$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE6D3/EF93835A379211EC9C6C9B69C4F9AE02/mJ-J1oyGg0r4LZ0n0W5VwJpu97w.mft File: mJ-J1oyGg0r4LZ0n0W5VwJpu97w.mft (raw, json) Hash identifier: It9iHc/MgmSW+gYpm2DNDu6NPfkhbrS7fVAqLUzrH8o= Subject key identifier: 96:40:08:C9:5A:6D:08:7E:0A:FF:00:1E:D6:03:21:77:48:81:7B:9B Authority key identifier: 98:9F:89:D6:8C:86:83:4A:F8:2D:9D:27:D1:6E:55:C0:9A:6E:F7:BC Certificate issuer: /CN=A91BE6D3/serialNumber=989F89D68C86834AF82D9D27D16E55C09A6EF7BC Certificate serial: 049F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ-J1oyGg0r4LZ0n0W5VwJpu97w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BE6D3/EF93835A379211EC9C6C9B69C4F9AE02/mJ-J1oyGg0r4LZ0n0W5VwJpu97w.mft Manifest number: 049A Signing time: Sat 31 May 2025 00:10:57 +0000 Manifest this update: Sat 31 May 2025 00:10:56 +0000 Manifest next update: Sat 07 Jun 2025 00:10:56 +0000 Files and hashes: 1: mJ-J1oyGg0r4LZ0n0W5VwJpu97w.crl (hash: YmDpbQcbfPGh7166z+AbXOeBHnsZRva6+tKgwT6Ov7E=) 2: FB782FD2721311EE8754E20FC4F9AE02.roa (hash: vSYCfM+ntYW7G9aAaLxoQnL6y+A35VWVI2iBiGFSPJA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BE6D3/EF93835A379211EC9C6C9B69C4F9AE02/mJ-J1oyGg0r4LZ0n0W5VwJpu97w.crl rsync://rpki.apnic.net/member_repository/A91BE6D3/EF93835A379211EC9C6C9B69C4F9AE02/mJ-J1oyGg0r4LZ0n0W5VwJpu97w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ-J1oyGg0r4LZ0n0W5VwJpu97w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 00:10:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1183 (0x49f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BE6D3, serialNumber=989F89D68C86834AF82D9D27D16E55C09A6EF7BC Validity Not Before: May 31 00:10:56 2025 GMT Not After : Jun 7 00:10:56 2025 GMT Subject: CN=683a4911-f255 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:e7:44:70:de:63:4e:f9:56:ec:6e:8c:ba:0d: 7b:dd:03:f1:2c:d6:b2:1f:03:2f:15:1e:fa:d4:a8: d3:67:56:e2:57:04:79:59:2d:0b:30:a1:d5:60:d9: 36:93:e2:40:37:c8:e0:9d:d7:7d:22:83:02:ca:7e: d1:cb:3c:1e:8e:90:f6:c8:77:64:cd:2d:d7:89:9d: ab:b3:4e:26:95:64:dc:6b:0c:94:57:5b:63:56:8a: 72:6b:92:a1:c3:1d:65:b7:3b:9d:0d:44:4e:e7:cd: 10:ed:e5:d1:00:b3:cb:90:0e:59:dd:0d:c1:09:46: 4e:f8:ae:c9:db:46:1e:69:e5:73:59:01:13:85:83: d2:3f:99:78:1f:e6:87:2f:ce:5b:e4:92:8d:3a:2a: 26:01:7c:eb:18:eb:70:82:37:11:69:aa:7b:4c:70: 32:1e:a2:5b:81:6b:a6:d4:1c:2d:b8:2d:88:9a:69: 18:5b:14:17:54:03:2c:5c:e4:7a:3e:3a:ca:24:a6: 9e:20:df:2b:47:c9:d4:d8:0c:51:d5:d2:d1:f6:38: 1a:7f:53:0a:5b:e8:22:36:36:f3:59:d9:42:a2:e5: 2b:1f:a9:1c:45:95:7b:0b:fb:de:ae:7e:43:58:06: eb:ba:b5:0e:03:b0:0a:7c:36:e8:75:84:23:04:50: 36:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:40:08:C9:5A:6D:08:7E:0A:FF:00:1E:D6:03:21:77:48:81:7B:9B X509v3 Authority Key Identifier: