$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7842/76A8C6BA8E6511ECA6EEEB70C4F9AE02/l1u5QYJWgUoFLa9U9woa3FNv35s.mft File: l1u5QYJWgUoFLa9U9woa3FNv35s.mft (raw, json) Hash identifier: UIGHo/SbNqTqEIlpfkOlXQ+Y9hqwmoUOlqtmNt1MeY4= Subject key identifier: 6B:C7:0F:C0:CB:7C:4D:B0:40:10:B8:8B:48:F4:FB:57:A3:39:DA:8C Authority key identifier: 97:5B:B9:41:82:56:81:4A:05:2D:AF:54:F7:0A:1A:DC:53:6F:DF:9B Certificate issuer: /CN=A91A7842/serialNumber=975BB9418256814A052DAF54F70A1ADC536FDF9B Certificate serial: 03C6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1u5QYJWgUoFLa9U9woa3FNv35s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A7842/76A8C6BA8E6511ECA6EEEB70C4F9AE02/l1u5QYJWgUoFLa9U9woa3FNv35s.mft Manifest number: 03BF Signing time: Sat 31 May 2025 00:51:39 +0000 Manifest this update: Sat 31 May 2025 00:51:39 +0000 Manifest next update: Sat 07 Jun 2025 00:51:39 +0000 Files and hashes: 1: l1u5QYJWgUoFLa9U9woa3FNv35s.crl (hash: m8uP12AxeJcs/tpsR7VBOmABjcRlkL1Wd56PXPlk0xA=) 2: 615BA1B8D91411EF9940471AC4F9AE02.roa (hash: 41dvwuGONsbAf2NNxcw97I3G8Q6DNf+rajP9T/KIeiw=) 3: 622B3AEAD91411EF9940471AC4F9AE02.roa (hash: q51gHdBYG+mFAHDh24P09p42ENPRR4e2b1fq2dGY3KM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A7842/76A8C6BA8E6511ECA6EEEB70C4F9AE02/l1u5QYJWgUoFLa9U9woa3FNv35s.crl rsync://rpki.apnic.net/member_repository/A91A7842/76A8C6BA8E6511ECA6EEEB70C4F9AE02/l1u5QYJWgUoFLa9U9woa3FNv35s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1u5QYJWgUoFLa9U9woa3FNv35s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 00:51:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 966 (0x3c6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A7842, serialNumber=975BB9418256814A052DAF54F70A1ADC536FDF9B Validity Not Before: May 31 00:51:39 2025 GMT Not After : Jun 7 00:51:39 2025 GMT Subject: CN=683a529b-34c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:dd:f1:e3:5b:a2:1e:41:2d:55:bd:b0:07:f3: 3a:d4:fe:42:05:28:4d:9e:40:35:6f:64:7f:fa:20: e0:e6:d9:03:2c:70:fc:f9:92:2f:d7:75:2c:45:4b: b7:61:9a:02:00:eb:1c:19:64:ef:28:1a:aa:45:ff: d8:a6:a0:70:6a:b2:85:f4:4e:25:a3:00:09:59:21: aa:6b:00:de:35:4b:9c:02:c5:bd:78:c6:e8:3b:ea: a7:71:14:1a:05:a2:9c:54:c5:81:ad:a3:8d:9d:76: 7c:ef:93:e3:5d:90:7f:86:9f:4e:91:55:64:78:80: 28:f5:e5:76:7e:ba:be:8c:94:af:27:3c:30:dc:5f: ce:ed:74:10:e1:3d:48:8c:37:f7:b8:a8:bf:00:13: c2:86:81:29:1e:4f:8d:f0:0c:98:5f:33:70:d2:77: af:80:c8:bb:7f:4c:50:43:23:24:8d:b4:09:cc:58: 42:b4:a2:76:be:cb:6c:28:08:71:4c:fe:8d:ec:6f: 1b:69:7e:4e:4d:d9:ca:2b:9e:bd:1f:f2:b7:04:6a: c6:d5:11:83:70:31:ff:64:28:53:12:c4:4c:dc:07: c8:6e:97:50:68:d8:ed:f2:1a:77:02:25:15:de:bf: f2:29:e5:f5:7a:6c:29:47:e4:35:48:e6:c1:84:9d: a5:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:C7:0F:C0:CB:7C:4D:B0:40:10:B8:8B:48:F4:FB:57:A3:39:DA:8C X509v3 Authority Key Identifier: keyid:97:5B:B9:41:82:56:81:4A:05:2D:AF:54:F7:0A:1A:DC:53:6F:DF:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A7842/76A8C6BA8E6511ECA6EEEB70C4F9AE02/l1u5QYJWgUoFLa9U9woa3FNv35s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1u5QYJWgUoFLa9U9woa3FNv35s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7842/76A8C6BA8E6511ECA6EEEB70C4F9AE02/l1u5QYJWgUoFLa9U9woa3FNv35s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:58:bf:2a:da:14:12:1f:75:40:d2:94:91:af:ec:d6:d3:a0: 0d:f1:c7:e3:4a:10:e9:9b:df:8e:07:86:f9:25:28:f2:df:ba: 23:53:08:e0:b7:34:7d:c8:8d:30:d7:2c:a1:ab:83:95:80:2a: af:80:f0:44:a1:7f:40:1f:b0:8e:fd:c0:dc:a6:e6:53:2f:a0: 1f:a1:6b:f8:83:3a:2d:47:2e:60:96:38:ca:05:dd:de:cb:08: c9:1f:73:e9:33:d1:2a:fb:a1:43:9e:ea:81:81:1b:bd:48:76: 17:0b:a9:23:aa:24:f8:94:87:64:53:c2:8c:aa:c2:64:94:55: 2a:d3:93:3c:bd:31:f8:6a:2d:0d:ec:83:01:36:31:3f:ab:98: 8c:be:e4:61:be:bc:01:bb:89:ee:9d:a0:8e:5b:1d:c5:c0:61: 64:2c:57:a2:95:40:f5:88:41:c8:f2:61:98:6e:89:0b:5a:91: c3:7b:0b:2c:6d:22:20:aa:01:c9:bb:be:b6:b7:92:3f:b8:9b: 90:3c:0d:fb:26:93:8e:65:79:03:fa:9b:60:7a:56:a5:d5:f7: 02:07:83:ab:9b:65:24:19:90:ff:03:fe:9b:d1:d7:65:20:2a: 9e:26:c2:13:cb:d5:62:c8:c9:80:97:6a:b7:ca:5b:f8:1d:85: 77:71:02:30 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA8YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTc4NDIxMTAvBgNVBAUTKDk3NUJCOTQxODI1NjgxNEEwNTJEQUY1NEY3MEExQURD NTM2RkRGOUIwHhcNMjUwNTMxMDA1MTM5WhcNMjUwNjA3MDA1MTM5WjAYMRYwFAYD VQQDEw02ODNhNTI5Yi0zNGM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1t3x41uiHkEtVb2wB/M61P5CBShNnkA1b2R/+iDg5tkDLHD8+ZIv13UsRUu3 YZoCAOscGWTvKBqqRf/YpqBwarKF9E4lowAJWSGqawDeNUucAsW9eMboO+qncRQa BaKcVMWBraONnXZ875PjXZB/hp9OkVVkeIAo9eV2frq+jJSvJzww3F/O7XQQ4T1I jDf3uKi/ABPChoEpHk+N8AyYXzNw0nevgMi7f0xQQyMkjbQJzFhCtKJ2vstsKAhx TP6N7G8baX5OTdnKK569H/K3BGrG1RGDcDH/ZChTEsRM3AfIbpdQaNjt8hp3AiUV 3r/yKeX1emwpR+Q1SObBhJ2lMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGvHD8DL fE2wQBC4i0j0+1ejOdqMMB8GA1UdIwQYMBaAFJdbuUGCVoFKBS2vVPcKGtxTb9+b MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNzg0Mi83NkE4QzZCQThF NjUxMUVDQTZFRUVCNzBDNEY5QUUwMi9sMXU1UVlKV2dVb0ZMYTlVOXdvYTNGTnYz NXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2wxdTVRWUpXZ1VvRkxhOVU5d29hM0ZOdjM1cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Nzg0Mi83NkE4QzZCQThFNjUxMUVDQTZFRUVCNzBDNEY5QUUwMi9sMXU1UVlKV2dV b0ZMYTlVOXdvYTNGTnYzNXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBLWL8q2hQSH3VA0pSRr+zW06AN8cfjShDpm9+OB4b5JSjy37ojUwjg tzR9yI0w1yyhq4OVgCqvgPBEoX9AH7CO/cDcpuZTL6AfoWv4gzotRy5gljjKBd3e ywjJH3PpM9Eq+6FDnuqBgRu9SHYXC6kjqiT4lIdkU8KMqsJklFUq05M8vTH4ai0N 7IMBNjE/q5iMvuRhvrwBu4nunaCOWx3FwGFkLFeilUD1iEHI8mGYbokLWpHDewss bSIgqgHJu762t5I/uJuQPA37JpOOZXkD+ptgelal1fcCB4Orm2UkGZD/A/6b0ddl ICqeJsITy9ViyMmAl2q3ylv4HYV3cQIw -----END CERTIFICATE-----Generated at Sat May 31 17:00:26 2025 by rpki-client