$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.mft File: xE8qyrKneZlDFaqTsyPam0dce5o.mft (raw, json) Hash identifier: hkEpjIcY8QoqpWhhUjz0BncYrntR6++vwtF5mjbdy/0= Subject key identifier: CB:6A:D6:77:07:A8:4E:99:CF:E3:2B:F3:22:9A:4B:CA:87:FE:64:1D Authority key identifier: C4:4F:2A:CA:B2:A7:79:99:43:15:AA:93:B3:23:DA:9B:47:5C:7B:9A Certificate issuer: /CN=A91BDCF1/serialNumber=C44F2ACAB2A779994315AA93B323DA9B475C7B9A Certificate serial: 03A6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xE8qyrKneZlDFaqTsyPam0dce5o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.mft Manifest number: 038F Signing time: Sat 31 May 2025 01:05:43 +0000 Manifest this update: Sat 31 May 2025 01:05:43 +0000 Manifest next update: Sat 07 Jun 2025 01:05:43 +0000 Files and hashes: 1: xE8qyrKneZlDFaqTsyPam0dce5o.crl (hash: Gu+1zx6+aHZwuXOEgntD7YmxwW2S0rumiGKI/q0ZjoU=) 2: 9ED423000B1211F08F4E1E7EC4F9AE02.roa (hash: 28RTGOVxaiYLARwHZ0Std1aK28GFPOrIsqNmVkJG6o8=) 3: 25985D28EE1411EFB4908431C4F9AE02.roa (hash: GsEWcWV51pwlPsxUODRoLwLibcUDu1FJ1giEHi8eZSw=) 4: 566BECC8EE1711EFB60E2F5CC4F9AE02.roa (hash: U6f6OEgNO9G7tnJE8PE9Soyl3bJOGu5+tt1ALRGB7dY=) 5: 4643A5E4703011EFA1A7CB20C4F9AE02.roa (hash: yVBPXlVIAQw/ZmFOINJVHLvyhTZymOOpSW7Tn3kbZWk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.crl rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xE8qyrKneZlDFaqTsyPam0dce5o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 01:05:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 934 (0x3a6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDCF1, serialNumber=C44F2ACAB2A779994315AA93B323DA9B475C7B9A Validity Not Before: May 31 01:05:43 2025 GMT Not After : Jun 7 01:05:43 2025 GMT Subject: CN=683a55e7-a6f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:a0:57:7a:d2:2e:38:2b:e4:81:d3:ba:dc:7b: 13:10:ed:e6:38:56:0d:74:bc:00:3c:df:9a:c5:c6: f2:b2:44:9c:97:d9:9e:fc:5e:2e:a4:ac:25:0c:18: 2e:3d:73:e8:f4:ce:42:80:13:c9:2f:f6:11:78:1b: d9:6a:b3:62:45:56:89:f6:e0:90:71:9d:b0:be:1a: 8e:b4:a3:8a:ba:a0:76:27:97:40:17:03:fb:c3:1b: e8:e1:8b:a7:d9:b3:22:09:3e:19:cf:51:f8:b1:5f: 77:84:1b:ae:99:57:c9:ab:0e:51:64:e4:d4:6d:99: 06:34:b2:d6:b3:22:b8:e1:da:19:c0:8e:eb:de:f0: ed:74:29:41:c0:8b:77:74:f6:ff:47:89:52:3c:52: cf:fd:57:6b:4c:32:d6:ea:63:4f:a5:a8:94:0b:15: a6:6f:20:17:17:d8:84:a0:23:81:5c:97:4f:14:10: cf:cc:2d:90:e7:0b:18:82:a6:cd:e0:df:39:24:63: 60:30:1f:6f:b9:65:4a:d3:96:44:c4:48:95:ce:77: 08:8f:3e:b2:94:f2:4b:61:fa:e3:e1:74:36:12:4c: 54:c8:77:85:b5:8c:5f:5a:9e:fe:07:41:0a:b1:ef: 4c:4d:3b:68:4c:03:c5:6a:80:20:bc:93:e5:93:fa: 17:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:6A:D6:77:07:A8:4E:99:CF:E3:2B:F3:22:9A:4B:CA:87:FE:64:1D