$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF145/278073CE36EA11EEAE10AA45C4F9AE02/cNpFkZHpBoa9sKxHq9owqcPhdPo.mft File: cNpFkZHpBoa9sKxHq9owqcPhdPo.mft (raw, json) Hash identifier: edPMEb6ZKwErElnrcaFZ5bsNIjrDgYgX7IyLR/frcIo= Subject key identifier: 63:1B:3E:D1:F3:6C:0C:D3:48:16:00:5C:4E:9D:CE:7A:6A:CF:D1:54 Authority key identifier: 70:DA:45:91:91:E9:06:86:BD:B0:AC:47:AB:DA:30:A9:C3:E1:74:FA Certificate issuer: /CN=A91AF145/serialNumber=70DA459191E90686BDB0AC47ABDA30A9C3E174FA Certificate serial: 0163 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNpFkZHpBoa9sKxHq9owqcPhdPo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF145/278073CE36EA11EEAE10AA45C4F9AE02/cNpFkZHpBoa9sKxHq9owqcPhdPo.mft Manifest number: 015D Signing time: Sat 31 May 2025 03:48:41 +0000 Manifest this update: Sat 31 May 2025 03:48:41 +0000 Manifest next update: Sat 07 Jun 2025 03:48:41 +0000 Files and hashes: 1: cNpFkZHpBoa9sKxHq9owqcPhdPo.crl (hash: gAyHYtH1UCjQm78plHuBrZnc06NLH/cvjESJgkLzsnY=) 2: 43E9CB90DFF511EF8E4E3982C4F9AE02.roa (hash: ed3VnRz1sRChg/cFQmGXFi6QslMtcDU5X1xXHCQiW6k=) 3: 971B23D236EA11EE802E9246C4F9AE02.roa (hash: 4S5HT3Umab8tv1JR8LX9cjuccjEduaZGTp680hfQmts=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF145/278073CE36EA11EEAE10AA45C4F9AE02/cNpFkZHpBoa9sKxHq9owqcPhdPo.crl rsync://rpki.apnic.net/member_repository/A91AF145/278073CE36EA11EEAE10AA45C4F9AE02/cNpFkZHpBoa9sKxHq9owqcPhdPo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNpFkZHpBoa9sKxHq9owqcPhdPo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 03:48:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 355 (0x163) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF145, serialNumber=70DA459191E90686BDB0AC47ABDA30A9C3E174FA Validity Not Before: May 31 03:48:41 2025 GMT Not After : Jun 7 03:48:41 2025 GMT Subject: CN=683a7c19-c2be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:0d:97:55:53:63:d2:b8:10:37:8e:81:11:f7: 99:7d:f5:3d:5c:48:7a:72:ad:13:fa:38:31:b0:3d: d3:58:77:74:67:32:b0:b4:57:2f:51:1d:19:11:2e: ab:8d:78:34:95:f2:7d:06:8f:e3:01:8f:2a:73:1e: f2:3a:5e:e8:01:ae:86:4c:2f:db:68:db:e2:af:1d: 90:dd:da:f9:0f:49:2c:00:65:22:75:3f:4d:81:6c: 00:fb:1f:ec:5c:d0:95:d9:09:0b:15:24:47:34:4c: 15:ae:61:c0:61:8d:67:cb:8d:fe:8a:1c:39:10:17: bc:dd:ce:1e:01:c9:5b:f0:ea:13:f2:cd:2d:da:1b: 8b:c4:9c:7d:4f:cd:21:a8:c0:55:c5:b9:1c:6b:b6: d5:6f:86:ae:ec:dd:cd:5d:01:4d:66:95:03:9b:b3: 33:d9:6b:3f:9f:1c:c4:45:26:f1:da:6e:5b:1d:c6: dd:e0:a1:94:f5:d8:57:0c:ba:88:80:ea:d3:b6:77: 1b:5d:1b:30:6e:fe:be:b2:b8:40:db:f6:15:fb:37: 8d:c9:d6:89:dc:c3:03:7b:46:3a:8e:4c:44:b1:5c: 37:0d:54:e4:c9:e2:a8:07:c6:b1:08:1e:0d:a2:31: c4:82:90:fd:f3:ff:52:5c:75:23:e1:45:09:4d:3e: 9b:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:1B:3E:D1:F3:6C:0C:D3:48:16:00:5C:4E:9D:CE:7A:6A:CF:D1:54 X509v3 Authority