$ rpki-client -vvf rpki.apnic.net/member_repository/A91B53AF/1F49325C1DB811EB91D04319C4F9AE02/n60jAjoVW9JbIkKAY6wZeHznwr4.mft File: n60jAjoVW9JbIkKAY6wZeHznwr4.mft (raw, json) Hash identifier: 1REB7KLNcNDukmWNtR1mGZ4Y+bn/mjk5cYXB54WsNKk= Subject key identifier: 08:90:AD:5E:BB:12:05:10:73:6C:04:85:FC:2D:53:10:DF:F1:C1:A6 Authority key identifier: 9F:AD:23:02:3A:15:5B:D2:5B:22:42:80:63:AC:19:78:7C:E7:C2:BE Certificate issuer: /CN=A91B53AF/serialNumber=9FAD23023A155BD25B22428063AC19787CE7C2BE Certificate serial: 0767 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n60jAjoVW9JbIkKAY6wZeHznwr4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B53AF/1F49325C1DB811EB91D04319C4F9AE02/n60jAjoVW9JbIkKAY6wZeHznwr4.mft Manifest number: 0761 Signing time: Fri 30 May 2025 21:49:08 +0000 Manifest this update: Fri 30 May 2025 21:49:08 +0000 Manifest next update: Fri 06 Jun 2025 21:49:08 +0000 Files and hashes: 1: n60jAjoVW9JbIkKAY6wZeHznwr4.crl (hash: a4A3am/RvcclA6DeYDYt8p1VdvWKkK7jwl2Xj8SADpc=) 2: 5E802AC41DB911EB90A5461AC4F9AE02.roa (hash: 41aqCCC0CIJrASUZjn/UMATRac/pjiORpElfAzdM3kk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B53AF/1F49325C1DB811EB91D04319C4F9AE02/n60jAjoVW9JbIkKAY6wZeHznwr4.crl rsync://rpki.apnic.net/member_repository/A91B53AF/1F49325C1DB811EB91D04319C4F9AE02/n60jAjoVW9JbIkKAY6wZeHznwr4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n60jAjoVW9JbIkKAY6wZeHznwr4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 21:49:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1895 (0x767) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B53AF, serialNumber=9FAD23023A155BD25B22428063AC19787CE7C2BE Validity Not Before: May 30 21:49:08 2025 GMT Not After : Jun 6 21:49:08 2025 GMT Subject: CN=683a27d4-a46d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:c7:47:5e:2a:bf:2b:a2:7e:a3:14:0f:85:b6: 1c:25:36:e5:23:67:b6:85:a3:2e:12:82:b1:4a:93: 02:cd:88:75:f0:d7:58:e8:0e:83:4e:d0:f7:4b:76: d0:84:7d:32:e4:e1:12:d3:3d:20:35:bd:31:78:bc: e3:d2:ec:d8:8d:b8:6a:da:3b:58:74:a3:fb:29:c5: 43:bc:4e:64:82:e0:90:b5:eb:b0:3a:45:36:9e:de: 1d:c9:51:65:76:ee:34:58:4d:b4:bd:e8:c5:9c:fb: 73:66:d1:c3:22:00:cc:ff:e6:41:b8:20:4c:7a:53: 42:19:65:0a:16:92:e3:1d:fa:54:70:77:75:f4:86: 72:aa:3f:e4:65:58:21:20:37:78:3f:fa:8a:3a:55: 10:04:9f:95:78:59:fc:0d:05:db:b0:a6:ed:ff:fc: ff:bd:01:db:24:68:7a:01:b6:f7:19:0c:9c:ff:82: ac:ec:13:30:5d:67:dc:a8:ba:a3:2c:6f:a8:b9:2c: 89:a6:f4:ed:b6:20:81:e9:85:75:d4:84:e1:52:33: b3:68:b2:c8:76:e5:f0:e9:d9:d6:c5:1c:86:83:83: 0e:33:2b:75:f6:76:be:09:07:0a:2a:0f:52:80:b9: cc:c7:6a:0c:6b:11:e8:b7:7a:59:f7:0b:c9:be:72: ad:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:90:AD:5E:BB:12:05:10:73:6C:04:85:FC:2D:53:10:DF:F1:C1:A6 X509v3 Authority Key Identifier: keyid:9F:AD:23:02:3A:15:5B:D2:5B:22:42:80:63:AC:19:78:7C:E7:C2:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B53AF/1F49325C1DB811EB91D04319C4F9AE02/n60jAjoVW9JbIkKAY6wZeHznwr4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n60jAjoVW9JbIkKAY6wZeHznwr4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B53AF/1F49325C1DB811EB91D04319C4F9AE02/n60jAjoVW9JbIkKAY6wZeHznwr4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:7b:62:7a:88:71:56:d3:e9:75:2a:7c:76:5e:fd:94:54:ce: e4:2a:79:36:f3:8c:60:60:67:8e:87:0d:86:b3:11:d3:e7:cf: bb:99:95:8e:17:8c:79:8f:9f:b5:95:54:37:d0:27:b5:71:03: 27:a1:26:00:c0:a1:91:9f:fa:55:c4:88:03:8d:8d:1a:af:04: 47:f1:38:48:ff:82:4e:5b:be:79:3a:63:47:f8:ef:e1:17:a9: d0:e1:52:59:e8:d5:63:4c:22:9d:9f:84:80:3c:b0:ec:63:d0: 02:08:5a:36:f3:70:9d:3f:20:6e:d6:c7:50:ac:43:46:02:ae: 74:3f:f1:13:6b:31:64:cc:04:ea:58:9b:2e:0f:a4:4a:a4:1c: b8:95:ab:a0:54:83:3a:e4:c9:e6:74:02:b5:3e:73:2b:b0:5c: 5c:83:72:c3:75:09:95:1f:0d:7d:42:f4:6b:70:71:d1:a5:b9: 3e:0d:57:24:10:65:3c:19:e5:b2:2b:8e:11:a1:89:f0:ba:7a: 90:3f:ff:bd:0c:1a:96:ba:d8:28:af:d2:2d:d1:c3:3c:f0:66: 93:ce:d0:25:30:35:d9:66:87:ab:d9:a5:33:b5:75:77:aa:14: 5b:9a:84:31:97:b5:3c:2e:76:d1:82:27:ea:03:ac:f2:cb:e3: 76:4b:aa:84 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB2cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjUzQUYxMTAvBgNVBAUTKDlGQUQyMzAyM0ExNTVCRDI1QjIyNDI4MDYzQUMxOTc4 N0NFN0MyQkUwHhcNMjUwNTMwMjE0OTA4WhcNMjUwNjA2MjE0OTA4WjAYMRYwFAYD VQQDEw02ODNhMjdkNC1hNDZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsMdHXiq/K6J+oxQPhbYcJTblI2e2haMuEoKxSpMCzYh18NdY6A6DTtD3S3bQ hH0y5OES0z0gNb0xeLzj0uzYjbhq2jtYdKP7KcVDvE5kguCQteuwOkU2nt4dyVFl du40WE20vejFnPtzZtHDIgDM/+ZBuCBMelNCGWUKFpLjHfpUcHd19IZyqj/kZVgh IDd4P/qKOlUQBJ+VeFn8DQXbsKbt//z/vQHbJGh6Abb3GQyc/4Ks7BMwXWfcqLqj LG+ouSyJpvTttiCB6YV11IThUjOzaLLIduXw6dnWxRyGg4MOMyt19na+CQcKKg9S gLnMx2oMaxHot3pZ9wvJvnKtPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAiQrV67 EgUQc2wEhfwtUxDf8cGmMB8GA1UdIwQYMBaAFJ+tIwI6FVvSWyJCgGOsGXh858K+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNTNBRi8xRjQ5MzI1QzFE QjgxMUVCOTFEMDQzMTlDNEY5QUUwMi9uNjBqQWpvVlc5SmJJa0tBWTZ3WmVIem53 cjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL242MGpBam9WVzlKYklrS0FZNndaZUh6bndyNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NTNBRi8xRjQ5MzI1QzFEQjgxMUVCOTFEMDQzMTlDNEY5QUUwMi9uNjBqQWpvVlc5 SmJJa0tBWTZ3WmVIem53cjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCee2J6iHFW0+l1Knx2Xv2UVM7kKnk284xgYGeOhw2GsxHT58+7mZWO F4x5j5+1lVQ30Ce1cQMnoSYAwKGRn/pVxIgDjY0arwRH8ThI/4JOW755OmNH+O/h F6nQ4VJZ6NVjTCKdn4SAPLDsY9ACCFo283CdPyBu1sdQrENGAq50P/ETazFkzATq WJsuD6RKpBy4laugVIM65MnmdAK1PnMrsFxcg3LDdQmVHw19QvRrcHHRpbk+DVck EGU8GeWyK44RoYnwunqQP/+9DBqWutgor9It0cM88GaTztAlMDXZZoer2aUztXV3 qhRbmoQxl7U8LnbRgifqA6zyy+N2S6qE -----END CERTIFICATE-----Generated at Sat May 31 17:22:02 2025 by rpki-client