$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF9A1/D26015CAD37E11E98A196B67C4F9AE02/p_mvKNJKQySTtLK6m1Vym8CXfMg.mft File: p_mvKNJKQySTtLK6m1Vym8CXfMg.mft (raw, json) Hash identifier: 3OHaLV1KcsJQvAtarCsRHjiQsKOURKETXBdNYx5HGYI= Subject key identifier: 50:F4:DD:D2:62:99:12:48:78:E5:E0:13:B7:33:EE:FB:0A:BB:1D:F8 Authority key identifier: A7:F9:AF:28:D2:4A:43:24:93:B4:B2:BA:9B:55:72:9B:C0:97:7C:C8 Certificate issuer: /CN=A91AF9A1/serialNumber=A7F9AF28D24A432493B4B2BA9B55729BC0977CC8 Certificate serial: 0D50 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p_mvKNJKQySTtLK6m1Vym8CXfMg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF9A1/D26015CAD37E11E98A196B67C4F9AE02/p_mvKNJKQySTtLK6m1Vym8CXfMg.mft Manifest number: 0D45 Signing time: Fri 30 May 2025 18:10:30 +0000 Manifest this update: Fri 30 May 2025 18:10:30 +0000 Manifest next update: Fri 06 Jun 2025 18:10:30 +0000 Files and hashes: 1: p_mvKNJKQySTtLK6m1Vym8CXfMg.crl (hash: AhBWNc+w1myR3aJCGM87ZsN/onmLJ9Q10Rwxn2Yuk+A=) 2: 6DDABFB26CD511ED9EC9CF83C4F9AE02.roa (hash: 7fCnTjBep84sk9XgkMrT6eykdpGaMDHQzEZtybjm0AA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF9A1/D26015CAD37E11E98A196B67C4F9AE02/p_mvKNJKQySTtLK6m1Vym8CXfMg.crl rsync://rpki.apnic.net/member_repository/A91AF9A1/D26015CAD37E11E98A196B67C4F9AE02/p_mvKNJKQySTtLK6m1Vym8CXfMg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p_mvKNJKQySTtLK6m1Vym8CXfMg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 18:10:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3408 (0xd50) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF9A1, serialNumber=A7F9AF28D24A432493B4B2BA9B55729BC0977CC8 Validity Not Before: May 30 18:10:30 2025 GMT Not After : Jun 6 18:10:30 2025 GMT Subject: CN=6839f496-6950 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:ac:8c:e8:70:29:5e:a8:00:1b:3f:ec:9e:d5: 67:ad:94:72:47:a5:29:65:a6:b6:08:e0:4a:a5:08: 05:f5:30:26:a2:bb:28:53:73:39:1a:d4:e5:5a:97: e6:ce:68:9c:c7:de:1f:2d:f1:fd:e0:65:67:4f:d5: 98:4a:e4:a0:a5:1a:0f:90:67:76:29:fe:df:80:7b: 5f:e5:78:ba:d8:c2:40:5a:95:df:90:af:55:4a:b4: ef:4a:08:fb:d7:48:d5:f9:55:fa:9a:9b:b7:76:4a: ea:37:78:c2:9d:f4:1e:31:94:8d:1b:ca:f5:04:3f: 1f:9c:87:fb:23:3a:17:2f:2e:8e:01:a0:9c:22:27: 7b:8a:87:6a:61:d6:3b:6e:55:c3:4a:d5:41:94:9b: 3e:60:c6:b1:8a:a2:9d:9a:fc:3f:44:74:76:f4:eb: 3a:ed:84:69:82:a9:42:f9:cd:f6:4a:dd:47:b6:89: 20:11:7c:80:e6:b0:26:24:2b:b9:d1:d0:0d:1a:e9: 2f:57:23:b9:01:8f:15:bb:ee:d2:4a:8f:6b:43:0a: 7e:45:98:45:3a:07:b1:08:71:0a:d9:b7:01:fd:c5: ca:87:ca:4a:7a:26:1e:fb:70:94:b6:46:0e:e7:b7: 30:35:6c:54:8b:23:e8:b6:15:e3:60:b3:56:d0:70: 9a:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:F4:DD:D2:62:99:12:48:78:E5:E0:13:B7:33:EE:FB:0A:BB:1D:F8 X509v3 Authority Key Identifier: