$ rpki-client -vvf rpki.apnic.net/member_repository/A91B31CE/6B05607A7CCD11EBAEC6A974C4F9AE02/S0fJxk08IyF6Fd2rh0fDncMBhPI.mft File: S0fJxk08IyF6Fd2rh0fDncMBhPI.mft (raw, json) Hash identifier: usumn/+78pZAl0km7sQvawff10vioPUeAoyEt753kSs= Subject key identifier: 5F:0F:3D:F8:6E:EC:2F:51:68:06:C5:EF:E1:9D:5D:DE:EE:8A:84:08 Authority key identifier: 4B:47:C9:C6:4D:3C:23:21:7A:15:DD:AB:87:47:C3:9D:C3:01:84:F2 Certificate issuer: /CN=A91B31CE/serialNumber=4B47C9C64D3C23217A15DDAB8747C39DC30184F2 Certificate serial: 068A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S0fJxk08IyF6Fd2rh0fDncMBhPI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B31CE/6B05607A7CCD11EBAEC6A974C4F9AE02/S0fJxk08IyF6Fd2rh0fDncMBhPI.mft Manifest number: 0681 Signing time: Fri 30 May 2025 22:33:58 +0000 Manifest this update: Fri 30 May 2025 22:33:57 +0000 Manifest next update: Fri 06 Jun 2025 22:33:57 +0000 Files and hashes: 1: S0fJxk08IyF6Fd2rh0fDncMBhPI.crl (hash: l4zieZtNaClR1x/iw7z0VMhN25TkEyRF1bxdP33zCYw=) 2: AA51390A822B11EE8B95E475C4F9AE02.roa (hash: iVoQ4DzarwOJUrSELiNWak+s+ohZp/LfOai+uGXnZZw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B31CE/6B05607A7CCD11EBAEC6A974C4F9AE02/S0fJxk08IyF6Fd2rh0fDncMBhPI.crl rsync://rpki.apnic.net/member_repository/A91B31CE/6B05607A7CCD11EBAEC6A974C4F9AE02/S0fJxk08IyF6Fd2rh0fDncMBhPI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S0fJxk08IyF6Fd2rh0fDncMBhPI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 22:33:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1674 (0x68a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B31CE, serialNumber=4B47C9C64D3C23217A15DDAB8747C39DC30184F2 Validity Not Before: May 30 22:33:57 2025 GMT Not After : Jun 6 22:33:57 2025 GMT Subject: CN=683a3256-b986 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:28:8e:8e:66:04:c8:13:b7:c4:55:14:d4:4e: 63:c3:ff:fd:c4:6b:f5:27:fc:ce:df:45:4d:9d:e9: f7:f6:fc:6c:13:fd:26:74:e3:8c:90:c8:0b:ab:3b: 25:2c:bd:08:c9:63:72:53:30:97:97:69:a0:f2:96: bc:c8:37:2e:7c:86:4e:a3:4f:3d:4d:6d:50:17:5f: 82:30:c4:93:41:fc:f1:19:9e:89:ef:30:69:72:3e: aa:77:fe:b4:b1:df:40:5b:78:a4:1e:b6:73:eb:95: e7:ca:78:c7:f9:64:aa:89:63:db:d4:5d:7b:f5:50: 8b:6e:3b:dc:f9:0b:67:ed:aa:54:51:62:9a:21:84: 17:6e:58:42:b0:f0:15:c2:ba:41:1d:1f:d5:63:0d: aa:b9:10:83:50:c5:b2:61:64:a1:e0:70:cb:a8:de: 94:8e:47:5a:85:29:8a:92:2a:b8:a6:4c:98:9e:6f: 73:1e:da:59:d3:b1:cc:25:44:df:cf:1a:54:e6:a4: 9d:99:5f:c4:f7:36:1b:bc:d9:b9:1f:96:cb:20:e3: c8:2b:a0:97:60:90:c9:13:0e:d2:76:12:8f:07:a6: 0d:05:24:15:26:e5:69:fa:01:eb:d4:b3:6c:c7:be: f8:a4:1d:cc:ee:59:e7:8c:2e:ae:15:8e:c6:8f:40: cc:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:0F:3D:F8:6E:EC:2F:51:68:06:C5:EF:E1:9D:5D:DE:EE:8A:84:08 X509v3 Authority Key Identifier: