$ rpki-client -vvf rpki.apnic.net/member_repository/A91B62A9/D77F91421DA111E2BFCB309408B02CD2/sLiO7pE7KqjXtZU3FT782HAKkUA.mft File: sLiO7pE7KqjXtZU3FT782HAKkUA.mft (raw, json) Hash identifier: wYlhzv8bj8dhSu3rbKtKcGWOEBqWZzSdM1brVCN/Zls= Subject key identifier: A8:F7:D6:B6:C3:41:CA:BC:42:6A:FD:19:0F:E8:74:D8:E7:1D:F6:A5 Authority key identifier: B0:B8:8E:EE:91:3B:2A:A8:D7:B5:95:37:15:3E:FC:D8:70:0A:91:40 Certificate issuer: /CN=A91B62A9/serialNumber=B0B88EEE913B2AA8D7B59537153EFCD8700A9140 Certificate serial: 3487 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sLiO7pE7KqjXtZU3FT782HAKkUA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B62A9/D77F91421DA111E2BFCB309408B02CD2/sLiO7pE7KqjXtZU3FT782HAKkUA.mft Manifest number: 3485 Signing time: Sat 31 May 2025 15:05:55 +0000 Manifest this update: Sat 31 May 2025 15:05:54 +0000 Manifest next update: Sat 07 Jun 2025 15:05:54 +0000 Files and hashes: 1: sLiO7pE7KqjXtZU3FT782HAKkUA.crl (hash: C7L8Irt7aqYGbu9F8dQ/bM/H6FWBE2la42HaZtR6sDw=) 2: 8146430A45BE11EF92C29882C4F9AE02.roa (hash: t0r89bYo/YLfBIznDm5VJcksHUIZupXS77KseDePVYw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B62A9/D77F91421DA111E2BFCB309408B02CD2/sLiO7pE7KqjXtZU3FT782HAKkUA.crl rsync://rpki.apnic.net/member_repository/A91B62A9/D77F91421DA111E2BFCB309408B02CD2/sLiO7pE7KqjXtZU3FT782HAKkUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sLiO7pE7KqjXtZU3FT782HAKkUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 15:05:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13447 (0x3487) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B62A9, serialNumber=B0B88EEE913B2AA8D7B59537153EFCD8700A9140 Validity Not Before: May 31 15:05:54 2025 GMT Not After : Jun 7 15:05:54 2025 GMT Subject: CN=683b1ad2-f16d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:d3:47:31:cf:06:c5:be:9c:84:18:c0:ea:1f: 95:08:3d:96:1b:80:98:b8:fc:19:c7:80:76:e0:9c: 17:19:7c:bf:15:06:4c:be:39:3b:50:11:16:23:b1: 98:3c:f2:c8:c6:d2:cd:4b:11:0b:b3:cd:13:50:08: df:83:fd:6e:56:b7:d1:3d:88:4e:6b:b1:ce:1c:b5: 74:1c:95:7d:14:0c:a8:54:f4:db:c0:74:80:65:1d: 0f:a3:a1:c3:b3:84:ca:32:a3:33:12:b4:ae:b3:09: fb:69:ce:2e:c7:dd:77:3c:49:8d:de:d0:85:9d:9a: b4:d7:27:22:56:8c:2f:e4:0d:c1:d1:75:76:8a:c8: 38:0d:9d:4d:d9:94:7d:fd:f6:55:1d:91:3b:a0:82: fe:8e:37:33:79:ec:e8:55:af:fd:97:d6:92:17:5d: d3:ec:e7:3c:a9:45:0a:f3:dc:ea:47:a2:9d:3f:46: 22:b5:49:4c:01:73:59:3b:c5:20:6e:63:20:24:78: 45:6e:59:da:0b:43:21:bb:c1:52:b5:10:df:47:de: 30:53:6d:80:2a:a2:50:3c:98:19:c2:ab:18:4d:77: 1a:cb:8d:6d:fa:a4:3e:58:f8:51:55:7e:7a:a5:dc: e1:3c:9e:ba:5f:7f:69:5f:39:db:69:9d:5d:0b:2f: 11:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:F7:D6:B6:C3:41:CA:BC:42:6A:FD:19:0F:E8:74:D8:E7:1D:F6:A5 X509v3 Authority Key Identifier: keyid:B0:B8:8E:EE:91:3B:2A:A8:D7:B5:95:37:15:3E:FC:D8:70:0A:91:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B62A9/D77F91421DA111E2BFCB309408B02CD2/sLiO7pE7KqjXtZU3FT782HAKkUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sLiO7pE7KqjXtZU3FT782HAKkUA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B62A9/D77F91421DA111E2BFCB309408B02CD2/sLiO7pE7KqjXtZU3FT782HAKkUA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:b5:7f:4d:4c:2a:a9:bc:6e:e9:b2:90:51:05:2a:ea:3d:02: e2:02:d2:22:d8:ff:4f:0f:b6:05:f5:44:65:36:1e:75:8c:2f: 0a:d3:24:3a:77:22:12:d4:c6:13:f5:92:96:cc:0c:89:76:cd: 45:e9:76:51:ac:2f:8e:e7:08:84:b0:55:47:3a:32:ba:11:5d: 5d:59:81:3d:e5:ab:52:f8:f7:e7:19:48:7f:3f:89:5c:cc:e3: 91:0f:34:e1:c3:5e:fd:5c:99:f6:a7:a2:87:fc:45:3b:79:a5: e8:b0:ac:34:f0:13:30:68:f8:4f:2c:70:fe:da:56:a2:43:52: 82:81:47:ca:e1:ef:f7:37:8f:b9:cf:7a:8d:62:ef:42:c8:12: a8:43:a1:49:ee:63:ff:d6:eb:9f:5f:47:6d:92:07:85:40:26: ae:50:aa:23:4b:45:32:2f:9f:00:1b:9c:b0:e5:af:fc:d5:3c: 06:f8:ef:39:d5:4c:83:94:f9:dc:8a:98:ec:6d:40:36:51:2f: e2:b6:d1:7f:9f:dd:79:b9:50:63:bf:23:0a:1e:5c:ce:97:11: 4f:87:60:58:f9:29:c0:28:03:43:8d:7c:2c:64:50:de:bd:d9: 9b:ed:fd:4f:08:9a:ff:53:1a:bf:1d:16:53:2c:d8:d3:a0:d4: e8:ca:83:c2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNIcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjYyQTkxMTAvBgNVBAUTKEIwQjg4RUVFOTEzQjJBQThEN0I1OTUzNzE1M0VGQ0Q4 NzAwQTkxNDAwHhcNMjUwNTMxMTUwNTU0WhcNMjUwNjA3MTUwNTU0WjAYMRYwFAYD VQQDEw02ODNiMWFkMi1mMTZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAztNHMc8Gxb6chBjA6h+VCD2WG4CYuPwZx4B24JwXGXy/FQZMvjk7UBEWI7GY PPLIxtLNSxELs80TUAjfg/1uVrfRPYhOa7HOHLV0HJV9FAyoVPTbwHSAZR0Po6HD s4TKMqMzErSuswn7ac4ux913PEmN3tCFnZq01yciVowv5A3B0XV2isg4DZ1N2ZR9 /fZVHZE7oIL+jjczeezoVa/9l9aSF13T7Oc8qUUK89zqR6KdP0YitUlMAXNZO8Ug bmMgJHhFblnaC0Mhu8FStRDfR94wU22AKqJQPJgZwqsYTXcay41t+qQ+WPhRVX56 pdzhPJ66X39pXznbaZ1dCy8RrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKj31rbD Qcq8Qmr9GQ/odNjnHfalMB8GA1UdIwQYMBaAFLC4ju6ROyqo17WVNxU+/NhwCpFA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjJBOS9ENzdGOTE0MjFE QTExMUUyQkZDQjMwOTQwOEIwMkNEMi9zTGlPN3BFN0txalh0WlUzRlQ3ODJIQUtr VUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NMaU83cEU3S3FqWHRaVTNGVDc4MkhBS2tVQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NjJBOS9ENzdGOTE0MjFEQTExMUUyQkZDQjMwOTQwOEIwMkNEMi9zTGlPN3BFN0tx alh0WlUzRlQ3ODJIQUtrVUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQArtX9NTCqpvG7pspBRBSrqPQLiAtIi2P9PD7YF9URlNh51jC8K0yQ6 dyIS1MYT9ZKWzAyJds1F6XZRrC+O5wiEsFVHOjK6EV1dWYE95atS+PfnGUh/P4lc zOORDzThw179XJn2p6KH/EU7eaXosKw08BMwaPhPLHD+2laiQ1KCgUfK4e/3N4+5 z3qNYu9CyBKoQ6FJ7mP/1uufX0dtkgeFQCauUKojS0UyL58AG5yw5a/81TwG+O85 1UyDlPncipjsbUA2US/ittF/n915uVBjvyMKHlzOlxFPh2BY+SnAKANDjXwsZFDe vdmb7f1PCJr/Uxq/HRZTLNjToNToyoPC -----END CERTIFICATE-----Generated at Sat May 31 16:55:05 2025 by rpki-client