$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC5BC/13EAA47C862311EAA0059881C4F9AE02/eXUDPcXUVA8WrsEhKG7EFMp4fW8.mft File: eXUDPcXUVA8WrsEhKG7EFMp4fW8.mft (raw, json) Hash identifier: P8UcCtBNxVOOy7JB4wgwPVtXDxC0E0BDp3CO+PzmK0k= Subject key identifier: 76:D5:86:D4:AB:8E:A6:88:92:BF:CD:1E:97:49:D9:B4:E6:AC:E7:29 Authority key identifier: 79:75:03:3D:C5:D4:54:0F:16:AE:C1:21:28:6E:C4:14:CA:78:7D:6F Certificate issuer: /CN=A91BC5BC/serialNumber=7975033DC5D4540F16AEC121286EC414CA787D6F Certificate serial: 09B0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eXUDPcXUVA8WrsEhKG7EFMp4fW8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BC5BC/13EAA47C862311EAA0059881C4F9AE02/eXUDPcXUVA8WrsEhKG7EFMp4fW8.mft Manifest number: 09AA Signing time: Fri 30 May 2025 20:14:36 +0000 Manifest this update: Fri 30 May 2025 20:14:36 +0000 Manifest next update: Fri 06 Jun 2025 20:14:36 +0000 Files and hashes: 1: eXUDPcXUVA8WrsEhKG7EFMp4fW8.crl (hash: HTo6jK6/nbN0wtWUkNFq0xPRrXMnbWm3CENEdThji74=) 2: B1AF1C9C862311EA9052C281C4F9AE02.roa (hash: n5P347FiAUuKhxz5D51UBzZC3yGrF18WlVG2Rg0oGrk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BC5BC/13EAA47C862311EAA0059881C4F9AE02/eXUDPcXUVA8WrsEhKG7EFMp4fW8.crl rsync://rpki.apnic.net/member_repository/A91BC5BC/13EAA47C862311EAA0059881C4F9AE02/eXUDPcXUVA8WrsEhKG7EFMp4fW8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eXUDPcXUVA8WrsEhKG7EFMp4fW8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 20:14:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2480 (0x9b0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BC5BC, serialNumber=7975033DC5D4540F16AEC121286EC414CA787D6F Validity Not Before: May 30 20:14:36 2025 GMT Not After : Jun 6 20:14:36 2025 GMT Subject: CN=683a11ac-6608 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:b8:2f:1c:3d:ec:23:dc:0f:9f:3c:48:ea:3f: 29:5a:53:8d:3e:91:86:1b:d5:83:4c:43:05:57:6f: ca:83:9d:37:02:56:ac:fc:a8:9f:99:9b:b0:c7:78: 65:e4:a8:f9:18:cd:7b:14:65:89:b0:a3:03:99:60: 99:5e:37:cf:87:6e:be:76:18:f4:84:3e:d6:cb:f0: 3b:fc:bb:0e:12:fc:d9:ea:be:3c:f5:6a:68:57:5b: b9:f4:8a:0f:2d:41:03:5a:f9:2c:23:f9:59:9f:b0: b8:66:6e:5f:f5:21:d6:36:20:04:4f:b3:99:ec:be: be:06:80:67:63:d2:e0:99:4f:49:8b:f6:c0:7a:da: ba:65:c1:46:f2:cc:4f:47:b5:12:77:ba:ea:4f:cc: 16:c6:ef:d8:3a:67:14:2b:71:5c:39:6f:3f:d2:ac: f6:a3:ed:3c:91:3e:2b:68:7f:83:d5:71:d5:06:a7: 92:0d:50:bc:c4:f5:ee:0a:51:bb:8b:fe:2d:9d:48: 1e:53:d6:ce:64:da:67:0d:9f:4a:42:8d:73:26:d7: b4:97:f0:90:91:56:4a:1c:79:fb:fb:3e:87:cb:c9: 2e:26:3d:a9:dc:51:83:f5:8f:81:8d:c6:45:19:61: 5b:2c:24:21:fa:87:6e:2a:6c:cd:2a:8b:05:56:f2: ae:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:D5:86:D4:AB:8E:A6:88:92:BF:CD:1E:97:49:D9:B4:E6:AC:E7:29 X509v3 Authority Key Identifier: keyid:79:75:03:3D:C5:D4:54:0F:16:AE:C1:21:28:6E:C4:14:CA:78:7D:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BC5BC/13EAA47C862311EAA0059881C4F9AE02/eXUDPcXUVA8WrsEhKG7EFMp4fW8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eXUDPcXUVA8WrsEhKG7EFMp4fW8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC5BC/13EAA47C862311EAA0059881C4F9AE02/eXUDPcXUVA8WrsEhKG7EFMp4fW8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:f2:a3:32:87:17:72:f3:b1:18:24:de:f1:f7:59:f2:6a:ba: bf:dc:6d:a0:f3:eb:83:3d:30:35:6a:05:3b:14:dc:48:51:04: 43:df:45:b7:82:9e:4f:a7:9d:1f:ce:5f:0c:93:2b:58:dd:9b: 71:74:45:a8:0b:92:3a:70:32:db:c2:22:21:51:55:d0:bb:d7: 89:a5:30:bd:72:50:f0:ce:30:d6:b5:5a:35:78:ce:43:0d:7e: fc:87:60:72:ec:1d:80:79:44:c6:f3:ae:27:f1:1e:6a:f7:51: fd:8c:83:85:af:ca:2c:c0:b1:6e:48:26:c5:18:fb:d5:9e:02: 67:d5:a5:15:3b:35:c2:29:12:cc:38:d4:66:17:fc:60:a2:2d: 8e:27:5e:f7:a6:e9:74:a0:a9:7b:bc:66:d6:df:9f:18:ce:5a: 8f:5a:a4:a2:21:44:78:55:9d:49:02:8e:86:c9:83:b3:de:c0: 1b:b3:86:d3:19:27:40:83:0e:9d:a2:c5:4f:5a:d2:ba:58:2c: 26:a7:b0:96:8b:33:5f:5e:1a:16:f5:af:73:fa:1a:b0:65:b7: 6d:48:6c:f8:c0:92:34:45:9b:bb:b7:7f:00:8a:0b:23:34:9a: dc:43:9e:35:9a:85:ed:9a:18:ca:8a:3c:74:b3:02:b2:e7:2d: d0:1c:8d:63 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCbAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkM1QkMxMTAvBgNVBAUTKDc5NzUwMzNEQzVENDU0MEYxNkFFQzEyMTI4NkVDNDE0 Q0E3ODdENkYwHhcNMjUwNTMwMjAxNDM2WhcNMjUwNjA2MjAxNDM2WjAYMRYwFAYD VQQDEw02ODNhMTFhYy02NjA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8LgvHD3sI9wPnzxI6j8pWlONPpGGG9WDTEMFV2/Kg503Alas/KifmZuwx3hl 5Kj5GM17FGWJsKMDmWCZXjfPh26+dhj0hD7Wy/A7/LsOEvzZ6r489WpoV1u59IoP LUEDWvksI/lZn7C4Zm5f9SHWNiAET7OZ7L6+BoBnY9LgmU9Ji/bAetq6ZcFG8sxP R7USd7rqT8wWxu/YOmcUK3FcOW8/0qz2o+08kT4raH+D1XHVBqeSDVC8xPXuClG7 i/4tnUgeU9bOZNpnDZ9KQo1zJte0l/CQkVZKHHn7+z6Hy8kuJj2p3FGD9Y+BjcZF GWFbLCQh+oduKmzNKosFVvKuDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHbVhtSr jqaIkr/NHpdJ2bTmrOcpMB8GA1UdIwQYMBaAFHl1Az3F1FQPFq7BIShuxBTKeH1v MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzVCQy8xM0VBQTQ3Qzg2 MjMxMUVBQTAwNTk4ODFDNEY5QUUwMi9lWFVEUGNYVVZBOFdyc0VoS0c3RUZNcDRm VzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VYVURQY1hVVkE4V3JzRWhLRzdFRk1wNGZXOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QzVCQy8xM0VBQTQ3Qzg2MjMxMUVBQTAwNTk4ODFDNEY5QUUwMi9lWFVEUGNYVVZB OFdyc0VoS0c3RUZNcDRmVzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAL8qMyhxdy87EYJN7x91nyarq/3G2g8+uDPTA1agU7FNxIUQRD30W3 gp5Pp50fzl8MkytY3ZtxdEWoC5I6cDLbwiIhUVXQu9eJpTC9clDwzjDWtVo1eM5D DX78h2By7B2AeUTG864n8R5q91H9jIOFr8oswLFuSCbFGPvVngJn1aUVOzXCKRLM ONRmF/xgoi2OJ173pul0oKl7vGbW358YzlqPWqSiIUR4VZ1JAo6GyYOz3sAbs4bT GSdAgw6dosVPWtK6WCwmp7CWizNfXhoW9a9z+hqwZbdtSGz4wJI0RZu7t38Aigsj NJrcQ541moXtmhjKijx0swKy5y3QHI1j -----END CERTIFICATE-----Generated at Sat May 31 17:24:50 2025 by rpki-client