$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9B1B/4B3864D80E0B11EDA8D12E58C4F9AE02/S0QUrmheSI9CsbZH7qAd67DE86A.mft File: S0QUrmheSI9CsbZH7qAd67DE86A.mft (raw, json) Hash identifier: mgytQsSip8XF9ZGR6Z57XR2HOEEs4JkId3XCc71Tpmo= Subject key identifier: 4E:4A:4B:11:C7:A6:BE:D5:F8:71:BC:B9:07:D0:EA:7E:DF:F4:A0:B7 Authority key identifier: 4B:44:14:AE:68:5E:48:8F:42:B1:B6:47:EE:A0:1D:EB:B0:C4:F3:A0 Certificate issuer: /CN=A91A9B1B/serialNumber=4B4414AE685E488F42B1B647EEA01DEBB0C4F3A0 Certificate serial: 027A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S0QUrmheSI9CsbZH7qAd67DE86A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A9B1B/4B3864D80E0B11EDA8D12E58C4F9AE02/S0QUrmheSI9CsbZH7qAd67DE86A.mft Manifest number: 0274 Signing time: Sat 31 May 2025 01:53:17 +0000 Manifest this update: Sat 31 May 2025 01:53:17 +0000 Manifest next update: Sat 07 Jun 2025 01:53:17 +0000 Files and hashes: 1: S0QUrmheSI9CsbZH7qAd67DE86A.crl (hash: NaXOZq2a4vQHI5gpFIuvYCt5BFt38YeT7rE5elVO/Ns=) 2: B3F935160E0F11ED89E89675C4F9AE02.roa (hash: FlIBDcsCI6hEzE/Hsl8Oo4AgNaxmcJbVTdpEo3OVvJM=) 3: B4A58FE60E0F11ED89E89675C4F9AE02.roa (hash: xbGvdrnN3RARHETkrmNSzdVV6UQzyx3squYg0aDBmMc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A9B1B/4B3864D80E0B11EDA8D12E58C4F9AE02/S0QUrmheSI9CsbZH7qAd67DE86A.crl rsync://rpki.apnic.net/member_repository/A91A9B1B/4B3864D80E0B11EDA8D12E58C4F9AE02/S0QUrmheSI9CsbZH7qAd67DE86A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S0QUrmheSI9CsbZH7qAd67DE86A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 01:53:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 634 (0x27a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A9B1B, serialNumber=4B4414AE685E488F42B1B647EEA01DEBB0C4F3A0 Validity Not Before: May 31 01:53:17 2025 GMT Not After : Jun 7 01:53:17 2025 GMT Subject: CN=683a610d-d748 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:85:c5:c9:e6:7b:1e:5d:81:33:f2:e9:28:00: 0f:db:85:9b:e8:4b:1e:7a:69:4b:1b:42:90:fc:76: 30:e2:92:73:01:4c:17:f2:11:a9:43:29:08:1e:d4: 23:e9:7f:55:c6:51:c1:88:0b:ad:f9:9d:88:c8:89: 6c:65:ee:33:16:8d:4f:3d:46:8c:22:91:aa:69:f2: 37:67:c4:ce:53:01:17:07:6b:9f:9c:00:48:7c:c5: ae:e5:7e:7f:a9:b9:83:8e:29:47:94:1c:b8:0a:c3: 5b:56:c3:27:e2:84:6d:6b:48:72:4e:3e:e8:e6:4d: eb:6e:18:f0:e6:62:d8:e1:3b:b5:5f:ec:38:60:fd: 8a:05:84:81:53:16:d1:9c:2a:46:b4:a0:b0:39:a1: 2c:8e:8e:32:c2:0e:01:df:5c:a2:c3:02:4b:52:f3: 93:83:35:e3:34:4a:b5:70:a5:1d:d7:a5:04:0b:04: bf:97:eb:c1:8b:b9:1d:70:fa:bb:cd:d2:b8:a3:b7: 6d:9d:0d:ab:1c:30:fb:63:8a:81:47:f1:33:cb:c5: e2:0d:b6:18:cf:6e:a7:df:a5:b7:5c:c5:76:e4:bd: 83:08:f8:e3:7f:c6:a5:ff:89:27:b0:24:d3:35:a4: f5:ac:25:b8:f5:29:03:e5:07:f0:ec:fe:5f:a3:82: cf:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:4A:4B:11:C7:A6:BE:D5:F8:71:BC:B9:07:D0:EA:7E:DF:F4:A0:B7 X509v3 Authority Key Identifier: keyid:4B:44:14:AE:68:5E:48:8F:42:B1:B6:47:EE:A0:1D:EB:B0:C4:F3:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A9B1B/4B3864D80E0B11EDA8D12E58C4F9AE02/S0QUrmheSI9CsbZH7qAd67DE86A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S0QUrmheSI9CsbZH7qAd67DE86A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9B1B/4B3864D80E0B11EDA8D12E58C4F9AE02/S0QUrmheSI9CsbZH7qAd67DE86A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:77:68:3c:21:23:4f:0e:48:85:da:52:cc:0f:8c:f2:f6:2a: 2f:6d:94:ea:66:10:17:da:84:ca:48:c0:c8:8d:1f:6b:be:9c: 52:22:6e:ae:00:25:55:68:6b:bd:cc:51:43:c1:61:92:a7:69: e8:51:a3:1b:f7:d1:b3:fd:87:fc:6a:7d:e7:17:ae:9d:59:64: 30:5e:06:3c:13:e1:7d:7f:f1:d1:c4:b7:73:00:ec:1d:de:60: 44:2e:5d:bb:b5:82:81:93:c6:48:fe:b7:ea:86:ee:96:7a:e4: 3d:a9:1f:f2:d8:77:82:1f:cd:5f:3a:50:85:a8:2a:6b:90:18: b9:94:cd:d1:fd:33:bf:aa:8d:f5:07:58:7b:ef:7d:8d:22:62: 31:d5:53:41:74:af:36:16:b9:3f:f0:4a:9d:98:75:b5:fc:7f: 4b:d9:bb:95:e4:dc:02:52:a1:32:39:6b:1f:bd:76:3e:43:39: ec:14:fc:ec:1c:23:d6:55:18:5b:4f:1c:c4:ae:57:0b:3e:74: 79:2c:f3:4d:ba:3d:a0:ca:7d:b6:70:9c:57:e2:fa:54:69:b2: 73:93:1b:b5:8e:f5:c5:34:eb:53:28:c7:08:8a:87:d4:74:95: 53:c9:6d:9d:80:2a:84:29:f9:58:e7:01:fa:ea:bd:ed:f7:bf: ed:a2:51:7f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAnowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTlCMUIxMTAvBgNVBAUTKDRCNDQxNEFFNjg1RTQ4OEY0MkIxQjY0N0VFQTAxREVC QjBDNEYzQTAwHhcNMjUwNTMxMDE1MzE3WhcNMjUwNjA3MDE1MzE3WjAYMRYwFAYD VQQDEw02ODNhNjEwZC1kNzQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsYXFyeZ7Hl2BM/LpKAAP24Wb6EseemlLG0KQ/HYw4pJzAUwX8hGpQykIHtQj 6X9VxlHBiAut+Z2IyIlsZe4zFo1PPUaMIpGqafI3Z8TOUwEXB2ufnABIfMWu5X5/ qbmDjilHlBy4CsNbVsMn4oRta0hyTj7o5k3rbhjw5mLY4Tu1X+w4YP2KBYSBUxbR nCpGtKCwOaEsjo4ywg4B31yiwwJLUvOTgzXjNEq1cKUd16UECwS/l+vBi7kdcPq7 zdK4o7dtnQ2rHDD7Y4qBR/Ezy8XiDbYYz26n36W3XMV25L2DCPjjf8al/4knsCTT NaT1rCW49SkD5Qfw7P5fo4LPewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE5KSxHH pr7V+HG8uQfQ6n7f9KC3MB8GA1UdIwQYMBaAFEtEFK5oXkiPQrG2R+6gHeuwxPOg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOUIxQi80QjM4NjREODBF MEIxMUVEQThEMTJFNThDNEY5QUUwMi9TMFFVcm1oZVNJOUNzYlpIN3FBZDY3REU4 NkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1MwUVVybWhlU0k5Q3NiWkg3cUFkNjdERTg2QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OUIxQi80QjM4NjREODBFMEIxMUVEQThEMTJFNThDNEY5QUUwMi9TMFFVcm1oZVNJ OUNzYlpIN3FBZDY3REU4NkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAWd2g8ISNPDkiF2lLMD4zy9iovbZTqZhAX2oTKSMDIjR9rvpxSIm6u ACVVaGu9zFFDwWGSp2noUaMb99Gz/Yf8an3nF66dWWQwXgY8E+F9f/HRxLdzAOwd 3mBELl27tYKBk8ZI/rfqhu6WeuQ9qR/y2HeCH81fOlCFqCprkBi5lM3R/TO/qo31 B1h7732NImIx1VNBdK82Frk/8EqdmHW1/H9L2buV5NwCUqEyOWsfvXY+QznsFPzs HCPWVRhbTxzErlcLPnR5LPNNuj2gyn22cJxX4vpUabJzkxu1jvXFNOtTKMcIiofU dJVTyW2dgCqEKflY5wH66r3t97/tolF/ -----END CERTIFICATE-----Generated at Sat May 31 17:47:19 2025 by rpki-client