keyid:98:9F:89:D6:8C:86:83:4A:F8:2D:9D:27:D1:6E:55:C0:9A:6E:F7:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BE6D3/EF93835A379211EC9C6C9B69C4F9AE02/mJ-J1oyGg0r4LZ0n0W5VwJpu97w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ-J1oyGg0r4LZ0n0W5VwJpu97w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE6D3/EF93835A379211EC9C6C9B69C4F9AE02/mJ-J1oyGg0r4LZ0n0W5VwJpu97w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:fe:ee:1b:3f:a0:eb:3f:16:84:6f:3b:d9:50:1e:62:5f:cf: e7:30:14:cd:e5:1e:77:87:ca:03:02:6d:83:2c:b5:56:59:7f: 94:a3:e4:9a:0c:06:bf:eb:73:a8:bb:0a:50:97:ae:cd:e8:5b: 82:35:9f:0f:38:30:c2:34:00:45:33:2e:8d:26:6b:1f:13:34: 7c:9f:bd:c1:16:ec:1d:e8:44:6a:1d:89:13:a5:bb:ef:1c:5b: 37:34:6e:27:27:37:c1:c4:64:1f:9f:f3:40:3d:39:a5:7b:2d: 90:05:df:ba:c0:40:b8:5e:69:b6:47:89:a3:1c:10:5c:64:b6: 13:f7:a2:ac:2d:6a:4a:98:29:6a:a6:71:3b:00:f1:25:1a:af: b9:3f:4a:ce:40:d9:51:ca:fa:9e:fe:32:87:c2:8d:d2:15:a6: 3f:83:8b:23:05:8c:3b:bb:a2:b4:24:69:7a:01:67:45:2a:0a: 13:2e:9e:11:78:e0:bf:c2:d0:5e:8c:da:d6:45:5e:37:f2:8d: 54:25:cb:17:0c:f4:99:ac:c4:dd:b4:88:f9:8a:d3:58:0e:0d: 91:95:b9:09:35:4c:da:77:be:f4:58:b9:31:dc:73:a1:72:ea: db:12:3a:a9:1f:72:dd:34:db:ea:4e:7c:1d:1b:d2:96:e8:4b: d0:1b:53:cc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBJ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkU2RDMxMTAvBgNVBAUTKDk4OUY4OUQ2OEM4NjgzNEFGODJEOUQyN0QxNkU1NUMw OUE2RUY3QkMwHhcNMjUwNTMxMDAxMDU2WhcNMjUwNjA3MDAxMDU2WjAYMRYwFAYD VQQDEw02ODNhNDkxMS1mMjU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1udEcN5jTvlW7G6Mug173QPxLNayHwMvFR761KjTZ1biVwR5WS0LMKHVYNk2 k+JAN8jgndd9IoMCyn7RyzwejpD2yHdkzS3XiZ2rs04mlWTcawyUV1tjVopya5Kh wx1ltzudDURO580Q7eXRALPLkA5Z3Q3BCUZO+K7J20YeaeVzWQEThYPSP5l4H+aH L85b5JKNOiomAXzrGOtwgjcRaap7THAyHqJbgWum1BwtuC2ImmkYWxQXVAMsXOR6 PjrKJKaeIN8rR8nU2AxR1dLR9jgaf1MKW+giNjbzWdlCouUrH6kcRZV7C/vern5D WAbrurUOA7AKfDbodYQjBFA2aQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJZACMla bQh+Cv8AHtYDIXdIgXubMB8GA1UdIwQYMBaAFJifidaMhoNK+C2dJ9FuVcCabve8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRTZEMy9FRjkzODM1QTM3 OTIxMUVDOUM2QzlCNjlDNEY5QUUwMi9tSi1KMW95R2cwcjRMWjBuMFc1VndKcHU5 N3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21KLUoxb3lHZzByNExaMG4wVzVWd0pwdTk3dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RTZEMy9FRjkzODM1QTM3OTIxMUVDOUM2QzlCNjlDNEY5QUUwMi9tSi1KMW95R2cw cjRMWjBuMFc1VndKcHU5N3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB7/u4bP6DrPxaEbzvZUB5iX8/nMBTN5R53h8oDAm2DLLVWWX+Uo+Sa DAa/63OouwpQl67N6FuCNZ8PODDCNABFMy6NJmsfEzR8n73BFuwd6ERqHYkTpbvv HFs3NG4nJzfBxGQfn/NAPTmley2QBd+6wEC4Xmm2R4mjHBBcZLYT96KsLWpKmClq pnE7APElGq+5P0rOQNlRyvqe/jKHwo3SFaY/g4sjBYw7u6K0JGl6AWdFKgoTLp4R eOC/wtBejNrWRV438o1UJcsXDPSZrMTdtIj5itNYDg2RlbkJNUzad770WLkx3HOh curbEjqpH3LdNNvqTnwdG9KW6EvQG1PM -----END CERTIFICATE-----Generated at Sat May 31 16:33:02 2025 by rpki-client