$ rpki-client -vvf rpki.apnic.net/member_repository/A91BFA29/0F1A4E641DAA11E28E727DA508B02CD2/F_M9uCahQtM3xeuZhL4txPm8ZCk.mft File: F_M9uCahQtM3xeuZhL4txPm8ZCk.mft (raw, json) Hash identifier: GldXv+YNYC3oWyT6Zuph86ZxP27hjeiDtGpRNKE5w/Q= Subject key identifier: F4:86:6E:AF:DF:5D:4D:7B:1C:16:24:9A:5F:BE:B9:92:89:F0:96:1C Authority key identifier: 17:F3:3D:B8:26:A1:42:D3:37:C5:EB:99:84:BE:2D:C4:F9:BC:64:29 Certificate issuer: /CN=A91BFA29/serialNumber=17F33DB826A142D337C5EB9984BE2DC4F9BC6429 Certificate serial: 34AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_M9uCahQtM3xeuZhL4txPm8ZCk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BFA29/0F1A4E641DAA11E28E727DA508B02CD2/F_M9uCahQtM3xeuZhL4txPm8ZCk.mft Manifest number: 3495 Signing time: Sat 31 May 2025 15:16:49 +0000 Manifest this update: Sat 31 May 2025 15:16:49 +0000 Manifest next update: Sat 07 Jun 2025 15:16:49 +0000 Files and hashes: 1: F_M9uCahQtM3xeuZhL4txPm8ZCk.crl (hash: 82jeRy6SS3NC99G015BCeVV1tGD/bxi6hlUwOSipF9E=) 2: 3A42DAB8DE6311E8BFB1BF16C4F9AE02.roa (hash: diz+Mu2U4uCFECF4R8aohazh+vKfN3ig2+OPcHe2dC8=) 3: 91268A4A06F311F09EDDC851C4F9AE02.roa (hash: 7uOB6N38ardleWnTuq1RJZwPlZnlnhINCIW0PLcMR9s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BFA29/0F1A4E641DAA11E28E727DA508B02CD2/F_M9uCahQtM3xeuZhL4txPm8ZCk.crl rsync://rpki.apnic.net/member_repository/A91BFA29/0F1A4E641DAA11E28E727DA508B02CD2/F_M9uCahQtM3xeuZhL4txPm8ZCk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_M9uCahQtM3xeuZhL4txPm8ZCk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 15:16:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13482 (0x34aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BFA29, serialNumber=17F33DB826A142D337C5EB9984BE2DC4F9BC6429 Validity Not Before: May 31 15:16:49 2025 GMT Not After : Jun 7 15:16:49 2025 GMT Subject: CN=683b1d61-48aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:99:d5:37:6e:b8:70:43:7c:86:82:5f:00:3d: 3b:d4:fb:72:39:12:e4:3e:5f:d8:ce:18:7d:d4:35: c1:58:87:b8:24:9e:43:6a:b0:a7:f1:d7:29:e6:0f: be:af:e1:1a:4c:1f:41:cf:54:b5:d6:49:18:bb:19: 33:f6:bf:1f:bb:7a:64:12:24:d9:38:72:aa:40:92: df:70:fe:1a:ae:9c:a3:f2:0c:7b:9a:f1:3c:5b:92: 99:6b:14:7f:0a:8e:6a:4d:6c:ab:3d:55:ca:e4:67: 03:dc:76:fd:f7:25:ef:54:a1:bd:75:93:56:55:45: 72:87:fa:a3:8d:86:34:99:87:23:b3:f5:44:58:97: 35:cd:3d:6e:20:04:98:14:9a:ec:96:c7:b7:c6:2e: 93:5d:17:d7:ff:a0:ee:8a:c3:8f:01:bd:db:e5:03: e5:fa:05:2e:f5:0b:dc:8b:ca:86:7f:ef:d4:1a:9f: ec:fb:35:1d:2f:cf:43:f2:69:a1:48:06:5f:1f:d0: 97:e9:ec:d4:0a:87:5a:3c:54:dd:39:d3:57:0e:1e: 0f:00:37:9b:d6:79:07:df:35:1b:4a:c3:ed:d1:48: ad:f5:1c:7a:ad:bf:a2:65:40:ca:50:05:03:e8:a3: 64:df:e4:89:2b:3f:26:4c:e1:1d:c7:31:34:79:85: 34:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:86:6E:AF:DF:5D:4D:7B:1C:16:24:9A:5F:BE:B9:92:89:F0:96:1C X509v3 Authority Key Identifier: keyid:17:F3:3D:B8:26:A1:42:D3:37:C5:EB:99:84:BE:2D:C4:F9:BC:64:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BFA29/0F1A4E641DAA11E28E727DA508B02CD2/F_M9uCahQtM3xeuZhL4txPm8ZCk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_M9uCahQtM3xeuZhL4txPm8ZCk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BFA29/0F1A4E641DAA11E28E727DA508B02CD2/F_M9uCahQtM3xeuZhL4txPm8ZCk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:2c:94:1f:3b:90:08:95:55:b6:85:f8:7a:68:be:e1:d7:01: 6d:bb:c2:e5:37:7c:5d:51:1c:6f:d9:5f:df:90:c4:68:49:1e: 61:57:ca:5d:44:0b:e6:cb:71:a5:3a:57:15:0b:6e:8f:18:0f: 93:78:cd:dd:0e:df:a6:80:33:ea:db:17:b8:85:73:b8:31:97: e0:4f:67:58:ee:81:a7:01:a1:6c:c5:d5:10:ab:b2:cc:3f:69: 89:19:b0:5e:4c:3e:50:a8:02:52:de:7a:ae:3d:bd:8d:96:c0: 19:b8:30:eb:74:e0:3c:e6:15:22:4a:fe:68:90:d2:af:a1:b6: e9:2c:7d:62:05:b0:11:16:c6:00:ef:7c:1f:79:52:b5:29:94: 1b:68:78:2b:e0:b1:cd:fb:2e:c6:02:62:9d:0a:01:e0:f9:a0: 91:36:7b:03:2a:85:96:0b:1f:a4:a8:72:b7:52:33:d7:eb:9c: d2:8d:5c:1e:69:39:4e:3d:ba:ba:1e:2e:9b:a7:66:ad:52:a8: a6:c0:96:89:8f:14:5d:79:8e:06:2f:d4:36:93:66:e7:3e:b3: 97:30:13:f1:eb:e9:c2:00:a9:89:df:fc:42:89:21:b0:f6:b6: ac:40:69:42:a5:b7:8d:f1:62:bb:30:da:02:a7:3e:2e:d1:24: 24:c3:8c:aa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNKowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkZBMjkxMTAvBgNVBAUTKDE3RjMzREI4MjZBMTQyRDMzN0M1RUI5OTg0QkUyREM0 RjlCQzY0MjkwHhcNMjUwNTMxMTUxNjQ5WhcNMjUwNjA3MTUxNjQ5WjAYMRYwFAYD VQQDEw02ODNiMWQ2MS00OGFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvJnVN264cEN8hoJfAD071PtyORLkPl/Yzhh91DXBWIe4JJ5DarCn8dcp5g++ r+EaTB9Bz1S11kkYuxkz9r8fu3pkEiTZOHKqQJLfcP4arpyj8gx7mvE8W5KZaxR/ Co5qTWyrPVXK5GcD3Hb99yXvVKG9dZNWVUVyh/qjjYY0mYcjs/VEWJc1zT1uIASY FJrslse3xi6TXRfX/6DuisOPAb3b5QPl+gUu9Qvci8qGf+/UGp/s+zUdL89D8mmh SAZfH9CX6ezUCodaPFTdOdNXDh4PADeb1nkH3zUbSsPt0Uit9Rx6rb+iZUDKUAUD 6KNk3+SJKz8mTOEdxzE0eYU0+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPSGbq/f XU17HBYkml++uZKJ8JYcMB8GA1UdIwQYMBaAFBfzPbgmoULTN8XrmYS+LcT5vGQp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRkEyOS8wRjFBNEU2NDFE QUExMUUyOEU3MjdEQTUwOEIwMkNEMi9GX005dUNhaFF0TTN4ZXVaaEw0dHhQbTha Q2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZfTTl1Q2FoUXRNM3hldVpoTDR0eFBtOFpDay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RkEyOS8wRjFBNEU2NDFEQUExMUUyOEU3MjdEQTUwOEIwMkNEMi9GX005dUNhaFF0 TTN4ZXVaaEw0dHhQbThaQ2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCtLJQfO5AIlVW2hfh6aL7h1wFtu8LlN3xdURxv2V/fkMRoSR5hV8pd RAvmy3GlOlcVC26PGA+TeM3dDt+mgDPq2xe4hXO4MZfgT2dY7oGnAaFsxdUQq7LM P2mJGbBeTD5QqAJS3nquPb2NlsAZuDDrdOA85hUiSv5okNKvobbpLH1iBbARFsYA 73wfeVK1KZQbaHgr4LHN+y7GAmKdCgHg+aCRNnsDKoWWCx+kqHK3UjPX65zSjVwe aTlOPbq6Hi6bp2atUqimwJaJjxRdeY4GL9Q2k2bnPrOXMBPx6+nCAKmJ3/xCiSGw 9rasQGlCpbeN8WK7MNoCpz4u0SQkw4yq -----END CERTIFICATE-----Generated at Sun Jun 1 08:22:38 2025 by rpki-client