$ rpki-client -vvf rpki.apnic.net/member_repository/A91AEF45/5D8B9B829F2A11ECA7CFAD0AC4F9AE02/rKpuJqXy3KoUzfyezI6c9oKaQCE.mft File: rKpuJqXy3KoUzfyezI6c9oKaQCE.mft (raw, json) Hash identifier: G+yqk9WUs8GIsRs3L0dAYt3cmILYCdjHjAuZO+DebwA= Subject key identifier: EE:17:30:0B:0A:9A:8C:AA:07:42:DB:1C:0A:36:5D:0A:44:B5:D6:14 Authority key identifier: AC:AA:6E:26:A5:F2:DC:AA:14:CD:FC:9E:CC:8E:9C:F6:82:9A:40:21 Certificate issuer: /CN=A91AEF45/serialNumber=ACAA6E26A5F2DCAA14CDFC9ECC8E9CF6829A4021 Certificate serial: 0393 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rKpuJqXy3KoUzfyezI6c9oKaQCE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AEF45/5D8B9B829F2A11ECA7CFAD0AC4F9AE02/rKpuJqXy3KoUzfyezI6c9oKaQCE.mft Manifest number: 038F Signing time: Sat 31 May 2025 01:01:00 +0000 Manifest this update: Sat 31 May 2025 01:00:59 +0000 Manifest next update: Sat 07 Jun 2025 01:00:59 +0000 Files and hashes: 1: rKpuJqXy3KoUzfyezI6c9oKaQCE.crl (hash: 7QCeX0thwD2ejCOGAQnlVjOCAwVa5dzxOkP4eWEYPYs=) 2: 1AE323249F2D11EC897FD30CC4F9AE02.roa (hash: KeGUlxiblyObJWylXKCmQlAzDIkOWbFTSQRBaia1TDI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AEF45/5D8B9B829F2A11ECA7CFAD0AC4F9AE02/rKpuJqXy3KoUzfyezI6c9oKaQCE.crl rsync://rpki.apnic.net/member_repository/A91AEF45/5D8B9B829F2A11ECA7CFAD0AC4F9AE02/rKpuJqXy3KoUzfyezI6c9oKaQCE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rKpuJqXy3KoUzfyezI6c9oKaQCE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 01:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 915 (0x393) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AEF45, serialNumber=ACAA6E26A5F2DCAA14CDFC9ECC8E9CF6829A4021 Validity Not Before: May 31 01:00:59 2025 GMT Not After : Jun 7 01:00:59 2025 GMT Subject: CN=683a54cc-5bb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:72:7c:eb:89:62:2c:9b:06:7b:6f:63:b4:4f: c0:27:f4:56:46:bc:5e:56:0c:d2:30:b6:b9:f9:28: b8:ea:8e:f4:47:cd:59:bb:b5:36:8d:54:a3:78:d3: 16:67:6c:cb:3b:44:5f:89:24:c4:9d:b7:d6:d1:99: ce:ed:34:a4:3e:38:f0:88:ed:35:5a:7e:43:88:0b: 45:4b:72:94:e0:04:16:74:c0:96:24:84:0d:8b:c2: 24:cf:01:86:58:bf:d2:25:18:21:8b:5e:f4:83:59: ba:b1:6c:73:51:3e:be:9d:10:f6:f1:93:77:a7:51: 5b:4e:4f:b9:c1:14:16:0b:15:de:e4:e0:32:c7:0f: a9:e2:dd:94:a0:f2:57:a3:76:5e:49:f6:f8:61:aa: 15:3c:05:12:55:28:46:3c:78:74:81:c5:e0:9d:7f: aa:4c:de:c2:8d:7a:76:22:ae:ba:2a:3b:7b:20:c2: c0:92:7d:b3:eb:23:36:33:b7:17:d0:5a:a1:4d:26: 21:82:9a:4a:ea:19:74:ad:d0:18:86:44:ba:e2:1e: 79:fd:98:af:37:55:ca:d1:73:93:83:43:be:30:d8: 32:cd:ec:1f:01:66:53:74:96:20:5e:92:40:f5:09: e2:14:a4:c1:9e:2a:f0:8a:c8:67:41:d7:23:6f:3f: d5:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:17:30:0B:0A:9A:8C:AA:07:42:DB:1C:0A:36:5D:0A:44:B5:D6:14 X509v3 Authority Key Identifier: