$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6F47/B4A86C381D8411E2969FC5DA08B02CD2/U4sHbgqt2PrilwyVQ-hJqQ_nN1I.mft File: U4sHbgqt2PrilwyVQ-hJqQ_nN1I.mft (raw, json) Hash identifier: /EmtkLlUKUZw4UiaHN89P8hgI/8wrIXIgX09zeq1B18= Subject key identifier: 3E:3B:1D:26:C2:18:E6:48:7A:92:79:49:29:4A:B6:EC:DF:BB:DE:DF Authority key identifier: 53:8B:07:6E:0A:AD:D8:FA:E2:97:0C:95:43:E8:49:A9:0F:E7:37:52 Certificate issuer: /CN=A91B6F47/serialNumber=538B076E0AADD8FAE2970C9543E849A90FE73752 Certificate serial: 3562 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U4sHbgqt2PrilwyVQ-hJqQ_nN1I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B6F47/B4A86C381D8411E2969FC5DA08B02CD2/U4sHbgqt2PrilwyVQ-hJqQ_nN1I.mft Manifest number: 34E6 Signing time: Sat 31 May 2025 14:24:23 +0000 Manifest this update: Sat 31 May 2025 14:24:23 +0000 Manifest next update: Sat 07 Jun 2025 14:24:23 +0000 Files and hashes: 1: U4sHbgqt2PrilwyVQ-hJqQ_nN1I.crl (hash: jsIhiIPnow/vgucE4d0S8Djunn6WrJC+BlVqBRiya8Q=) 2: DF8602D05E5B11ED994E491CC4F9AE02.roa (hash: KKCg2NooRoQGuF3KYpzz51c9C/45UUPObnLo2e5njhU=) 3: D0886954188811EC8E86754FC4F9AE02.roa (hash: yPv2xJqSMbxdqO3CUxzFvtSmE89AHilhOo/061TH8FU=) 4: AB9889725E5E11EDB5361D3BC4F9AE02.roa (hash: nfNjfg1IXDDhMM0k16fT6xDTUZvLHRQ/C+xvVXQFUFE=) 5: 99CF729E221011ED980A6F47C4F9AE02.roa (hash: iSQxLeiRN1fYoIns2yWqQhKW9w0d7Bh4Hi7g+FcoiAo=) 6: 491E49AECDCA11ED8F57D386C4F9AE02.roa (hash: GOobL3IcAmOzxEXI8Av9eECmrglVLT+e8Yk36aU9ns8=) 7: 9F3A919468D811EFB2FE405FC4F9AE02.roa (hash: ZaxlSh3XWBv2fOJrVopMAyhJjHEvnP8TGG96c6iuXcg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B6F47/B4A86C381D8411E2969FC5DA08B02CD2/U4sHbgqt2PrilwyVQ-hJqQ_nN1I.crl rsync://rpki.apnic.net/member_repository/A91B6F47/B4A86C381D8411E2969FC5DA08B02CD2/U4sHbgqt2PrilwyVQ-hJqQ_nN1I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U4sHbgqt2PrilwyVQ-hJqQ_nN1I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 14:24:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13666 (0x3562) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B6F47, serialNumber=538B076E0AADD8FAE2970C9543E849A90FE73752 Validity Not Before: May 31 14:24:23 2025 GMT Not After : Jun 7 14:24:23 2025 GMT Subject: CN=683b1117-26b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:34:e4:b0:c2:40:fd:b7:1c:d1:56:4d:4b:82: cb:72:1c:e7:77:d3:9e:ce:b2:a7:e4:a2:dc:f7:7b: 25:b1:fe:5b:06:38:2a:3b:5a:15:7e:a4:67:f8:95: 83:62:87:72:69:bb:db:44:2e:21:42:8e:ee:6e:f8: 26:01:3c:09:af:4b:21:06:fc:cc:f3:7e:95:ca:20: a2:79:48:f2:7c:de:f2:ba:68:b3:5d:d7:96:f8:d2: 01:4c:67:b3:97:bf:99:d3:e4:cc:76:e5:7f:f9:60: 11:07:17:e9:1c:09:f1:32:41:49:33:7f:7f:0d:aa: f7:53:3e:c3:f0:ff:55:47:a8:17:3b:c0:b1:27:97: 3f:27:a1:83:7b:ce:15:ee:fe:30:3b:09:f0:ba:09: a2:d1:9c:6e:0b:ef:f2:46:e6:85:f7:b1:e8:70:ed: fe:01:44:77:60:24:0b:8a:c1:5a:91:e2:83:2d:ef: 33:3a:4b:a7:a7:82:88:a6:f8:7c:03:da:ca:59:fa: 91:a4:f2:0a:3d:fa:67:e2:6c:99:29:d4:56:be:44: a0:15:f6:e3:7d:b2:41:8d:a1:c7:c5:70:05:e5:8c: cf:ae:f3:b6:f7:d6:ca:7f:6a:d3:df:1f:19:30:f2: 