$ rpki-client -vvf rpki.apnic.net/member_repository/A91BBF7F/453EB6F4874511E9BF86445CC4F9AE02/1fbdY8A4EGCv-8nSDtMPB_veiOo.mft File: 1fbdY8A4EGCv-8nSDtMPB_veiOo.mft (raw, json) Hash identifier: pg/2TxnAmsUQ/e0RwBTZNVkuw4dx7Evzj8aQ6k6lSt0= Subject key identifier: 02:39:B5:31:D5:20:CB:D5:8A:AA:7D:97:9E:BE:6D:BB:23:50:89:DE Authority key identifier: D5:F6:DD:63:C0:38:10:60:AF:FB:C9:D2:0E:D3:0F:07:FB:DE:88:EA Certificate issuer: /CN=A91BBF7F/serialNumber=D5F6DD63C0381060AFFBC9D20ED30F07FBDE88EA Certificate serial: 0EE3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1fbdY8A4EGCv-8nSDtMPB_veiOo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BBF7F/453EB6F4874511E9BF86445CC4F9AE02/1fbdY8A4EGCv-8nSDtMPB_veiOo.mft Manifest number: 0ECD Signing time: Fri 30 May 2025 17:51:00 +0000 Manifest this update: Fri 30 May 2025 17:51:00 +0000 Manifest next update: Fri 06 Jun 2025 17:51:00 +0000 Files and hashes: 1: 1fbdY8A4EGCv-8nSDtMPB_veiOo.crl (hash: 1Nb3eHYfFrvzD+vsizCbX4YylWxmUO1hrAg/7KxLKqg=) 2: 656CB24EC9F611ED9853C583C4F9AE02.roa (hash: dWOEO8pwtx9hi9faa2fgwj2lHG7eHOgZT5KAz1c3Ctk=) 3: 64554290C9F611ED9853C583C4F9AE02.roa (hash: TcpjWImJ/6OMJ2cd8RP+FJqzHMIXrQ0AmNStUKst97g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BBF7F/453EB6F4874511E9BF86445CC4F9AE02/1fbdY8A4EGCv-8nSDtMPB_veiOo.crl rsync://rpki.apnic.net/member_repository/A91BBF7F/453EB6F4874511E9BF86445CC4F9AE02/1fbdY8A4EGCv-8nSDtMPB_veiOo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1fbdY8A4EGCv-8nSDtMPB_veiOo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 17:50:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3811 (0xee3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BBF7F, serialNumber=D5F6DD63C0381060AFFBC9D20ED30F07FBDE88EA Validity Not Before: May 30 17:51:00 2025 GMT Not After : Jun 6 17:51:00 2025 GMT Subject: CN=6839f004-9655 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:7e:cb:b3:67:5f:88:84:78:05:8f:de:be:c4: 30:c3:be:09:24:1c:83:f1:f5:e8:67:36:ce:96:17: 0d:df:ac:36:14:35:c8:eb:3b:8f:9a:72:e0:63:8c: f7:9b:b2:82:45:c3:ec:43:2f:a6:4f:75:97:74:93: 3c:f8:e0:32:cf:fa:01:a5:d4:17:ac:c7:30:40:23: 35:cd:7a:58:26:85:31:8c:77:86:4b:00:a0:64:a9: 57:27:9b:70:7a:62:55:94:95:03:ba:e2:8b:db:b5: e9:00:59:82:e7:1a:44:ed:90:d7:07:cc:00:c2:4d: a2:25:e1:b9:04:b3:83:bc:1d:83:0c:4b:e3:5f:cc: d6:b0:7c:b3:3e:8b:2a:7d:1f:b8:5b:ca:da:c3:4b: bc:c7:c0:58:37:0c:26:ee:30:aa:a3:7a:7c:4a:c9: 81:2d:5e:1b:d5:6a:15:21:3f:87:30:de:cf:db:bd: 56:01:eb:3f:e0:d9:f7:83:c0:83:f3:06:6b:17:91: 81:be:1a:97:99:9c:51:ec:91:8d:29:c1:3b:bf:01: 4f:28:d9:e0:10:b7:32:96:26:0d:36:20:ae:f5:4f: 40:7f:9a:c6:16:bf:df:45:9d:c2:81:c8:85:55:e3: 63:04:5d:db:76:e1:77:25:3c:0a:0b:dd:8f:87:cd: 5d:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:39:B5:31:D5:20:CB:D5:8A:AA:7D:97:9E:BE:6D:BB:23:50:89:DE X509v3 Authority Key Identifier: