$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDEEB/1EE7FA60E5F411EFABD39D7EC4F9AE02/a2OmDn1_UdA4coxkJZBgRwFsmQQ.mft File: a2OmDn1_UdA4coxkJZBgRwFsmQQ.mft (raw, json) Hash identifier: uy22cY7ykEuPA5UDSFhTsllEKANIXbq02j3hfM4Fx9s= Subject key identifier: 99:EF:D9:FA:FF:2D:20:9B:E6:B4:70:83:21:A3:12:22:0E:1E:D2:D5 Authority key identifier: 6B:63:A6:0E:7D:7F:51:D0:38:72:8C:64:25:90:60:47:01:6C:99:04 Certificate issuer: /CN=A91BDEEB/serialNumber=6B63A60E7D7F51D038728C6425906047016C9904 Certificate serial: 58 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a2OmDn1_UdA4coxkJZBgRwFsmQQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BDEEB/1EE7FA60E5F411EFABD39D7EC4F9AE02/a2OmDn1_UdA4coxkJZBgRwFsmQQ.mft Manifest number: 4C Signing time: Sat 31 May 2025 07:06:15 +0000 Manifest this update: Sat 31 May 2025 07:06:15 +0000 Manifest next update: Sat 07 Jun 2025 07:06:15 +0000 Files and hashes: 1: a2OmDn1_UdA4coxkJZBgRwFsmQQ.crl (hash: 9RJtBXa5X6/mojI1nL6F4YXmlJQBwluvSYjl1v+h+XA=) 2: 04241E3222F011F0B021396DC4F9AE02.roa (hash: 9kO0kni7kPsnzaPtvxx9OF7DZQab6VvydwUdZC1SpXA=) 3: C4A33CA4275711F0BA7C7752C4F9AE02.roa (hash: UodVJEZpG8jo//8K6ghcq6/5J2v+GWRbykcw2y9KJwI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BDEEB/1EE7FA60E5F411EFABD39D7EC4F9AE02/a2OmDn1_UdA4coxkJZBgRwFsmQQ.crl rsync://rpki.apnic.net/member_repository/A91BDEEB/1EE7FA60E5F411EFABD39D7EC4F9AE02/a2OmDn1_UdA4coxkJZBgRwFsmQQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a2OmDn1_UdA4coxkJZBgRwFsmQQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 07:06:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 88 (0x58) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDEEB, serialNumber=6B63A60E7D7F51D038728C6425906047016C9904 Validity Not Before: May 31 07:06:15 2025 GMT Not After : Jun 7 07:06:15 2025 GMT Subject: CN=683aaa67-df1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:55:ab:c1:9f:8a:b2:6d:a0:35:d9:04:3d:21: 9c:75:18:c7:66:46:4f:d9:e1:8b:bb:4e:6a:80:aa: b1:61:f5:b3:2a:63:f9:48:00:ab:32:1d:da:da:64: fb:28:45:b9:0c:31:a4:54:b5:aa:73:28:a7:df:1e: 64:0d:b2:76:35:bd:17:1d:3f:c1:36:10:e9:8a:04: b9:54:74:c3:ff:1d:5e:a6:77:d8:0f:52:33:bc:85: 20:99:18:5d:f6:29:7d:5d:ed:3a:1b:72:ce:92:91: 87:96:e0:f1:45:50:d5:e0:10:6f:cf:aa:92:56:53: 91:79:85:a1:59:bd:cb:40:9d:85:a9:94:5e:7d:07: 99:c9:d9:93:43:67:67:af:4d:fd:0f:1b:61:5f:8b: 3e:d2:f8:3a:3e:5a:34:63:41:b2:ba:1d:6b:21:eb: bf:36:fc:58:c9:2d:5a:7a:58:38:33:3b:fb:26:d7: cc:0f:82:c1:fa:28:27:58:9d:57:12:83:18:a9:e7: de:73:00:49:d5:23:65:a9:2a:b8:ca:f1:41:6b:91: 78:83:5c:a0:5d:54:37:a6:2a:a2:e1:a4:c0:18:cd: e4:c6:13:6a:13:cf:b1:3c:14:ea:79:5e:a8:84:11: 20:58:e4:1f:bf:a2:05:0f:53:ea:b5:ba:d1:cd:11: 23:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:EF:D9:FA:FF:2D:20:9B:E6:B4:70:83:21:A3:12:22:0E:1E:D2:D5 X509v3 Authority Key Identifier: