$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1621/99D68DCE1D6911E2A4640DA708B02CD2/-kF5Yn9bJllOVjA1Ogt3heDWksU.mft File: -kF5Yn9bJllOVjA1Ogt3heDWksU.mft (raw, json) Hash identifier: No3L4/+9xLv1oSkT/MksfFSOmzfb3/pAa2qnkjN8HHE= Subject key identifier: 7C:58:58:27:62:8F:C4:81:DB:32:5B:78:30:86:CD:99:C2:1D:29:95 Authority key identifier: FA:41:79:62:7F:5B:26:59:4E:56:30:35:3A:0B:77:85:E0:D6:92:C5 Certificate issuer: /CN=A91C1621/serialNumber=FA4179627F5B26594E5630353A0B7785E0D692C5 Certificate serial: 34BB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-kF5Yn9bJllOVjA1Ogt3heDWksU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1621/99D68DCE1D6911E2A4640DA708B02CD2/-kF5Yn9bJllOVjA1Ogt3heDWksU.mft Manifest number: 34A4 Signing time: Sat 31 May 2025 14:16:10 +0000 Manifest this update: Sat 31 May 2025 14:16:09 +0000 Manifest next update: Sat 07 Jun 2025 14:16:09 +0000 Files and hashes: 1: -kF5Yn9bJllOVjA1Ogt3heDWksU.crl (hash: rr3nbUQe8xX7zz1GAOiSBBNiKGJifAE9ryiq8Tnin5M=) 2: CDE36D52DB9511E99F3F673EC4F9AE02.roa (hash: zbmIG6CT7ypIn3HcTtsDFC7ihfXsVyZlUb242ctePDw=) 3: BB8F87B4D4B011ECAA427351C4F9AE02.roa (hash: V6xVQh9iUu5NDnwtI8z/zA2tAozAKTEZViih6UdSdQ0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1621/99D68DCE1D6911E2A4640DA708B02CD2/-kF5Yn9bJllOVjA1Ogt3heDWksU.crl rsync://rpki.apnic.net/member_repository/A91C1621/99D68DCE1D6911E2A4640DA708B02CD2/-kF5Yn9bJllOVjA1Ogt3heDWksU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-kF5Yn9bJllOVjA1Ogt3heDWksU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 14:16:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13499 (0x34bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1621, serialNumber=FA4179627F5B26594E5630353A0B7785E0D692C5 Validity Not Before: May 31 14:16:09 2025 GMT Not After : Jun 7 14:16:09 2025 GMT Subject: CN=683b0f2a-b59a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:80:fb:84:7b:76:ab:e9:92:78:76:f0:7d:5f: 1d:e9:0e:fc:27:89:8a:16:4a:43:60:44:3b:3f:c9: 4f:54:77:dc:eb:f0:c4:d2:eb:7f:a3:3e:6a:c9:9b: b5:0b:37:3b:3c:3a:55:2a:28:87:a1:68:0c:c7:14: 3c:ca:56:86:46:3f:e5:f0:cf:b6:ea:df:36:ef:ac: 8a:54:c3:f6:90:ed:83:de:cc:e7:97:5e:1f:9c:bd: 21:bc:a8:6f:51:7a:ec:cb:b4:74:a2:90:ec:f7:3f: 02:ba:c0:29:10:93:a1:48:0d:02:9c:90:52:d2:cb: 89:ef:f3:a1:54:10:4c:26:d0:7e:dc:ae:ab:8c:b1: 1c:3b:3b:cc:8e:bb:59:42:4d:e9:d5:dd:a1:2b:1a: d4:3b:07:02:fd:07:63:82:d2:b9:f0:24:e9:01:6e: 2d:7e:17:e2:6a:ed:11:d4:10:9e:8c:4a:7d:33:d1: ce:b9:4b:80:54:d0:8a:bd:61:e4:3b:f9:ce:a2:5e: ea:1e:56:22:bc:22:89:8b:4a:aa:9c:36:83:1f:19: fc:d8:d8:2a:a4:99:9c:3e:01:a0:a5:83:d8:59:bf: 9b:d0:6a:0b:01:14:9b:42:59:65:8a:b3:07:73:0c: 81:91:6e:4c:4c:04:fe:d1:33:8c:0e:36:09:ec:52: 43:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:58:58:27:62:8F:C4:81:DB:32:5B:78:30:86:CD:99:C2:1D:29:95 X509v3 Authority Key Identifier: keyid:FA:41:79:62:7F:5B:26:59:4E:56:30:35:3A:0B:77:85:E0:D6:92:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1621/99D68DCE1D6911E2A4640DA708B02CD2/-kF5Yn9bJllOVjA1Ogt3heDWksU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-kF5Yn9bJllOVjA1Ogt3heDWksU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1621/99D68DCE1D6911E2A4640DA708B02CD2/-kF5Yn9bJllOVjA1Ogt3heDWksU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bb:60:46:51:99:dc:f5:5e:32:49:cc:2c:5a:2e:8e:32:36:80: d5:61:06:1b:8c:ae:27:6a:40:12:75:c0:db:bc:65:c1:7f:69: 13:e9:71:ba:b5:e6:54:d3:16:a3:d6:62:0e:c1:ce:72:13:2d: 3b:80:de:cc:74:77:2e:dd:35:9d:08:80:0b:9d:08:15:2c:36: 00:5a:82:8b:ec:8d:5e:98:13:0e:89:c3:2f:ef:f2:56:9b:b9: da:08:27:8e:5d:6c:a9:24:d0:28:18:56:33:96:d3:68:c4:21: 0e:f7:0f:3b:03:af:c7:16:5d:10:7c:4a:9f:97:fc:7f:d1:a2: 4c:de:64:98:4c:d0:8a:a6:92:78:21:2e:cf:4d:c2:06:eb:ba: 85:36:70:15:d4:26:40:15:e1:bc:a8:b0:0b:42:15:c9:c9:8f: 67:71:78:23:1e:b1:9e:09:ff:d3:8f:ef:dc:71:49:d6:3a:67: 73:b3:10:ab:4f:6c:d5:36:c7:be:50:44:6e:a9:5b:27:4c:82: 76:6f:fd:92:8b:97:34:64:2f:df:07:3f:61:00:9e:24:e1:eb: 37:ec:d2:07:a7:56:f5:33:25:2a:bb:34:fe:f5:60:73:1b:c2: 41:cc:15:36:dd:c8:cf:60:6e:0d:3b:41:c9:58:17:b4:c2:68: ea:b0:fb:86 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNLswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzE2MjExMTAvBgNVBAUTKEZBNDE3OTYyN0Y1QjI2NTk0RTU2MzAzNTNBMEI3Nzg1 RTBENjkyQzUwHhcNMjUwNTMxMTQxNjA5WhcNMjUwNjA3MTQxNjA5WjAYMRYwFAYD VQQDEw02ODNiMGYyYS1iNTlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvYD7hHt2q+mSeHbwfV8d6Q78J4mKFkpDYEQ7P8lPVHfc6/DE0ut/oz5qyZu1 Czc7PDpVKiiHoWgMxxQ8ylaGRj/l8M+26t8276yKVMP2kO2D3sznl14fnL0hvKhv UXrsy7R0opDs9z8CusApEJOhSA0CnJBS0suJ7/OhVBBMJtB+3K6rjLEcOzvMjrtZ Qk3p1d2hKxrUOwcC/QdjgtK58CTpAW4tfhfiau0R1BCejEp9M9HOuUuAVNCKvWHk O/nOol7qHlYivCKJi0qqnDaDHxn82NgqpJmcPgGgpYPYWb+b0GoLARSbQlllirMH cwyBkW5MTAT+0TOMDjYJ7FJDpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHxYWCdi j8SB2zJbeDCGzZnCHSmVMB8GA1UdIwQYMBaAFPpBeWJ/WyZZTlYwNToLd4Xg1pLF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTYyMS85OUQ2OERDRTFE NjkxMUUyQTQ2NDBEQTcwOEIwMkNEMi8ta0Y1WW45YkpsbE9WakExT2d0M2hlRFdr c1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1rRjVZbjliSmxsT1ZqQTFPZ3QzaGVEV2tzVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MTYyMS85OUQ2OERDRTFENjkxMUUyQTQ2NDBEQTcwOEIwMkNEMi8ta0Y1WW45Ykps bE9WakExT2d0M2hlRFdrc1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC7YEZRmdz1XjJJzCxaLo4yNoDVYQYbjK4nakASdcDbvGXBf2kT6XG6 teZU0xaj1mIOwc5yEy07gN7MdHcu3TWdCIALnQgVLDYAWoKL7I1emBMOicMv7/JW m7naCCeOXWypJNAoGFYzltNoxCEO9w87A6/HFl0QfEqfl/x/0aJM3mSYTNCKppJ4 IS7PTcIG67qFNnAV1CZAFeG8qLALQhXJyY9ncXgjHrGeCf/Tj+/ccUnWOmdzsxCr T2zVNse+UERuqVsnTIJ2b/2Si5c0ZC/fBz9hAJ4k4es37NIHp1b1MyUquzT+9WBz G8JBzBU23cjPYG4NO0HJWBe0wmjqsPuG -----END CERTIFICATE-----Generated at Sat May 31 17:26:18 2025 by rpki-client