$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0FCC/F5C42408A41F11EABDC2F531C4F9AE02/-SrbMNtsD5zpgLXbl3FF-MGcgks.mft File: -SrbMNtsD5zpgLXbl3FF-MGcgks.mft (raw, json) Hash identifier: 7G7budOYkpORbbL8ZWbOBWevzRoKS6h6E3VOlh05l+s= Subject key identifier: 84:85:3C:AA:15:F7:16:00:E2:26:7F:FF:71:7A:D0:4B:7A:08:D6:88 Authority key identifier: F9:2A:DB:30:DB:6C:0F:9C:E9:80:B5:DB:97:71:45:F8:C1:9C:82:4B Certificate issuer: /CN=A91C0FCC/serialNumber=F92ADB30DB6C0F9CE980B5DB977145F8C19C824B Certificate serial: 091F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-SrbMNtsD5zpgLXbl3FF-MGcgks.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C0FCC/F5C42408A41F11EABDC2F531C4F9AE02/-SrbMNtsD5zpgLXbl3FF-MGcgks.mft Manifest number: 0918 Signing time: Fri 30 May 2025 20:58:19 +0000 Manifest this update: Fri 30 May 2025 20:58:18 +0000 Manifest next update: Fri 06 Jun 2025 20:58:18 +0000 Files and hashes: 1: -SrbMNtsD5zpgLXbl3FF-MGcgks.crl (hash: HzY/C6VtgMDaml3J882VuNy2EdpfP7GHk5QDez3jNuQ=) 2: A778AAF6A42111EAB3108934C4F9AE02.roa (hash: nYjWOytssQAvKUrx53OAPZHiEKpRdEsbmRx5MJFOOy4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C0FCC/F5C42408A41F11EABDC2F531C4F9AE02/-SrbMNtsD5zpgLXbl3FF-MGcgks.crl rsync://rpki.apnic.net/member_repository/A91C0FCC/F5C42408A41F11EABDC2F531C4F9AE02/-SrbMNtsD5zpgLXbl3FF-MGcgks.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-SrbMNtsD5zpgLXbl3FF-MGcgks.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 20:58:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2335 (0x91f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C0FCC, serialNumber=F92ADB30DB6C0F9CE980B5DB977145F8C19C824B Validity Not Before: May 30 20:58:18 2025 GMT Not After : Jun 6 20:58:18 2025 GMT Subject: CN=683a1beb-d372 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:4a:20:ea:d6:a4:29:65:bc:09:b3:99:be:91: d8:27:40:42:b3:82:a9:0f:ff:e9:33:7b:f2:38:e4: 71:64:3b:18:1e:12:eb:96:35:7b:41:4b:65:18:2d: 1c:e8:29:5f:18:8d:5a:7a:c5:83:aa:8c:be:9a:4b: 75:2a:34:3f:07:17:b0:9f:80:6c:60:d2:9a:de:a3: 10:bf:5e:89:33:30:dc:93:5c:56:15:5c:dc:38:df: c0:dc:16:90:24:68:cb:38:c7:44:62:e4:eb:fa:24: ae:b9:b7:52:8a:97:ae:53:24:8b:b0:47:2f:e1:ea: cc:d1:78:b3:b6:1f:53:ec:eb:65:9e:19:8a:79:a9: 69:d2:cc:df:0a:f8:df:7c:42:1a:ba:1e:68:e8:4c: bb:f3:64:4e:3f:32:5d:ca:fc:c5:94:8e:8c:83:09: e7:da:7a:c8:0e:dc:f8:8c:2a:ad:35:cd:09:7f:30: a8:ad:10:53:18:4a:71:4c:86:fa:25:63:d3:80:be: 8b:18:05:a4:ce:cc:f8:29:bf:3d:e2:d7:71:8c:68: ef:a7:b1:8d:e1:c8:21:1a:b8:73:82:b9:7a:09:d9: af:19:bf:a8:a2:3a:44:42:2d:f9:a9:28:8a:5b:0f: a1:32:cf:50:8c:d2:2c:9e:1d:15:5f:23:87:c5:e1: 94:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:85:3C:AA:15:F7:16:00:E2:26:7F:FF:71:7A:D0:4B:7A:08:D6:88 X509v3 Authority Key Identifier: keyid:F9:2A:DB:30:DB:6C:0F:9C:E9:80:B5:DB:97:71:45:F8:C1:9C:82:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C0FCC/F5C42408A41F11EABDC2F531C4F9AE02/-SrbMNtsD5zpgLXbl3FF-MGcgks.