keyid:A7:F9:AF:28:D2:4A:43:24:93:B4:B2:BA:9B:55:72:9B:C0:97:7C:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF9A1/D26015CAD37E11E98A196B67C4F9AE02/p_mvKNJKQySTtLK6m1Vym8CXfMg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p_mvKNJKQySTtLK6m1Vym8CXfMg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF9A1/D26015CAD37E11E98A196B67C4F9AE02/p_mvKNJKQySTtLK6m1Vym8CXfMg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:8e:c4:f7:dc:37:3b:98:39:80:0a:31:15:97:3d:9c:83:a6: f0:a3:02:a9:25:ef:2d:36:f1:39:63:df:26:d3:ce:4c:a4:fb: cd:16:e6:8d:cb:61:65:63:90:b0:86:44:cc:11:34:5c:b9:81: 8d:92:cd:4d:80:8f:c8:8b:71:1b:d0:3c:4d:99:be:da:55:f9: 39:67:7a:99:32:8e:ef:dc:82:63:d7:0e:4d:09:57:e4:bb:e9: 7f:bd:dc:cc:b3:28:c4:d5:41:47:e5:ea:9f:7a:07:d7:1b:f4: 6e:84:9a:07:46:91:4f:41:e1:d5:cb:d8:53:c2:27:55:e8:16: e6:1a:9e:6c:a9:0e:0d:33:c6:f1:c8:2c:70:08:63:f4:b3:17: bb:82:d4:0e:2b:78:4e:a9:e2:5c:de:76:cd:3c:63:b6:83:10: 87:27:3a:b7:e8:04:6b:3e:9c:e5:a3:79:f4:22:c3:3e:72:68: 2e:ef:cb:82:e0:95:67:38:61:0e:24:cb:9a:26:71:cf:c2:55: d3:db:19:dc:9d:3c:79:f2:fa:75:b0:86:96:8e:53:70:08:3b: d1:09:ff:10:37:f8:d7:21:6e:65:62:be:27:45:28:31:1b:bf: e8:f3:0b:db:41:81:77:a4:cf:d0:1d:45:5e:d0:ab:96:96:1b: f4:57:c9:a7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDVAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUY5QTExMTAvBgNVBAUTKEE3RjlBRjI4RDI0QTQzMjQ5M0I0QjJCQTlCNTU3MjlC QzA5NzdDQzgwHhcNMjUwNTMwMTgxMDMwWhcNMjUwNjA2MTgxMDMwWjAYMRYwFAYD VQQDEw02ODM5ZjQ5Ni02OTUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1ayM6HApXqgAGz/sntVnrZRyR6UpZaa2COBKpQgF9TAmorsoU3M5GtTlWpfm zmicx94fLfH94GVnT9WYSuSgpRoPkGd2Kf7fgHtf5Xi62MJAWpXfkK9VSrTvSgj7 10jV+VX6mpu3dkrqN3jCnfQeMZSNG8r1BD8fnIf7IzoXLy6OAaCcIid7iodqYdY7 blXDStVBlJs+YMaxiqKdmvw/RHR29Os67YRpgqlC+c32St1HtokgEXyA5rAmJCu5 0dANGukvVyO5AY8Vu+7SSo9rQwp+RZhFOgexCHEK2bcB/cXKh8pKeiYe+3CUtkYO 57cwNWxUiyPothXjYLNW0HCacwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFD03dJi mRJIeOXgE7cz7vsKux34MB8GA1UdIwQYMBaAFKf5ryjSSkMkk7SyuptVcpvAl3zI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjlBMS9EMjYwMTVDQUQz N0UxMUU5OEExOTZCNjdDNEY5QUUwMi9wX212S05KS1F5U1R0TEs2bTFWeW04Q1hm TWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BfbXZLTkpLUXlTVHRMSzZtMVZ5bThDWGZNZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RjlBMS9EMjYwMTVDQUQzN0UxMUU5OEExOTZCNjdDNEY5QUUwMi9wX212S05KS1F5 U1R0TEs2bTFWeW04Q1hmTWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAmjsT33Dc7mDmACjEVlz2cg6bwowKpJe8tNvE5Y98m085MpPvNFuaN y2FlY5CwhkTMETRcuYGNks1NgI/Ii3Eb0DxNmb7aVfk5Z3qZMo7v3IJj1w5NCVfk u+l/vdzMsyjE1UFH5eqfegfXG/RuhJoHRpFPQeHVy9hTwidV6BbmGp5sqQ4NM8bx yCxwCGP0sxe7gtQOK3hOqeJc3nbNPGO2gxCHJzq36ARrPpzlo3n0IsM+cmgu78uC 4JVnOGEOJMuaJnHPwlXT2xncnTx58vp1sIaWjlNwCDvRCf8QN/jXIW5lYr4nRSgx G7/o8wvbQYF3pM/QHUVe0KuWlhv0V8mn -----END CERTIFICATE-----Generated at Sat May 31 16:42:05 2025 by rpki-client