$ rpki-client -vvf rpki.apnic.net/member_repository/A91BFE6A/1D64328ED38711E8BD70755CC4F9AE02/72LxVcGXHVBJQfVx7t-sCvzFKFk.mft File: 72LxVcGXHVBJQfVx7t-sCvzFKFk.mft (raw, json) Hash identifier: mau9v/vy3fYCCHZROnFhCrYVTWKuyTiOtbZcvf7bz+I= Subject key identifier: D4:45:F7:37:FB:1E:D5:E8:99:3B:31:EF:69:D3:29:48:61:15:5A:33 Authority key identifier: EF:62:F1:55:C1:97:1D:50:49:41:F5:71:EE:DF:AC:0A:FC:C5:28:59 Certificate issuer: /CN=A91BFE6A/serialNumber=EF62F155C1971D504941F571EEDFAC0AFCC52859 Certificate serial: 128C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72LxVcGXHVBJQfVx7t-sCvzFKFk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BFE6A/1D64328ED38711E8BD70755CC4F9AE02/72LxVcGXHVBJQfVx7t-sCvzFKFk.mft Manifest number: 1267 Signing time: Fri 30 May 2025 17:17:34 +0000 Manifest this update: Fri 30 May 2025 17:17:34 +0000 Manifest next update: Fri 06 Jun 2025 17:17:34 +0000 Files and hashes: 1: 72LxVcGXHVBJQfVx7t-sCvzFKFk.crl (hash: y+1Y/FTrMIl76DX94/WQmFUQlW+wi7/FstqB3XYRZYQ=) 2: 36AFB016FC6111EEAFBE4719C4F9AE02.roa (hash: 8Neml3oC6KcoFUvC+s8BLmWMEpSAAtUFs6SqBjTSq9o=) 3: ED388A1840BB11E9A6718844C4F9AE02.roa (hash: gcGbaS+C10OxA3/sWZJEHnaLaEauoh+9kGT7bNc0D6Q=) 4: CEBECC28D38811E8A763B462C4F9AE02.roa (hash: IgiJhZRqcSbgHymfJ2UkdTHsUcRz7FOMB1+md3krEv8=) 5: 5122B56A51F311E9AB54691EC4F9AE02.roa (hash: 3BEJ1gCiaz/4ZdrE3qzkDJ5+ojL/iMHnMesKRyA+c6Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BFE6A/1D64328ED38711E8BD70755CC4F9AE02/72LxVcGXHVBJQfVx7t-sCvzFKFk.crl rsync://rpki.apnic.net/member_repository/A91BFE6A/1D64328ED38711E8BD70755CC4F9AE02/72LxVcGXHVBJQfVx7t-sCvzFKFk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72LxVcGXHVBJQfVx7t-sCvzFKFk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 17:17:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4748 (0x128c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BFE6A, serialNumber=EF62F155C1971D504941F571EEDFAC0AFCC52859 Validity Not Before: May 30 17:17:34 2025 GMT Not After : Jun 6 17:17:34 2025 GMT Subject: CN=6839e82e-79b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:04:55:2c:64:36:53:96:f5:06:99:50:37:e1: d0:39:82:db:55:1a:51:d9:52:d0:3c:62:82:f5:f4: 09:3f:93:ed:ea:2e:c8:af:ff:6a:3e:14:e8:c5:33: 54:f5:7a:03:69:54:b6:c4:e4:ce:ce:61:86:2f:8f: 5f:25:1b:23:c9:02:44:a8:42:93:f0:8b:4a:de:87: 23:e8:14:ba:6f:60:34:9c:1a:a2:eb:3c:31:d2:75: 0a:b1:1f:83:c2:72:44:41:58:1c:24:69:6a:a3:27: 76:66:85:ae:d1:70:c7:73:dd:5d:8c:c4:86:3f:7c: a3:84:28:cb:0a:a8:06:c6:4b:18:e2:bb:f5:63:e6: ce:bf:a9:0b:c4:b4:a4:1a:cf:c7:17:b4:73:fd:c5: 49:79:07:cb:4e:f2:13:ec:ad:0e:47:03:18:2d:d6: 4b:b3:d4:18:30:67:57:14:62:31:83:5d:c4:0f:1b: 53:4a:9a:6d:c9:82:b0:37:24:32:2d:68:16:e3:f3: 90:56:bd:0e:e1:01:74:a5:fd:75:79:2c:d5:7c:21: b9:cb:19:32:aa:1d:2d:2c:5e:ca:d6:25:90:e2:05: 59:32:96:ef:2d:60:eb:75:9a:91:e3:86:13:56:3d: d5:94:96:9c:f8:eb:51:57:73:e3:14:ab:86:b3:b0: 75:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:45:F7:37:FB:1E:D5:E8:99:3B:31:EF:69:D3:29:48:61:15:5A:33 