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-SrbMNtsD5zpgLXbl3FF-MGcgks.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0FCC/F5C42408A41F11EABDC2F531C4F9AE02/-SrbMNtsD5zpgLXbl3FF-MGcgks.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:e0:ec:b3:f6:0c:d0:35:9d:00:9b:6f:b4:b8:51:fd:47:6a: 82:57:de:ec:d5:f6:73:19:8d:7e:ac:ac:09:43:79:5d:85:d3: 6e:20:2c:84:00:f8:aa:8c:f2:c3:15:a9:13:ac:43:ce:b5:f7: 45:df:b1:f5:61:c8:5d:bc:f5:12:1d:39:3a:40:88:85:28:23: be:b4:57:41:7a:e7:f4:19:57:85:ef:49:50:34:64:b8:96:30: fe:b0:f6:fc:e2:a5:d6:d8:2c:e2:a3:2b:c3:31:38:93:e6:63: 1a:47:1a:16:b9:a6:9e:ba:a5:d8:e5:0f:a1:47:40:30:55:96: 38:73:6b:13:1d:c0:4d:58:84:42:f6:d6:fe:c1:3f:6e:40:81: d9:0a:f2:88:d1:75:f4:c0:b9:05:40:32:6c:7e:22:f6:88:cf: a0:fb:25:8c:f7:e1:f4:73:4b:e3:20:49:4f:7c:d6:50:59:98: f9:57:bd:d9:f5:97:c6:d0:63:c7:6a:a3:c2:8f:6d:ad:bd:b0: 0a:bf:70:5d:2a:90:a3:6e:33:e7:e0:38:bb:00:d9:ce:a3:f7: 32:86:ef:a5:08:d5:22:c4:95:3f:fb:51:11:1d:4c:b7:f1:5b: cb:7c:c8:2e:f4:a2:73:59:7b:f3:8b:30:95:dd:a1:2f:a2:7c: f3:2e:ab:56 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCR8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzBGQ0MxMTAvBgNVBAUTKEY5MkFEQjMwREI2QzBGOUNFOTgwQjVEQjk3NzE0NUY4 QzE5QzgyNEIwHhcNMjUwNTMwMjA1ODE4WhcNMjUwNjA2MjA1ODE4WjAYMRYwFAYD VQQDEw02ODNhMWJlYi1kMzcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx0og6takKWW8CbOZvpHYJ0BCs4KpD//pM3vyOORxZDsYHhLrljV7QUtlGC0c 6ClfGI1aesWDqoy+mkt1KjQ/Bxewn4BsYNKa3qMQv16JMzDck1xWFVzcON/A3BaQ JGjLOMdEYuTr+iSuubdSipeuUySLsEcv4erM0Xizth9T7OtlnhmKealp0szfCvjf fEIauh5o6Ey782ROPzJdyvzFlI6Mgwnn2nrIDtz4jCqtNc0JfzCorRBTGEpxTIb6 JWPTgL6LGAWkzsz4Kb894tdxjGjvp7GN4cghGrhzgrl6CdmvGb+oojpEQi35qSiK Ww+hMs9QjNIsnh0VXyOHxeGUgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFISFPKoV 9xYA4iZ//3F60Et6CNaIMB8GA1UdIwQYMBaAFPkq2zDbbA+c6YC125dxRfjBnIJL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMEZDQy9GNUM0MjQwOEE0 MUYxMUVBQkRDMkY1MzFDNEY5QUUwMi8tU3JiTU50c0Q1enBnTFhibDNGRi1NR2Nn a3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1TcmJNTnRzRDV6cGdMWGJsM0ZGLU1HY2drcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MEZDQy9GNUM0MjQwOEE0MUYxMUVBQkRDMkY1MzFDNEY5QUUwMi8tU3JiTU50c0Q1 enBnTFhibDNGRi1NR2Nna3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCT4Oyz9gzQNZ0Am2+0uFH9R2qCV97s1fZzGY1+rKwJQ3ldhdNuICyE APiqjPLDFakTrEPOtfdF37H1YchdvPUSHTk6QIiFKCO+tFdBeuf0GVeF70lQNGS4 ljD+sPb84qXW2CzioyvDMTiT5mMaRxoWuaaeuqXY5Q+hR0AwVZY4c2sTHcBNWIRC 9tb+wT9uQIHZCvKI0XX0wLkFQDJsfiL2iM+g+yWM9+H0c0vjIElPfNZQWZj5V73Z 9ZfG0GPHaqPCj22tvbAKv3BdKpCjbjPn4Di7ANnOo/cyhu+lCNUixJU/+1ERHUy3 8VvLfMgu9KJzWXvzizCV3aEvonzzLqtW -----END CERTIFICATE-----Generated at Sat May 31 17:06:29 2025 by rpki-client