$ rpki-client -vvf rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/cB88FPCtfu9l000APNwZJGSM3jc.mft File: cB88FPCtfu9l000APNwZJGSM3jc.mft (raw, json) Hash identifier: 5imZ8mfyoTSTPFMF4OKQ5M6W5mOXSSGOV+r95rw4Gx0= Subject key identifier: 29:D2:1D:38:D7:28:DD:05:B7:3A:1C:3D:E2:88:A6:FD:74:C2:62:F5 Authority key identifier: 70:1F:3C:14:F0:AD:7E:EF:65:D3:4D:00:3C:DC:19:24:64:8C:DE:37 Certificate issuer: /CN=A91C63A6/serialNumber=701F3C14F0AD7EEF65D34D003CDC1924648CDE37 Certificate serial: 03C3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cB88FPCtfu9l000APNwZJGSM3jc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/cB88FPCtfu9l000APNwZJGSM3jc.mft Manifest number: 03A8 Signing time: Sat 31 May 2025 00:57:27 +0000 Manifest this update: Sat 31 May 2025 00:57:27 +0000 Manifest next update: Sat 07 Jun 2025 00:57:27 +0000 Files and hashes: 1: cB88FPCtfu9l000APNwZJGSM3jc.crl (hash: I1Mmzp/a4syYW4Qh3+hZiMZ9hWO+yYDr+MiPMV/ZqxM=) 2: 7E16D3240B5011EE9A518C7BC4F9AE02.roa (hash: U0JaFB8CVVgKbLBmTTRMW+oeZZCXLA9kdsldXtwigwA=) 3: CDDEC562011711EEB15FDD2AC4F9AE02.roa (hash: PgsogDDZQkDovTqfqAZnCJjtewKfx64pNU23F3h3LOI=) 4: 2BF1D5F07E3511EE8CB63458C4F9AE02.roa (hash: xABbFnxjesSqqxHb5Z3LU/MaNyiAYDrCsWPlJjK46gQ=) 5: DF49B4400B4B11EEBAD3047AC4F9AE02.roa (hash: 5EplJ/qwJeqGMd35PNuR9x2zdZw/zJYIhHM0ma+2rK4=) 6: 513415BC400011EE88B66B4FC4F9AE02.roa (hash: La9bIBXUn7Pcc0HHfxEl2RzNwtBMPkoEmLR0KZnlaWs=) 7: 86550F680B4311EE8ABEE820C4F9AE02.roa (hash: yWfAEaYcbh5fjpOL87NsV9hi8Cg9epFjV+c+Su0AUew=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/cB88FPCtfu9l000APNwZJGSM3jc.crl rsync://rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/cB88FPCtfu9l000APNwZJGSM3jc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cB88FPCtfu9l000APNwZJGSM3jc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 00:57:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 963 (0x3c3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C63A6, serialNumber=701F3C14F0AD7EEF65D34D003CDC1924648CDE37 Validity Not Before: May 31 00:57:27 2025 GMT Not After : Jun 7 00:57:27 2025 GMT Subject: CN=683a53f7-0543 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:41:ad:10:79:7f:82:f0:77:7b:61:8f:94:2d: fd:78:f7:ae:c8:2c:19:62:56:26:b8:28:73:99:33: b9:1b:46:77:bd:72:47:8d:da:f0:ba:27:31:44:6a: 7d:f3:a1:22:03:0e:3e:73:1f:f6:01:a6:62:08:42: e7:96:e3:9f:45:b2:8b:d5:5c:0d:19:2d:c6:5f:cf: 4c:9c:2a:52:91:4a:ea:a7:7a:c9:b2:4b:fd:6c:9e: b5:32:92:3b:fb:27:f4:42:f2:88:e4:12:fb:d2:d5: 56:9c:21:e4:b9:88:5d:fb:e9:6b:94:24:4d:23:f3: 3d:b1:1b:e0:22:a8:a5:39:6e:52:e9:3d:04:f4:fa: 24:f9:5d:75:40:3e:c6:6d:20:0a:5d:7e:d6:10:40: d4:d6:72:d1:cd:87:1c:ce:4a:0e:6b:11:89:ff:19: 39:35:d7:ce:1e:6b:61:7b:4a:d4:4a:4c:c7:45:be: 0e:8a:27:ac:c5:8b:71:91:0f:50:ff:e4:d2:5b:63: 50:e2:15:c4:be:1f:a6:8a:52:8a:77:3f:5e:8d:26: 51:12:61:b5:f2:93:80:b4:63:6a:e5:1b:7c:d8:c9: ce:14:0d:05:7a:1d:f1:ce:a1:79:e9:25:71:27:4f: 7b:03:e7:3f:a4:5a:c2:36:0a:d9:a7:c1:6b:ec:f2: 