$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADDD5/8B0D0FF2E3F811EB9E08DB14C4F9AE02/-xEsrVYxm_qsoasoznvX9MsmjOk.mft File: -xEsrVYxm_qsoasoznvX9MsmjOk.mft (raw, json) Hash identifier: GLPQy/2ZR7yDeyldn/72XdsE8vNsTn6PCfjnbBxlMY8= Subject key identifier: 13:AA:E2:4F:50:3E:12:50:E4:F8:CE:F2:8D:34:C7:9A:AB:DF:C5:AC Authority key identifier: FB:11:2C:AD:56:31:9B:FA:AC:A1:AB:28:CE:7B:D7:F4:CB:26:8C:E9 Certificate issuer: /CN=A91ADDD5/serialNumber=FB112CAD56319BFAACA1AB28CE7BD7F4CB268CE9 Certificate serial: 057D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-xEsrVYxm_qsoasoznvX9MsmjOk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ADDD5/8B0D0FF2E3F811EB9E08DB14C4F9AE02/-xEsrVYxm_qsoasoznvX9MsmjOk.mft Manifest number: 0571 Signing time: Fri 30 May 2025 23:33:08 +0000 Manifest this update: Fri 30 May 2025 23:33:07 +0000 Manifest next update: Fri 06 Jun 2025 23:33:07 +0000 Files and hashes: 1: -xEsrVYxm_qsoasoznvX9MsmjOk.crl (hash: zwSnGgarx/TNBigVJT9U2NPqDtCPyVcCcEPe+m2kfFs=) 2: ABCDCC4EE16711EEA88FAE64C4F9AE02.roa (hash: ufMyNaGjuZX/NIDCDapqBE7K0L5whHlFadMDreUuVQI=) 3: 128DFF02E14611EE80D6C425C4F9AE02.roa (hash: iCz1ketzxjoXfDIC5MMDi5PROHAwL63mxQQHk82Ic5M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ADDD5/8B0D0FF2E3F811EB9E08DB14C4F9AE02/-xEsrVYxm_qsoasoznvX9MsmjOk.crl rsync://rpki.apnic.net/member_repository/A91ADDD5/8B0D0FF2E3F811EB9E08DB14C4F9AE02/-xEsrVYxm_qsoasoznvX9MsmjOk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-xEsrVYxm_qsoasoznvX9MsmjOk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 23:33:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1405 (0x57d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ADDD5, serialNumber=FB112CAD56319BFAACA1AB28CE7BD7F4CB268CE9 Validity Not Before: May 30 23:33:07 2025 GMT Not After : Jun 6 23:33:07 2025 GMT Subject: CN=683a4034-1578 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:24:ee:d8:80:34:98:21:04:0e:47:ad:32:4a: 0e:58:07:f7:c1:f4:20:89:00:8d:9a:f5:3b:1b:07: fa:74:03:44:0f:5f:d0:a9:4b:f4:7b:53:31:5a:d8: 75:75:94:a4:1b:15:b0:99:d8:14:14:4a:4a:44:4c: 24:01:73:ef:77:21:24:84:f5:a0:0c:0c:9a:35:5f: a9:f9:ac:07:10:0a:09:95:ef:18:95:98:36:f3:cb: bb:bb:d1:aa:a4:7e:4f:5e:d7:1c:9d:36:bf:bf:6f: cd:6f:96:a4:ba:56:6a:2e:b1:d6:da:f2:80:d6:99: c0:eb:db:68:dc:2b:a4:38:19:23:40:1d:57:38:76: a8:86:91:cc:de:b1:5a:f8:d1:1d:59:2f:30:28:32: c3:26:73:ff:4f:06:5e:bd:18:b6:bf:53:2e:9d:e4: fd:5a:d6:7f:5b:05:1e:31:82:44:3b:6a:6d:ae:ff: bd:78:52:5e:31:d8:32:b2:a8:c4:2e:62:5a:8c:d7: ef:5f:a7:7b:88:3d:7d:41:dc:29:aa:f3:6f:15:3a: f8:f0:21:a5:3d:9a:aa:bd:59:fd:3e:1b:d2:b8:26: d0:f2:28:c8:a7:1c:da:7f:3e:ba:2d:53:d9:99:50: 15:03:c1:26:6d:cc:50:96:e7:aa:b9:e5:b2:9f:89: 8e:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:AA:E2:4F:50:3E:12:50:E4:F8:CE:F2:8D:34:C7:9A:AB:DF:C5:AC X509v3 Authority Key Identifier: keyid:FB:11:2C:AD:56:31:9B:FA:AC:A1:AB:28:CE:7B:D7:F4:CB:26:8C:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ADDD5/8B0D0FF2E3F811EB9E08DB14C4F9AE02/-xEsrVYxm_qsoasoznvX9MsmjOk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-xEsrVYxm_qsoasoznvX9MsmjOk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADDD5/8B0D0FF2E3F811EB9E08DB14C4F9AE02/-xEsrVYxm_qsoasoznvX9MsmjOk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:52:7b:b5:15:22:6d:22:92:c4:96:89:79:68:c2:2d:40:15: 51:23:eb:f9:f6:06:8f:3e:fa:15:43:39:ba:cc:aa:3c:25:22: 9c:3b:9f:9d:35:d8:5e:8b:62:41:c8:d6:2f:a2:3a:02:79:60: ff:88:d1:4c:53:1b:11:da:43:e2:66:52:ce:36:c2:df:1b:a7: b8:22:15:86:0a:a1:01:dd:e1:8b:6e:f1:a4:a7:58:2e:fc:9f: ca:bb:d5:61:de:17:02:8a:3c:5e:1a:92:52:2d:96:c3:21:82: 81:b0:c4:7f:5e:06:93:d9:4d:52:90:48:8c:97:56:6e:ea:88: cd:23:f3:41:25:36:23:1a:02:48:53:b2:01:87:cc:17:a5:bf: ae:b0:ca:34:df:82:bf:d4:f8:87:3d:df:8b:d7:6b:b2:82:95: 81:7c:c4:18:5c:dc:b2:22:43:6c:37:51:7f:70:41:70:cc:7b: 08:34:9e:96:1c:39:26:a8:46:4e:95:25:a2:35:c1:b0:22:57: e4:9b:e0:ac:07:84:34:35:d2:72:64:10:47:13:d5:18:9f:ed: 1a:1b:5b:ac:68:b3:17:ed:54:60:0e:1f:66:ae:70:e2:31:74: 06:75:fc:07:54:af:72:31:2b:ee:f6:be:20:a3:03:c4:a1:9e: 28:e8:1b:0b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBX0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QURERDUxMTAvBgNVBAUTKEZCMTEyQ0FENTYzMTlCRkFBQ0ExQUIyOENFN0JEN0Y0 Q0IyNjhDRTkwHhcNMjUwNTMwMjMzMzA3WhcNMjUwNjA2MjMzMzA3WjAYMRYwFAYD VQQDEw02ODNhNDAzNC0xNTc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwiTu2IA0mCEEDketMkoOWAf3wfQgiQCNmvU7Gwf6dANED1/QqUv0e1MxWth1 dZSkGxWwmdgUFEpKREwkAXPvdyEkhPWgDAyaNV+p+awHEAoJle8YlZg288u7u9Gq pH5PXtccnTa/v2/Nb5akulZqLrHW2vKA1pnA69to3CukOBkjQB1XOHaohpHM3rFa +NEdWS8wKDLDJnP/TwZevRi2v1MuneT9WtZ/WwUeMYJEO2ptrv+9eFJeMdgysqjE LmJajNfvX6d7iD19QdwpqvNvFTr48CGlPZqqvVn9PhvSuCbQ8ijIpxzafz66LVPZ mVAVA8EmbcxQluequeWyn4mOJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBOq4k9Q PhJQ5PjO8o00x5qr38WsMB8GA1UdIwQYMBaAFPsRLK1WMZv6rKGrKM571/TLJozp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRERENS84QjBEMEZGMkUz RjgxMUVCOUUwOERCMTRDNEY5QUUwMi8teEVzclZZeG1fcXNvYXNvem52WDlNc21q T2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy14RXNyVll4bV9xc29hc296bnZYOU1zbWpPay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RERENS84QjBEMEZGMkUzRjgxMUVCOUUwOERCMTRDNEY5QUUwMi8teEVzclZZeG1f cXNvYXNvem52WDlNc21qT2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCSUnu1FSJtIpLElol5aMItQBVRI+v59gaPPvoVQzm6zKo8JSKcO5+d Ndhei2JByNYvojoCeWD/iNFMUxsR2kPiZlLONsLfG6e4IhWGCqEB3eGLbvGkp1gu /J/Ku9Vh3hcCijxeGpJSLZbDIYKBsMR/XgaT2U1SkEiMl1Zu6ojNI/NBJTYjGgJI U7IBh8wXpb+usMo034K/1PiHPd+L12uygpWBfMQYXNyyIkNsN1F/cEFwzHsINJ6W HDkmqEZOlSWiNcGwIlfkm+CsB4Q0NdJyZBBHE9UYn+0aG1usaLMX7VRgDh9mrnDi MXQGdfwHVK9yMSvu9r4gowPEoZ4o6BsL -----END CERTIFICATE-----Generated at Sat May 31 16:52:15 2025 by rpki-client