$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4B33/244F849A221E11EF9344A309C4F9AE02/vO4SgFOJtXjDX9i0JVpggdJoP3w.mft File: vO4SgFOJtXjDX9i0JVpggdJoP3w.mft (raw, json) Hash identifier: HABx5vF8lMUOF7vxlOy1k09CerAC2YATTIE0NB6244o= Subject key identifier: EB:22:49:22:B1:65:E4:6B:A7:48:E4:C0:31:EC:AD:DF:37:76:D7:B6 Authority key identifier: BC:EE:12:80:53:89:B5:78:C3:5F:D8:B4:25:5A:60:81:D2:68:3F:7C Certificate issuer: /CN=A91B4B33/serialNumber=BCEE12805389B578C35FD8B4255A6081D2683F7C Certificate serial: B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vO4SgFOJtXjDX9i0JVpggdJoP3w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B4B33/244F849A221E11EF9344A309C4F9AE02/vO4SgFOJtXjDX9i0JVpggdJoP3w.mft Manifest number: B9 Signing time: Sat 31 May 2025 05:30:12 +0000 Manifest this update: Sat 31 May 2025 05:30:12 +0000 Manifest next update: Sat 07 Jun 2025 05:30:12 +0000 Files and hashes: 1: vO4SgFOJtXjDX9i0JVpggdJoP3w.crl (hash: xlLvHpSZYy5c8Tt/gJZ59RLr/mwlkFlWDeRXVwD84vU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B4B33/244F849A221E11EF9344A309C4F9AE02/vO4SgFOJtXjDX9i0JVpggdJoP3w.crl rsync://rpki.apnic.net/member_repository/A91B4B33/244F849A221E11EF9344A309C4F9AE02/vO4SgFOJtXjDX9i0JVpggdJoP3w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vO4SgFOJtXjDX9i0JVpggdJoP3w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 05:30:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 185 (0xb9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B4B33, serialNumber=BCEE12805389B578C35FD8B4255A6081D2683F7C Validity Not Before: May 31 05:30:12 2025 GMT Not After : Jun 7 05:30:12 2025 GMT Subject: CN=683a93e4-5080 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:2c:65:50:08:ff:4c:59:67:b5:a4:fc:e2:ae: 55:30:5c:b4:f3:7e:93:41:09:bb:13:87:b7:fc:71: 05:13:a4:bc:3f:2d:46:6b:bc:19:b3:61:a8:59:bc: 69:db:44:a8:e6:03:45:ad:0e:88:67:ce:56:74:a5: f5:65:d1:4c:90:29:20:fa:e2:57:91:d4:97:39:a8: 67:52:57:78:d5:5d:11:9c:e1:28:cd:a5:43:7b:1b: 48:58:88:71:67:35:3a:40:25:74:66:47:73:2f:f5: 91:ba:da:c1:e3:b4:3b:43:98:ba:4c:88:bd:95:df: 93:66:99:9c:24:d3:a3:b4:79:4e:dd:0d:03:ad:7c: ee:ed:b8:1b:f2:85:4a:8a:9f:f2:dd:56:3e:b9:ee: 84:56:f6:60:ed:76:0e:56:ab:bc:d5:9d:b7:5b:65: d8:b3:ea:6b:50:7f:74:50:8c:ae:9e:1a:09:20:61: c1:ad:91:be:fe:60:ea:5d:b1:65:65:24:45:bb:a0: 41:64:7d:71:c7:87:74:10:31:aa:07:de:97:68:8a: e4:9e:fc:3e:ce:ab:04:db:28:8b:d3:38:1a:c3:9a: 89:bc:bc:7b:3d:ca:d1:77:8e:f0:1c:9d:e0:b8:01: 90:0e:21:03:d8:a5:f6:5e:81:bd:62:06:b9:9a:ea: a8:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:22:49:22:B1:65:E4:6B:A7:48:E4:C0:31:EC:AD:DF:37:76:D7:B6 X509v3 Authority Key Identifier: keyid:BC:EE:12:80:53:89:B5:78:C3:5F:D8:B4:25:5A:60:81:D2:68:3F:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B4B33/244F849A221E11EF9344A309C4F9AE02/vO4SgFOJtXjDX9i0JVpggdJoP3w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vO4SgFOJtXjDX9i0JVpggdJoP3w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4B33/244F849A221E11EF9344A309C4F9AE02/vO4SgFOJtXjDX9i0JVpggdJoP3w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:b5:24:4c:21:c9:e7:b0:28:1a:6d:20:8f:db:43:f3:5c:db: 7f:6c:8c:14:4b:cc:3c:4f:f5:bb:7c:40:b1:f4:ff:d3:a7:e7: 3d:4e:3b:83:20:50:68:99:ef:27:36:18:f0:de:ba:cc:81:fe: dc:f1:97:0f:c0:0e:d0:53:b2:47:0d:ff:3b:04:0f:a5:15:c8: 3f:ec:d0:50:87:6d:13:3a:a5:97:29:4b:0e:3a:ef:23:68:9b: bf:fb:81:34:af:85:00:cb:15:f3:e7:2e:cf:6a:d1:db:65:dc: 52:34:a2:c3:90:89:e7:d9:44:fa:de:cf:fa:10:45:7b:95:38: 47:19:aa:73:ce:60:3b:30:30:89:7d:bc:fd:ec:a7:a8:b2:60: 4f:7b:ed:6f:59:2c:46:ce:17:f5:6c:9a:82:5e:a2:24:ed:0c: f4:89:fe:b3:5e:29:20:6f:38:53:dc:32:fc:de:55:1f:f3:08: 26:7f:23:1c:e2:01:39:47:2d:7e:0f:fc:45:cc:98:7e:15:c9: f4:bb:74:e3:63:5a:a5:fc:77:f4:72:38:39:51:fc:33:48:fd: c7:24:3b:c6:df:b3:24:db:12:82:8c:f4:9c:c2:26:e2:bf:52: 2e:c0:2c:07:5a:59:a7:c2:e0:28:58:4a:74:d9:31:68:9d:cc: 9a:83:ae:bd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjRCMzMxMTAvBgNVBAUTKEJDRUUxMjgwNTM4OUI1NzhDMzVGRDhCNDI1NUE2MDgx RDI2ODNGN0MwHhcNMjUwNTMxMDUzMDEyWhcNMjUwNjA3MDUzMDEyWjAYMRYwFAYD VQQDEw02ODNhOTNlNC01MDgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4SxlUAj/TFlntaT84q5VMFy0836TQQm7E4e3/HEFE6S8Py1Ga7wZs2GoWbxp 20So5gNFrQ6IZ85WdKX1ZdFMkCkg+uJXkdSXOahnUld41V0RnOEozaVDextIWIhx ZzU6QCV0ZkdzL/WRutrB47Q7Q5i6TIi9ld+TZpmcJNOjtHlO3Q0DrXzu7bgb8oVK ip/y3VY+ue6EVvZg7XYOVqu81Z23W2XYs+prUH90UIyunhoJIGHBrZG+/mDqXbFl ZSRFu6BBZH1xx4d0EDGqB96XaIrknvw+zqsE2yiL0zgaw5qJvLx7PcrRd47wHJ3g uAGQDiED2KX2XoG9Yga5muqoyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOsiSSKx ZeRrp0jkwDHsrd83dte2MB8GA1UdIwQYMBaAFLzuEoBTibV4w1/YtCVaYIHSaD98 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNEIzMy8yNDRGODQ5QTIy MUUxMUVGOTM0NEEzMDlDNEY5QUUwMi92TzRTZ0ZPSnRYakRYOWkwSlZwZ2dkSm9Q M3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZPNFNnRk9KdFhqRFg5aTBKVnBnZ2RKb1Azdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NEIzMy8yNDRGODQ5QTIyMUUxMUVGOTM0NEEzMDlDNEY5QUUwMi92TzRTZ0ZPSnRY akRYOWkwSlZwZ2dkSm9QM3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCKtSRMIcnnsCgabSCP20PzXNt/bIwUS8w8T/W7fECx9P/Tp+c9TjuD IFBome8nNhjw3rrMgf7c8ZcPwA7QU7JHDf87BA+lFcg/7NBQh20TOqWXKUsOOu8j aJu/+4E0r4UAyxXz5y7PatHbZdxSNKLDkInn2UT63s/6EEV7lThHGapzzmA7MDCJ fbz97KeosmBPe+1vWSxGzhf1bJqCXqIk7Qz0if6zXikgbzhT3DL83lUf8wgmfyMc 4gE5Ry1+D/xFzJh+Fcn0u3TjY1ql/Hf0cjg5UfwzSP3HJDvG37Mk2xKCjPScwibi v1IuwCwHWlmnwuAoWEp02TFoncyag669 -----END CERTIFICATE-----Generated at Sat May 31 17:48:38 2025 by rpki-client