$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB100/38256B34630211ECBA4E0767C4F9AE02/P0hkkIxFs6cVjoMsBvkyPSNBmQ8.mft File: P0hkkIxFs6cVjoMsBvkyPSNBmQ8.mft (raw, json) Hash identifier: Zio+94qrXNcTICP0ygsTL9JYtkCJqFi8grhOJ6DtpLM= Subject key identifier: 33:C4:A7:F3:59:66:BF:2C:33:B7:FC:18:78:00:54:B7:4A:C3:E3:8B Authority key identifier: 3F:48:64:90:8C:45:B3:A7:15:8E:83:2C:06:F9:32:3D:23:41:99:0F Certificate issuer: /CN=A91BB100/serialNumber=3F4864908C45B3A7158E832C06F9323D2341990F Certificate serial: 0431 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P0hkkIxFs6cVjoMsBvkyPSNBmQ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB100/38256B34630211ECBA4E0767C4F9AE02/P0hkkIxFs6cVjoMsBvkyPSNBmQ8.mft Manifest number: 042D Signing time: Thu 05 Jun 2025 00:13:08 +0000 Manifest this update: Thu 05 Jun 2025 00:13:08 +0000 Manifest next update: Thu 12 Jun 2025 00:13:08 +0000 Files and hashes: 1: P0hkkIxFs6cVjoMsBvkyPSNBmQ8.crl (hash: lwOM7oZAtTLX3QNitski59uVBrZQFbKa20rbD+N4d/A=) 2: FE761E84630511EC86F9726BC4F9AE02.roa (hash: RCWPaj7t0e1p3rp6/K3vTM6gR0rDSmQTnwQnVmwe2ms=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB100/38256B34630211ECBA4E0767C4F9AE02/P0hkkIxFs6cVjoMsBvkyPSNBmQ8.crl rsync://rpki.apnic.net/member_repository/A91BB100/38256B34630211ECBA4E0767C4F9AE02/P0hkkIxFs6cVjoMsBvkyPSNBmQ8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P0hkkIxFs6cVjoMsBvkyPSNBmQ8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 12 Jun 2025 00:13:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1073 (0x431) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB100, serialNumber=3F4864908C45B3A7158E832C06F9323D2341990F Validity Not Before: Jun 5 00:13:08 2025 GMT Not After : Jun 12 00:13:08 2025 GMT Subject: CN=6840e114-7ac8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:3d:05:91:92:f1:3f:d7:5b:a5:bb:16:a8:62: 7d:e0:2e:4a:49:d0:ff:5c:0c:54:14:2a:4e:ac:ac: f4:56:b0:59:d6:07:e7:b3:fc:ec:10:ff:36:ca:c5: 8d:fb:ba:85:d9:d8:ea:17:9e:0e:52:3b:f6:cb:22: 72:10:3f:c0:95:0c:f7:47:86:77:09:18:f7:74:26: 3d:6a:22:6f:56:cc:00:2c:2e:49:b7:33:5f:55:38: c9:0b:dd:00:15:c9:bf:96:47:b3:17:36:80:83:ea: ca:89:be:94:6d:c5:68:73:e6:51:25:63:bd:a5:ff: 19:58:7a:21:99:de:c2:8f:3d:83:a7:c5:08:e5:1d: 67:3b:07:7b:d5:1f:c5:b6:d9:a4:a5:b5:d2:fb:63: 53:2b:b9:f3:2b:8a:c9:9a:d5:3b:01:72:38:8a:8d: 91:fb:16:4e:ca:6c:4d:2c:d7:e4:53:1c:26:c7:cb: 07:86:e1:ba:48:27:f1:83:49:60:c4:f3:d2:37:77: 64:b7:ed:32:ba:89:b2:e6:3a:58:f5:40:f9:08:2c: b7:1c:89:16:d0:84:8f:ed:ba:27:c1:bb:a6:33:ca: 43:5f:de:60:2b:b9:e4:7d:10:a6:d4:14:9f:be:a7: 28:ca:eb:72:4f:63:42:27:0e:1c:4c:89:46:3e:24: 94:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:C4:A7:F3:59:66:BF:2C:33:B7:FC:18:78:00:54:B7:4A:C3:E3:8B X509v3 Authority Key Identifier: