$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB92D/6BE2CAD0BD3211ED84A82809C4F9AE02/fdhexDl4b9QuC_e3ITd2XwXQ6fo.mft File: fdhexDl4b9QuC_e3ITd2XwXQ6fo.mft (raw, json) Hash identifier: 19wGkl9qfBKtJ7Ef0303Orb3+hjRV4ZSq7lrpeYRSZ4= Subject key identifier: 0C:A7:AE:0A:74:38:72:BD:E7:02:BD:C1:BA:2F:B6:0B:1D:72:84:61 Authority key identifier: 7D:D8:5E:C4:39:78:6F:D4:2E:0B:F7:B7:21:37:76:5F:05:D0:E9:FA Certificate issuer: /CN=A91AB92D/serialNumber=7DD85EC439786FD42E0BF7B72137765F05D0E9FA Certificate serial: 01A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fdhexDl4b9QuC_e3ITd2XwXQ6fo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB92D/6BE2CAD0BD3211ED84A82809C4F9AE02/fdhexDl4b9QuC_e3ITd2XwXQ6fo.mft Manifest number: 01A5 Signing time: Sat 31 May 2025 03:00:12 +0000 Manifest this update: Sat 31 May 2025 03:00:12 +0000 Manifest next update: Sat 07 Jun 2025 03:00:12 +0000 Files and hashes: 1: fdhexDl4b9QuC_e3ITd2XwXQ6fo.crl (hash: 6PuQEwdboqlZatm8iL2kz++ivC/owrnP+BvwPUHEpKQ=) 2: 99B10EC4BD3511ED837DED0DC4F9AE02.roa (hash: VjsdP0zlKHnuUM/QDxE6pyiIHcCSV1/bdfYwggvcPkg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB92D/6BE2CAD0BD3211ED84A82809C4F9AE02/fdhexDl4b9QuC_e3ITd2XwXQ6fo.crl rsync://rpki.apnic.net/member_repository/A91AB92D/6BE2CAD0BD3211ED84A82809C4F9AE02/fdhexDl4b9QuC_e3ITd2XwXQ6fo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fdhexDl4b9QuC_e3ITd2XwXQ6fo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 03:00:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 425 (0x1a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB92D, serialNumber=7DD85EC439786FD42E0BF7B72137765F05D0E9FA Validity Not Before: May 31 03:00:12 2025 GMT Not After : Jun 7 03:00:12 2025 GMT Subject: CN=683a70bc-9892 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:b6:a9:22:7d:86:55:56:7e:e0:f0:04:4f:5a: b3:b3:6a:0f:7a:df:78:43:e5:a7:97:4b:17:ae:16: 9c:6c:bb:35:99:a9:c1:06:3d:7c:02:9b:7c:71:63: 90:3d:ea:70:ca:92:5d:52:1e:cc:51:51:99:0a:f9: 53:3f:2e:c6:b8:3b:79:b6:9b:5a:1f:e5:c5:72:03: ec:ef:00:50:03:86:bc:44:9f:ba:a4:2f:df:ed:f1: d1:bd:d2:b1:74:69:80:ba:64:bb:72:96:7a:32:a1: 41:d2:fa:87:41:c6:d1:4b:c2:7e:9d:a5:e6:1d:48: fd:e4:67:59:97:18:10:ed:e1:3e:e6:c5:c6:96:92: 9f:26:62:cd:6b:b6:73:ab:34:a3:50:9c:b1:23:96: d9:d6:3d:fe:bc:c4:c9:ad:ed:78:3e:fe:98:e5:9b: 7a:28:49:ed:e2:95:63:8d:b8:4b:c7:eb:cd:b3:57: 85:e6:3f:5b:39:f7:2d:a6:fb:d8:6b:fe:ff:c8:d2: cf:ba:90:a7:73:bd:7c:16:20:f4:8a:5d:ad:46:c4: 30:51:5d:12:b7:43:31:0d:0a:28:51:d1:4e:4e:31: 33:69:1a:ae:cc:4a:52:fb:c3:09:20:41:bf:b0:be: 8e:80:5c:3a:7b:23:2f:d4:7a:eb:00:70:81:4c:24: af:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:A7:AE:0A:74:38:72:BD:E7:02:BD:C1:BA:2F:B6:0B:1D:72:84:61 X509v3 Authority Key Identifier: