$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8D33/59626710477711EEA6BD537EC4F9AE02/CNaM9FAHRTdf8sxYS6X75Xe-4z8.mft File: CNaM9FAHRTdf8sxYS6X75Xe-4z8.mft (raw, json) Hash identifier: dyPsY1bj9ZHBqBh/n57vJ4mmRYVjot2sV/ZM5KSzAsQ= Subject key identifier: 4A:21:6B:81:75:BD:44:5F:37:2F:DF:65:DF:37:FB:49:C3:91:7E:97 Authority key identifier: 08:D6:8C:F4:50:07:45:37:5F:F2:CC:58:4B:A5:FB:E5:77:BE:E3:3F Certificate issuer: /CN=A91B8D33/serialNumber=08D68CF4500745375FF2CC584BA5FBE577BEE33F Certificate serial: 015A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNaM9FAHRTdf8sxYS6X75Xe-4z8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B8D33/59626710477711EEA6BD537EC4F9AE02/CNaM9FAHRTdf8sxYS6X75Xe-4z8.mft Manifest number: 0150 Signing time: Sat 31 May 2025 03:54:36 +0000 Manifest this update: Sat 31 May 2025 03:54:36 +0000 Manifest next update: Sat 07 Jun 2025 03:54:36 +0000 Files and hashes: 1: CNaM9FAHRTdf8sxYS6X75Xe-4z8.crl (hash: w479QRPypFcpNt7j2phANtsA3tT6C3qthGzFPj8nL4I=) 2: E62F8796D1BD11EFBCCC0B68C4F9AE02.roa (hash: fNs1z1deex6fcIdqMxez0n/drhicpYWMQnLuUAo17fo=) 3: 86D7DAE6D1C211EF9AA9410EC4F9AE02.roa (hash: ygqqEQTyg2IH19vlQAL4kX0HHDThJX4eE1C7WPj4wYg=) 4: C698E13ED1BD11EF9C00D867C4F9AE02.roa (hash: xRbmb+/1S1f8++5LVT2TgnO4g2wWlkEYjHuBK2BLWRw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B8D33/59626710477711EEA6BD537EC4F9AE02/CNaM9FAHRTdf8sxYS6X75Xe-4z8.crl rsync://rpki.apnic.net/member_repository/A91B8D33/59626710477711EEA6BD537EC4F9AE02/CNaM9FAHRTdf8sxYS6X75Xe-4z8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNaM9FAHRTdf8sxYS6X75Xe-4z8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 03:54:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 346 (0x15a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B8D33, serialNumber=08D68CF4500745375FF2CC584BA5FBE577BEE33F Validity Not Before: May 31 03:54:36 2025 GMT Not After : Jun 7 03:54:36 2025 GMT Subject: CN=683a7d7c-b01d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:24:f0:5a:96:f3:64:02:06:01:98:98:4e:ab: e5:a6:f5:39:84:49:65:a6:03:e0:f8:7b:de:fd:c5: e1:28:b7:07:2b:9c:78:2a:6b:db:ed:7f:01:5a:98: 7d:48:13:e6:45:e4:36:e4:b4:10:50:ef:08:94:04: 9b:c6:3c:b7:73:58:c0:cf:9f:71:ef:60:c1:7a:bb: 62:98:df:22:22:fd:27:39:9e:cf:a0:92:9a:73:27: cd:4c:99:4b:8b:78:b3:76:38:93:b4:e9:e6:e9:72: de:bf:7b:eb:d5:fe:a9:fd:b4:ce:c5:ef:b2:1c:0a: 10:1a:de:68:dc:59:00:cd:9a:07:1d:f3:78:be:4d: 04:fb:5a:5c:67:0c:6e:e8:15:49:b0:61:0a:49:3e: 9e:ba:05:6c:79:d3:3f:de:de:25:33:29:25:8b:f0: ff:a7:a2:ac:79:04:ff:6e:06:f2:a2:d5:9d:a2:8e: 72:39:9f:83:1c:74:22:b7:8e:74:a4:ad:60:e4:72: dc:de:c8:5a:4e:4d:38:ea:9a:0a:34:aa:ea:82:d1: 57:46:88:3c:33:93:af:dd:fc:cf:5d:75:a6:83:d9: ea:ef:75:39:c4:d5:d4:de:3b:79:ec:a4:b6:08:57: c3:a2:65:d9:d2:8e:dc:23:65:da:46:ca:d5:10:b3: ad:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:21:6B:81:75:BD:44:5F:37:2F:DF:65:DF:37:FB:49:C3:91:7E:97 