keyid:3F:48:64:90:8C:45:B3:A7:15:8E:83:2C:06:F9:32:3D:23:41:99:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB100/38256B34630211ECBA4E0767C4F9AE02/P0hkkIxFs6cVjoMsBvkyPSNBmQ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P0hkkIxFs6cVjoMsBvkyPSNBmQ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB100/38256B34630211ECBA4E0767C4F9AE02/P0hkkIxFs6cVjoMsBvkyPSNBmQ8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:91:d2:92:d1:08:1e:96:e5:c6:5c:f1:13:05:6c:c4:73:11: c6:9d:4b:5f:20:a2:b5:95:46:b6:7b:06:35:cf:5d:83:6b:c7: e8:4a:5e:29:fa:2c:d6:a7:2b:b5:f0:2a:d5:74:a3:60:58:72: 78:ad:b2:fc:5c:f6:c5:a9:df:57:19:63:76:fa:90:15:04:0b: 2b:ac:f9:e7:8a:a4:c7:18:41:a3:c5:53:9b:78:b6:7e:95:70: 23:3b:e4:45:5e:68:d8:d9:78:28:46:84:c6:46:f6:af:2c:59: e9:77:a3:dd:35:cc:5c:e9:e6:63:78:37:4f:00:8b:68:83:48: 48:c2:f2:0b:87:02:81:0a:b1:71:02:1f:b9:f3:25:28:4c:c1: a0:85:a6:d8:01:b3:ff:0d:27:1e:a5:2e:e9:85:3b:5b:51:78: 3d:a7:ae:66:0e:74:4a:7c:2a:1b:a7:98:2f:62:65:c4:91:47: 61:37:aa:23:cf:57:25:a2:3e:6b:fa:42:05:a6:b6:d7:f5:13: 7e:b6:3c:af:59:bf:78:8e:2f:b0:9b:c1:93:d9:20:e9:c6:3e: 2c:fc:a8:4e:bd:90:37:ea:8a:84:19:93:2f:b9:45:af:2c:1c: e7:4f:97:fd:b4:b6:6f:eb:2c:bb:a0:4c:ab:7f:cb:d4:c4:dc: 8c:c0:47:83 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBDEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkIxMDAxMTAvBgNVBAUTKDNGNDg2NDkwOEM0NUIzQTcxNThFODMyQzA2RjkzMjNE MjM0MTk5MEYwHhcNMjUwNjA1MDAxMzA4WhcNMjUwNjEyMDAxMzA4WjAYMRYwFAYD VQQDEw02ODQwZTExNC03YWM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuz0FkZLxP9dbpbsWqGJ94C5KSdD/XAxUFCpOrKz0VrBZ1gfns/zsEP82ysWN +7qF2djqF54OUjv2yyJyED/AlQz3R4Z3CRj3dCY9aiJvVswALC5JtzNfVTjJC90A Fcm/lkezFzaAg+rKib6UbcVoc+ZRJWO9pf8ZWHohmd7Cjz2Dp8UI5R1nOwd71R/F ttmkpbXS+2NTK7nzK4rJmtU7AXI4io2R+xZOymxNLNfkUxwmx8sHhuG6SCfxg0lg xPPSN3dkt+0yuomy5jpY9UD5CCy3HIkW0ISP7bonwbumM8pDX95gK7nkfRCm1BSf vqcoyutyT2NCJw4cTIlGPiSUYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDPEp/NZ Zr8sM7f8GHgAVLdKw+OLMB8GA1UdIwQYMBaAFD9IZJCMRbOnFY6DLAb5Mj0jQZkP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjEwMC8zODI1NkIzNDYz MDIxMUVDQkE0RTA3NjdDNEY5QUUwMi9QMGhra0l4RnM2Y1Zqb01zQnZreVBTTkJt UTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1AwaGtrSXhGczZjVmpvTXNCdmt5UFNOQm1ROC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QjEwMC8zODI1NkIzNDYzMDIxMUVDQkE0RTA3NjdDNEY5QUUwMi9QMGhra0l4RnM2 Y1Zqb01zQnZreVBTTkJtUTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCDkdKS0QgeluXGXPETBWzEcxHGnUtfIKK1lUa2ewY1z12Da8foSl4p +izWpyu18CrVdKNgWHJ4rbL8XPbFqd9XGWN2+pAVBAsrrPnniqTHGEGjxVObeLZ+ lXAjO+RFXmjY2XgoRoTGRvavLFnpd6PdNcxc6eZjeDdPAItog0hIwvILhwKBCrFx Ah+58yUoTMGghabYAbP/DScepS7phTtbUXg9p65mDnRKfCobp5gvYmXEkUdhN6oj z1cloj5r+kIFprbX9RN+tjyvWb94ji+wm8GT2SDpxj4s/KhOvZA36oqEGZMvuUWv LBznT5f9tLZv6yy7oEyrf8vUxNyMwEeD -----END CERTIFICATE-----Generated at Thu Jun 5 19:56:13 2025 by rpki-client