keyid:D5:F6:DD:63:C0:38:10:60:AF:FB:C9:D2:0E:D3:0F:07:FB:DE:88:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BBF7F/453EB6F4874511E9BF86445CC4F9AE02/1fbdY8A4EGCv-8nSDtMPB_veiOo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1fbdY8A4EGCv-8nSDtMPB_veiOo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBF7F/453EB6F4874511E9BF86445CC4F9AE02/1fbdY8A4EGCv-8nSDtMPB_veiOo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:54:3f:52:c0:bc:68:de:de:b4:88:9f:8c:0c:05:82:78:c0: a7:51:3b:c2:89:23:e8:af:12:c5:27:b6:48:9b:90:68:4d:39: 8e:55:7c:86:47:e2:c2:44:62:2a:eb:f4:67:a4:72:fb:a8:95: 35:03:25:21:32:fc:5f:37:16:8c:f0:bc:39:34:b7:42:f4:0f: 9f:47:42:86:db:fd:47:24:f9:83:14:e2:93:34:8f:3e:ae:93: 02:22:b9:95:ea:a6:52:70:62:9b:22:4c:21:b5:51:ba:13:55: 2d:23:b3:0d:9d:f2:3c:64:e2:4b:75:ea:2b:2d:ec:98:32:43: cf:19:d1:29:a2:76:18:cc:12:36:72:85:77:f3:13:fb:f2:47: 07:2e:34:62:e3:ee:c9:99:0e:7f:0a:a4:de:13:ee:e7:7a:08: b8:9a:b4:b9:39:58:89:e0:1f:06:5c:ba:3e:4f:e0:21:51:02: 2c:15:5d:29:5b:81:7d:bc:50:e5:5d:82:18:35:8f:50:99:68: 85:11:ab:0d:1f:77:2b:2f:68:6d:3d:71:ef:f0:64:33:19:d7: b3:18:e8:c4:4c:14:32:c8:0e:f4:53:16:53:d0:9e:d9:82:95: 2c:d0:e5:02:89:d3:b9:7c:b9:f4:16:88:9e:20:e9:50:b6:ee: 90:65:cb:75 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDuMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkJGN0YxMTAvBgNVBAUTKEQ1RjZERDYzQzAzODEwNjBBRkZCQzlEMjBFRDMwRjA3 RkJERTg4RUEwHhcNMjUwNTMwMTc1MTAwWhcNMjUwNjA2MTc1MTAwWjAYMRYwFAYD VQQDEw02ODM5ZjAwNC05NjU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApX7Ls2dfiIR4BY/evsQww74JJByD8fXoZzbOlhcN36w2FDXI6zuPmnLgY4z3 m7KCRcPsQy+mT3WXdJM8+OAyz/oBpdQXrMcwQCM1zXpYJoUxjHeGSwCgZKlXJ5tw emJVlJUDuuKL27XpAFmC5xpE7ZDXB8wAwk2iJeG5BLODvB2DDEvjX8zWsHyzPosq fR+4W8raw0u8x8BYNwwm7jCqo3p8SsmBLV4b1WoVIT+HMN7P271WAes/4Nn3g8CD 8wZrF5GBvhqXmZxR7JGNKcE7vwFPKNngELcyliYNNiCu9U9Af5rGFr/fRZ3CgciF VeNjBF3bduF3JTwKC92Ph81d7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAI5tTHV IMvViqp9l56+bbsjUIneMB8GA1UdIwQYMBaAFNX23WPAOBBgr/vJ0g7TDwf73ojq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQkY3Ri80NTNFQjZGNDg3 NDUxMUU5QkY4NjQ0NUNDNEY5QUUwMi8xZmJkWThBNEVHQ3YtOG5TRHRNUEJfdmVp T28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFmYmRZOEE0RUdDdi04blNEdE1QQl92ZWlPby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QkY3Ri80NTNFQjZGNDg3NDUxMUU5QkY4NjQ0NUNDNEY5QUUwMi8xZmJkWThBNEVH Q3YtOG5TRHRNUEJfdmVpT28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCoVD9SwLxo3t60iJ+MDAWCeMCnUTvCiSPorxLFJ7ZIm5BoTTmOVXyG R+LCRGIq6/RnpHL7qJU1AyUhMvxfNxaM8Lw5NLdC9A+fR0KG2/1HJPmDFOKTNI8+ rpMCIrmV6qZScGKbIkwhtVG6E1UtI7MNnfI8ZOJLdeorLeyYMkPPGdEponYYzBI2 coV38xP78kcHLjRi4+7JmQ5/CqTeE+7negi4mrS5OViJ4B8GXLo+T+AhUQIsFV0p W4F9vFDlXYIYNY9QmWiFEasNH3crL2htPXHv8GQzGdezGOjETBQyyA70UxZT0J7Z gpUs0OUCidO5fLn0FoieIOlQtu6QZct1 -----END CERTIFICATE-----Generated at Sat May 31 14:46:34 2025 by rpki-client