$ rpki-client -vvf rpki.apnic.net/member_repository/A91B423C/2737E6B250EC11ECAA3C137CC4F9AE02/MJ8WI5oTsNAQQo21URRuUu63C7c.mft File: MJ8WI5oTsNAQQo21URRuUu63C7c.mft (raw, json) Hash identifier: bv5gLAw1LZt/OACb3X2oeqG4blEYQXwBaKVVeP5ApUA= Subject key identifier: CF:9F:1B:63:9B:7C:BC:60:7D:F8:D6:9E:96:5C:51:1D:AB:57:79:A6 Authority key identifier: 30:9F:16:23:9A:13:B0:D0:10:42:8D:B5:51:14:6E:52:EE:B7:0B:B7 Certificate issuer: /CN=A91B423C/serialNumber=309F16239A13B0D010428DB551146E52EEB70BB7 Certificate serial: 046A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MJ8WI5oTsNAQQo21URRuUu63C7c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B423C/2737E6B250EC11ECAA3C137CC4F9AE02/MJ8WI5oTsNAQQo21URRuUu63C7c.mft Manifest number: 045F Signing time: Sat 07 Jun 2025 00:12:13 +0000 Manifest this update: Sat 07 Jun 2025 00:12:13 +0000 Manifest next update: Sat 14 Jun 2025 00:12:13 +0000 Files and hashes: 1: MJ8WI5oTsNAQQo21URRuUu63C7c.crl (hash: GOC8qmY+/hC8bXhixins9MIbaebdpF2xoC1eC5YnOsI=) 2: 118BA98C51CA11EC9067E22CC4F9AE02.roa (hash: L87/P71GLyeOVHRuWVUui3Zcv+2yVuGxBuaLmPWeK04=) 3: 12A7C1D451CA11EC9067E22CC4F9AE02.roa (hash: hvSnlb31gfJnIJknYF0rYUKJLZVmXt9VjFEolvqLYLs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B423C/2737E6B250EC11ECAA3C137CC4F9AE02/MJ8WI5oTsNAQQo21URRuUu63C7c.crl rsync://rpki.apnic.net/member_repository/A91B423C/2737E6B250EC11ECAA3C137CC4F9AE02/MJ8WI5oTsNAQQo21URRuUu63C7c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MJ8WI5oTsNAQQo21URRuUu63C7c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 14 Jun 2025 00:12:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1130 (0x46a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B423C, serialNumber=309F16239A13B0D010428DB551146E52EEB70BB7 Validity Not Before: Jun 7 00:12:13 2025 GMT Not After : Jun 14 00:12:13 2025 GMT Subject: CN=684383dd-92cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:3c:e7:a6:e8:a7:c3:75:ce:a0:31:57:65:e7: c4:c8:3d:1d:aa:fc:61:b7:b1:9b:80:33:90:1d:e3: a7:6d:0a:86:13:1f:cd:9b:3e:8c:11:36:35:68:40: ec:a3:04:4f:2b:12:07:f7:41:c7:c0:ca:2e:bd:76: c9:98:f1:2f:28:59:e1:40:b9:83:92:ef:34:19:cc: 8c:a8:36:a1:6a:4c:70:d9:b7:21:f7:c5:83:ab:41: 23:a4:fe:fe:16:67:88:e5:ac:b9:72:83:09:4d:ee: 5d:65:ea:38:99:f7:dc:c0:7a:b2:b3:50:16:3e:23: 16:9d:68:da:aa:9b:7a:de:bb:7d:e7:79:d5:d9:08: 5f:f8:a6:9b:0e:26:ab:6d:b4:e4:ab:0e:50:89:86: 6a:3c:1b:b0:57:37:2e:e2:d6:9c:70:bf:4b:0b:b2: 29:18:5c:f8:43:8d:3d:c1:43:4c:c4:e0:f7:35:c1: bc:1b:09:c5:cd:de:7e:8e:c3:df:20:11:03:da:ed: b1:7b:8f:e1:37:77:01:44:e4:5d:ad:e2:c9:5a:e1: fa:31:e6:91:c0:a7:49:99:b9:d7:59:c0:13:56:61: 29:0b:a9:c8:03:d4:df:e8:67:7b:84:ed:27:e4:b6: 3e:72:79:09:c2:03:8a:a9:6d:a3:c8:a4:c0:ad:b7: e3:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:9F:1B:63:9B:7C:BC:60:7D:F8:D6:9E:96:5C:51:1D:AB:57:79:A6 X509v3 Authority Key Identifier: keyid:30:9F:16:23:9A:13:B0:D0:10:42:8D:B5:51:14:6E:52:EE:B7:0B:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B423C/2737E6B250EC11ECAA3C137CC4F9AE02/MJ8WI5oTsNAQQo21URRuUu63C7c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MJ8WI5oTsNAQQo21URRuUu63C7c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B423C/2737E6B250EC11ECAA3C137CC4F9AE02/MJ8WI5oTsNAQQo21URRuUu63C7c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:0e:02:84:cb:d8:31:ea:d3:18:f8:5d:ff:0a:d3:98:ce:e7: ac:cf:d0:a4:77:37:12:bf:1c:43:3d:b4:5d:57:8e:d8:f9:d4: 82:ee:36:26:4f:34:14:e9:6e:11:cb:55:49:0c:97:ae:d6:54: 20:dd:5e:64:d0:0c:2d:11:0a:d6:19:fb:2c:d6:f4:b6:94:43: e0:94:cc:98:52:df:3e:13:bb:67:3a:25:0b:9c:ec:ec:9c:fe: c5:54:0e:71:72:4c:45:63:83:ff:77:24:e2:94:1f:7f:59:2e: a3:17:1e:33:82:07:ad:49:24:73:ac:fe:ec:ae:a7:09:9d:7a: 1d:36:06:6b:6a:83:e8:cc:1b:b6:c1:36:61:7e:ea:6d:4d:33: 61:fa:f4:a7:2d:6b:66:45:19:36:de:89:a0:fc:a4:dc:a9:c3: f5:4c:37:33:df:94:0b:9f:28:7d:04:f7:e3:a2:a7:a1:23:a6: 56:62:2e:ec:1d:cf:7e:0d:9e:e3:a3:be:b6:76:ab:86:b7:3d: d5:df:17:df:6b:2d:6d:8e:c9:6b:c8:e9:c9:49:be:76:d5:23: 14:f3:34:d3:d1:b8:de:70:bc:df:d7:30:ae:4b:d9:55:58:a6: 5d:8f:16:57:2a:d8:3c:f0:9e:fd:08:43:9b:1e:8b:6d:c8:9f: 82:9a:3a:cb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBGowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjQyM0MxMTAvBgNVBAUTKDMwOUYxNjIzOUExM0IwRDAxMDQyOERCNTUxMTQ2RTUy RUVCNzBCQjcwHhcNMjUwNjA3MDAxMjEzWhcNMjUwNjE0MDAxMjEzWjAYMRYwFAYD VQQDEw02ODQzODNkZC05MmNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyTznpuinw3XOoDFXZefEyD0dqvxht7GbgDOQHeOnbQqGEx/Nmz6METY1aEDs owRPKxIH90HHwMouvXbJmPEvKFnhQLmDku80GcyMqDahakxw2bch98WDq0EjpP7+ FmeI5ay5coMJTe5dZeo4mffcwHqys1AWPiMWnWjaqpt63rt953nV2Qhf+KabDiar bbTkqw5QiYZqPBuwVzcu4taccL9LC7IpGFz4Q409wUNMxOD3NcG8GwnFzd5+jsPf IBED2u2xe4/hN3cBRORdreLJWuH6MeaRwKdJmbnXWcATVmEpC6nIA9Tf6Gd7hO0n 5LY+cnkJwgOKqW2jyKTArbfjmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM+fG2Ob fLxgffjWnpZcUR2rV3mmMB8GA1UdIwQYMBaAFDCfFiOaE7DQEEKNtVEUblLutwu3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNDIzQy8yNzM3RTZCMjUw RUMxMUVDQUEzQzEzN0NDNEY5QUUwMi9NSjhXSTVvVHNOQVFRbzIxVVJSdVV1NjND N2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01KOFdJNW9Uc05BUVFvMjFVUlJ1VXU2M0M3Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NDIzQy8yNzM3RTZCMjUwRUMxMUVDQUEzQzEzN0NDNEY5QUUwMi9NSjhXSTVvVHNO QVFRbzIxVVJSdVV1NjNDN2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAaDgKEy9gx6tMY+F3/CtOYzuesz9CkdzcSvxxDPbRdV47Y+dSC7jYm TzQU6W4Ry1VJDJeu1lQg3V5k0AwtEQrWGfss1vS2lEPglMyYUt8+E7tnOiULnOzs nP7FVA5xckxFY4P/dyTilB9/WS6jFx4zggetSSRzrP7srqcJnXodNgZraoPozBu2 wTZhfuptTTNh+vSnLWtmRRk23omg/KTcqcP1TDcz35QLnyh9BPfjoqehI6ZWYi7s Hc9+DZ7jo762dquGtz3V3xffay1tjslryOnJSb521SMU8zTT0bjecLzf1zCuS9lV WKZdjxZXKtg88J79CEObHottyJ+CmjrL -----END CERTIFICATE-----Generated at Sat Jun 7 04:09:07 2025 by rpki-client