X509v3 Authority Key Identifier: keyid:08:D6:8C:F4:50:07:45:37:5F:F2:CC:58:4B:A5:FB:E5:77:BE:E3:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B8D33/59626710477711EEA6BD537EC4F9AE02/CNaM9FAHRTdf8sxYS6X75Xe-4z8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNaM9FAHRTdf8sxYS6X75Xe-4z8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8D33/59626710477711EEA6BD537EC4F9AE02/CNaM9FAHRTdf8sxYS6X75Xe-4z8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:99:48:f4:bd:5b:7b:28:d5:07:24:8e:ba:c8:53:4f:1a:62: 4c:07:3d:d4:1a:de:f8:ae:29:f1:dc:79:2d:79:4c:00:4a:38: 94:5d:9e:10:fa:3a:00:9e:0e:14:67:36:85:6e:16:7d:bf:51: dc:c0:58:ee:2e:6a:4f:f0:02:b4:f1:1b:2e:e0:08:b9:8f:97: 22:b1:36:57:11:a2:e8:20:b8:2d:da:84:3c:81:75:39:a1:20: 86:aa:9c:2e:fd:18:29:61:47:6e:4e:e5:29:c6:62:d7:9e:92: 2f:b4:7c:08:58:1f:98:b2:59:e3:66:54:7a:06:63:c9:c8:c5: 08:9c:ca:6a:bb:ed:74:e5:cc:75:9a:43:23:80:2f:d0:14:0b: c2:e6:93:6a:1f:32:57:f2:37:da:22:0a:bc:5a:19:70:5f:78: f2:0c:fe:5e:e3:61:08:aa:62:d8:c6:22:7d:66:00:e4:d4:65: af:f0:a4:53:aa:06:2a:20:07:68:98:9e:07:04:cd:b4:52:6e: 58:39:69:cb:c8:74:e4:d6:ac:49:0a:75:8b:12:b0:3c:42:50: 6a:cc:5b:59:77:cd:a9:92:5f:46:e1:c2:b3:8b:28:b8:db:e9: f6:d6:2a:91:fb:43:7a:f9:f7:ba:87:3a:12:29:6a:c7:d9:58: 4c:77:3a:53 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjhEMzMxMTAvBgNVBAUTKDA4RDY4Q0Y0NTAwNzQ1Mzc1RkYyQ0M1ODRCQTVGQkU1 NzdCRUUzM0YwHhcNMjUwNTMxMDM1NDM2WhcNMjUwNjA3MDM1NDM2WjAYMRYwFAYD VQQDEw02ODNhN2Q3Yy1iMDFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwCTwWpbzZAIGAZiYTqvlpvU5hEllpgPg+Hve/cXhKLcHK5x4Kmvb7X8BWph9 SBPmReQ25LQQUO8IlASbxjy3c1jAz59x72DBertimN8iIv0nOZ7PoJKacyfNTJlL i3izdjiTtOnm6XLev3vr1f6p/bTOxe+yHAoQGt5o3FkAzZoHHfN4vk0E+1pcZwxu 6BVJsGEKST6eugVsedM/3t4lMykli/D/p6KseQT/bgbyotWdoo5yOZ+DHHQit450 pK1g5HLc3shaTk046poKNKrqgtFXRog8M5Ov3fzPXXWmg9nq73U5xNXU3jt57KS2 CFfDomXZ0o7cI2XaRsrVELOtCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEoha4F1 vURfNy/fZd83+0nDkX6XMB8GA1UdIwQYMBaAFAjWjPRQB0U3X/LMWEul++V3vuM/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOEQzMy81OTYyNjcxMDQ3 NzcxMUVFQTZCRDUzN0VDNEY5QUUwMi9DTmFNOUZBSFJUZGY4c3hZUzZYNzVYZS00 ejguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NOYU05RkFIUlRkZjhzeFlTNlg3NVhlLTR6OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OEQzMy81OTYyNjcxMDQ3NzcxMUVFQTZCRDUzN0VDNEY5QUUwMi9DTmFNOUZBSFJU ZGY4c3hZUzZYNzVYZS00ejgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBPmUj0vVt7KNUHJI66yFNPGmJMBz3UGt74rinx3HkteUwASjiUXZ4Q +joAng4UZzaFbhZ9v1HcwFjuLmpP8AK08Rsu4Ai5j5cisTZXEaLoILgt2oQ8gXU5 oSCGqpwu/RgpYUduTuUpxmLXnpIvtHwIWB+YslnjZlR6BmPJyMUInMpqu+105cx1 mkMjgC/QFAvC5pNqHzJX8jfaIgq8WhlwX3jyDP5e42EIqmLYxiJ9ZgDk1GWv8KRT qgYqIAdomJ4HBM20Um5YOWnLyHTk1qxJCnWLErA8QlBqzFtZd82pkl9G4cKziyi4 2+n21iqR+0N6+fe6hzoSKWrH2VhMdzpT -----END CERTIFICATE-----Generated at Sat May 31 16:26:56 2025 by rpki-client