8f:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:D2:1D:38:D7:28:DD:05:B7:3A:1C:3D:E2:88:A6:FD:74:C2:62:F5 X509v3 Authority Key Identifier: keyid:70:1F:3C:14:F0:AD:7E:EF:65:D3:4D:00:3C:DC:19:24:64:8C:DE:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/cB88FPCtfu9l000APNwZJGSM3jc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cB88FPCtfu9l000APNwZJGSM3jc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/cB88FPCtfu9l000APNwZJGSM3jc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:a3:2b:ce:87:ed:10:9b:e3:75:c7:49:97:29:a6:82:2a:51: f8:14:ff:b3:57:9d:d9:4f:d0:45:6a:16:e6:42:37:fb:84:12: c9:65:55:53:69:47:8d:93:50:bd:0a:8c:b0:67:24:d9:fe:d7: 69:73:72:d4:49:92:e5:9d:86:4f:a5:cb:ab:58:1f:6a:17:47: 1f:6a:1a:58:b7:2d:55:2a:5b:fe:7c:07:69:f4:d9:85:a5:5b: 14:f2:75:b1:70:db:74:be:c5:ee:f8:8d:44:a0:34:e0:2a:27: 5e:d6:3a:c3:21:11:94:39:3b:48:da:38:c0:70:ec:99:0a:bd: 5c:79:db:b4:34:16:93:dc:9c:d9:82:f0:62:f9:92:85:45:97: 4e:62:30:ee:45:dd:01:47:bc:8b:38:06:63:d8:bd:b2:ee:67: c5:36:df:99:c8:13:a1:48:b1:07:01:e4:0f:cf:24:27:21:0e: 2f:5d:74:5f:9d:70:f6:07:51:79:ce:95:8f:54:14:94:44:93: 70:58:13:b2:35:b9:86:95:fd:82:a9:50:cc:b6:89:64:ed:2c: d7:58:8e:a2:d1:02:57:00:71:3e:86:51:38:e1:f9:5d:a1:26: 5e:46:96:38:cb:07:91:53:5e:b8:1e:15:bd:32:a7:f7:e5:e1: 56:b6:85:91 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA8MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzYzQTYxMTAvBgNVBAUTKDcwMUYzQzE0RjBBRDdFRUY2NUQzNEQwMDNDREMxOTI0 NjQ4Q0RFMzcwHhcNMjUwNTMxMDA1NzI3WhcNMjUwNjA3MDA1NzI3WjAYMRYwFAYD VQQDEw02ODNhNTNmNy0wNTQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4kGtEHl/gvB3e2GPlC39ePeuyCwZYlYmuChzmTO5G0Z3vXJHjdrwuicxRGp9 86EiAw4+cx/2AaZiCELnluOfRbKL1VwNGS3GX89MnCpSkUrqp3rJskv9bJ61MpI7 +yf0QvKI5BL70tVWnCHkuYhd++lrlCRNI/M9sRvgIqilOW5S6T0E9Pok+V11QD7G bSAKXX7WEEDU1nLRzYcczkoOaxGJ/xk5NdfOHmthe0rUSkzHRb4OiiesxYtxkQ9Q /+TSW2NQ4hXEvh+milKKdz9ejSZREmG18pOAtGNq5Rt82MnOFA0Feh3xzqF56SVx J097A+c/pFrCNgrZp8Fr7PKPOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCnSHTjX KN0FtzocPeKIpv10wmL1MB8GA1UdIwQYMBaAFHAfPBTwrX7vZdNNADzcGSRkjN43 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjNBNi8wRDM5QzRFNDlB OUIxMUVDODJDNzBCMjBDNEY5QUUwMi9jQjg4RlBDdGZ1OWwwMDBBUE53WkpHU00z amMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NCODhGUEN0ZnU5bDAwMEFQTndaSkdTTTNqYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NjNBNi8wRDM5QzRFNDlBOUIxMUVDODJDNzBCMjBDNEY5QUUwMi9jQjg4RlBDdGZ1 OWwwMDBBUE53WkpHU00zamMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAuoyvOh+0Qm+N1x0mXKaaCKlH4FP+zV53ZT9BFahbmQjf7hBLJZVVT aUeNk1C9CoywZyTZ/tdpc3LUSZLlnYZPpcurWB9qF0cfahpYty1VKlv+fAdp9NmF pVsU8nWxcNt0vsXu+I1EoDTgKide1jrDIRGUOTtI2jjAcOyZCr1cedu0NBaT3JzZ gvBi+ZKFRZdOYjDuRd0BR7yLOAZj2L2y7mfFNt+ZyBOhSLEHAeQPzyQnIQ4vXXRf nXD2B1F5zpWPVBSURJNwWBOyNbmGlf2CqVDMtolk7SzXWI6i0QJXAHE+hlE44fld oSZeRpY4yweRU164HhW9Mqf35eFWtoWR -----END CERTIFICATE-----Generated at Sat May 31 16:46:52 2025 by rpki-client