$ rpki-client -vvf rpki.apnic.net/member_repository/A91B88CA/5696E746346511EFAF6DEB4EC4F9AE02/9iXmzAOQJv9byda9xC2NHBir8zs.mft File: 9iXmzAOQJv9byda9xC2NHBir8zs.mft (raw, json) Hash identifier: eC16u4UiM4vciFhjZppnVSDzSkbLsgYfqt5de9GTOo0= Subject key identifier: 1B:CE:0D:3A:FE:59:DC:A9:4E:42:E3:51:3A:DA:20:EE:EC:09:12:16 Authority key identifier: F6:25:E6:CC:03:90:26:FF:5B:C9:D6:BD:C4:2D:8D:1C:18:AB:F3:3B Certificate issuer: /CN=A91B88CA/serialNumber=F625E6CC039026FF5BC9D6BDC42D8D1C18ABF33B Certificate serial: EE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9iXmzAOQJv9byda9xC2NHBir8zs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B88CA/5696E746346511EFAF6DEB4EC4F9AE02/9iXmzAOQJv9byda9xC2NHBir8zs.mft Manifest number: D0 Signing time: Sat 31 May 2025 05:38:23 +0000 Manifest this update: Sat 31 May 2025 05:38:22 +0000 Manifest next update: Sat 07 Jun 2025 05:38:22 +0000 Files and hashes: 1: 9iXmzAOQJv9byda9xC2NHBir8zs.crl (hash: 1yKkvQJjr2aAi2ndEDzcxsBPB2xlRSrLBJC25DSnL9M=) 2: 5149E2D2320411F0A7F47652C4F9AE02.roa (hash: HH3GlG7L/oizFHurekpyH+8XRzajvV/dWmWXqsnoI54=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B88CA/5696E746346511EFAF6DEB4EC4F9AE02/9iXmzAOQJv9byda9xC2NHBir8zs.crl rsync://rpki.apnic.net/member_repository/A91B88CA/5696E746346511EFAF6DEB4EC4F9AE02/9iXmzAOQJv9byda9xC2NHBir8zs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9iXmzAOQJv9byda9xC2NHBir8zs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 05:38:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 238 (0xee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B88CA, serialNumber=F625E6CC039026FF5BC9D6BDC42D8D1C18ABF33B Validity Not Before: May 31 05:38:22 2025 GMT Not After : Jun 7 05:38:22 2025 GMT Subject: CN=683a95cf-b251 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:b9:27:16:5c:1e:99:b4:2f:b5:6a:52:d4:0b: 57:47:26:e9:1e:6a:b7:a0:4b:10:c5:2e:c5:f4:7b: f2:43:ca:7e:77:77:f5:6a:58:d3:dc:91:ac:13:db: 0a:23:f3:fc:42:79:93:a6:5a:4a:87:e4:1c:94:94: a1:82:94:e5:fe:89:86:6f:ff:cc:eb:a8:b0:ba:8a: 28:4f:bc:76:d0:f1:ec:b9:4c:76:6e:4a:84:76:97: 1e:f4:83:28:5e:8c:0a:ef:f4:ed:29:c5:01:88:a6: c6:44:39:87:2a:43:68:51:e4:3a:8d:37:d1:54:38: 3d:d1:be:34:3e:ba:fd:ad:68:7e:e5:ef:6a:91:ca: 34:59:51:02:ed:a2:b1:00:33:ea:bf:5b:72:db:40: d1:93:39:1b:d9:71:fe:25:3d:e7:24:bd:6e:5e:c0: 5a:62:33:50:67:f8:13:76:71:56:01:d9:3e:20:c1: 65:70:4a:8f:00:03:cc:98:69:d7:42:6a:ba:95:fa: 52:f1:43:8a:52:70:39:b4:60:f4:39:0b:09:40:33: 96:d4:45:e6:fc:0c:27:5c:96:c6:c7:a5:07:ff:9d: 84:93:c7:05:b1:2a:2c:a3:a1:3d:4f:13:c9:62:2a: 6c:f0:19:18:d5:cd:3e:38:bc:40:e7:7a:9a:65:a1: 94:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:CE:0D:3A:FE:59:DC:A9:4E:42:E3:51:3A:DA:20:EE:EC:09:12:16 X509v3 Authority Key Identifier: