$ rpki-client -vvf rpki.apnic.net/member_repository/A91AD92A/3CE577DA5B5411EE8086F432C4F9AE02/N5uRyTDgoq-LgirZqVm6313dYJ8.mft File: N5uRyTDgoq-LgirZqVm6313dYJ8.mft (raw, json) Hash identifier: DgmnMbJZ7vpvtemXhgs0vg1kb3zATtPEqP+JdBhIm+c= Subject key identifier: 82:50:7D:7F:60:E2:3C:40:10:75:56:74:0D:DB:C8:C5:FA:DF:6C:C2 Authority key identifier: 37:9B:91:C9:30:E0:A2:AF:8B:82:2A:D9:A9:59:BA:DF:5D:DD:60:9F Certificate issuer: /CN=A91AD92A/serialNumber=379B91C930E0A2AF8B822AD9A959BADF5DDD609F Certificate serial: 013B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N5uRyTDgoq-LgirZqVm6313dYJ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AD92A/3CE577DA5B5411EE8086F432C4F9AE02/N5uRyTDgoq-LgirZqVm6313dYJ8.mft Manifest number: 0139 Signing time: Sat 31 May 2025 04:03:24 +0000 Manifest this update: Sat 31 May 2025 04:03:24 +0000 Manifest next update: Sat 07 Jun 2025 04:03:24 +0000 Files and hashes: 1: N5uRyTDgoq-LgirZqVm6313dYJ8.crl (hash: XZoPPYqMvYjFjtI4EN6xCf/fF+c7xKijv5ybQcpAvJ8=) 2: 796CD35A5B5511EE8E4D2A39C4F9AE02.roa (hash: OeBchGabyfPVMg1/t31bD5FDzmzMHYndv4rCKHiX9jw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AD92A/3CE577DA5B5411EE8086F432C4F9AE02/N5uRyTDgoq-LgirZqVm6313dYJ8.crl rsync://rpki.apnic.net/member_repository/A91AD92A/3CE577DA5B5411EE8086F432C4F9AE02/N5uRyTDgoq-LgirZqVm6313dYJ8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N5uRyTDgoq-LgirZqVm6313dYJ8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 04:03:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 315 (0x13b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AD92A, serialNumber=379B91C930E0A2AF8B822AD9A959BADF5DDD609F Validity Not Before: May 31 04:03:24 2025 GMT Not After : Jun 7 04:03:24 2025 GMT Subject: CN=683a7f8c-a41e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:ae:db:27:e3:99:2e:97:83:1a:00:07:65:ca: a8:9d:f9:93:d2:cb:02:85:53:5b:47:64:8e:0e:9f: 55:03:a5:54:b0:03:ac:ae:08:49:a7:76:36:2f:92: 47:ee:e7:43:2b:c4:d0:80:f6:a9:23:78:89:6d:2b: 12:10:53:4d:72:39:64:2d:29:69:4b:f4:89:95:f7: 88:1f:4a:6e:0a:c6:5c:a2:db:03:e9:ea:80:36:0a: 04:8b:aa:80:f1:c9:dd:9f:d2:df:7c:3c:c3:46:0b: b6:2a:c4:47:8f:d2:08:d7:99:ea:84:85:3a:10:ce: 62:6a:34:6e:2d:0b:b1:d3:68:d6:b9:0f:98:7b:cb: 0d:6d:c2:03:cb:73:53:47:da:87:25:54:1e:f8:d3: f7:39:dc:0f:0b:96:ba:3b:1f:49:e3:83:a4:04:44: 74:ac:26:dc:50:f7:e8:1c:c2:60:90:8e:f3:3a:4f: d3:e2:f3:ce:b4:d3:8a:f2:1d:19:2b:5b:4c:c3:df: 70:da:44:24:64:f5:18:87:fd:d0:d6:07:05:3b:47: 0e:c3:d5:3a:ff:ad:5f:69:d7:d1:01:56:0f:ad:74: 2a:d9:cb:f7:8f:29:5b:32:4b:0e:d9:3e:05:16:ca: 41:54:03:5d:1f:48:3f:c7:a7:42:41:96:aa:e3:fd: 37:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:50:7D:7F:60:E2:3C:40:10:75:56:74:0D:DB:C8:C5:FA:DF:6C:C2 X509v3 Authority Key Identifier: keyid:37:9B:91:C9:30:E0:A2:AF:8B:82:2A:D9:A9:59:BA:DF:5D:DD:60:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AD92A/3CE577DA5B5411EE8086F432C4F9AE02/N5uRyTDgoq-LgirZqVm6313dYJ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N5uRyTDgoq-LgirZqVm6313dYJ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AD92A/3CE577DA5B5411EE8086F432C4F9AE02/N5uRyTDgoq-LgirZqVm6313dYJ8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:04:f8:fb:ac:7e:89:63:ad:b8:b5:a5:61:8c:f3:35:26:cd: fe:94:6b:ca:2a:37:d7:89:7f:24:1a:cb:84:ce:5a:0d:5f:71: 47:7d:4b:8d:99:20:e8:ef:18:65:e7:cb:d1:61:b4:d9:37:78: 2a:68:f0:f2:f6:d8:28:70:ea:b5:ee:8e:19:78:a7:dd:d9:09: 16:85:f9:c1:be:06:7a:4d:37:88:80:c3:cf:42:c0:24:09:ec: 11:76:ec:d4:74:81:5b:45:bd:64:80:9e:58:6b:ae:76:88:19: f6:85:12:41:5c:2b:a7:7c:8f:ea:65:68:85:bf:5f:5c:a9:ec: 79:d8:df:e7:2a:62:7c:a6:29:5b:33:f5:77:96:10:fb:83:d5: 18:ed:22:ff:76:54:5e:b5:41:12:11:79:6e:65:a4:f5:1f:b8: c2:52:f5:ff:ee:ea:20:a2:85:8c:da:c3:ef:a4:a4:30:08:93: 13:ee:2a:53:bf:82:16:38:bb:23:7b:01:30:99:be:f4:1b:73: fd:f4:e1:61:d8:1b:c1:70:6a:c9:5a:56:46:e0:0d:78:e9:37: 02:6b:83:e7:29:ef:cb:95:15:34:8c:50:3a:d2:41:e5:a0:29: 97:30:42:96:49:08:14:a9:f1:05:0f:4e:3d:1e:29:b7:4f:fe: 22:ce:23:88 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUQ5MkExMTAvBgNVBAUTKDM3OUI5MUM5MzBFMEEyQUY4QjgyMkFEOUE5NTlCQURG NURERDYwOUYwHhcNMjUwNTMxMDQwMzI0WhcNMjUwNjA3MDQwMzI0WjAYMRYwFAYD VQQDEw02ODNhN2Y4Yy1hNDFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoq7bJ+OZLpeDGgAHZcqonfmT0ssChVNbR2SODp9VA6VUsAOsrghJp3Y2L5JH 7udDK8TQgPapI3iJbSsSEFNNcjlkLSlpS/SJlfeIH0puCsZcotsD6eqANgoEi6qA 8cndn9LffDzDRgu2KsRHj9II15nqhIU6EM5iajRuLQux02jWuQ+Ye8sNbcIDy3NT R9qHJVQe+NP3OdwPC5a6Ox9J44OkBER0rCbcUPfoHMJgkI7zOk/T4vPOtNOK8h0Z K1tMw99w2kQkZPUYh/3Q1gcFO0cOw9U6/61fadfRAVYPrXQq2cv3jylbMksO2T4F FspBVANdH0g/x6dCQZaq4/03KwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIJQfX9g 4jxAEHVWdA3byMX632zCMB8GA1UdIwQYMBaAFDebkckw4KKvi4Iq2alZut9d3WCf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRDkyQS8zQ0U1NzdEQTVC NTQxMUVFODA4NkY0MzJDNEY5QUUwMi9ONXVSeVREZ29xLUxnaXJacVZtNjMxM2RZ SjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL041dVJ5VERnb3EtTGdpclpxVm02MzEzZFlKOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RDkyQS8zQ0U1NzdEQTVCNTQxMUVFODA4NkY0MzJDNEY5QUUwMi9ONXVSeVREZ29x LUxnaXJacVZtNjMxM2RZSjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAiBPj7rH6JY624taVhjPM1Js3+lGvKKjfXiX8kGsuEzloNX3FHfUuN mSDo7xhl58vRYbTZN3gqaPDy9tgocOq17o4ZeKfd2QkWhfnBvgZ6TTeIgMPPQsAk CewRduzUdIFbRb1kgJ5Ya652iBn2hRJBXCunfI/qZWiFv19cqex52N/nKmJ8pilb M/V3lhD7g9UY7SL/dlRetUESEXluZaT1H7jCUvX/7uogooWM2sPvpKQwCJMT7ipT v4IWOLsjewEwmb70G3P99OFh2BvBcGrJWlZG4A146TcCa4PnKe/LlRU0jFA60kHl oCmXMEKWSQgUqfEFD049Him3T/4iziOI -----END CERTIFICATE-----Generated at Sat May 31 17:18:52 2025 by rpki-client