$ rpki-client -vvf rpki.apnic.net/member_repository/A91A85A8/A53081462CDE11ECAA6FE678C4F9AE02/rgoPmKCQPgFeX8VMuM4IHUJNtNI.mft File: rgoPmKCQPgFeX8VMuM4IHUJNtNI.mft (raw, json) Hash identifier: sy6Y/xKtT5miBPWKyu+APm1D3hxfnVmkziGHI4QiLew= Subject key identifier: A6:34:3B:1B:D5:A5:C8:53:22:80:55:CC:0E:C8:7A:49:29:0E:E7:7E Authority key identifier: AE:0A:0F:98:A0:90:3E:01:5E:5F:C5:4C:B8:CE:08:1D:42:4D:B4:D2 Certificate issuer: /CN=A91A85A8/serialNumber=AE0A0F98A0903E015E5FC54CB8CE081D424DB4D2 Certificate serial: 04CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rgoPmKCQPgFeX8VMuM4IHUJNtNI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A85A8/A53081462CDE11ECAA6FE678C4F9AE02/rgoPmKCQPgFeX8VMuM4IHUJNtNI.mft Manifest number: 04B9 Signing time: Sat 31 May 2025 00:05:23 +0000 Manifest this update: Sat 31 May 2025 00:05:22 +0000 Manifest next update: Sat 07 Jun 2025 00:05:22 +0000 Files and hashes: 1: rgoPmKCQPgFeX8VMuM4IHUJNtNI.crl (hash: 0AEhC0nQO3RNm5EVhrv8qT905W/ZNKQvJU0DUMYXAF4=) 2: B016290E2CE211EC8664D47EC4F9AE02.roa (hash: N+v5XDTe3qGrc3Im5miqpHu358OzdQqGsyKCPQ1e/9E=) 3: 14172F4C264311EEB0342B45C4F9AE02.roa (hash: Ugkrxpmo+RhmzNNOs4CXnhFZe2ur3HMxWdH+GOY5OTg=) 4: 8C2F1C96367F11EEB689C243C4F9AE02.roa (hash: NMuBSgtK/HkuND8tStUDe+Ag9eP8OhZhvhWqets1kM8=) 5: AF91ADB42CE211EC8664D47EC4F9AE02.roa (hash: vVCpAMW7qiQGHNF6JhfNX4AfCfOmlSNmnkvMLMOZ1EI=) 6: AEFA3DD02CE211EC8664D47EC4F9AE02.roa (hash: sOUIWYOFE2CSPs3Drpz/bEhxmM04l8k3SIDOG1UW16M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A85A8/A53081462CDE11ECAA6FE678C4F9AE02/rgoPmKCQPgFeX8VMuM4IHUJNtNI.crl rsync://rpki.apnic.net/member_repository/A91A85A8/A53081462CDE11ECAA6FE678C4F9AE02/rgoPmKCQPgFeX8VMuM4IHUJNtNI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rgoPmKCQPgFeX8VMuM4IHUJNtNI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 00:05:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1229 (0x4cd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A85A8, serialNumber=AE0A0F98A0903E015E5FC54CB8CE081D424DB4D2 Validity Not Before: May 31 00:05:22 2025 GMT Not After : Jun 7 00:05:22 2025 GMT Subject: CN=683a47c2-d14c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:f6:54:72:78:f0:09:f6:66:c6:f7:48:e5:1a: e0:e5:df:e2:23:a9:6c:e6:aa:21:0a:79:ef:20:8e: 10:94:63:88:11:10:fa:44:3a:c1:90:f1:1d:57:3d: 72:0e:9d:e2:25:6a:77:16:8e:b6:97:f2:72:93:cb: ee:64:c9:3d:c0:1b:62:a8:b3:1f:dc:4c:13:a6:c2: 51:ed:b8:54:7a:76:ad:9b:18:25:6a:46:9b:08:c6: c1:f5:1c:92:0c:dd:57:78:2f:1e:f5:6f:42:77:4b: fa:38:f2:82:e3:88:51:4e:04:c5:fe:0a:d3:c0:f1: c3:93:22:55:e7:a5:08:59:e3:33:68:ed:6d:87:33: 9b:24:fd:f4:e4:b3:66:94:d6:a5:e3:28:67:cc:7f: 4d:42:da:5a:04:9f:6a:cb:f7:d6:0c:d2:db:eb:e0: 3c:ec:68:c2:40:8b:7f:3e:9f:da:c2:ca:5a:e2:87: ca:b3:73:a8:bd:9c:d0:7c:02:1e:a2:5d:5e:2f:fa: a3:ec:82:a0:27:76:b0:cb:f2:7e:81:fe:46:08:2b: 6e:8d:cc:f9:39:35:25:48:0c:bf:b0:35:5e:c6:0f: d2:3d:61:7f:3f:47:f2:45:5f:c7:3b:83:8b:ff:c6: 27:ba:29:76:95:4c:83:cb:41:95:5e:b8:7b:41:3f: ef:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:34:3B:1B:D5:A5:C8:53:22:80:55:CC:0E:C8:7A:49:29:0E:E7:7E X509v3 Authority Key Identifier: keyid:AE:0A:0F:98:A0:90:3E:01:5E:5F:C5:4C:B8:CE:08:1D:42:4D:B4:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A85A8/A53081462CDE11ECAA6FE678C4F9AE02/rgoPmKCQPgFeX8VMuM4IHUJNtNI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rgoPmKCQPgFeX8VMuM4IHUJNtNI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A85A8/A53081462CDE11ECAA6FE678C4F9AE02/rgoPmKCQPgFeX8VMuM4IHUJNtNI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:c9:11:fc:22:e5:20:f5:a2:a7:62:67:ea:8e:51:f3:b1:07: 10:97:08:40:68:e1:b7:2b:9f:a3:ef:bf:ab:df:df:e7:c9:62: 12:7c:3d:ba:df:62:1b:e1:1d:b6:8c:72:44:ae:b7:62:c3:d5: 7e:48:f1:d9:25:d3:dc:e5:10:e3:5a:6c:5b:11:38:6b:e6:60: 85:0b:73:5e:03:e5:5e:4c:27:48:e2:d3:38:d3:df:21:69:61: 7a:30:a0:0b:cb:a8:01:0a:de:01:2b:2b:78:58:2e:92:d1:f3: 75:ee:f9:f6:c4:5d:e5:c9:3e:59:eb:31:1d:a3:1a:1e:95:6f: f1:8e:03:91:58:2e:50:ed:bf:2f:75:b6:62:3c:96:63:2a:a2: 32:e2:68:18:07:09:7c:5b:15:14:24:48:7e:53:78:81:63:76: 49:0e:d0:03:8c:a5:34:1c:19:9e:a3:4a:3f:32:a3:5f:15:57: 43:8c:73:3e:31:fc:34:53:70:bb:94:1a:3d:4e:29:34:c7:68: c8:e2:eb:cc:8a:ed:f6:49:45:07:2e:11:68:02:9b:f7:f9:40: 91:76:c0:2a:39:d5:5f:38:da:5b:32:6d:97:5f:ba:93:5e:a7: 1c:44:6c:db:fc:4b:cc:7a:8d:61:8f:42:57:a6:3e:e8:fd:8d: 66:3f:b5:cc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBM0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTg1QTgxMTAvBgNVBAUTKEFFMEEwRjk4QTA5MDNFMDE1RTVGQzU0Q0I4Q0UwODFE NDI0REI0RDIwHhcNMjUwNTMxMDAwNTIyWhcNMjUwNjA3MDAwNTIyWjAYMRYwFAYD VQQDEw02ODNhNDdjMi1kMTRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0fZUcnjwCfZmxvdI5Rrg5d/iI6ls5qohCnnvII4QlGOIERD6RDrBkPEdVz1y Dp3iJWp3Fo62l/Jyk8vuZMk9wBtiqLMf3EwTpsJR7bhUenatmxglakabCMbB9RyS DN1XeC8e9W9Cd0v6OPKC44hRTgTF/grTwPHDkyJV56UIWeMzaO1thzObJP305LNm lNal4yhnzH9NQtpaBJ9qy/fWDNLb6+A87GjCQIt/Pp/awspa4ofKs3OovZzQfAIe ol1eL/qj7IKgJ3awy/J+gf5GCCtujcz5OTUlSAy/sDVexg/SPWF/P0fyRV/HO4OL /8Ynuil2lUyDy0GVXrh7QT/viQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKY0OxvV pchTIoBVzA7IekkpDud+MB8GA1UdIwQYMBaAFK4KD5igkD4BXl/FTLjOCB1CTbTS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODVBOC9BNTMwODE0NjJD REUxMUVDQUE2RkU2NzhDNEY5QUUwMi9yZ29QbUtDUVBnRmVYOFZNdU00SUhVSk50 TkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Jnb1BtS0NRUGdGZVg4Vk11TTRJSFVKTnROSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB ODVBOC9BNTMwODE0NjJDREUxMUVDQUE2RkU2NzhDNEY5QUUwMi9yZ29QbUtDUVBn RmVYOFZNdU00SUhVSk50TkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBXyRH8IuUg9aKnYmfqjlHzsQcQlwhAaOG3K5+j77+r39/nyWISfD26 32Ib4R22jHJErrdiw9V+SPHZJdPc5RDjWmxbEThr5mCFC3NeA+VeTCdI4tM4098h aWF6MKALy6gBCt4BKyt4WC6S0fN17vn2xF3lyT5Z6zEdoxoelW/xjgORWC5Q7b8v dbZiPJZjKqIy4mgYBwl8WxUUJEh+U3iBY3ZJDtADjKU0HBmeo0o/MqNfFVdDjHM+ Mfw0U3C7lBo9Tik0x2jI4uvMiu32SUUHLhFoApv3+UCRdsAqOdVfONpbMm2XX7qT XqccRGzb/EvMeo1hj0JXpj7o/Y1mP7XM -----END CERTIFICATE-----Generated at Sat May 31 15:02:51 2025 by rpki-client