X509v3 Authority Key Identifier: keyid:C4:4F:2A:CA:B2:A7:79:99:43:15:AA:93:B3:23:DA:9B:47:5C:7B:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xE8qyrKneZlDFaqTsyPam0dce5o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:29:81:44:8e:5c:16:5a:3e:58:73:8f:da:3c:04:0c:be:17: 4f:4b:9f:44:44:f0:6a:cd:d7:bd:00:a7:aa:16:af:33:e7:14: 03:55:13:85:33:80:7a:ae:74:ce:f5:e9:1a:fa:83:84:16:10: 7e:19:d8:88:67:65:10:0d:ed:ef:3c:6e:f5:a9:38:7c:6f:25: 81:a3:6e:fe:10:c7:85:f6:ca:60:64:7c:31:e0:af:c9:ef:e1: f2:49:dc:7b:34:d6:27:c5:c6:2a:eb:30:8f:15:a8:ad:b7:55: ec:8a:ae:e1:b1:f3:8e:02:8d:9e:3d:df:bf:b0:69:04:51:ac: 08:c8:8a:d8:23:bf:80:42:6c:84:8a:56:28:42:49:99:4c:de: 95:33:a5:ae:b7:ef:af:09:1f:b8:43:c7:e7:30:40:1d:fa:49: be:52:60:36:ab:52:c2:86:db:68:4d:84:c7:e0:f8:2d:e7:50: 9f:e6:96:f1:81:c6:9c:4b:fa:f6:95:50:55:ad:1a:fe:b7:45: 87:a7:56:a0:28:13:d8:06:0b:0d:66:ea:6a:9c:af:a6:49:07: f8:17:df:4c:81:0f:86:4c:b2:be:dc:8c:7f:38:b0:df:2e:bf: 4c:08:4c:30:92:02:ab:7b:13:14:63:c4:65:55:1b:18:a5:79: 4f:0d:26:76 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA6YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkRDRjExMTAvBgNVBAUTKEM0NEYyQUNBQjJBNzc5OTk0MzE1QUE5M0IzMjNEQTlC NDc1QzdCOUEwHhcNMjUwNTMxMDEwNTQzWhcNMjUwNjA3MDEwNTQzWjAYMRYwFAYD VQQDEw02ODNhNTVlNy1hNmY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwaBXetIuOCvkgdO63HsTEO3mOFYNdLwAPN+axcbyskScl9me/F4upKwlDBgu PXPo9M5CgBPJL/YReBvZarNiRVaJ9uCQcZ2wvhqOtKOKuqB2J5dAFwP7wxvo4Yun 2bMiCT4Zz1H4sV93hBuumVfJqw5RZOTUbZkGNLLWsyK44doZwI7r3vDtdClBwIt3 dPb/R4lSPFLP/VdrTDLW6mNPpaiUCxWmbyAXF9iEoCOBXJdPFBDPzC2Q5wsYgqbN 4N85JGNgMB9vuWVK05ZExEiVzncIjz6ylPJLYfrj4XQ2EkxUyHeFtYxfWp7+B0EK se9MTTtoTAPFaoAgvJPlk/oXlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMtq1ncH qE6Zz+Mr8yKaS8qH/mQdMB8GA1UdIwQYMBaAFMRPKsqyp3mZQxWqk7Mj2ptHXHua MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRENGMS9FQjU5MTEyMkE4 M0MxMUVDQTNBNEYzMjVDNEY5QUUwMi94RThxeXJLbmVabERGYXFUc3lQYW0wZGNl NW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hFOHF5cktuZVpsREZhcVRzeVBhbTBkY2U1by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RENGMS9FQjU5MTEyMkE4M0MxMUVDQTNBNEYzMjVDNEY5QUUwMi94RThxeXJLbmVa bERGYXFUc3lQYW0wZGNlNW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAJKYFEjlwWWj5Yc4/aPAQMvhdPS59ERPBqzde9AKeqFq8z5xQDVROF M4B6rnTO9eka+oOEFhB+GdiIZ2UQDe3vPG71qTh8byWBo27+EMeF9spgZHwx4K/J 7+HySdx7NNYnxcYq6zCPFaitt1Xsiq7hsfOOAo2ePd+/sGkEUawIyIrYI7+AQmyE ilYoQkmZTN6VM6Wut++vCR+4Q8fnMEAd+km+UmA2q1LChttoTYTH4Pgt51Cf5pbx gcacS/r2lVBVrRr+t0WHp1agKBPYBgsNZupqnK+mSQf4F99MgQ+GTLK+3Ix/OLDf Lr9MCEwwkgKrexMUY8RlVRsYpXlPDSZ2 -----END CERTIFICATE-----Generated at Sat May 31 17:07:46 2025 by rpki-client