$ rpki-client -vvf rpki.apnic.net/member_repository/A91C83EA/D82C61E81C4511E494A76F1BC4F9AE02/92dQUVu3YtGADFrmxsLbJP6VLQI.mft File: 92dQUVu3YtGADFrmxsLbJP6VLQI.mft (raw, json) Hash identifier: HxjFz7UPz5hgDvj/OPFWhybX3P/jjNTkJ5LlD30jvAE= Subject key identifier: 1F:8F:2C:37:67:AF:B8:98:0E:8E:08:8D:2D:DB:76:4C:52:DC:7B:9E Authority key identifier: F7:67:50:51:5B:B7:62:D1:80:0C:5A:E6:C6:C2:DB:24:FE:95:2D:02 Certificate issuer: /CN=A91C83EA/serialNumber=F76750515BB762D1800C5AE6C6C2DB24FE952D02 Certificate serial: 2A8D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/92dQUVu3YtGADFrmxsLbJP6VLQI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C83EA/D82C61E81C4511E494A76F1BC4F9AE02/92dQUVu3YtGADFrmxsLbJP6VLQI.mft Manifest number: 2A77 Signing time: Sat 31 May 2025 15:32:49 +0000 Manifest this update: Sat 31 May 2025 15:32:48 +0000 Manifest next update: Sat 07 Jun 2025 15:32:48 +0000 Files and hashes: 1: 92dQUVu3YtGADFrmxsLbJP6VLQI.crl (hash: Dn7qnFivwajnEuiwc2KbACGoPV+6cU9lDpYbbEkg3/g=) 2: 2ED1150C561D11E7B003DF26C4F9AE02.roa (hash: VWQv/IH7NsqTcNchTqEWHo8sER9hJVbk+Ml69dI7l0g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C83EA/D82C61E81C4511E494A76F1BC4F9AE02/92dQUVu3YtGADFrmxsLbJP6VLQI.crl rsync://rpki.apnic.net/member_repository/A91C83EA/D82C61E81C4511E494A76F1BC4F9AE02/92dQUVu3YtGADFrmxsLbJP6VLQI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/92dQUVu3YtGADFrmxsLbJP6VLQI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 15:23:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10893 (0x2a8d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C83EA, serialNumber=F76750515BB762D1800C5AE6C6C2DB24FE952D02 Validity Not Before: May 31 15:32:48 2025 GMT Not After : Jun 7 15:32:48 2025 GMT Subject: CN=683b2121-8b71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:89:b3:32:93:29:7b:9f:e9:69:17:d0:0d:5e: 9b:cc:32:91:c4:ee:98:3c:0b:db:2d:73:1c:ca:e7: 08:4c:c2:16:f9:e9:db:9f:54:3f:be:98:ea:4b:c9: f7:62:df:5a:ed:a0:fc:56:47:7e:87:54:e8:d5:cb: d9:93:8d:0b:e9:30:09:ad:ca:e0:f7:f3:6a:b1:2b: 3a:a9:ed:cf:cf:5e:e9:01:51:b8:d5:79:b6:98:05: 71:06:bc:bf:f5:9e:1e:04:de:09:d2:01:f2:40:15: 34:8f:e1:30:6e:5a:38:fc:2d:5e:78:a1:b3:a7:5d: 2d:29:a3:c2:81:fa:9a:f7:2d:63:06:c2:f3:36:57: 18:cc:2c:9a:78:d1:be:f7:cf:b8:9b:80:0f:bf:e1: f2:86:73:be:78:e4:73:03:b5:00:13:dd:89:fd:6f: cc:82:9a:79:c3:4b:37:e7:92:a6:ef:ab:35:02:a6: 6e:13:52:e8:e7:6e:52:f3:98:4f:14:9b:6b:23:1c: ec:0e:ad:3d:d7:24:14:e2:d9:92:4e:ae:20:dc:d1: c1:9d:39:8d:71:ac:68:c4:f6:d2:4c:27:1f:fe:b9: 8b:96:6d:e6:b8:d6:45:16:15:24:79:f7:a5:90:7c: 83:39:da:4a:da:2c:4d:e4:b7:ed:88:a7:3c:a3:ac: 48:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:8F:2C:37:67:AF:B8:98:0E:8E:08:8D:2D:DB:76:4C:52:DC:7B:9E X509v3 Authority Key Identifier: keyid:F7:67:50:51:5B:B7:62:D1:80:0C:5A:E6:C6:C2:DB:24:FE:95:2D:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C83EA/D82C61E81C4511E494A76F1BC4F9AE02/92dQUVu3YtGADFrmxsLbJP6VLQI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/92dQUVu3YtGADFrmxsLbJP6VLQI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C83EA/D82C61E81C4511E494A76F1BC4F9AE02/92dQUVu3YtGADFrmxsLbJP6VLQI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:21:48:e2:6a:13:06:43:83:f7:d0:a3:a2:44:ef:4f:12:c5: 52:08:c2:67:24:f1:e0:dc:bc:8a:ae:c5:7f:0a:4c:02:4e:a8: a0:ac:02:e7:43:80:1a:91:a4:f9:ea:e1:00:5e:21:e2:d5:0a: c5:53:ae:bc:e2:d9:1e:f9:62:0a:51:42:ba:e1:8d:1a:0b:b1: 37:0d:99:ed:83:1f:db:68:48:9f:2d:c8:f2:94:5a:05:53:1a: 0f:ce:05:aa:5b:13:96:55:da:9f:74:83:f3:9d:6e:f7:ef:48: ca:93:b7:6e:6b:b6:39:b7:2c:b7:0d:68:27:42:5b:83:ff:21: e2:9c:0c:60:a1:09:f2:ad:9c:36:f7:04:c5:88:d6:fe:2b:0a: bd:d4:b0:be:fc:77:7a:e9:f2:f3:10:22:fe:96:c3:82:64:62: ef:2d:69:09:26:d9:b2:24:e1:0a:bb:48:7c:b3:0f:d9:25:f9: 68:52:1a:45:ee:15:09:b6:0d:b6:5a:d6:e9:57:fd:7c:4f:8e: 09:37:5a:36:ed:61:36:33:86:ff:ee:84:48:57:0d:35:34:fb: 4f:7c:41:b9:d5:57:ed:d4:b7:58:91:b8:fd:7b:71:8d:58:58: 55:9c:95:19:8a:16:6d:03:a4:6a:9f:1b:33:17:e1:c5:46:4e: 6f:fb:90:1e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICKo0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzgzRUExMTAvBgNVBAUTKEY3Njc1MDUxNUJCNzYyRDE4MDBDNUFFNkM2QzJEQjI0 RkU5NTJEMDIwHhcNMjUwNTMxMTUzMjQ4WhcNMjUwNjA3MTUzMjQ4WjAYMRYwFAYD VQQDEw02ODNiMjEyMS04YjcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz4mzMpMpe5/paRfQDV6bzDKRxO6YPAvbLXMcyucITMIW+enbn1Q/vpjqS8n3 Yt9a7aD8Vkd+h1To1cvZk40L6TAJrcrg9/NqsSs6qe3Pz17pAVG41Xm2mAVxBry/ 9Z4eBN4J0gHyQBU0j+Ewblo4/C1eeKGzp10tKaPCgfqa9y1jBsLzNlcYzCyaeNG+ 98+4m4APv+HyhnO+eORzA7UAE92J/W/Mgpp5w0s355Km76s1AqZuE1Lo525S85hP FJtrIxzsDq091yQU4tmSTq4g3NHBnTmNcaxoxPbSTCcf/rmLlm3muNZFFhUkefel kHyDOdpK2ixN5LftiKc8o6xIbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB+PLDdn r7iYDo4IjS3bdkxS3HueMB8GA1UdIwQYMBaAFPdnUFFbt2LRgAxa5sbC2yT+lS0C MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDODNFQS9EODJDNjFFODFD NDUxMUU0OTRBNzZGMUJDNEY5QUUwMi85MmRRVVZ1M1l0R0FERnJteHNMYkpQNlZM UUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzkyZFFVVnUzWXRHQURGcm14c0xiSlA2VkxRSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD ODNFQS9EODJDNjFFODFDNDUxMUU0OTRBNzZGMUJDNEY5QUUwMi85MmRRVVZ1M1l0 R0FERnJteHNMYkpQNlZMUUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAwIUjiahMGQ4P30KOiRO9PEsVSCMJnJPHg3LyKrsV/CkwCTqigrALn Q4AakaT56uEAXiHi1QrFU6684tke+WIKUUK64Y0aC7E3DZntgx/baEifLcjylFoF UxoPzgWqWxOWVdqfdIPznW7370jKk7dua7Y5tyy3DWgnQluD/yHinAxgoQnyrZw2 9wTFiNb+Kwq91LC+/Hd66fLzECL+lsOCZGLvLWkJJtmyJOEKu0h8sw/ZJfloUhpF 7hUJtg22WtbpV/18T44JN1o27WE2M4b/7oRIVw01NPtPfEG51Vft1LdYkbj9e3GN WFhVnJUZihZtA6RqnxszF+HFRk5v+5Ae -----END CERTIFICATE-----Generated at Sat May 31 17:14:40 2025 by rpki-client