keyid:4B:47:C9:C6:4D:3C:23:21:7A:15:DD:AB:87:47:C3:9D:C3:01:84:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B31CE/6B05607A7CCD11EBAEC6A974C4F9AE02/S0fJxk08IyF6Fd2rh0fDncMBhPI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S0fJxk08IyF6Fd2rh0fDncMBhPI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B31CE/6B05607A7CCD11EBAEC6A974C4F9AE02/S0fJxk08IyF6Fd2rh0fDncMBhPI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:b0:62:39:20:c6:37:09:97:c5:db:33:85:23:5a:2a:f3:d2: 21:72:88:f1:9d:f0:51:4c:88:fa:60:ba:a7:ab:d3:7e:ad:c6: c1:86:66:27:d2:3c:fb:d2:57:51:59:db:fe:82:c5:2d:4e:26: 17:16:02:fa:a6:17:86:20:1f:08:74:94:6e:43:ba:2f:57:7a: a4:a2:fa:82:f4:d1:39:ca:c3:68:15:83:e2:b9:dc:f0:78:2d: 0c:29:92:78:31:dc:aa:9d:e5:8d:14:e7:ae:67:ac:3e:e0:83: 0e:21:bc:ff:da:e0:78:66:76:75:7a:ac:e8:1d:71:be:9d:1a: 1d:6b:3e:6d:0d:b1:e9:44:43:b3:c8:a2:bc:56:04:ef:40:ff: 3f:54:3b:52:bb:4d:97:45:a6:60:4e:c4:5b:33:69:c7:c3:4f: 5f:a3:55:23:16:20:32:60:66:85:80:9d:77:3c:9d:c7:ba:f1: b4:53:12:a9:58:c9:de:cc:02:cf:1c:84:eb:e9:ef:02:b2:ea: f2:d8:5e:d8:6f:c3:01:64:db:5d:bd:65:a4:cd:c0:9a:0b:5a: a7:b0:75:97:2b:3b:62:9b:04:aa:25:1b:17:48:e6:90:12:8b: 92:bf:b8:29:93:65:de:b8:d6:dd:03:43:e6:75:f5:8a:3f:29: 87:2f:06:6a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBoowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjMxQ0UxMTAvBgNVBAUTKDRCNDdDOUM2NEQzQzIzMjE3QTE1RERBQjg3NDdDMzlE QzMwMTg0RjIwHhcNMjUwNTMwMjIzMzU3WhcNMjUwNjA2MjIzMzU3WjAYMRYwFAYD VQQDEw02ODNhMzI1Ni1iOTg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApCiOjmYEyBO3xFUU1E5jw//9xGv1J/zO30VNnen39vxsE/0mdOOMkMgLqzsl LL0IyWNyUzCXl2mg8pa8yDcufIZOo089TW1QF1+CMMSTQfzxGZ6J7zBpcj6qd/60 sd9AW3ikHrZz65XnynjH+WSqiWPb1F179VCLbjvc+Qtn7apUUWKaIYQXblhCsPAV wrpBHR/VYw2quRCDUMWyYWSh4HDLqN6UjkdahSmKkiq4pkyYnm9zHtpZ07HMJUTf zxpU5qSdmV/E9zYbvNm5H5bLIOPIK6CXYJDJEw7SdhKPB6YNBSQVJuVp+gHr1LNs x774pB3M7lnnjC6uFY7Gj0DMIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF8PPfhu 7C9RaAbF7+GdXd7uioQIMB8GA1UdIwQYMBaAFEtHycZNPCMhehXdq4dHw53DAYTy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMzFDRS82QjA1NjA3QTdD Q0QxMUVCQUVDNkE5NzRDNEY5QUUwMi9TMGZKeGswOEl5RjZGZDJyaDBmRG5jTUJo UEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1MwZkp4azA4SXlGNkZkMnJoMGZEbmNNQmhQSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MzFDRS82QjA1NjA3QTdDQ0QxMUVCQUVDNkE5NzRDNEY5QUUwMi9TMGZKeGswOEl5 RjZGZDJyaDBmRG5jTUJoUEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZsGI5IMY3CZfF2zOFI1oq89IhcojxnfBRTIj6YLqnq9N+rcbBhmYn 0jz70ldRWdv+gsUtTiYXFgL6pheGIB8IdJRuQ7ovV3qkovqC9NE5ysNoFYPiudzw eC0MKZJ4MdyqneWNFOeuZ6w+4IMOIbz/2uB4ZnZ1eqzoHXG+nRodaz5tDbHpREOz yKK8VgTvQP8/VDtSu02XRaZgTsRbM2nHw09fo1UjFiAyYGaFgJ13PJ3HuvG0UxKp WMnezALPHITr6e8Csury2F7Yb8MBZNtdvWWkzcCaC1qnsHWXKztimwSqJRsXSOaQ EouSv7gpk2XeuNbdA0PmdfWKPymHLwZq -----END CERTIFICATE-----Generated at Sat May 31 16:30:28 2025 by rpki-client