$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1F4F/0FDB974C74D711E8BC82D42CC4F9AE02/MB6kG5ONf0s895PQEveN06U5cCQ.mft File: MB6kG5ONf0s895PQEveN06U5cCQ.mft (raw, json) Hash identifier: IuFXpKuG3uT5Pl5maSYUN5SRoGj4UnyetEktypVJUWs= Subject key identifier: D1:43:3B:44:21:CD:AD:7E:79:50:FE:11:E6:7C:09:05:B6:BA:5E:68 Authority key identifier: 30:1E:A4:1B:93:8D:7F:4B:3C:F7:93:D0:12:F7:8D:D3:A5:39:70:24 Certificate issuer: /CN=A91B1F4F/serialNumber=301EA41B938D7F4B3CF793D012F78DD3A5397024 Certificate serial: 1445 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MB6kG5ONf0s895PQEveN06U5cCQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B1F4F/0FDB974C74D711E8BC82D42CC4F9AE02/MB6kG5ONf0s895PQEveN06U5cCQ.mft Manifest number: 143B Signing time: Fri 30 May 2025 17:06:13 +0000 Manifest this update: Fri 30 May 2025 17:06:12 +0000 Manifest next update: Fri 06 Jun 2025 17:06:12 +0000 Files and hashes: 1: MB6kG5ONf0s895PQEveN06U5cCQ.crl (hash: 4gGQ6nuARJT1Sr8HFYUALwU3goNLwU5pVAGsKO+EBJ4=) 2: 61574192E37A11EB8AF29A5BC4F9AE02.roa (hash: W5cx07cNyMaDMA4R0/MWrV4hAi09Yk83hfS7ozdwiBc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B1F4F/0FDB974C74D711E8BC82D42CC4F9AE02/MB6kG5ONf0s895PQEveN06U5cCQ.crl rsync://rpki.apnic.net/member_repository/A91B1F4F/0FDB974C74D711E8BC82D42CC4F9AE02/MB6kG5ONf0s895PQEveN06U5cCQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MB6kG5ONf0s895PQEveN06U5cCQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 17:06:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5189 (0x1445) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B1F4F, serialNumber=301EA41B938D7F4B3CF793D012F78DD3A5397024 Validity Not Before: May 30 17:06:12 2025 GMT Not After : Jun 6 17:06:12 2025 GMT Subject: CN=6839e584-d9d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:39:96:2e:89:fd:4d:5b:8f:6a:db:9f:26:4a: a9:95:97:98:0b:af:71:36:76:e3:5c:65:90:2f:24: 90:a4:47:bd:18:ac:3a:3a:ec:9d:1d:73:1d:10:0a: 81:33:5b:8f:e8:da:12:73:08:c1:f9:ba:d9:db:31: 4f:06:c4:71:f2:ea:15:22:58:30:32:cc:4c:21:90: bb:ac:a1:22:55:19:3a:be:42:01:7a:1f:71:c3:0c: 0c:b1:50:69:6a:5e:11:35:34:9c:1c:b5:af:38:ae: bb:77:3a:57:09:31:93:f2:d0:7e:e8:c8:ee:a1:57: 45:fe:c3:aa:b0:28:30:a3:a8:d6:c9:7e:d4:25:e8: 86:c9:d0:a5:b9:38:02:d2:5f:66:03:c0:50:fd:8b: 1d:bd:40:7f:0f:f0:b7:6d:9a:8f:97:e2:19:5b:8f: 5a:16:bb:0f:96:35:d9:2a:d0:3c:c2:d4:04:bb:75: 2a:d8:19:c2:60:8c:ea:23:22:91:23:55:e7:d1:67: 9e:0a:50:a1:be:6d:d0:72:9c:54:a9:c5:8d:98:b6: a6:b8:f5:e4:47:aa:ba:a7:5b:d4:7a:b8:a2:08:06: e6:02:84:53:40:41:30:15:7e:e9:21:b9:31:a8:90: bd:12:19:ba:07:fa:c0:52:16:fb:10:f1:42:e0:41: 85:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:43:3B:44:21:CD:AD:7E:79:50:FE:11:E6:7C:09:05:B6:BA:5E:68 X509v3 Authority Key Identifier: keyid:30:1E:A4:1B:93:8D:7F:4B:3C:F7:93:D0:12:F7:8D:D3:A5:39:70:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B1F4F/0FDB974C74D711E8BC82D42CC4F9AE02/MB6kG5ONf0s895PQEveN06U5cCQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MB6kG5ONf0s895PQEveN06U5cCQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1F4F/0FDB974C74D711E8BC82D42CC4F9AE02/MB6kG5ONf0s895PQEveN06U5cCQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:cf:50:49:68:c3:01:77:69:ec:0b:66:e0:3d:8f:91:a6:f4: ae:6d:a9:85:03:4b:26:e7:f9:77:b5:68:fb:c0:64:bf:29:e9: 6c:8e:e8:6a:f6:9d:58:52:59:5d:e6:f9:b1:0a:78:5f:5e:3c: 85:d1:68:06:06:61:aa:c4:73:89:2c:d1:d0:19:e6:cb:72:99: 87:07:eb:27:d8:31:46:e1:e0:8d:05:85:a1:1b:11:ff:74:68: 2a:44:59:4b:7e:7e:b5:f7:fe:9b:e6:e4:43:c6:e6:e1:7c:59: db:6d:fa:55:d3:66:37:0d:df:fd:f0:40:88:90:e2:a5:9e:de: f5:44:9f:48:16:d1:8e:ad:b1:ac:ea:70:be:af:c1:8b:d8:a9: f3:a1:25:81:43:43:1d:eb:c9:40:11:93:b7:b1:a9:30:9c:e7: 90:a3:bd:e5:da:bc:b8:f5:ca:2b:be:b1:9e:7a:cc:a4:bb:76: a7:ab:9f:30:9b:b7:19:ce:65:b7:31:17:14:b7:ea:68:34:81: b4:24:df:e6:a7:9c:48:0c:2b:31:ad:e3:95:90:27:c4:13:1e: d5:36:c9:d6:da:8c:95:23:74:b5:1a:69:5f:b6:44:1b:a8:5c: a2:b4:8c:59:04:d8:c0:4d:1c:d1:c2:33:80:c8:05:6e:ad:f9: 3a:cf:7d:02 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFEUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjFGNEYxMTAvBgNVBAUTKDMwMUVBNDFCOTM4RDdGNEIzQ0Y3OTNEMDEyRjc4REQz QTUzOTcwMjQwHhcNMjUwNTMwMTcwNjEyWhcNMjUwNjA2MTcwNjEyWjAYMRYwFAYD VQQDEw02ODM5ZTU4NC1kOWQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxzmWLon9TVuPatufJkqplZeYC69xNnbjXGWQLySQpEe9GKw6OuydHXMdEAqB M1uP6NoScwjB+brZ2zFPBsRx8uoVIlgwMsxMIZC7rKEiVRk6vkIBeh9xwwwMsVBp al4RNTScHLWvOK67dzpXCTGT8tB+6MjuoVdF/sOqsCgwo6jWyX7UJeiGydCluTgC 0l9mA8BQ/YsdvUB/D/C3bZqPl+IZW49aFrsPljXZKtA8wtQEu3Uq2BnCYIzqIyKR I1Xn0WeeClChvm3QcpxUqcWNmLamuPXkR6q6p1vUeriiCAbmAoRTQEEwFX7pIbkx qJC9Ehm6B/rAUhb7EPFC4EGFXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNFDO0Qh za1+eVD+EeZ8CQW2ul5oMB8GA1UdIwQYMBaAFDAepBuTjX9LPPeT0BL3jdOlOXAk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMUY0Ri8wRkRCOTc0Qzc0 RDcxMUU4QkM4MkQ0MkNDNEY5QUUwMi9NQjZrRzVPTmYwczg5NVBRRXZlTjA2VTVj Q1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01CNmtHNU9OZjBzODk1UFFFdmVOMDZVNWNDUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MUY0Ri8wRkRCOTc0Qzc0RDcxMUU4QkM4MkQ0MkNDNEY5QUUwMi9NQjZrRzVPTmYw czg5NVBRRXZlTjA2VTVjQ1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBvz1BJaMMBd2nsC2bgPY+RpvSubamFA0sm5/l3tWj7wGS/Kelsjuhq 9p1YUlld5vmxCnhfXjyF0WgGBmGqxHOJLNHQGebLcpmHB+sn2DFG4eCNBYWhGxH/ dGgqRFlLfn619/6b5uRDxubhfFnbbfpV02Y3Dd/98ECIkOKlnt71RJ9IFtGOrbGs 6nC+r8GL2KnzoSWBQ0Md68lAEZO3sakwnOeQo73l2ry49corvrGeesyku3anq58w m7cZzmW3MRcUt+poNIG0JN/mp5xIDCsxreOVkCfEEx7VNsnW2oyVI3S1GmlftkQb qFyitIxZBNjATRzRwjOAyAVurfk6z30C -----END CERTIFICATE-----Generated at Sat May 31 17:10:22 2025 by rpki-client