keyid:AC:AA:6E:26:A5:F2:DC:AA:14:CD:FC:9E:CC:8E:9C:F6:82:9A:40:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AEF45/5D8B9B829F2A11ECA7CFAD0AC4F9AE02/rKpuJqXy3KoUzfyezI6c9oKaQCE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rKpuJqXy3KoUzfyezI6c9oKaQCE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AEF45/5D8B9B829F2A11ECA7CFAD0AC4F9AE02/rKpuJqXy3KoUzfyezI6c9oKaQCE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:93:7a:c3:aa:c6:1f:7d:46:06:a4:1f:a7:b2:47:08:2c:9b: 97:45:5a:40:3f:90:9d:79:e8:49:2e:bc:c5:e5:95:8a:e4:da: 11:19:76:de:1f:98:84:1c:d2:0f:8a:97:f7:5e:81:1e:ff:e4: 99:ae:c4:08:0d:77:99:48:00:54:c2:b0:02:3f:01:66:2e:d7: f9:83:31:5c:ba:0c:ee:d7:b6:9a:bd:57:18:a4:2e:02:7d:f3: 4f:cd:a4:c1:93:61:b2:73:ea:e0:6e:71:88:af:69:9a:37:25: 46:e0:61:57:42:c1:f2:f9:f5:e3:81:31:bd:b4:2b:d3:56:6d: 32:1d:00:93:50:39:e2:3e:ce:d8:ff:a0:25:37:97:e3:4e:e3: 11:70:c5:77:c2:9f:72:d5:57:49:3f:5e:ec:9a:f0:17:c8:18: f5:12:bd:5a:69:f2:6b:57:5d:5b:eb:90:b6:f8:d7:88:a6:9a: ea:8b:ad:95:dc:89:36:4f:0d:f9:70:b9:d4:c5:1b:03:63:71: e5:f8:99:c4:85:78:1b:c9:02:6b:5a:f8:08:0c:34:bc:98:89: 30:ec:73:72:31:cc:bb:4f:b2:92:8f:76:bb:c4:4c:a9:e0:c0: 3d:31:77:a9:f4:80:da:29:e5:4a:35:c4:c8:a7:fc:03:c5:25: 8a:d1:71:3d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA5MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUVGNDUxMTAvBgNVBAUTKEFDQUE2RTI2QTVGMkRDQUExNENERkM5RUNDOEU5Q0Y2 ODI5QTQwMjEwHhcNMjUwNTMxMDEwMDU5WhcNMjUwNjA3MDEwMDU5WjAYMRYwFAYD VQQDEw02ODNhNTRjYy01YmI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn3J864liLJsGe29jtE/AJ/RWRrxeVgzSMLa5+Si46o70R81Zu7U2jVSjeNMW Z2zLO0RfiSTEnbfW0ZnO7TSkPjjwiO01Wn5DiAtFS3KU4AQWdMCWJIQNi8IkzwGG WL/SJRghi170g1m6sWxzUT6+nRD28ZN3p1FbTk+5wRQWCxXe5OAyxw+p4t2UoPJX o3ZeSfb4YaoVPAUSVShGPHh0gcXgnX+qTN7CjXp2Iq66Kjt7IMLAkn2z6yM2M7cX 0FqhTSYhgppK6hl0rdAYhkS64h55/ZivN1XK0XOTg0O+MNgyzewfAWZTdJYgXpJA 9QniFKTBnirwishnQdcjbz/VPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO4XMAsK moyqB0LbHAo2XQpEtdYUMB8GA1UdIwQYMBaAFKyqbial8tyqFM38nsyOnPaCmkAh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRUY0NS81RDhCOUI4MjlG MkExMUVDQTdDRkFEMEFDNEY5QUUwMi9yS3B1SnFYeTNLb1V6Znllekk2YzlvS2FR Q0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JLcHVKcVh5M0tvVXpmeWV6STZjOW9LYVFDRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RUY0NS81RDhCOUI4MjlGMkExMUVDQTdDRkFEMEFDNEY5QUUwMi9yS3B1SnFYeTNL b1V6Znllekk2YzlvS2FRQ0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCik3rDqsYffUYGpB+nskcILJuXRVpAP5CdeehJLrzF5ZWK5NoRGXbe H5iEHNIPipf3XoEe/+SZrsQIDXeZSABUwrACPwFmLtf5gzFcugzu17aavVcYpC4C ffNPzaTBk2Gyc+rgbnGIr2maNyVG4GFXQsHy+fXjgTG9tCvTVm0yHQCTUDniPs7Y /6AlN5fjTuMRcMV3wp9y1VdJP17smvAXyBj1Er1aafJrV11b65C2+NeIpprqi62V 3Ik2Tw35cLnUxRsDY3Hl+JnEhXgbyQJrWvgIDDS8mIkw7HNyMcy7T7KSj3a7xEyp 4MA9MXep9IDaKeVKNcTIp/wDxSWK0XE9 -----END CERTIFICATE-----Generated at Sat May 31 17:26:21 2025 by rpki-client