$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/fVVGmSbR-TTzrylkXrbBC7YGm8k.mft File: fVVGmSbR-TTzrylkXrbBC7YGm8k.mft (raw, json) Hash identifier: Y/U66Al+DCskS8CmALJfZsHvcqUTAdUAfWR7tLmatvc= Subject key identifier: 9E:35:31:08:F9:9A:4A:AF:3D:7E:D0:E2:80:68:3B:70:65:BD:D0:7A Authority key identifier: 7D:55:46:99:26:D1:F9:34:F3:AF:29:64:5E:B6:C1:0B:B6:06:9B:C9 Certificate issuer: /CN=A91B7770/serialNumber=7D55469926D1F934F3AF29645EB6C10BB6069BC9 Certificate serial: 095A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fVVGmSbR-TTzrylkXrbBC7YGm8k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/fVVGmSbR-TTzrylkXrbBC7YGm8k.mft Manifest number: 08F4 Signing time: Fri 30 May 2025 20:50:01 +0000 Manifest this update: Fri 30 May 2025 20:50:01 +0000 Manifest next update: Fri 06 Jun 2025 20:50:01 +0000 Files and hashes: 1: fVVGmSbR-TTzrylkXrbBC7YGm8k.crl (hash: 6yGz32RgS8PHCZzRK2cnuviAs94l8H4tmkuQmnQALrc=) 2: 49E75ECAD66F11EF8C443287C4F9AE02.roa (hash: a0K/4suOukzalMmGXoAuXRRlPLJmkTGLqgOEswzREmw=) 3: 501941C093F211EEA029A113C4F9AE02.roa (hash: AzLlJkV6uweEFCMcx/o9vS17187fN+9zNJtq2qRlwjg=) 4: 781C64FAF58611ED89273159C4F9AE02.roa (hash: KQsiNAY3rgJSqaPcQR/vrNEFqpIv1dzI+sj/d5igWno=) 5: FECBA2C23B2611EFAF167E83C4F9AE02.roa (hash: tfdFxm7zDzSNY8KLHsb30XY14VNoD7lmA8Phn0Ip+7k=) 6: 9672E862793811EE92C54834C4F9AE02.roa (hash: VZDkUmHUSNQz0PuWGeefW0AZnX5klCTCiKAwXgSpJ9o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/fVVGmSbR-TTzrylkXrbBC7YGm8k.crl rsync://rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/fVVGmSbR-TTzrylkXrbBC7YGm8k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fVVGmSbR-TTzrylkXrbBC7YGm8k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 20:50:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2394 (0x95a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7770, serialNumber=7D55469926D1F934F3AF29645EB6C10BB6069BC9 Validity Not Before: May 30 20:50:01 2025 GMT Not After : Jun 6 20:50:01 2025 GMT Subject: CN=683a19f9-40fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:0f:8f:e9:c6:43:f7:b4:54:2a:07:98:e6:8f: 2b:74:e0:cd:fb:27:df:3c:3a:17:c0:fd:1d:33:35: 56:b6:9a:4c:af:62:8c:e0:96:5a:78:0b:19:d1:e7: a9:12:67:1f:04:1f:b8:a7:18:ef:97:f4:7c:a5:31: 04:d2:fe:2f:94:0c:0f:a5:9c:d5:75:4a:b0:91:51: 27:54:60:04:8d:b3:08:3b:51:6c:69:2d:6f:c8:87: e0:ef:17:86:44:91:90:77:bc:08:11:87:b7:f1:41: 41:cd:23:7e:17:49:db:b2:52:32:17:1f:d6:73:4d: 46:d2:7e:bf:3c:52:97:01:3c:be:75:47:64:85:2e: d7:92:dc:f7:19:0e:81:bd:be:ef:54:4f:df:bd:24: df:f9:2e:f0:9d:e1:e5:20:e4:c4:81:69:42:52:91: df:d1:3f:85:f2:cb:a3:e4:55:37:b6:86:6f:67:f5: ea:07:c5:13:aa:33:83:81:58:d4:a6:47:1a:da:d5: 83:3b:da:51:9d:9d:f2:5d:8f:a7:2e:fc:75:49:41: 8e:a7:5e:46:0c:e8:ee:aa:3f:31:7c:25:89:90:6d: a9:21:a1:f9:e3:dd:d9:7e:51:e5:c4:99:b7:a7:f0: e9:b0:bf:9f:e1:e8:2b:74:2b:a2:a3:cf:95:6b:72: bd:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:35:31:08:F9:9A:4A:AF:3D:7E:D0:E2:80:68:3B:70:65:BD:D0:7A X509v3 Authority Key Identifier: keyid:7D:55:46:99:26:D1:F9:34:F3:AF:29:64:5E:B6:C1:0B:B6:06:9B:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/fVVGmSbR-TTzrylkXrbBC7YGm8k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fVVGmSbR-TTzrylkXrbBC7YGm8k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/fVVGmSbR-TTzrylkXrbBC7YGm8k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:e6:22:22:2e:35:0f:51:cc:58:05:b5:42:98:75:7d:d2:40: 0d:91:44:c6:db:39:55:e7:94:77:ef:2f:86:e4:08:92:70:ee: 13:98:b2:28:73:7a:d2:76:aa:f2:3f:71:d0:82:70:58:17:87: 64:c2:5e:96:b2:86:b0:1a:a1:a9:22:70:77:8c:97:de:c8:95: e6:1b:98:8c:08:8f:1a:81:58:4b:1f:c7:67:bc:5b:2c:d7:40: 6d:3d:d2:5d:38:c2:ee:0e:5c:df:58:b0:4b:52:49:20:ca:17: 2a:14:07:8b:1d:a7:24:52:2e:c0:9c:5e:57:9b:84:1a:9d:73: 84:d7:2e:fb:11:ca:33:4f:a2:0d:46:c9:f1:4d:fd:1d:1f:48: d2:c8:20:6f:c2:8b:40:fc:f9:bd:b8:a8:b7:df:d1:12:58:01: f1:01:c8:b4:fb:40:64:47:2c:fb:ca:03:ac:59:a1:3b:69:66: 27:cb:45:5e:38:76:6a:95:7a:66:fb:e9:39:1b:a4:16:df:d1: d2:81:72:cd:25:a3:88:e9:a7:43:c3:fd:45:5b:e3:4d:00:ed: f3:a1:84:9f:75:00:66:c7:39:bd:f7:19:16:97:30:a8:eb:f7: 08:18:1a:8e:ce:10:cc:17:78:5d:26:e3:f9:bf:26:e7:96:55: 7c:45:43:fa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCVowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjc3NzAxMTAvBgNVBAUTKDdENTU0Njk5MjZEMUY5MzRGM0FGMjk2NDVFQjZDMTBC QjYwNjlCQzkwHhcNMjUwNTMwMjA1MDAxWhcNMjUwNjA2MjA1MDAxWjAYMRYwFAYD VQQDEw02ODNhMTlmOS00MGZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyQ+P6cZD97RUKgeY5o8rdODN+yffPDoXwP0dMzVWtppMr2KM4JZaeAsZ0eep EmcfBB+4pxjvl/R8pTEE0v4vlAwPpZzVdUqwkVEnVGAEjbMIO1FsaS1vyIfg7xeG RJGQd7wIEYe38UFBzSN+F0nbslIyFx/Wc01G0n6/PFKXATy+dUdkhS7Xktz3GQ6B vb7vVE/fvSTf+S7wneHlIOTEgWlCUpHf0T+F8suj5FU3toZvZ/XqB8UTqjODgVjU pkca2tWDO9pRnZ3yXY+nLvx1SUGOp15GDOjuqj8xfCWJkG2pIaH5493ZflHlxJm3 p/DpsL+f4egrdCuio8+Va3K9owIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ41MQj5 mkqvPX7Q4oBoO3BlvdB6MB8GA1UdIwQYMBaAFH1VRpkm0fk0868pZF62wQu2BpvJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNzc3MC9FNjgxMDQxMEMw QUUxMUVBQjk1QUI1NzJDNEY5QUUwMi9mVlZHbVNiUi1UVHpyeWxrWHJiQkM3WUdt OGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZWVkdtU2JSLVRUenJ5bGtYcmJCQzdZR204ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Nzc3MC9FNjgxMDQxMEMwQUUxMUVBQjk1QUI1NzJDNEY5QUUwMi9mVlZHbVNiUi1U VHpyeWxrWHJiQkM3WUdtOGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA35iIiLjUPUcxYBbVCmHV90kANkUTG2zlV55R37y+G5AiScO4TmLIo c3rSdqryP3HQgnBYF4dkwl6WsoawGqGpInB3jJfeyJXmG5iMCI8agVhLH8dnvFss 10BtPdJdOMLuDlzfWLBLUkkgyhcqFAeLHackUi7AnF5Xm4QanXOE1y77EcozT6IN RsnxTf0dH0jSyCBvwotA/Pm9uKi339ESWAHxAci0+0BkRyz7ygOsWaE7aWYny0Ve OHZqlXpm++k5G6QW39HSgXLNJaOI6adDw/1FW+NNAO3zoYSfdQBmxzm99xkWlzCo 6/cIGBqOzhDMF3hdJuP5vybnllV8RUP6 -----END CERTIFICATE-----Generated at Sat May 31 17:18:56 2025 by rpki-client