85:06:94:5c:00:5b:da:fb:41:af:d4:8e:d4:8a:fe: d3:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:3B:1D:26:C2:18:E6:48:7A:92:79:49:29:4A:B6:EC:DF:BB:DE:DF X509v3 Authority Key Identifier: keyid:53:8B:07:6E:0A:AD:D8:FA:E2:97:0C:95:43:E8:49:A9:0F:E7:37:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B6F47/B4A86C381D8411E2969FC5DA08B02CD2/U4sHbgqt2PrilwyVQ-hJqQ_nN1I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U4sHbgqt2PrilwyVQ-hJqQ_nN1I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6F47/B4A86C381D8411E2969FC5DA08B02CD2/U4sHbgqt2PrilwyVQ-hJqQ_nN1I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:46:1e:85:d2:98:32:3f:0e:fd:b8:2f:95:ab:75:ee:b7:e4: 36:92:91:38:80:e3:78:6b:ca:57:ad:76:0a:ac:c2:4a:c5:a1: ec:69:c8:2b:28:28:f1:16:f2:58:ad:f8:c4:47:50:5a:2a:fd: 74:b9:f7:6f:6c:3d:b2:4d:2c:f4:b8:09:7b:0d:cc:5f:2e:eb: 3e:5a:b8:f6:21:b5:8c:1c:5b:23:68:7a:af:33:b6:1b:fe:ff: 1b:a2:77:57:45:91:5e:a6:ed:79:53:25:65:23:01:a9:d8:18: b9:ad:27:ce:6b:41:31:b7:b3:c3:83:48:df:82:af:c7:d6:e9: 1d:25:71:5a:27:98:de:82:6f:35:09:94:a1:d6:c5:ea:51:11: e3:3d:dc:03:84:d0:88:f7:fe:08:b5:c9:5c:dc:ce:7e:6f:05: 1d:f1:04:de:29:fa:f3:cc:c7:bb:7b:fa:46:b2:8f:23:5b:8e: be:af:6f:8c:c5:a0:c6:f5:22:d9:78:35:36:73:12:ba:94:64: ac:ba:08:28:ef:4d:a2:2a:f9:38:3f:9e:a9:f5:8d:48:5d:24: 57:75:ec:8d:e5:38:0d:0b:90:85:54:08:b1:e5:04:cf:3b:b0: d6:61:0e:0b:ed:b2:8c:ff:52:4a:0b:d8:08:59:45:94:fa:1d: 8f:6b:5a:64 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNWIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjZGNDcxMTAvBgNVBAUTKDUzOEIwNzZFMEFBREQ4RkFFMjk3MEM5NTQzRTg0OUE5 MEZFNzM3NTIwHhcNMjUwNTMxMTQyNDIzWhcNMjUwNjA3MTQyNDIzWjAYMRYwFAYD VQQDEw02ODNiMTExNy0yNmI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwTTksMJA/bcc0VZNS4LLchznd9OezrKn5KLc93slsf5bBjgqO1oVfqRn+JWD YodyabvbRC4hQo7ubvgmATwJr0shBvzM836VyiCieUjyfN7yumizXdeW+NIBTGez l7+Z0+TMduV/+WARBxfpHAnxMkFJM39/Dar3Uz7D8P9VR6gXO8CxJ5c/J6GDe84V 7v4wOwnwugmi0ZxuC+/yRuaF97HocO3+AUR3YCQLisFakeKDLe8zOkunp4KIpvh8 A9rKWfqRpPIKPfpn4myZKdRWvkSgFfbjfbJBjaHHxXAF5YzPrvO299bKf2rT3x8Z MPKFBpRcAFva+0Gv1I7Uiv7TtwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD47HSbC GOZIepJ5SSlKtuzfu97fMB8GA1UdIwQYMBaAFFOLB24Krdj64pcMlUPoSakP5zdS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNkY0Ny9CNEE4NkMzODFE ODQxMUUyOTY5RkM1REEwOEIwMkNEMi9VNHNIYmdxdDJQcmlsd3lWUS1oSnFRX25O MUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1U0c0hiZ3F0MlByaWx3eVZRLWhKcVFfbk4xSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NkY0Ny9CNEE4NkMzODFEODQxMUUyOTY5RkM1REEwOEIwMkNEMi9VNHNIYmdxdDJQ cmlsd3lWUS1oSnFRX25OMUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCLRh6F0pgyPw79uC+Vq3Xut+Q2kpE4gON4a8pXrXYKrMJKxaHsacgr KCjxFvJYrfjER1BaKv10ufdvbD2yTSz0uAl7DcxfLus+Wrj2IbWMHFsjaHqvM7Yb /v8bondXRZFepu15UyVlIwGp2Bi5rSfOa0Ext7PDg0jfgq/H1ukdJXFaJ5jegm81 CZSh1sXqURHjPdwDhNCI9/4Itclc3M5+bwUd8QTeKfrzzMe7e/pGso8jW46+r2+M xaDG9SLZeDU2cxK6lGSsuggo702iKvk4P56p9Y1IXSRXdeyN5TgNC5CFVAix5QTP O7DWYQ4L7bKM/1JKC9gIWUWU+h2Pa1pk -----END CERTIFICATE-----Generated at Sat May 31 16:43:02 2025 by rpki-client