keyid:6B:63:A6:0E:7D:7F:51:D0:38:72:8C:64:25:90:60:47:01:6C:99:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BDEEB/1EE7FA60E5F411EFABD39D7EC4F9AE02/a2OmDn1_UdA4coxkJZBgRwFsmQQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a2OmDn1_UdA4coxkJZBgRwFsmQQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDEEB/1EE7FA60E5F411EFABD39D7EC4F9AE02/a2OmDn1_UdA4coxkJZBgRwFsmQQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:2a:25:de:49:84:d0:23:5a:1d:a4:e4:2e:96:e9:e7:a1:10: 7a:0d:9d:fc:5d:4c:9a:b1:16:18:57:ca:5f:24:95:5a:0f:1b: fd:8a:85:53:8c:53:54:b4:e1:4f:89:43:c8:17:0d:af:f0:69: 41:3b:d1:9f:a1:b4:6f:5b:c9:42:de:85:71:5d:47:fd:bc:f4: 00:e1:6b:f6:d9:60:80:08:9d:c5:f5:ee:75:53:a0:57:75:35: c3:f9:2f:06:c6:05:4e:5c:71:a5:1b:71:16:a1:81:7e:d1:ea: 8f:ab:a4:5c:86:62:5e:58:d9:d7:58:09:a1:09:c8:35:b2:01: d4:08:25:7f:7b:d0:36:68:2e:f4:96:86:ff:0b:06:02:88:e4: 97:78:b8:52:fc:f3:b3:f3:23:23:dd:c0:73:db:94:79:64:d6: b5:fc:29:5f:c5:c8:7f:5e:15:86:c0:12:9b:75:21:c7:74:ad: f3:d1:c1:11:f7:fd:c6:49:74:51:c4:59:66:0c:26:52:4f:e7: ca:63:c1:f1:37:3c:dd:4b:df:cf:f1:1f:bc:2b:64:cc:c1:0b: d1:97:b2:73:91:0d:b3:11:1c:3a:b2:32:f9:a7:b5:fe:80:e8: e7:71:c3:50:fc:fe:59:08:62:64:19:d2:9e:1d:00:9c:f9:5b: a1:ef:e0:86 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBWDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC REVFQjExMC8GA1UEBRMoNkI2M0E2MEU3RDdGNTFEMDM4NzI4QzY0MjU5MDYwNDcw MTZDOTkwNDAeFw0yNTA1MzEwNzA2MTVaFw0yNTA2MDcwNzA2MTVaMBgxFjAUBgNV BAMTDTY4M2FhYTY3LWRmMWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQChVavBn4qybaA12QQ9IZx1GMdmRk/Z4Yu7TmqAqrFh9bMqY/lIAKsyHdraZPso RbkMMaRUtapzKKffHmQNsnY1vRcdP8E2EOmKBLlUdMP/HV6md9gPUjO8hSCZGF32 KX1d7Tobcs6SkYeW4PFFUNXgEG/PqpJWU5F5haFZvctAnYWplF59B5nJ2ZNDZ2ev Tf0PG2Ffiz7S+Do+WjRjQbK6HWsh6782/FjJLVp6WDgzO/sm18wPgsH6KCdYnVcS gxip595zAEnVI2WpKrjK8UFrkXiDXKBdVDemKqLhpMAYzeTGE2oTz7E8FOp5XqiE ESBY5B+/ogUPU+q1utHNESO5AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUme/Z+v8t IJvmtHCDIaMSIg4e0tUwHwYDVR0jBBgwFoAUa2OmDn1/UdA4coxkJZBgRwFsmQQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJERUVCLzFFRTdGQTYwRTVG NDExRUZBQkQzOUQ3RUM0RjlBRTAyL2EyT21EbjFfVWRBNGNveGtKWkJnUndGc21R US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYTJPbURuMV9VZEE0Y294a0paQmdSd0ZzbVFRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJE RUVCLzFFRTdGQTYwRTVGNDExRUZBQkQzOUQ3RUM0RjlBRTAyL2EyT21EbjFfVWRB NGNveGtKWkJnUndGc21RUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAYqJd5JhNAjWh2k5C6W6eehEHoNnfxdTJqxFhhXyl8klVoPG/2KhVOM U1S04U+JQ8gXDa/waUE70Z+htG9byULehXFdR/289ADha/bZYIAIncX17nVToFd1 NcP5LwbGBU5ccaUbcRahgX7R6o+rpFyGYl5Y2ddYCaEJyDWyAdQIJX970DZoLvSW hv8LBgKI5Jd4uFL887PzIyPdwHPblHlk1rX8KV/FyH9eFYbAEpt1Icd0rfPRwRH3 /cZJdFHEWWYMJlJP58pjwfE3PN1L38/xH7wrZMzBC9GXsnORDbMRHDqyMvmntf6A 6Odxw1D8/lkIYmQZ0p4dAJz5W6Hv4IY= -----END CERTIFICATE-----Generated at Sat May 31 16:40:38 2025 by rpki-client