$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4614/1C94899AF4F011E9AC202B1DC4F9AE02/SU13HlEeEgBTuwmx8nS9j1nXOqg.mft File: SU13HlEeEgBTuwmx8nS9j1nXOqg.mft (raw, json) Hash identifier: BBC69lKb9i40MknM9xPJA9LLhHCJN+CZoqBA8ynwMIE= Subject key identifier: DB:C7:61:FF:2F:A7:E7:FC:EA:8A:62:64:38:63:5E:35:DD:40:E0:32 Authority key identifier: 49:4D:77:1E:51:1E:12:00:53:BB:09:B1:F2:74:BD:8F:59:D7:3A:A8 Certificate issuer: /CN=A91C4614/serialNumber=494D771E511E120053BB09B1F274BD8F59D73AA8 Certificate serial: 0CAE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SU13HlEeEgBTuwmx8nS9j1nXOqg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C4614/1C94899AF4F011E9AC202B1DC4F9AE02/SU13HlEeEgBTuwmx8nS9j1nXOqg.mft Manifest number: 0C9F Signing time: Fri 30 May 2025 18:24:21 +0000 Manifest this update: Fri 30 May 2025 18:24:20 +0000 Manifest next update: Fri 06 Jun 2025 18:24:20 +0000 Files and hashes: 1: SU13HlEeEgBTuwmx8nS9j1nXOqg.crl (hash: 3FCCtE2VY5tpwqCWVxiQya9jG/n88gotN+9HNczHeSw=) 2: 7A89B302E7E511EFA8BD237AC4F9AE02.roa (hash: UCWjaCqEsXVhT35xitXZIRxEvFr2BDAPH30xrreLvIA=) 3: ACEBFE04E7E511EFBC775C0EC4F9AE02.roa (hash: 0yGPdzFunQ5T02jKLxMdi+Rjr7DQq/Vj6dobHVz6yro=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C4614/1C94899AF4F011E9AC202B1DC4F9AE02/SU13HlEeEgBTuwmx8nS9j1nXOqg.crl rsync://rpki.apnic.net/member_repository/A91C4614/1C94899AF4F011E9AC202B1DC4F9AE02/SU13HlEeEgBTuwmx8nS9j1nXOqg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SU13HlEeEgBTuwmx8nS9j1nXOqg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 18:24:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3246 (0xcae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C4614, serialNumber=494D771E511E120053BB09B1F274BD8F59D73AA8 Validity Not Before: May 30 18:24:20 2025 GMT Not After : Jun 6 18:24:20 2025 GMT Subject: CN=6839f7d4-e4a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:df:a6:87:a1:3e:d4:ff:61:fe:4f:58:cb:18: 22:c4:e5:69:21:6e:df:83:0f:39:d7:de:81:88:d2: ff:28:17:ae:5c:78:a9:b3:1d:e6:7e:12:d1:1e:6b: 7b:44:4d:a1:67:b6:b6:7e:54:98:05:46:a8:b3:fd: 74:8a:8a:32:fe:c5:58:de:92:b6:83:9c:ff:79:0f: ac:af:17:11:c0:41:29:e1:07:48:be:5a:cd:ea:9a: a2:fc:6b:99:ad:c2:36:12:a8:4f:94:f7:e7:de:8f: dc:46:a9:de:ca:56:2f:1a:31:9d:9f:55:22:14:4b: 74:55:3f:7a:3a:ed:26:a8:41:bc:38:d5:21:37:be: e9:0b:3e:9b:93:97:56:04:df:92:9d:4d:7a:61:d7: af:4b:45:c0:17:36:61:21:3f:23:38:38:13:ec:e9: a2:a1:39:94:99:06:fb:3a:ca:6a:93:1d:2b:15:32: fb:f0:2b:d0:fd:87:94:bf:8f:fa:0a:e6:32:c4:0a: cd:ea:de:f1:3e:d2:26:34:cd:9e:ad:88:99:46:ad: ad:3f:c8:8d:9d:f4:1f:dd:e6:a6:d8:e2:fe:9e:32: 6e:16:9b:71:92:67:20:58:86:c4:c8:78:37:63:4b: 43:13:61:ce:d7:88:68:aa:28:13:1e:f5:29:ee:ad: d3:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:C7:61:FF:2F:A7:E7:FC:EA:8A:62:64:38:63:5E:35:DD:40:E0:32 X509v3 Authority Key Identifier: keyid:49:4D:77:1E:51:1E:12:00:53:BB:09:B1:F2:74:BD:8F:59:D7:3A:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C4614/1C94899AF4F011E9AC202B1DC4F9AE02/SU13HlEeEgBTuwmx8nS9j1nXOqg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SU13HlEeEgBTuwmx8nS9j1nXOqg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4614/1C94899AF4F011E9AC202B1DC4F9AE02/SU13HlEeEgBTuwmx8nS9j1nXOqg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:32:77:c4:22:a4:75:b3:5b:29:f1:78:75:c5:76:32:0e:85: 07:19:b2:23:bf:05:d6:04:a2:73:a4:d7:63:27:34:31:56:9c: 46:61:02:3f:8b:b9:5d:68:ff:fa:bf:15:5c:3e:05:76:05:81: df:47:f3:1f:cb:ea:1d:f9:d7:ea:4f:a5:74:07:eb:d5:bf:33: c2:b6:31:ae:f7:25:fe:f2:78:66:1b:d3:1a:6a:d3:a0:8b:ad: 0d:d8:e1:db:1f:ec:2e:57:16:a1:cc:a1:e2:a5:e1:0c:ec:e3: 91:75:b1:b6:b7:a2:2a:c8:8f:45:60:f9:52:c6:45:44:26:bd: 2a:e1:27:d1:cc:ac:76:8a:77:7f:f0:5a:c2:e0:84:97:3c:d1: 1c:70:ff:10:ab:bc:5f:9b:df:97:3d:b5:39:90:5c:33:e3:ed: 53:c7:a8:1d:c9:54:19:4e:c2:71:ab:2b:de:2e:77:96:c7:86: 2d:48:df:55:0c:64:ae:23:cc:d6:d9:20:3a:e2:3e:2e:c3:e6: 60:dd:dc:70:c6:93:62:ed:07:11:81:82:75:ec:03:04:8a:8e: 0e:2f:25:7e:2b:4a:cf:f2:aa:78:8f:89:0c:20:69:d1:18:67: 8b:82:d3:7d:55:e2:17:f1:e2:74:78:81:e6:68:55:d9:3f:53: c0:18:91:a9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDK4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzQ2MTQxMTAvBgNVBAUTKDQ5NEQ3NzFFNTExRTEyMDA1M0JCMDlCMUYyNzRCRDhG NTlENzNBQTgwHhcNMjUwNTMwMTgyNDIwWhcNMjUwNjA2MTgyNDIwWjAYMRYwFAYD VQQDEw02ODM5ZjdkNC1lNGExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuN+mh6E+1P9h/k9YyxgixOVpIW7fgw85196BiNL/KBeuXHipsx3mfhLRHmt7 RE2hZ7a2flSYBUaos/10iooy/sVY3pK2g5z/eQ+srxcRwEEp4QdIvlrN6pqi/GuZ rcI2EqhPlPfn3o/cRqneylYvGjGdn1UiFEt0VT96Ou0mqEG8ONUhN77pCz6bk5dW BN+SnU16YdevS0XAFzZhIT8jODgT7OmioTmUmQb7Ospqkx0rFTL78CvQ/YeUv4/6 CuYyxArN6t7xPtImNM2erYiZRq2tP8iNnfQf3eam2OL+njJuFptxkmcgWIbEyHg3 Y0tDE2HO14hoqigTHvUp7q3TnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNvHYf8v p+f86opiZDhjXjXdQOAyMB8GA1UdIwQYMBaAFElNdx5RHhIAU7sJsfJ0vY9Z1zqo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNDYxNC8xQzk0ODk5QUY0 RjAxMUU5QUMyMDJCMURDNEY5QUUwMi9TVTEzSGxFZUVnQlR1d214OG5TOWoxblhP cWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NVMTNIbEVlRWdCVHV3bXg4blM5ajFuWE9xZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NDYxNC8xQzk0ODk5QUY0RjAxMUU5QUMyMDJCMURDNEY5QUUwMi9TVTEzSGxFZUVn QlR1d214OG5TOWoxblhPcWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA7MnfEIqR1s1sp8Xh1xXYyDoUHGbIjvwXWBKJzpNdjJzQxVpxGYQI/ i7ldaP/6vxVcPgV2BYHfR/Mfy+od+dfqT6V0B+vVvzPCtjGu9yX+8nhmG9MaatOg i60N2OHbH+wuVxahzKHipeEM7OORdbG2t6IqyI9FYPlSxkVEJr0q4SfRzKx2ind/ 8FrC4ISXPNEccP8Qq7xfm9+XPbU5kFwz4+1Tx6gdyVQZTsJxqyveLneWx4YtSN9V DGSuI8zW2SA64j4uw+Zg3dxwxpNi7QcRgYJ17AMEio4OLyV+K0rP8qp4j4kMIGnR GGeLgtN9VeIX8eJ0eIHmaFXZP1PAGJGp -----END CERTIFICATE-----Generated at Sat May 31 17:50:39 2025 by rpki-client