keyid:F6:25:E6:CC:03:90:26:FF:5B:C9:D6:BD:C4:2D:8D:1C:18:AB:F3:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B88CA/5696E746346511EFAF6DEB4EC4F9AE02/9iXmzAOQJv9byda9xC2NHBir8zs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9iXmzAOQJv9byda9xC2NHBir8zs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B88CA/5696E746346511EFAF6DEB4EC4F9AE02/9iXmzAOQJv9byda9xC2NHBir8zs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:b6:2e:18:c5:80:01:ac:ad:0a:96:ec:58:8c:c0:57:c3:d6: 07:b2:19:dc:b3:94:58:12:9a:8f:26:92:8f:0e:7a:e2:de:e6: 01:8f:70:1d:1c:27:af:50:ab:13:73:f0:ea:11:88:7f:e0:c4: cf:3e:36:f3:d1:29:7e:d6:c7:42:2f:7c:71:2f:10:91:c3:e3: 24:55:d9:97:a8:24:8b:73:99:d7:4c:c0:42:c0:af:69:d6:ed: 50:5c:7b:6d:a1:6b:c3:ff:f4:79:24:61:16:84:6e:06:ec:12: c7:dd:17:58:e2:bc:89:19:d5:ca:dd:22:49:9a:8b:53:4f:9c: 8e:80:6b:e3:f1:c0:1a:35:b2:9b:2d:02:fb:c9:4b:76:b6:13: 2a:b3:6b:f3:e3:3d:34:68:2e:c5:ad:1c:09:36:88:f8:91:d3: 34:c1:9f:af:0a:f7:a0:a5:8a:20:42:5d:7a:51:8e:8b:3f:48: 40:32:74:b4:c7:a7:d5:89:97:11:9a:5a:94:90:dc:04:b7:78: 30:87:ee:6f:75:60:a5:b5:50:39:39:f2:d9:e8:a7:44:80:17: f9:14:3c:ab:ac:42:93:d5:d5:da:2a:40:f6:71:37:a1:b2:c1: e4:b6:31:4c:1d:19:21:d9:44:a5:2b:59:ee:ad:0d:30:9d:1b: 94:48:92:44 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAO4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjg4Q0ExMTAvBgNVBAUTKEY2MjVFNkNDMDM5MDI2RkY1QkM5RDZCREM0MkQ4RDFD MThBQkYzM0IwHhcNMjUwNTMxMDUzODIyWhcNMjUwNjA3MDUzODIyWjAYMRYwFAYD VQQDEw02ODNhOTVjZi1iMjUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyLknFlwembQvtWpS1AtXRybpHmq3oEsQxS7F9HvyQ8p+d3f1aljT3JGsE9sK I/P8QnmTplpKh+QclJShgpTl/omGb//M66iwuoooT7x20PHsuUx2bkqEdpce9IMo XowK7/TtKcUBiKbGRDmHKkNoUeQ6jTfRVDg90b40Prr9rWh+5e9qkco0WVEC7aKx ADPqv1ty20DRkzkb2XH+JT3nJL1uXsBaYjNQZ/gTdnFWAdk+IMFlcEqPAAPMmGnX Qmq6lfpS8UOKUnA5tGD0OQsJQDOW1EXm/AwnXJbGx6UH/52Ek8cFsSoso6E9TxPJ Yips8BkY1c0+OLxA53qaZaGUgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBvODTr+ WdypTkLjUTraIO7sCRIWMB8GA1UdIwQYMBaAFPYl5swDkCb/W8nWvcQtjRwYq/M7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCODhDQS81Njk2RTc0NjM0 NjUxMUVGQUY2REVCNEVDNEY5QUUwMi85aVhtekFPUUp2OWJ5ZGE5eEMyTkhCaXI4 enMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlpWG16QU9RSnY5YnlkYTl4QzJOSEJpcjh6cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC ODhDQS81Njk2RTc0NjM0NjUxMUVGQUY2REVCNEVDNEY5QUUwMi85aVhtekFPUUp2 OWJ5ZGE5eEMyTkhCaXI4enMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCGti4YxYABrK0KluxYjMBXw9YHshncs5RYEpqPJpKPDnri3uYBj3Ad HCevUKsTc/DqEYh/4MTPPjbz0Sl+1sdCL3xxLxCRw+MkVdmXqCSLc5nXTMBCwK9p 1u1QXHttoWvD//R5JGEWhG4G7BLH3RdY4ryJGdXK3SJJmotTT5yOgGvj8cAaNbKb LQL7yUt2thMqs2vz4z00aC7FrRwJNoj4kdM0wZ+vCvegpYogQl16UY6LP0hAMnS0 x6fViZcRmlqUkNwEt3gwh+5vdWCltVA5OfLZ6KdEgBf5FDyrrEKT1dXaKkD2cTeh ssHktjFMHRkh2USlK1nurQ0wnRuUSJJE -----END CERTIFICATE-----Generated at Sat May 31 16:01:53 2025 by rpki-client