$ rpki-client -vvf rpki.apnic.net/member_repository/A91C05AD/95BE3BD61D3311ED96A10A60C4F9AE02/9RKtZjpjMmNVyo2OkQCzzqs8ufs.mft File: 9RKtZjpjMmNVyo2OkQCzzqs8ufs.mft (raw, json) Hash identifier: ORup/J7Eg6kMe6AeVkyr/2OFNi7khxQML/c8/jP+uM8= Subject key identifier: 27:3A:C9:E7:18:99:00:79:36:CB:EB:11:38:0C:E4:2F:CE:53:64:E8 Authority key identifier: F5:12:AD:66:3A:63:32:63:55:CA:8D:8E:91:00:B3:CE:AB:3C:B9:FB Certificate issuer: /CN=A91C05AD/serialNumber=F512AD663A63326355CA8D8E9100B3CEAB3CB9FB Certificate serial: 0264 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9RKtZjpjMmNVyo2OkQCzzqs8ufs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C05AD/95BE3BD61D3311ED96A10A60C4F9AE02/9RKtZjpjMmNVyo2OkQCzzqs8ufs.mft Manifest number: 025A Signing time: Sat 31 May 2025 02:01:36 +0000 Manifest this update: Sat 31 May 2025 02:01:36 +0000 Manifest next update: Sat 07 Jun 2025 02:01:36 +0000 Files and hashes: 1: 9RKtZjpjMmNVyo2OkQCzzqs8ufs.crl (hash: zBuUFjBU6gzO3TyzPjYuDG5X5RPBVl7o3d9N5kGzAdQ=) 2: 58C8DF8E1D3711ED9E2D8867C4F9AE02.roa (hash: FSYr699megaB2rJpIagzzWfYpNq6JBYAS+eCRbgyO2c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C05AD/95BE3BD61D3311ED96A10A60C4F9AE02/9RKtZjpjMmNVyo2OkQCzzqs8ufs.crl rsync://rpki.apnic.net/member_repository/A91C05AD/95BE3BD61D3311ED96A10A60C4F9AE02/9RKtZjpjMmNVyo2OkQCzzqs8ufs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9RKtZjpjMmNVyo2OkQCzzqs8ufs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 02:01:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 612 (0x264) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C05AD, serialNumber=F512AD663A63326355CA8D8E9100B3CEAB3CB9FB Validity Not Before: May 31 02:01:36 2025 GMT Not After : Jun 7 02:01:36 2025 GMT Subject: CN=683a6300-8f05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:00:67:e6:37:73:21:8c:0a:ab:a7:cb:fa:8d: 43:d7:d9:4e:26:51:74:8b:80:8e:8a:0d:41:c9:76: 41:46:2b:8e:7d:29:3e:56:65:06:b7:11:ad:ca:c1: 8f:e6:da:88:16:85:8b:e2:e2:b9:45:71:ae:dc:e5: 06:4b:44:d4:71:3a:09:91:ba:cb:3c:80:1e:82:fd: 0e:5d:37:ec:40:4f:b6:8b:2f:87:4d:4b:9a:84:16: a9:0a:7d:7a:e2:30:5d:c0:fd:a9:fe:7e:c3:3d:56: f9:5c:5d:8c:1b:74:9f:65:bd:2d:65:8d:49:56:e0: 5b:20:45:e6:61:63:8a:8e:ff:ab:38:df:9d:ae:31: 07:7b:33:c3:2d:f9:bf:07:79:18:b3:d9:b8:82:51: 3d:a8:47:a8:d0:4d:33:4e:77:0f:f5:83:2f:2a:a6: 7a:0d:e7:b7:f0:e7:a7:c2:1f:aa:00:9d:46:2a:6d: a2:3a:6c:1e:15:2c:bc:bb:5e:43:3d:b2:0e:8c:1a: 8e:91:59:16:31:f7:87:51:78:4f:5f:60:b6:f3:5e: b6:4e:91:13:78:41:76:e1:7e:a3:a1:0e:49:09:6b: b3:2a:f3:c5:6f:7d:7b:8e:e8:24:ce:60:31:d0:c4: c7:e7:25:66:9b:f6:48:2e:4f:a6:63:ac:bd:e4:e1: b0:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:3A:C9:E7:18:99:00:79:36:CB:EB:11:38:0C:E4:2F:CE:53:64:E8 X509v3 Authority Key Identifier: keyid:F5:12:AD:66:3A:63:32:63:55:CA:8D:8E:91:00:B3:CE:AB:3C:B9:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C05AD/95BE3BD61D3311ED96A10A60C4F9AE02/9RKtZjpjMmNVyo2OkQCzzqs8ufs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9RKtZjpjMmNVyo2OkQCzzqs8ufs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C05AD/95BE3BD61D3311ED96A10A60C4F9AE02/9RKtZjpjMmNVyo2OkQCzzqs8ufs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:c9:e2:e3:87:a1:5c:3e:9e:7c:3a:60:e3:9f:05:ac:53:10: 25:e7:56:d6:46:11:5e:a4:7d:17:10:53:a0:42:71:37:de:12: c1:9e:69:1e:95:58:d4:35:28:3b:08:81:1b:14:36:05:18:ec: 1f:1f:99:d3:f2:e1:1d:fb:49:f4:65:6d:b5:1c:46:d4:a8:06: d5:d1:8b:02:1b:1c:b4:9d:e9:54:9e:01:53:75:a8:92:96:67: f8:31:58:22:ca:be:a0:f3:f8:13:99:a0:c1:d2:d7:90:a4:52: 22:d8:78:07:1f:23:47:58:1a:0f:b4:11:f0:a9:5f:68:61:5d: 9a:6f:29:05:d4:7f:94:4d:9b:ed:83:34:ab:54:e7:80:e0:8c: bf:f9:60:bc:e5:fd:d2:db:df:ac:3e:3f:bd:e8:63:fb:ed:e3: f9:a7:12:0d:02:55:f1:47:71:43:69:eb:b5:de:ed:43:90:56: b3:1a:1f:bd:f3:7e:6c:40:1f:1d:91:51:ef:9e:b0:e0:22:0d: ad:2b:aa:8c:68:28:e1:14:1e:28:a6:74:7a:51:c5:4f:6a:5d: 00:58:9f:f4:e1:4e:9c:f7:ff:39:24:91:5b:ba:ed:3b:97:54: a1:ce:ff:4c:9b:19:d0:90:e0:04:8f:54:38:74:10:05:20:20: d5:40:fc:05 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAmQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzA1QUQxMTAvBgNVBAUTKEY1MTJBRDY2M0E2MzMyNjM1NUNBOEQ4RTkxMDBCM0NF QUIzQ0I5RkIwHhcNMjUwNTMxMDIwMTM2WhcNMjUwNjA3MDIwMTM2WjAYMRYwFAYD VQQDEw02ODNhNjMwMC04ZjA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsABn5jdzIYwKq6fL+o1D19lOJlF0i4COig1ByXZBRiuOfSk+VmUGtxGtysGP 5tqIFoWL4uK5RXGu3OUGS0TUcToJkbrLPIAegv0OXTfsQE+2iy+HTUuahBapCn16 4jBdwP2p/n7DPVb5XF2MG3SfZb0tZY1JVuBbIEXmYWOKjv+rON+drjEHezPDLfm/ B3kYs9m4glE9qEeo0E0zTncP9YMvKqZ6Dee38Oenwh+qAJ1GKm2iOmweFSy8u15D PbIOjBqOkVkWMfeHUXhPX2C28162TpETeEF24X6joQ5JCWuzKvPFb317jugkzmAx 0MTH5yVmm/ZILk+mY6y95OGwlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCc6yecY mQB5NsvrETgM5C/OU2ToMB8GA1UdIwQYMBaAFPUSrWY6YzJjVcqNjpEAs86rPLn7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMDVBRC85NUJFM0JENjFE MzMxMUVEOTZBMTBBNjBDNEY5QUUwMi85Ukt0Wmpwak1tTlZ5bzJPa1FDenpxczh1 ZnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlSS3RaanBqTW1OVnlvMk9rUUN6enFzOHVmcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MDVBRC85NUJFM0JENjFEMzMxMUVEOTZBMTBBNjBDNEY5QUUwMi85Ukt0Wmpwak1t TlZ5bzJPa1FDenpxczh1ZnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+yeLjh6FcPp58OmDjnwWsUxAl51bWRhFepH0XEFOgQnE33hLBnmke lVjUNSg7CIEbFDYFGOwfH5nT8uEd+0n0ZW21HEbUqAbV0YsCGxy0nelUngFTdaiS lmf4MVgiyr6g8/gTmaDB0teQpFIi2HgHHyNHWBoPtBHwqV9oYV2abykF1H+UTZvt gzSrVOeA4Iy/+WC85f3S29+sPj+96GP77eP5pxINAlXxR3FDaeu13u1DkFazGh+9 835sQB8dkVHvnrDgIg2tK6qMaCjhFB4opnR6UcVPal0AWJ/04U6c9/85JJFbuu07 l1Shzv9MmxnQkOAEj1Q4dBAFICDVQPwF -----END CERTIFICATE-----Generated at Sat May 31 17:30:17 2025 by rpki-client