$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0913/DA713F9612FA11ED84AD7251C4F9AE02/D3l9fCpdNafL2-hN_HPLmBnV7yM.mft File: D3l9fCpdNafL2-hN_HPLmBnV7yM.mft (raw, json) Hash identifier: /msWHyCGvgjar6XNngsh8zpLTgt+lLDTF6V1UBainkM= Subject key identifier: AD:FF:21:C2:02:6F:58:88:94:D9:D7:67:69:02:16:E1:6B:24:D3:ED Authority key identifier: 0F:79:7D:7C:2A:5D:35:A7:CB:DB:E8:4D:FC:73:CB:98:19:D5:EF:23 Certificate issuer: /CN=A91B0913/serialNumber=0F797D7C2A5D35A7CBDBE84DFC73CB9819D5EF23 Certificate serial: 026A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D3l9fCpdNafL2-hN_HPLmBnV7yM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0913/DA713F9612FA11ED84AD7251C4F9AE02/D3l9fCpdNafL2-hN_HPLmBnV7yM.mft Manifest number: 0267 Signing time: Sat 31 May 2025 01:56:10 +0000 Manifest this update: Sat 31 May 2025 01:56:09 +0000 Manifest next update: Sat 07 Jun 2025 01:56:09 +0000 Files and hashes: 1: D3l9fCpdNafL2-hN_HPLmBnV7yM.crl (hash: +pWkfur1O7PnyzyETtMv3lHOxEBYlsDPwCRRaW+bbPA=) 2: A1B8513612FE11ED8A1DA356C4F9AE02.roa (hash: zKt5rIlG3Ic7UH3iJOhsHCuRIq5p4/W7QWgInl/Ff3o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0913/DA713F9612FA11ED84AD7251C4F9AE02/D3l9fCpdNafL2-hN_HPLmBnV7yM.crl rsync://rpki.apnic.net/member_repository/A91B0913/DA713F9612FA11ED84AD7251C4F9AE02/D3l9fCpdNafL2-hN_HPLmBnV7yM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D3l9fCpdNafL2-hN_HPLmBnV7yM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 01:56:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 618 (0x26a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0913, serialNumber=0F797D7C2A5D35A7CBDBE84DFC73CB9819D5EF23 Validity Not Before: May 31 01:56:09 2025 GMT Not After : Jun 7 01:56:09 2025 GMT Subject: CN=683a61ba-f314 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:04:9a:70:f5:ee:5a:55:0f:54:76:85:8a:60: fa:5a:58:fd:f6:d5:96:6e:e0:2b:72:07:0e:74:21: bf:fe:02:d3:2b:27:28:41:6d:c1:f4:77:be:e6:73: 5c:74:bb:73:4e:ef:cd:9e:a6:fd:ea:cd:92:97:ee: 51:fb:50:de:3f:cd:38:61:8b:65:52:c9:c0:a7:33: fa:22:a7:9c:06:05:7d:01:21:3e:3c:e4:dc:86:92: 62:a9:6d:dc:7d:13:17:64:09:6c:db:be:5c:14:39: f1:a9:bb:da:dc:a8:5b:23:4d:50:06:1d:7b:64:9c: 27:37:f8:49:2b:b0:05:a3:be:cb:4c:71:1c:6d:9d: ab:ab:b9:da:88:b5:29:39:b5:1f:d9:0b:02:ae:7a: 28:e2:bd:c0:26:d0:37:c7:bf:c2:ba:ea:0a:12:8f: 01:f8:e1:6e:92:ee:a5:ab:6f:f6:8f:29:d9:48:01: 2b:a0:77:59:d3:02:b6:c6:b0:25:86:eb:4c:f0:10: bd:81:45:15:fe:bc:d0:01:c3:19:cb:7f:19:74:87: b9:1c:94:af:00:c2:22:eb:6c:cb:77:c2:98:25:5b: 04:f7:6f:1a:a4:61:cf:e5:9d:26:f6:eb:63:ad:30: 76:de:59:65:99:fb:c1:17:1b:9f:57:e2:1a:09:49: 0d:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:FF:21:C2:02:6F:58:88:94:D9:D7:67:69:02:16:E1:6B:24:D3:ED X509v3 Authority Key Identifier: keyid:0F:79:7D:7C:2A:5D:35:A7:CB:DB:E8:4D:FC:73:CB:98:19:D5:EF:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0913/DA713F9612FA11ED84AD7251C4F9AE02/D3l9fCpdNafL2-hN_HPLmBnV7yM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D3l9fCpdNafL2-hN_HPLmBnV7yM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0913/DA713F9612FA11ED84AD7251C4F9AE02/D3l9fCpdNafL2-hN_HPLmBnV7yM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:56:09:dd:38:e4:42:76:bb:25:1e:b3:2b:c6:21:f7:b0:aa: 01:b2:5d:6e:17:31:a2:90:3a:ce:95:95:5c:82:88:fd:47:49: 48:fd:41:52:60:da:6c:bd:eb:e3:6b:b9:3b:18:45:62:8c:ea: 87:6e:f4:18:cf:24:0b:eb:c6:f2:d9:4d:82:c3:87:47:6c:8c: da:76:9b:98:f8:60:ff:51:95:d9:26:b6:e1:ec:62:da:ed:ba: c9:6f:23:bc:5e:1f:ab:b9:47:d4:e2:97:8e:96:71:51:67:db: 6b:c4:ef:f5:aa:e2:69:75:2a:f0:e9:c7:ae:d6:85:5e:c5:6a: 09:df:e8:d7:cb:40:5a:d0:95:af:21:b3:49:4f:9e:f1:41:84: f2:58:0d:7c:69:91:c3:a9:20:19:55:00:15:73:b9:3a:c4:32: d3:52:ad:b1:33:8a:bc:b1:c0:82:d6:51:b5:00:ed:34:63:eb: f9:f5:20:cd:c2:e3:d2:41:5b:25:a5:b2:ed:32:22:1b:54:c0: 5e:56:5d:3f:c4:27:d8:d6:1f:c4:34:ae:29:a5:cd:1b:ab:e0: 83:2c:4b:cb:b3:90:a3:de:9e:a8:7c:0f:7a:26:a3:42:d7:34: 09:0b:6c:0f:df:cc:eb:94:10:5e:92:f2:bd:4c:ae:f4:75:cb: 38:36:f1:37 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAmowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjA5MTMxMTAvBgNVBAUTKDBGNzk3RDdDMkE1RDM1QTdDQkRCRTg0REZDNzNDQjk4 MTlENUVGMjMwHhcNMjUwNTMxMDE1NjA5WhcNMjUwNjA3MDE1NjA5WjAYMRYwFAYD VQQDEw02ODNhNjFiYS1mMzE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2ASacPXuWlUPVHaFimD6Wlj99tWWbuArcgcOdCG//gLTKycoQW3B9He+5nNc dLtzTu/Nnqb96s2Sl+5R+1DeP804YYtlUsnApzP6IqecBgV9ASE+POTchpJiqW3c fRMXZAls275cFDnxqbva3KhbI01QBh17ZJwnN/hJK7AFo77LTHEcbZ2rq7naiLUp ObUf2QsCrnoo4r3AJtA3x7/CuuoKEo8B+OFuku6lq2/2jynZSAEroHdZ0wK2xrAl hutM8BC9gUUV/rzQAcMZy38ZdIe5HJSvAMIi62zLd8KYJVsE928apGHP5Z0m9utj rTB23lllmfvBFxufV+IaCUkNvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK3/IcIC b1iIlNnXZ2kCFuFrJNPtMB8GA1UdIwQYMBaAFA95fXwqXTWny9voTfxzy5gZ1e8j MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDkxMy9EQTcxM0Y5NjEy RkExMUVEODRBRDcyNTFDNEY5QUUwMi9EM2w5ZkNwZE5hZkwyLWhOX0hQTG1CblY3 eU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0QzbDlmQ3BkTmFmTDItaE5fSFBMbUJuVjd5TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MDkxMy9EQTcxM0Y5NjEyRkExMUVEODRBRDcyNTFDNEY5QUUwMi9EM2w5ZkNwZE5h ZkwyLWhOX0hQTG1CblY3eU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAiVgndOORCdrslHrMrxiH3sKoBsl1uFzGikDrOlZVcgoj9R0lI/UFS YNpsvevja7k7GEVijOqHbvQYzyQL68by2U2Cw4dHbIzadpuY+GD/UZXZJrbh7GLa 7brJbyO8Xh+ruUfU4peOlnFRZ9trxO/1quJpdSrw6ceu1oVexWoJ3+jXy0Ba0JWv IbNJT57xQYTyWA18aZHDqSAZVQAVc7k6xDLTUq2xM4q8scCC1lG1AO00Y+v59SDN wuPSQVslpbLtMiIbVMBeVl0/xCfY1h/ENK4ppc0bq+CDLEvLs5Cj3p6ofA96JqNC 1zQJC2wP38zrlBBekvK9TK70dcs4NvE3 -----END CERTIFICATE-----Generated at Sat May 31 16:40:42 2025 by rpki-client