Key Identifier: keyid:70:DA:45:91:91:E9:06:86:BD:B0:AC:47:AB:DA:30:A9:C3:E1:74:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF145/278073CE36EA11EEAE10AA45C4F9AE02/cNpFkZHpBoa9sKxHq9owqcPhdPo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNpFkZHpBoa9sKxHq9owqcPhdPo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF145/278073CE36EA11EEAE10AA45C4F9AE02/cNpFkZHpBoa9sKxHq9owqcPhdPo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:d4:14:2e:68:88:7e:f9:e2:90:c8:6d:57:bc:64:98:d3:27: 80:d5:e2:f2:d0:25:f0:6a:17:f6:81:11:8b:be:72:c7:40:76: 59:5c:e7:bd:0a:b1:42:e5:b6:0d:c4:c1:5e:e7:44:27:07:32: f3:f8:e9:98:d0:4b:d8:84:41:b1:c1:5f:c4:92:87:ed:bc:95: 37:a0:96:97:bc:bc:63:8c:58:31:22:76:25:5f:4d:62:67:0c: cd:1c:b4:eb:ad:ff:c8:2f:e4:b2:75:c2:31:d8:8f:81:af:af: a2:a5:df:a5:dd:ec:29:4a:79:c6:33:24:19:7d:22:db:d2:46: f7:22:d3:32:ec:aa:66:e0:56:87:04:73:95:86:85:11:d4:13: 79:92:b6:b8:29:86:79:3e:9a:a6:bb:f3:f4:2c:3b:64:30:16: ae:ae:67:dd:4c:fb:d6:85:a8:e8:47:a1:b5:03:a3:e0:0c:29: e0:84:c7:f0:4e:c5:c4:48:a8:b7:97:3e:0c:27:0d:12:15:b8: 83:98:f0:4f:c9:81:57:98:34:aa:67:d8:b7:f6:3e:25:3c:d9: 23:79:b2:84:64:ed:d1:fe:94:76:df:33:dc:37:84:d8:f9:93: da:9d:72:db:0b:cd:2f:4b:92:fd:2d:63:8e:2c:c7:d0:35:cd: b6:c9:e4:d6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUYxNDUxMTAvBgNVBAUTKDcwREE0NTkxOTFFOTA2ODZCREIwQUM0N0FCREEzMEE5 QzNFMTc0RkEwHhcNMjUwNTMxMDM0ODQxWhcNMjUwNjA3MDM0ODQxWjAYMRYwFAYD VQQDEw02ODNhN2MxOS1jMmJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5A2XVVNj0rgQN46BEfeZffU9XEh6cq0T+jgxsD3TWHd0ZzKwtFcvUR0ZES6r jXg0lfJ9Bo/jAY8qcx7yOl7oAa6GTC/baNvirx2Q3dr5D0ksAGUidT9NgWwA+x/s XNCV2QkLFSRHNEwVrmHAYY1ny43+ihw5EBe83c4eAclb8OoT8s0t2huLxJx9T80h qMBVxbkca7bVb4au7N3NXQFNZpUDm7Mz2Ws/nxzERSbx2m5bHcbd4KGU9dhXDLqI gOrTtncbXRswbv6+srhA2/YV+zeNydaJ3MMDe0Y6jkxEsVw3DVTkyeKoB8axCB4N ojHEgpD98/9SXHUj4UUJTT6bswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGMbPtHz bAzTSBYAXE6dznpqz9FUMB8GA1UdIwQYMBaAFHDaRZGR6QaGvbCsR6vaMKnD4XT6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjE0NS8yNzgwNzNDRTM2 RUExMUVFQUUxMEFBNDVDNEY5QUUwMi9jTnBGa1pIcEJvYTlzS3hIcTlvd3FjUGhk UG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NOcEZrWkhwQm9hOXNLeEhxOW93cWNQaGRQby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RjE0NS8yNzgwNzNDRTM2RUExMUVFQUUxMEFBNDVDNEY5QUUwMi9jTnBGa1pIcEJv YTlzS3hIcTlvd3FjUGhkUG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAx1BQuaIh++eKQyG1XvGSY0yeA1eLy0CXwahf2gRGLvnLHQHZZXOe9 CrFC5bYNxMFe50QnBzLz+OmY0EvYhEGxwV/EkoftvJU3oJaXvLxjjFgxInYlX01i ZwzNHLTrrf/IL+SydcIx2I+Br6+ipd+l3ewpSnnGMyQZfSLb0kb3ItMy7Kpm4FaH BHOVhoUR1BN5kra4KYZ5Ppqmu/P0LDtkMBaurmfdTPvWhajoR6G1A6PgDCnghMfw TsXESKi3lz4MJw0SFbiDmPBPyYFXmDSqZ9i39j4lPNkjebKEZO3R/pR23zPcN4TY +ZPanXLbC80vS5L9LWOOLMfQNc22yeTW -----END CERTIFICATE-----Generated at Sat May 31 15:36:54 2025 by rpki-client