$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8475/6B6582F23EF011EDA1F3051AC4F9AE02/pIyb1KXbEZ4VQzJBNuAu6kvKrzg.mft File: pIyb1KXbEZ4VQzJBNuAu6kvKrzg.mft (raw, json) Hash identifier: JDAyRCXb2oCFZGOh9ADg1944PdWIt7xWN7eJULVeCaY= Subject key identifier: CB:DB:55:39:47:93:87:E7:DD:8E:F1:B6:3F:0C:2C:CF:47:0B:B8:84 Authority key identifier: A4:8C:9B:D4:A5:DB:11:9E:15:43:32:41:36:E0:2E:EA:4B:CA:AF:38 Certificate issuer: /CN=A91A8475/serialNumber=A48C9BD4A5DB119E1543324136E02EEA4BCAAF38 Certificate serial: 0203 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pIyb1KXbEZ4VQzJBNuAu6kvKrzg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A8475/6B6582F23EF011EDA1F3051AC4F9AE02/pIyb1KXbEZ4VQzJBNuAu6kvKrzg.mft Manifest number: 01FC Signing time: Sat 31 May 2025 02:13:50 +0000 Manifest this update: Sat 31 May 2025 02:13:49 +0000 Manifest next update: Sat 07 Jun 2025 02:13:49 +0000 Files and hashes: 1: pIyb1KXbEZ4VQzJBNuAu6kvKrzg.crl (hash: PtMbm7yNgwH9EnwF/jwumxuwmOimlkR5K3pMBAWELPI=) 2: A4E607B6B1C511EDA095B220C4F9AE02.roa (hash: IaOYa65tPNoGSKOth9OBnqEo5IgGVd7ufuneStp8ah8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A8475/6B6582F23EF011EDA1F3051AC4F9AE02/pIyb1KXbEZ4VQzJBNuAu6kvKrzg.crl rsync://rpki.apnic.net/member_repository/A91A8475/6B6582F23EF011EDA1F3051AC4F9AE02/pIyb1KXbEZ4VQzJBNuAu6kvKrzg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pIyb1KXbEZ4VQzJBNuAu6kvKrzg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 02:13:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 515 (0x203) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A8475, serialNumber=A48C9BD4A5DB119E1543324136E02EEA4BCAAF38 Validity Not Before: May 31 02:13:49 2025 GMT Not After : Jun 7 02:13:49 2025 GMT Subject: CN=683a65dd-a845 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:97:2a:a7:97:2c:f5:b7:84:83:58:11:22:4d: 0a:99:e5:20:61:65:18:d3:e7:32:41:49:fe:dc:89: a7:27:f2:f8:cb:89:3a:bc:43:33:f4:4d:1b:3f:b2: d3:00:dd:3d:e9:8b:9e:12:62:43:de:4c:bd:2b:14: 72:92:b9:16:14:3e:59:d7:da:f0:99:c5:94:b7:ef: 8d:68:91:c0:82:01:64:94:67:86:21:85:5a:e4:56: ff:3c:77:ea:59:20:70:f2:71:f6:19:68:20:ae:3a: b8:6f:1e:22:b5:34:bf:81:5e:40:0d:a9:09:99:5e: 29:87:be:13:2f:88:11:a8:f0:a1:fe:69:84:9e:c3: 65:fb:43:b6:27:2b:f8:ca:80:bb:7d:e7:eb:b6:e3: c4:48:25:70:91:fd:9b:3d:53:a8:d2:1f:9f:c1:c6: ea:d0:5e:24:d2:42:d9:17:12:5a:6c:19:10:96:1e: 73:68:3b:f8:84:f5:fa:9d:25:1f:0e:34:61:61:20: 92:d9:58:e6:e6:ee:e4:ae:b2:4a:09:85:81:6f:a8: 34:ba:a7:6f:ce:f2:c3:e4:44:3d:fa:42:e3:7d:d4: fe:0f:4b:9f:db:5f:a2:f8:22:32:71:10:5e:03:28: 76:a1:18:9e:4a:e9:70:24:13:10:4d:f9:63:a4:9f: 66:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:DB:55:39:47:93:87:E7:DD:8E:F1:B6:3F:0C:2C:CF:47:0B:B8:84 X509v3 Authority Key Identifier: keyid:A4:8C:9B:D4:A5:DB:11:9E:15:43:32:41:36:E0:2E:EA:4B:CA:AF:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A8475/6B6582F23EF011EDA1F3051AC4F9AE02/pIyb1KXbEZ4VQzJBNuAu6kvKrzg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pIyb1KXbEZ4VQzJBNuAu6kvKrzg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8475/6B6582F23EF011EDA1F3051AC4F9AE02/pIyb1KXbEZ4VQzJBNuAu6kvKrzg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:72:05:10:f5:4d:c0:90:f2:5f:ef:a1:90:4b:7d:94:92:67: a0:7b:73:8f:2e:8c:6d:b9:55:cd:1b:f8:1a:fe:2c:84:28:d5: ff:1a:27:63:fd:57:75:96:19:5b:57:33:be:bb:72:76:17:e8: b0:f5:bb:40:a3:41:c1:61:08:95:40:0b:67:3f:c5:69:a2:1b: 75:92:34:6e:5a:aa:d6:01:fa:fe:a2:a6:d8:5a:91:6f:51:22: 5c:13:b1:6b:ab:6e:1a:c7:08:2d:e2:ad:44:6a:29:be:26:e7: fe:f6:85:21:c3:cc:75:cb:30:79:fc:c6:91:95:89:28:94:a1: 6d:e8:8d:dc:1b:d5:9c:6d:4c:84:46:02:24:ba:50:8b:6b:7c: 2a:d2:4d:5a:9f:14:e5:d5:8e:5e:f1:95:00:ea:26:68:e2:d2: 31:d2:15:85:4c:36:a2:41:67:9d:24:8e:54:e8:9a:21:75:08: 77:e0:04:ee:4a:2b:f4:f2:d4:22:e3:5f:ab:6d:c8:aa:bf:04: 6b:28:a0:55:8f:51:be:f2:04:93:21:04:8b:f7:a7:f8:bd:57: 62:b2:82:32:2c:93:72:af:05:03:fb:43:92:40:2f:92:fc:cf: 90:17:28:f7:41:58:67:50:54:8e:6f:fa:59:30:c5:b9:dc:b8: 60:fc:23:ec -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTg0NzUxMTAvBgNVBAUTKEE0OEM5QkQ0QTVEQjExOUUxNTQzMzI0MTM2RTAyRUVB NEJDQUFGMzgwHhcNMjUwNTMxMDIxMzQ5WhcNMjUwNjA3MDIxMzQ5WjAYMRYwFAYD VQQDEw02ODNhNjVkZC1hODQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz5cqp5cs9beEg1gRIk0KmeUgYWUY0+cyQUn+3ImnJ/L4y4k6vEMz9E0bP7LT AN096YueEmJD3ky9KxRykrkWFD5Z19rwmcWUt++NaJHAggFklGeGIYVa5Fb/PHfq WSBw8nH2GWggrjq4bx4itTS/gV5ADakJmV4ph74TL4gRqPCh/mmEnsNl+0O2Jyv4 yoC7fefrtuPESCVwkf2bPVOo0h+fwcbq0F4k0kLZFxJabBkQlh5zaDv4hPX6nSUf DjRhYSCS2Vjm5u7krrJKCYWBb6g0uqdvzvLD5EQ9+kLjfdT+D0uf21+i+CIycRBe Ayh2oRieSulwJBMQTfljpJ9mJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMvbVTlH k4fn3Y7xtj8MLM9HC7iEMB8GA1UdIwQYMBaAFKSMm9Sl2xGeFUMyQTbgLupLyq84 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODQ3NS82QjY1ODJGMjNF RjAxMUVEQTFGMzA1MUFDNEY5QUUwMi9wSXliMUtYYkVaNFZRekpCTnVBdTZrdkty emcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BJeWIxS1hiRVo0VlF6SkJOdUF1Nmt2S3J6Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB ODQ3NS82QjY1ODJGMjNFRjAxMUVEQTFGMzA1MUFDNEY5QUUwMi9wSXliMUtYYkVa NFZRekpCTnVBdTZrdktyemcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBFcgUQ9U3AkPJf76GQS32Ukmege3OPLoxtuVXNG/ga/iyEKNX/Gidj /Vd1lhlbVzO+u3J2F+iw9btAo0HBYQiVQAtnP8Vpoht1kjRuWqrWAfr+oqbYWpFv USJcE7Frq24axwgt4q1Eaim+Juf+9oUhw8x1yzB5/MaRlYkolKFt6I3cG9WcbUyE RgIkulCLa3wq0k1anxTl1Y5e8ZUA6iZo4tIx0hWFTDaiQWedJI5U6JohdQh34ATu Siv08tQi41+rbciqvwRrKKBVj1G+8gSTIQSL96f4vVdisoIyLJNyrwUD+0OSQC+S /M+QFyj3QVhnUFSOb/pZMMW53Lhg/CPs -----END CERTIFICATE-----Generated at Sat May 31 17:50:33 2025 by rpki-client