$ rpki-client -vvf rpki.apnic.net/member_repository/A91ACF30/3B912F12F18211EAA537970AC4F9AE02/0yZ6-fuWkInDwSr-v9D96b2GdYE.mft File: 0yZ6-fuWkInDwSr-v9D96b2GdYE.mft (raw, json) Hash identifier: jpmmAvSy7/sPvZRIGkg6ReRmNauB/pAw5e+h2I/geus= Subject key identifier: D1:02:49:25:83:D1:5E:9A:23:A6:39:6A:A0:3B:72:82:7A:6E:6C:B2 Authority key identifier: D3:26:7A:F9:FB:96:90:89:C3:C1:2A:FE:BF:D0:FD:E9:BD:86:75:81 Certificate issuer: /CN=A91ACF30/serialNumber=D3267AF9FB969089C3C12AFEBFD0FDE9BD867581 Certificate serial: 07F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0yZ6-fuWkInDwSr-v9D96b2GdYE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ACF30/3B912F12F18211EAA537970AC4F9AE02/0yZ6-fuWkInDwSr-v9D96b2GdYE.mft Manifest number: 07E4 Signing time: Fri 30 May 2025 21:16:42 +0000 Manifest this update: Fri 30 May 2025 21:16:41 +0000 Manifest next update: Fri 06 Jun 2025 21:16:41 +0000 Files and hashes: 1: 0yZ6-fuWkInDwSr-v9D96b2GdYE.crl (hash: YPXEVN3Qeo/Qw7MjNmfUCXbINcsRDE7VljiMkRn0XbE=) 2: 4EEEF95AEA4311EE86C1DD73C4F9AE02.roa (hash: gRPrkPot7cS4Md/lWHKHiYe/Z/9NwksWhg6tBROLm8I=) 3: 40965650EA4311EEA09F786BC4F9AE02.roa (hash: UOhw1kq9d+cXhpmk5TWMuSERdIf0YRt+xgjoXpvoadw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ACF30/3B912F12F18211EAA537970AC4F9AE02/0yZ6-fuWkInDwSr-v9D96b2GdYE.crl rsync://rpki.apnic.net/member_repository/A91ACF30/3B912F12F18211EAA537970AC4F9AE02/0yZ6-fuWkInDwSr-v9D96b2GdYE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0yZ6-fuWkInDwSr-v9D96b2GdYE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 21:16:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2040 (0x7f8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ACF30, serialNumber=D3267AF9FB969089C3C12AFEBFD0FDE9BD867581 Validity Not Before: May 30 21:16:41 2025 GMT Not After : Jun 6 21:16:41 2025 GMT Subject: CN=683a2039-dfb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:d8:e7:f8:d9:9a:37:25:8a:24:7f:fa:47:ec: 2e:da:70:55:f0:db:3f:31:f5:f8:3e:37:fc:2b:cc: c7:62:40:4a:f0:c5:d2:1e:6f:2d:51:1f:31:9a:15: d9:a0:e7:bb:80:01:f8:74:a5:1d:5f:3d:b6:7a:be: 29:5d:b3:f2:4e:9d:97:55:8a:bc:b3:ff:2f:6e:0c: 51:7a:39:76:40:58:e4:e1:3e:fc:90:ad:a2:1a:02: 00:0d:6d:0e:e9:61:1e:31:81:34:1b:d1:be:b8:c8: 9d:16:09:55:0d:32:a6:6e:0e:aa:cb:b2:30:c3:58: 68:b5:b3:a2:f3:a2:3d:32:aa:9a:c6:76:d9:1a:de: fc:60:fd:6e:46:48:a3:14:4e:96:c2:84:4f:04:d7: 20:5a:17:8e:a0:e9:85:8f:21:cc:e8:fd:d5:b6:bd: 65:b4:40:e1:36:d9:c3:cf:29:0f:1b:62:f6:42:88: 8e:d6:6b:76:26:6e:87:55:6f:9a:54:67:1d:12:ed: d9:fb:ef:a2:cf:e9:40:5f:b2:1e:bf:aa:ea:85:e3: 8e:df:97:24:a0:68:79:82:f7:67:44:a5:4f:89:a1: e4:aa:f4:a4:bf:92:fb:41:54:e0:da:af:94:73:ae: d3:f6:8a:a6:49:2c:d0:3f:e7:6e:05:59:d7:90:ca: 51:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:02:49:25:83:D1:5E:9A:23:A6:39:6A:A0:3B:72:82:7A:6E:6C:B2 X509v3 Authority Key Identifier: keyid:D3:26:7A:F9:FB:96:90:89:C3:C1:2A:FE:BF:D0:FD:E9:BD:86:75:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ACF30/3B912F12F18211EAA537970AC4F9AE02/0yZ6-fuWkInDwSr-v9D96b2GdYE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0yZ6-fuWkInDwSr-v9D96b2GdYE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ACF30/3B912F12F18211EAA537970AC4F9AE02/0yZ6-fuWkInDwSr-v9D96b2GdYE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:c8:d4:0c:8b:ac:81:44:f1:4a:77:47:ee:ed:98:fe:b0:e5: 1a:25:8a:ac:8c:00:78:ea:50:ab:8a:fd:5e:b9:6b:65:24:90: de:2a:30:0f:e5:75:77:90:a0:f8:be:f2:d2:fb:7b:15:90:8e: 2a:d2:3b:b4:3b:47:86:51:e7:6e:fa:00:e8:c6:51:a1:b1:08: c1:aa:64:29:19:70:c0:89:07:ac:b2:c4:5b:75:3c:c5:64:56: d1:48:21:1c:42:4e:3b:ba:11:89:ba:46:92:c8:15:41:bd:b8: e7:d9:6b:4d:f2:ae:d2:ed:bd:dc:25:d4:1e:7e:50:42:be:47: a9:1a:7c:0f:22:58:fc:87:2d:24:05:e7:24:15:49:5e:a8:f5: a5:f4:02:07:14:85:43:ba:50:69:7e:0d:b3:ef:bd:03:55:03: f1:0f:2c:52:0e:5f:4f:d5:71:d2:71:7e:c3:b8:3c:b7:f7:0d: b6:c7:03:94:89:7d:67:67:04:05:62:45:ac:e8:86:3f:72:b3: 85:14:12:22:0d:b3:85:5e:7d:1f:9c:bf:fd:8a:b2:2d:ed:24: cd:67:af:33:cc:c6:03:ab:7a:e8:ba:16:8b:9a:5f:00:4c:aa: 91:5a:06:9c:e5:63:93:7b:ec:c9:e0:eb:12:b1:4b:12:03:26: 4c:27:cb:0a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB/gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUNGMzAxMTAvBgNVBAUTKEQzMjY3QUY5RkI5NjkwODlDM0MxMkFGRUJGRDBGREU5 QkQ4Njc1ODEwHhcNMjUwNTMwMjExNjQxWhcNMjUwNjA2MjExNjQxWjAYMRYwFAYD VQQDEw02ODNhMjAzOS1kZmI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzNjn+NmaNyWKJH/6R+wu2nBV8Ns/MfX4Pjf8K8zHYkBK8MXSHm8tUR8xmhXZ oOe7gAH4dKUdXz22er4pXbPyTp2XVYq8s/8vbgxRejl2QFjk4T78kK2iGgIADW0O 6WEeMYE0G9G+uMidFglVDTKmbg6qy7Iww1hotbOi86I9MqqaxnbZGt78YP1uRkij FE6WwoRPBNcgWheOoOmFjyHM6P3Vtr1ltEDhNtnDzykPG2L2QoiO1mt2Jm6HVW+a VGcdEu3Z+++iz+lAX7Iev6rqheOO35ckoGh5gvdnRKVPiaHkqvSkv5L7QVTg2q+U c67T9oqmSSzQP+duBVnXkMpREwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNECSSWD 0V6aI6Y5aqA7coJ6bmyyMB8GA1UdIwQYMBaAFNMmevn7lpCJw8Eq/r/Q/em9hnWB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQ0YzMC8zQjkxMkYxMkYx ODIxMUVBQTUzNzk3MEFDNEY5QUUwMi8weVo2LWZ1V2tJbkR3U3ItdjlEOTZiMkdk WUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzB5WjYtZnVXa0luRHdTci12OUQ5NmIyR2RZRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Q0YzMC8zQjkxMkYxMkYxODIxMUVBQTUzNzk3MEFDNEY5QUUwMi8weVo2LWZ1V2tJ bkR3U3ItdjlEOTZiMkdkWUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBFyNQMi6yBRPFKd0fu7Zj+sOUaJYqsjAB46lCriv1euWtlJJDeKjAP 5XV3kKD4vvLS+3sVkI4q0ju0O0eGUedu+gDoxlGhsQjBqmQpGXDAiQesssRbdTzF ZFbRSCEcQk47uhGJukaSyBVBvbjn2WtN8q7S7b3cJdQeflBCvkepGnwPIlj8hy0k BeckFUleqPWl9AIHFIVDulBpfg2z770DVQPxDyxSDl9P1XHScX7DuDy39w22xwOU iX1nZwQFYkWs6IY/crOFFBIiDbOFXn0fnL/9irIt7STNZ68zzMYDq3rouhaLml8A TKqRWgac5WOTe+zJ4OsSsUsSAyZMJ8sK -----END CERTIFICATE-----Generated at Sat May 31 16:36:50 2025 by rpki-client