e6:c1:24:f2:55:e3:be:91:24:0c:48:95:f3:b9:43: 05:57:8a:91:99:04:33:2b:3b:3c:69:06:a4:4b:8f: a0:77:d9:a4:26:9a:47:69:61:41:95:f2:1b:71:d6: 99:c0:c3:4b:b0:c7:c8:9a:33:57:67:0d:7e:88:66: 6d:29:b7:e0:63:d0:a6:83:40:75:68:a4:42:6d:13: 18:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:D7:8C:5C:E0:74:97:90:91:8A:07:9E:E3:38:62:BC:B2:41:AE:53 X509v3 Authority Key Identifier: keyid:9A:B6:86:E3:C2:99:AA:7E:44:55:49:34:95:B4:6B:A5:A7:44:09:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A6D8B/B2F235B2672011EEA146C22DC4F9AE02/mraG48KZqn5EVUk0lbRrpadECZ0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mraG48KZqn5EVUk0lbRrpadECZ0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6D8B/B2F235B2672011EEA146C22DC4F9AE02/mraG48KZqn5EVUk0lbRrpadECZ0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:05:ae:5b:08:c0:9c:56:b2:66:12:f3:7f:7d:1f:20:11:2b: f5:19:51:f5:53:a2:40:09:96:66:e8:21:c2:97:42:49:db:0a: da:ba:8c:b4:fb:13:f4:4e:37:dd:3a:48:70:bc:2d:5f:72:67: a3:19:9f:ff:a4:5c:08:2e:bb:2c:ca:10:0a:62:c1:48:9d:8f: 80:6b:91:d1:45:f8:f6:e9:ef:4d:2f:a0:62:2e:c1:b4:47:f7: 1d:61:53:4f:12:2e:8d:74:93:7a:d2:1a:dd:1b:eb:a9:89:02: e2:2f:1a:9d:21:ee:23:a0:63:c2:f9:95:3e:55:6b:e9:81:65: bf:6c:f5:27:32:2a:53:fa:86:22:b5:3e:c2:77:04:50:7a:65: d0:06:3d:90:43:3d:45:b3:03:93:87:f6:11:5e:f0:5c:2e:55: 3e:c2:84:33:d9:f6:b0:74:c2:87:b6:b6:0f:f8:a3:03:9c:00: 08:59:7d:f1:56:fd:a0:1f:c7:5e:1f:04:9f:58:68:5d:7e:63: 67:a4:8d:b0:ab:a0:de:f2:2f:0a:f1:29:f9:df:f5:e8:95:0e: 44:2c:28:54:f0:4d:be:96:dd:e4:b7:eb:50:57:93:8f:ea:90: 56:09:92:e5:50:9b:9f:c9:29:3f:85:3e:ca:2b:1a:e0:0a:00: 6b:14:62:5c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAT4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTZEOEIxMTAvBgNVBAUTKDlBQjY4NkUzQzI5OUFBN0U0NDU1NDkzNDk1QjQ2QkE1 QTc0NDA5OUQwHhcNMjUwNjA3MDQwMDI5WhcNMjUwNjE0MDQwMDI5WjAYMRYwFAYD VQQDEw02ODQzYjk1ZS0wMjNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9kWNx/xqfR+rmL2k6mAY27EfpPOvdKZH2P1sf6WRoIqgIykyg7U+epgWKX/t WU0WNqYLe+pQ1iviquOBtLYw3aYqW6fBr/S80qAue/MamcfsdLiHnU/bPDfjiqhN gHa2uCLAGg0F3iEWL32omjISu+hsJQppmVlWuCa28rrvzaZZ0pQRU5s2dVEh12n8 cGSUH88/PYB+kTB6zMwQXKbRPWI1SZLCHOM4cufpQotd+WFXbTDmwSTyVeO+kSQM SJXzuUMFV4qRmQQzKzs8aQakS4+gd9mkJppHaWFBlfIbcdaZwMNLsMfImjNXZw1+ iGZtKbfgY9Cmg0B1aKRCbRMYyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBbXjFzg dJeQkYoHnuM4YryyQa5TMB8GA1UdIwQYMBaAFJq2huPCmap+RFVJNJW0a6WnRAmd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNkQ4Qi9CMkYyMzVCMjY3 MjAxMUVFQTE0NkMyMkRDNEY5QUUwMi9tcmFHNDhLWnFuNUVWVWswbGJScnBhZEVD WjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21yYUc0OEtacW41RVZVazBsYlJycGFkRUNaMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NkQ4Qi9CMkYyMzVCMjY3MjAxMUVFQTE0NkMyMkRDNEY5QUUwMi9tcmFHNDhLWnFu NUVWVWswbGJScnBhZEVDWjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAPBa5bCMCcVrJmEvN/fR8gESv1GVH1U6JACZZm6CHCl0JJ2wrauoy0 +xP0TjfdOkhwvC1fcmejGZ//pFwILrssyhAKYsFInY+Aa5HRRfj26e9NL6BiLsG0 R/cdYVNPEi6NdJN60hrdG+upiQLiLxqdIe4joGPC+ZU+VWvpgWW/bPUnMipT+oYi tT7CdwRQemXQBj2QQz1FswOTh/YRXvBcLlU+woQz2fawdMKHtrYP+KMDnAAIWX3x Vv2gH8deHwSfWGhdfmNnpI2wq6De8i8K8Sn53/XolQ5ELChU8E2+lt3kt+tQV5OP 6pBWCZLlUJufySk/hT7KKxrgCgBrFGJc -----END CERTIFICATE-----Generated at Mon Jun 9 04:52:53 2025 by rpki-client