X509v3 Authority Key Identifier: keyid:EF:62:F1:55:C1:97:1D:50:49:41:F5:71:EE:DF:AC:0A:FC:C5:28:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BFE6A/1D64328ED38711E8BD70755CC4F9AE02/72LxVcGXHVBJQfVx7t-sCvzFKFk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72LxVcGXHVBJQfVx7t-sCvzFKFk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BFE6A/1D64328ED38711E8BD70755CC4F9AE02/72LxVcGXHVBJQfVx7t-sCvzFKFk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:c2:74:92:38:b4:93:2c:5f:1d:f2:85:ab:7d:14:25:20:5e: d1:bb:7d:23:8d:c7:8c:96:87:be:bc:92:3b:93:dc:3e:4f:2c: 6c:38:ce:0d:d0:91:25:a8:8c:1b:a7:40:a9:11:ed:3f:c7:cf: 1b:13:c3:24:95:7d:52:48:6f:59:d5:54:54:2a:fe:d6:f0:30: 92:59:ce:41:28:1e:45:9f:59:ea:4e:d8:75:28:06:9b:7e:f6: 3e:ad:37:c2:1c:49:ad:e5:fc:d2:65:8d:46:89:f8:c4:3c:69: 32:68:ee:4d:f5:14:a1:b8:b5:39:c5:e3:f1:fe:58:13:b9:35: c9:0c:34:06:18:21:09:e4:87:ff:ca:26:98:f0:47:79:6a:70: 77:a2:b0:c9:42:13:b3:a8:6f:d9:af:cc:6e:f5:c0:f2:5e:2d: 0c:1b:15:a2:cd:e1:90:cc:77:1e:0d:c0:2e:0c:a0:c9:73:45: f8:e1:2d:3e:9f:33:6c:6f:f4:fd:d3:2f:1e:7b:bb:2a:b1:06: c2:07:17:99:59:50:e4:ec:1b:92:d2:69:b0:21:70:66:b4:46: be:ba:66:77:0a:a8:53:08:69:cb:06:6e:22:59:af:b6:80:43: 78:99:33:c5:54:67:ff:11:8c:a7:2f:71:c4:0e:d3:24:82:e6: 7b:52:17:dd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEowwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkZFNkExMTAvBgNVBAUTKEVGNjJGMTU1QzE5NzFENTA0OTQxRjU3MUVFREZBQzBB RkNDNTI4NTkwHhcNMjUwNTMwMTcxNzM0WhcNMjUwNjA2MTcxNzM0WjAYMRYwFAYD VQQDEw02ODM5ZTgyZS03OWI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7QRVLGQ2U5b1BplQN+HQOYLbVRpR2VLQPGKC9fQJP5Pt6i7Ir/9qPhToxTNU 9XoDaVS2xOTOzmGGL49fJRsjyQJEqEKT8ItK3ocj6BS6b2A0nBqi6zwx0nUKsR+D wnJEQVgcJGlqoyd2ZoWu0XDHc91djMSGP3yjhCjLCqgGxksY4rv1Y+bOv6kLxLSk Gs/HF7Rz/cVJeQfLTvIT7K0ORwMYLdZLs9QYMGdXFGIxg13EDxtTSpptyYKwNyQy LWgW4/OQVr0O4QF0pf11eSzVfCG5yxkyqh0tLF7K1iWQ4gVZMpbvLWDrdZqR44YT Vj3VlJac+OtRV3PjFKuGs7B1gwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNRF9zf7 HtXomTsx72nTKUhhFVozMB8GA1UdIwQYMBaAFO9i8VXBlx1QSUH1ce7frAr8xShZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRkU2QS8xRDY0MzI4RUQz ODcxMUU4QkQ3MDc1NUNDNEY5QUUwMi83Mkx4VmNHWEhWQkpRZlZ4N3Qtc0N2ekZL RmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzcyTHhWY0dYSFZCSlFmVng3dC1zQ3Z6RktGay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RkU2QS8xRDY0MzI4RUQzODcxMUU4QkQ3MDc1NUNDNEY5QUUwMi83Mkx4VmNHWEhW QkpRZlZ4N3Qtc0N2ekZLRmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCpwnSSOLSTLF8d8oWrfRQlIF7Ru30jjceMloe+vJI7k9w+TyxsOM4N 0JElqIwbp0CpEe0/x88bE8MklX1SSG9Z1VRUKv7W8DCSWc5BKB5Fn1nqTth1KAab fvY+rTfCHEmt5fzSZY1GifjEPGkyaO5N9RShuLU5xePx/lgTuTXJDDQGGCEJ5If/ yiaY8Ed5anB3orDJQhOzqG/Zr8xu9cDyXi0MGxWizeGQzHceDcAuDKDJc0X44S0+ nzNsb/T90y8ee7sqsQbCBxeZWVDk7BuS0mmwIXBmtEa+umZ3CqhTCGnLBm4iWa+2 gEN4mTPFVGf/EYynL3HEDtMkguZ7Uhfd -----END CERTIFICATE-----Generated at Sat May 31 17:11:23 2025 by rpki-client