$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6462/DAF435E0184311EAB0AF201DC4F9AE02/kaXm5XbDFcQxnu-f2jKHrSDDgDk.mft File: kaXm5XbDFcQxnu-f2jKHrSDDgDk.mft (raw, json) Hash identifier: V5OGLrzGE2KYZ2d8C2fL5xEubxEhUf4N6nuqPDlIU/Q= Subject key identifier: 97:DF:BC:0A:B5:7E:8F:45:85:0A:B5:F6:9A:EB:30:A6:DB:F6:BB:50 Authority key identifier: 91:A5:E6:E5:76:C3:15:C4:31:9E:EF:9F:DA:32:87:AD:20:C3:80:39 Certificate issuer: /CN=A91B6462/serialNumber=91A5E6E576C315C4319EEF9FDA3287AD20C38039 Certificate serial: 0C03 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kaXm5XbDFcQxnu-f2jKHrSDDgDk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B6462/DAF435E0184311EAB0AF201DC4F9AE02/kaXm5XbDFcQxnu-f2jKHrSDDgDk.mft Manifest number: 0BF0 Signing time: Fri 30 May 2025 18:58:48 +0000 Manifest this update: Fri 30 May 2025 18:58:47 +0000 Manifest next update: Fri 06 Jun 2025 18:58:47 +0000 Files and hashes: 1: kaXm5XbDFcQxnu-f2jKHrSDDgDk.crl (hash: cLnuariWpczANFIdMFKZzkDDSw3WRr4rQzanJ0RC64g=) 2: EA531ACE61C211EF89F25E2CC4F9AE02.roa (hash: wvS2IKCsAphgy9VmVy8jmzdrhXrxZNTENgiqGBEyqqY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B6462/DAF435E0184311EAB0AF201DC4F9AE02/kaXm5XbDFcQxnu-f2jKHrSDDgDk.crl rsync://rpki.apnic.net/member_repository/A91B6462/DAF435E0184311EAB0AF201DC4F9AE02/kaXm5XbDFcQxnu-f2jKHrSDDgDk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kaXm5XbDFcQxnu-f2jKHrSDDgDk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 18:58:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3075 (0xc03) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B6462, serialNumber=91A5E6E576C315C4319EEF9FDA3287AD20C38039 Validity Not Before: May 30 18:58:47 2025 GMT Not After : Jun 6 18:58:47 2025 GMT Subject: CN=6839ffe7-c686 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:3a:f9:9a:87:db:a8:a6:c1:20:18:94:4d:ee: 4e:3b:2e:54:a8:bb:b0:e4:8f:8a:73:8f:5e:d3:d6: 64:bf:55:96:66:3f:02:f4:99:e3:23:4d:b0:e8:ad: cb:78:11:34:3f:16:4d:8d:bc:89:fa:44:4c:be:24: e0:34:bc:5b:c3:77:fe:99:b9:fc:15:e6:20:9e:6e: 55:fd:52:8a:bb:ff:e5:bc:74:cc:fb:28:2a:c1:87: b3:76:e2:f9:f4:bf:d6:39:ae:e1:e3:e6:bc:06:e3: 56:bf:bb:9e:1e:ec:40:5a:91:67:85:13:8b:53:c2: db:71:c9:3f:3b:a6:bb:1b:5e:51:fb:cc:67:8d:a3: 3c:0e:2f:68:77:24:5a:94:30:35:3b:f8:bd:e8:e0: ff:0f:16:84:ed:d7:d3:02:c2:cb:1a:fb:02:95:fc: 9d:79:40:04:5f:65:1d:f5:21:cb:03:b3:58:ad:eb: d8:c2:ae:bf:fc:9e:2c:33:f3:9f:b8:c2:79:88:8d: 51:84:f3:b1:9a:45:68:d8:41:f8:7c:c8:95:94:50: 7a:79:15:b1:37:3f:3a:2a:6e:0c:3a:fc:b2:a9:0b: 69:ca:3b:5e:78:5f:54:b4:6b:62:7f:da:c3:d7:1b: 25:de:67:19:61:cc:37:1e:a1:07:1e:41:b2:d8:76: 0f:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:DF:BC:0A:B5:7E:8F:45:85:0A:B5:F6:9A:EB:30:A6:DB:F6:BB:50 X509v3 Authority Key Identifier: keyid:91:A5:E6:E5:76:C3:15:C4:31:9E:EF:9F:DA:32:87:AD:20:C3:80:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B6462/DAF435E0184311EAB0AF201DC4F9AE02/kaXm5XbDFcQxnu-f2jKHrSDDgDk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kaXm5XbDFcQxnu-f2jKHrSDDgDk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6462/DAF435E0184311EAB0AF201DC4F9AE02/kaXm5XbDFcQxnu-f2jKHrSDDgDk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:65:ed:47:5b:a0:a3:8b:08:db:6d:99:76:c6:8a:64:4c:49: ce:85:bf:64:77:51:73:63:64:25:92:89:ee:ce:76:86:29:2b: 84:d1:98:83:34:8d:b9:ca:89:8a:9f:e4:d3:f1:27:e4:4c:4c: d6:93:e3:c3:05:cb:a6:ac:e9:38:a7:a5:e9:2b:39:4c:a9:5e: 4b:87:8b:fa:44:99:86:d4:ac:f1:8a:4c:15:25:c3:a5:ca:53: 49:ea:83:d1:53:3c:f3:cf:a1:de:a0:ea:9e:af:e4:cd:5f:41: d5:b9:86:cc:5a:d8:65:40:e7:62:00:33:1c:87:9a:7e:f1:dc: 73:9c:f4:d7:53:c2:b1:2d:8f:9c:58:01:81:01:9f:ce:01:e3: 12:64:e5:bf:c3:23:ae:ab:17:d9:44:87:67:25:9f:d7:c6:59: 78:28:07:d2:3c:60:c4:58:00:b5:fb:23:b2:18:61:6d:e5:96: 6a:f4:4a:88:3e:17:25:a6:1f:41:46:45:9f:f7:00:e9:32:f9: 90:6f:ab:42:8e:60:29:2a:ea:46:81:3c:41:1e:3e:1e:49:c3: c3:e4:94:9e:ab:6d:34:f1:06:10:78:52:e6:ba:4e:7e:44:b2: cc:a9:1a:07:12:61:c2:8b:9b:4b:3c:bf:7f:d3:a5:39:27:ae: e9:44:7a:b8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDAMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjY0NjIxMTAvBgNVBAUTKDkxQTVFNkU1NzZDMzE1QzQzMTlFRUY5RkRBMzI4N0FE MjBDMzgwMzkwHhcNMjUwNTMwMTg1ODQ3WhcNMjUwNjA2MTg1ODQ3WjAYMRYwFAYD VQQDEw02ODM5ZmZlNy1jNjg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxDr5mofbqKbBIBiUTe5OOy5UqLuw5I+Kc49e09Zkv1WWZj8C9JnjI02w6K3L eBE0PxZNjbyJ+kRMviTgNLxbw3f+mbn8FeYgnm5V/VKKu//lvHTM+ygqwYezduL5 9L/WOa7h4+a8BuNWv7ueHuxAWpFnhROLU8Lbcck/O6a7G15R+8xnjaM8Di9odyRa lDA1O/i96OD/DxaE7dfTAsLLGvsClfydeUAEX2Ud9SHLA7NYrevYwq6//J4sM/Of uMJ5iI1RhPOxmkVo2EH4fMiVlFB6eRWxNz86Km4MOvyyqQtpyjteeF9UtGtif9rD 1xsl3mcZYcw3HqEHHkGy2HYPLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJffvAq1 fo9FhQq19prrMKbb9rtQMB8GA1UdIwQYMBaAFJGl5uV2wxXEMZ7vn9oyh60gw4A5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjQ2Mi9EQUY0MzVFMDE4 NDMxMUVBQjBBRjIwMURDNEY5QUUwMi9rYVhtNVhiREZjUXhudS1mMmpLSHJTRERn RGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2thWG01WGJERmNReG51LWYyaktIclNERGdEay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NjQ2Mi9EQUY0MzVFMDE4NDMxMUVBQjBBRjIwMURDNEY5QUUwMi9rYVhtNVhiREZj UXhudS1mMmpLSHJTRERnRGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBIZe1HW6CjiwjbbZl2xopkTEnOhb9kd1FzY2QlkonuznaGKSuE0ZiD NI25yomKn+TT8SfkTEzWk+PDBcumrOk4p6XpKzlMqV5Lh4v6RJmG1KzxikwVJcOl ylNJ6oPRUzzzz6HeoOqer+TNX0HVuYbMWthlQOdiADMch5p+8dxznPTXU8KxLY+c WAGBAZ/OAeMSZOW/wyOuqxfZRIdnJZ/Xxll4KAfSPGDEWAC1+yOyGGFt5ZZq9EqI Phclph9BRkWf9wDpMvmQb6tCjmApKupGgTxBHj4eScPD5JSeq2008QYQeFLmuk5+ RLLMqRoHEmHCi5tLPL9/06U5J67pRHq4 -----END CERTIFICATE-----Generated at Sat May 31 16:33:08 2025 by rpki-client