$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8203/BC515DAA927A11EFB5643C4EC4F9AE02/MdIdXO5frN7zyMHIfQ1zkfn3Ov8.mft File: MdIdXO5frN7zyMHIfQ1zkfn3Ov8.mft (raw, json) Hash identifier: W4bQgN0VDR1AdTqLNANcuBd168voWlPU5ve+0ATPNQU= Subject key identifier: E1:01:3C:CE:EC:3C:D7:25:94:F7:F7:EB:1C:47:54:B3:C0:9A:72:EC Authority key identifier: 31:D2:1D:5C:EE:5F:AC:DE:F3:C8:C1:C8:7D:0D:73:91:F9:F7:3A:FF Certificate issuer: /CN=A91C8203/serialNumber=31D21D5CEE5FACDEF3C8C1C87D0D7391F9F73AFF Certificate serial: 73 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdIdXO5frN7zyMHIfQ1zkfn3Ov8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C8203/BC515DAA927A11EFB5643C4EC4F9AE02/MdIdXO5frN7zyMHIfQ1zkfn3Ov8.mft Manifest number: 71 Signing time: Sat 31 May 2025 06:26:27 +0000 Manifest this update: Sat 31 May 2025 06:26:26 +0000 Manifest next update: Sat 07 Jun 2025 06:26:26 +0000 Files and hashes: 1: MdIdXO5frN7zyMHIfQ1zkfn3Ov8.crl (hash: DQSNok2bm1DtiYQ/hvIjNpCo1Wqx07Ec9cXtNdMfBK0=) 2: BE48D4AA927D11EF9651FC4AC4F9AE02.roa (hash: izRhlY7DGrfvs8MmjLdXrrQgAeYYKtyct/uQzFPAxkk=) 3: D9BE56E2927D11EFB83ACB5CC4F9AE02.roa (hash: gD5kq8/HSPW50HYpmldu2HRZWRqRsB+3dXKbKp9PeAQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C8203/BC515DAA927A11EFB5643C4EC4F9AE02/MdIdXO5frN7zyMHIfQ1zkfn3Ov8.crl rsync://rpki.apnic.net/member_repository/A91C8203/BC515DAA927A11EFB5643C4EC4F9AE02/MdIdXO5frN7zyMHIfQ1zkfn3Ov8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdIdXO5frN7zyMHIfQ1zkfn3Ov8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 06:26:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 115 (0x73) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C8203, serialNumber=31D21D5CEE5FACDEF3C8C1C87D0D7391F9F73AFF Validity Not Before: May 31 06:26:26 2025 GMT Not After : Jun 7 06:26:26 2025 GMT Subject: CN=683aa113-58c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:45:2c:de:36:ae:6d:23:fa:2b:b3:e3:53:2c: c4:97:e2:5c:6d:8f:16:60:fc:53:7e:be:74:06:73: 3a:16:c9:f2:fd:ed:a1:ac:60:38:03:04:06:e8:f0: 3a:d3:43:d7:cb:3f:a5:1c:ad:e2:a2:9c:61:d7:59: a4:ad:60:6f:09:8d:45:93:3c:8f:02:fa:45:33:5b: 4b:8c:d4:0f:c5:7f:36:be:dd:49:28:ab:3b:cd:f0: 79:d8:95:80:22:2c:8a:bb:8a:01:28:f7:01:03:a1: 2a:96:e8:28:a4:8b:15:da:9e:89:6d:56:6d:c8:cb: dd:71:45:a0:0e:51:4f:7b:83:7a:53:2a:a6:53:65: 29:6d:2a:cb:a4:31:11:dd:78:fe:b4:a2:c3:ee:42: ac:e7:c7:4c:b1:9f:86:a6:3e:77:61:56:48:cc:a5: 60:0f:77:f7:6f:5f:78:88:84:77:ee:9c:3c:f4:df: 5c:6f:f4:62:e1:56:1e:c3:b2:17:79:1d:e2:94:f3: a4:a8:8e:15:72:5d:85:98:a4:8a:85:f1:e8:39:3c: 34:5a:75:4e:44:a5:fb:46:ed:5f:d6:fa:81:c8:25: 6b:89:eb:03:9d:fe:22:8e:9d:c8:99:04:10:8e:ab: c9:14:66:a5:5d:51:d7:d1:6d:c0:df:83:31:16:fe: b5:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:01:3C:CE:EC:3C:D7:25:94:F7:F7:EB:1C:47:54:B3:C0:9A:72:EC X509v3 Authority Key Identifier: keyid:31:D2:1D:5C:EE:5F:AC:DE:F3:C8:C1:C8:7D:0D:73:91:F9:F7:3A:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C8203/BC515DAA927A11EFB5643C4EC4F9AE02/MdIdXO5frN7zyMHIfQ1zkfn3Ov8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdIdXO5frN7zyMHIfQ1zkfn3Ov8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8203/BC515DAA927A11EFB5643C4EC4F9AE02/MdIdXO5frN7zyMHIfQ1zkfn3Ov8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:6c:33:a4:d4:5f:4b:76:cc:bb:be:9c:d0:20:18:34:ff:57: cf:62:93:bc:e1:c8:5d:6c:93:3a:17:7b:59:59:f0:f8:15:a9: 90:4a:9b:59:28:bb:b1:bc:28:de:22:bd:4d:b6:f7:f6:83:71: a5:e5:27:db:fd:81:94:c0:d2:e8:c4:3b:e9:47:7d:e4:69:54: 60:70:c1:bb:f6:ad:c6:06:e0:92:64:b7:5f:37:9e:8d:c1:1a: 11:23:ac:9f:69:0e:05:ea:45:83:f5:30:69:11:5c:87:c0:ed: 56:31:ae:3b:e5:e3:c1:0f:ff:11:c8:e1:98:8a:63:52:ff:6a: 14:0a:ee:92:98:e2:96:ef:61:c3:21:c1:17:ca:ea:54:e2:ff: 38:0b:8b:62:c2:c0:c4:53:28:98:6a:87:4d:a1:09:c6:a1:49: e7:04:fe:76:97:7a:7f:86:b7:6e:93:83:c2:eb:a0:0a:a7:0c: 4b:63:08:c7:91:f5:ff:6f:f3:59:3d:a1:d9:6a:ff:cf:03:80: 7e:2d:99:c6:c2:1e:f9:a9:f0:90:c7:fe:fa:fc:c8:0a:52:bf: 4e:8c:5e:4d:2d:74:ad:9e:59:16:99:38:3e:0a:58:2b:37:d9: e6:f9:41:1f:50:78:28:a9:5d:a4:af:db:b6:4c:2b:ea:2f:b6: e8:a7:4e:b1 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBczANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD ODIwMzExMC8GA1UEBRMoMzFEMjFENUNFRTVGQUNERUYzQzhDMUM4N0QwRDczOTFG OUY3M0FGRjAeFw0yNTA1MzEwNjI2MjZaFw0yNTA2MDcwNjI2MjZaMBgxFjAUBgNV BAMTDTY4M2FhMTEzLTU4YzEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDZRSzeNq5tI/ors+NTLMSX4lxtjxZg/FN+vnQGczoWyfL97aGsYDgDBAbo8DrT Q9fLP6UcreKinGHXWaStYG8JjUWTPI8C+kUzW0uM1A/Ffza+3UkoqzvN8HnYlYAi LIq7igEo9wEDoSqW6CikixXanoltVm3Iy91xRaAOUU97g3pTKqZTZSltKsukMRHd eP60osPuQqznx0yxn4amPndhVkjMpWAPd/dvX3iIhHfunDz031xv9GLhVh7Dshd5 HeKU86SojhVyXYWYpIqF8eg5PDRadU5EpftG7V/W+oHIJWuJ6wOd/iKOnciZBBCO q8kUZqVdUdfRbcDfgzEW/rUfAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU4QE8zuw8 1yWU9/frHEdUs8CacuwwHwYDVR0jBBgwFoAUMdIdXO5frN7zyMHIfQ1zkfn3Ov8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM4MjAzL0JDNTE1REFBOTI3 QTExRUZCNTY0M0M0RUM0RjlBRTAyL01kSWRYTzVmck43enlNSElmUTF6a2ZuM092 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTWRJZFhPNWZyTjd6eU1ISWZRMXprZm4zT3Y4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM4 MjAzL0JDNTE1REFBOTI3QTExRUZCNTY0M0M0RUM0RjlBRTAyL01kSWRYTzVmck43 enlNSElmUTF6a2ZuM092OC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJZsM6TUX0t2zLu+nNAgGDT/V89ik7zhyF1skzoXe1lZ8PgVqZBKm1ko u7G8KN4ivU229/aDcaXlJ9v9gZTA0ujEO+lHfeRpVGBwwbv2rcYG4JJkt183no3B GhEjrJ9pDgXqRYP1MGkRXIfA7VYxrjvl48EP/xHI4ZiKY1L/ahQK7pKY4pbvYcMh wRfK6lTi/zgLi2LCwMRTKJhqh02hCcahSecE/naXen+Gt26Tg8LroAqnDEtjCMeR 9f9v81k9odlq/88DgH4tmcbCHvmp8JDH/vr8yApSv06MXk0tdK2eWRaZOD4KWCs3 2eb5QR9QeCipXaSv27ZMK+ovtuinTrE= -----END CERTIFICATE-----Generated at Sat May 31 16:34:00 2025 by rpki-client