$ rpki-client -vvf rpki.apnic.net/member_repository/A91C167F/87C3454CC45F11EE8281CC7DC4F9AE02/whEvRNRFjxhc25rZqRr4KQZInMY.mft File: whEvRNRFjxhc25rZqRr4KQZInMY.mft (raw, json) Hash identifier: KjLZEi/lHjEjz66pW4kqZqVJrAY1GfMcx3XR1awpMfc= Subject key identifier: EB:81:9D:A5:79:DA:BF:CC:17:48:CD:81:14:AC:97:F9:D0:CA:9F:59 Authority key identifier: C2:11:2F:44:D4:45:8F:18:5C:DB:9A:D9:A9:1A:F8:29:06:48:9C:C6 Certificate issuer: /CN=A91C167F/serialNumber=C2112F44D4458F185CDB9AD9A91AF82906489CC6 Certificate serial: FB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/whEvRNRFjxhc25rZqRr4KQZInMY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C167F/87C3454CC45F11EE8281CC7DC4F9AE02/whEvRNRFjxhc25rZqRr4KQZInMY.mft Manifest number: F9 Signing time: Sat 31 May 2025 04:50:27 +0000 Manifest this update: Sat 31 May 2025 04:50:26 +0000 Manifest next update: Sat 07 Jun 2025 04:50:26 +0000 Files and hashes: 1: whEvRNRFjxhc25rZqRr4KQZInMY.crl (hash: X65gdVr/ONHIowGWrG4R2gr70mPKhWK8xe7vkVaXBvM=) 2: 7FC75E34C4B211EEB684BF7FC4F9AE02.roa (hash: ENR1qEuttVnNRROdOyzWRsQ7bm7evUlkAyBRhI4KcO0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C167F/87C3454CC45F11EE8281CC7DC4F9AE02/whEvRNRFjxhc25rZqRr4KQZInMY.crl rsync://rpki.apnic.net/member_repository/A91C167F/87C3454CC45F11EE8281CC7DC4F9AE02/whEvRNRFjxhc25rZqRr4KQZInMY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/whEvRNRFjxhc25rZqRr4KQZInMY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 04:50:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 251 (0xfb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C167F, serialNumber=C2112F44D4458F185CDB9AD9A91AF82906489CC6 Validity Not Before: May 31 04:50:26 2025 GMT Not After : Jun 7 04:50:26 2025 GMT Subject: CN=683a8a93-8649 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:7e:95:89:88:05:db:72:84:8f:af:d8:02:b8: cc:fe:d7:dc:e0:20:6e:52:8b:08:ad:ef:31:cc:b1: 4a:56:b8:5b:9b:84:6c:9b:d8:b5:fb:1f:10:e7:47: c6:a4:b8:72:a6:4b:d7:65:58:99:4f:a2:17:f8:0f: 7f:f0:eb:5d:b2:61:b3:6d:4d:48:b0:7f:69:50:9b: e2:5c:50:3e:93:12:43:db:76:03:b0:80:af:4a:e9: 1d:59:b0:f8:bb:ec:f0:69:4d:32:7e:39:56:ef:f4: a7:0e:44:82:7a:07:98:ae:22:5f:31:fd:97:dd:15: 2b:31:d6:4d:c0:5a:d0:8f:00:e6:30:9f:2e:6c:79: 9e:17:6a:e8:e7:cd:f6:43:54:97:e6:e8:a1:41:f4: 62:29:76:52:70:94:a6:78:7f:9f:c9:bd:13:56:7c: 9b:ba:3f:e0:d2:e1:9d:4b:dd:d8:9f:7b:27:b4:3f: 2f:84:af:aa:4e:e3:a6:1d:8a:9e:7f:0f:0f:08:16: cd:35:3b:3c:2e:c0:e9:3a:b8:0e:9b:12:23:26:a6: 1f:83:ee:31:e0:12:8c:09:6e:dd:7f:a0:17:a3:44: 38:47:7e:b3:17:bf:56:99:5b:ae:79:57:8f:1f:0a: 5b:4c:5b:f5:d3:95:de:a8:a8:62:5e:ec:96:8d:b3: ff:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:81:9D:A5:79:DA:BF:CC:17:48:CD:81:14:AC:97:F9:D0:CA:9F:59 X509v3 Authority Key Identifier: keyid:C2:11:2F:44:D4:45:8F:18:5C:DB:9A:D9:A9:1A:F8:29:06:48:9C:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C167F/87C3454CC45F11EE8281CC7DC4F9AE02/whEvRNRFjxhc25rZqRr4KQZInMY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/whEvRNRFjxhc25rZqRr4KQZInMY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C167F/87C3454CC45F11EE8281CC7DC4F9AE02/whEvRNRFjxhc25rZqRr4KQZInMY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:83:31:ab:37:ab:c9:5b:7e:1a:cc:af:f5:07:d0:79:2b:fc: 98:c3:ad:74:f7:7a:e3:0e:e9:9e:74:1d:59:97:9d:65:6f:67: 10:40:7f:4e:e2:66:b0:8e:40:99:e2:96:6f:97:ce:bf:6f:73: 3f:80:9d:49:6f:d7:9f:55:b1:98:e3:11:0a:20:79:6c:46:e7: 13:d8:99:7c:3b:ea:2b:68:61:e2:bb:42:af:a5:f5:45:af:e8: 04:03:91:9e:18:9c:df:37:be:89:23:a6:44:a8:26:cf:d3:81: 64:69:22:c6:95:13:c2:85:88:cd:c4:78:e3:e6:84:1e:f1:e1: f5:fe:04:df:63:fb:04:3f:3f:b0:f2:d8:16:1e:90:ff:43:92: e6:6a:67:64:68:95:a8:b0:81:09:bc:b1:eb:c3:16:e6:21:8d: a4:1c:52:26:fd:d5:d5:36:09:7f:77:d0:4c:15:fa:d3:ae:00: 82:4c:49:82:b6:7d:e1:9b:7d:6c:62:be:ba:4e:6a:63:85:67: 02:fb:f2:1f:b7:f9:57:83:24:0a:87:60:06:ef:ee:90:f0:58: d0:68:e3:6e:77:3b:8e:2b:44:67:e8:7d:e2:b3:04:94:a5:29: f5:fc:41:6e:6e:29:55:7f:eb:0d:f7:53:8f:75:6d:e1:1e:91: b7:9c:54:1c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzE2N0YxMTAvBgNVBAUTKEMyMTEyRjQ0RDQ0NThGMTg1Q0RCOUFEOUE5MUFGODI5 MDY0ODlDQzYwHhcNMjUwNTMxMDQ1MDI2WhcNMjUwNjA3MDQ1MDI2WjAYMRYwFAYD VQQDEw02ODNhOGE5My04NjQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA036ViYgF23KEj6/YArjM/tfc4CBuUosIre8xzLFKVrhbm4Rsm9i1+x8Q50fG pLhypkvXZViZT6IX+A9/8OtdsmGzbU1IsH9pUJviXFA+kxJD23YDsICvSukdWbD4 u+zwaU0yfjlW7/SnDkSCegeYriJfMf2X3RUrMdZNwFrQjwDmMJ8ubHmeF2ro5832 Q1SX5uihQfRiKXZScJSmeH+fyb0TVnybuj/g0uGdS93Yn3sntD8vhK+qTuOmHYqe fw8PCBbNNTs8LsDpOrgOmxIjJqYfg+4x4BKMCW7df6AXo0Q4R36zF79WmVuueVeP HwpbTFv105XeqKhiXuyWjbP/PwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOuBnaV5 2r/MF0jNgRSsl/nQyp9ZMB8GA1UdIwQYMBaAFMIRL0TURY8YXNua2aka+CkGSJzG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTY3Ri84N0MzNDU0Q0M0 NUYxMUVFODI4MUNDN0RDNEY5QUUwMi93aEV2Uk5SRmp4aGMyNXJacVJyNEtRWklu TVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3doRXZSTlJGanhoYzI1clpxUnI0S1FaSW5NWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MTY3Ri84N0MzNDU0Q0M0NUYxMUVFODI4MUNDN0RDNEY5QUUwMi93aEV2Uk5SRmp4 aGMyNXJacVJyNEtRWkluTVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCcgzGrN6vJW34azK/1B9B5K/yYw61093rjDumedB1Zl51lb2cQQH9O 4mawjkCZ4pZvl86/b3M/gJ1Jb9efVbGY4xEKIHlsRucT2Jl8O+oraGHiu0KvpfVF r+gEA5GeGJzfN76JI6ZEqCbP04FkaSLGlRPChYjNxHjj5oQe8eH1/gTfY/sEPz+w 8tgWHpD/Q5LmamdkaJWosIEJvLHrwxbmIY2kHFIm/dXVNgl/d9BMFfrTrgCCTEmC tn3hm31sYr66TmpjhWcC+/Ift/lXgyQKh2AG7+6Q8FjQaONudzuOK0Rn6H3iswSU pSn1/EFubilVf+sN91OPdW3hHpG3nFQc -----END CERTIFICATE-----Generated at Sat May 31 17:11:21 2025 by rpki-client