keyid:7D:D8:5E:C4:39:78:6F:D4:2E:0B:F7:B7:21:37:76:5F:05:D0:E9:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB92D/6BE2CAD0BD3211ED84A82809C4F9AE02/fdhexDl4b9QuC_e3ITd2XwXQ6fo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fdhexDl4b9QuC_e3ITd2XwXQ6fo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB92D/6BE2CAD0BD3211ED84A82809C4F9AE02/fdhexDl4b9QuC_e3ITd2XwXQ6fo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:65:f0:ae:0c:85:d3:39:d7:4d:1d:61:ff:3b:8a:20:63:0c: b2:81:26:f6:93:97:b0:b3:49:f1:28:1d:3a:5a:d5:c2:60:70: 2f:f3:1e:fa:0c:23:ee:2d:65:a1:86:d7:a3:4f:44:c3:78:ca: 5f:f5:33:1a:66:9c:25:9b:e1:3b:5a:89:37:a5:46:12:2c:b3: 11:6a:4d:c9:f6:7b:34:2d:ef:99:cd:ab:75:d9:dd:e3:b4:0c: b9:d5:88:d9:90:35:0b:c5:ee:28:70:2f:7b:27:49:d4:03:7e: dd:6f:08:16:24:29:cd:23:0e:55:81:93:42:c6:33:1b:8a:8c: 4a:31:75:71:29:1b:74:33:15:8a:a1:d6:b8:08:4e:f6:31:bb: 96:0a:43:d7:7e:cc:78:24:64:6d:91:d7:7c:3c:0b:6d:7c:82: cc:61:02:19:77:7f:0d:ff:e6:ec:89:c9:41:50:07:7b:0c:c4: 6b:57:1d:92:18:f9:3a:ad:82:ec:e7:e5:d7:57:e7:20:9a:ca: 78:5b:a6:f7:9f:ec:44:38:b8:b5:94:a7:c7:94:76:e5:fd:0d: e1:2c:11:84:66:df:36:72:84:35:0b:79:52:88:0c:c0:f5:a6: 3d:fc:5b:3d:5b:58:17:e1:67:d8:38:66:05:34:17:b5:be:db: c4:66:47:1f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAakwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUI5MkQxMTAvBgNVBAUTKDdERDg1RUM0Mzk3ODZGRDQyRTBCRjdCNzIxMzc3NjVG MDVEMEU5RkEwHhcNMjUwNTMxMDMwMDEyWhcNMjUwNjA3MDMwMDEyWjAYMRYwFAYD VQQDEw02ODNhNzBiYy05ODkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3LapIn2GVVZ+4PAET1qzs2oPet94Q+Wnl0sXrhacbLs1manBBj18Apt8cWOQ PepwypJdUh7MUVGZCvlTPy7GuDt5tptaH+XFcgPs7wBQA4a8RJ+6pC/f7fHRvdKx dGmAumS7cpZ6MqFB0vqHQcbRS8J+naXmHUj95GdZlxgQ7eE+5sXGlpKfJmLNa7Zz qzSjUJyxI5bZ1j3+vMTJre14Pv6Y5Zt6KEnt4pVjjbhLx+vNs1eF5j9bOfctpvvY a/7/yNLPupCnc718FiD0il2tRsQwUV0St0MxDQooUdFOTjEzaRquzEpS+8MJIEG/ sL6OgFw6eyMv1HrrAHCBTCSvDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAynrgp0 OHK95wK9wbovtgsdcoRhMB8GA1UdIwQYMBaAFH3YXsQ5eG/ULgv3tyE3dl8F0On6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjkyRC82QkUyQ0FEMEJE MzIxMUVEODRBODI4MDlDNEY5QUUwMi9mZGhleERsNGI5UXVDX2UzSVRkMlh3WFE2 Zm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZkaGV4RGw0YjlRdUNfZTNJVGQyWHdYUTZmby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QjkyRC82QkUyQ0FEMEJEMzIxMUVEODRBODI4MDlDNEY5QUUwMi9mZGhleERsNGI5 UXVDX2UzSVRkMlh3WFE2Zm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAzZfCuDIXTOddNHWH/O4ogYwyygSb2k5ews0nxKB06WtXCYHAv8x76 DCPuLWWhhtejT0TDeMpf9TMaZpwlm+E7Wok3pUYSLLMRak3J9ns0Le+Zzat12d3j tAy51YjZkDULxe4ocC97J0nUA37dbwgWJCnNIw5VgZNCxjMbioxKMXVxKRt0MxWK oda4CE72MbuWCkPXfsx4JGRtkdd8PAttfILMYQIZd38N/+bsiclBUAd7DMRrVx2S GPk6rYLs5+XXV+cgmsp4W6b3n+xEOLi1lKfHlHbl/Q3hLBGEZt82coQ1C3lSiAzA 9aY9/Fs9W1gX4WfYOGYFNBe1vtvEZkcf -----END CERTIFICATE-----Generated at Sat May 31 16:28:41 2025 by rpki-client