$ rpki-client -vvf rpki.apnic.net/member_repository/A91C92DC/C60578A0F99811EB8AF49C1DC4F9AE02/iXCkAMzM8BCTPDMMN2Ch7F204K0.mft File: iXCkAMzM8BCTPDMMN2Ch7F204K0.mft (raw, json) Hash identifier: nKxz7rLCmX+fUkxrYasQIrLFP85+Zw+GquyCJStlM/Q= Subject key identifier: C8:0A:A9:5E:58:DA:F9:12:4A:74:A4:33:47:92:E3:61:7F:3F:9F:2D Authority key identifier: 89:70:A4:00:CC:CC:F0:10:93:3C:33:0C:37:60:A1:EC:5D:B4:E0:AD Certificate issuer: /CN=A91C92DC/serialNumber=8970A400CCCCF010933C330C3760A1EC5DB4E0AD Certificate serial: 0541 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXCkAMzM8BCTPDMMN2Ch7F204K0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C92DC/C60578A0F99811EB8AF49C1DC4F9AE02/iXCkAMzM8BCTPDMMN2Ch7F204K0.mft Manifest number: 0535 Signing time: Fri 30 May 2025 23:41:46 +0000 Manifest this update: Fri 30 May 2025 23:41:46 +0000 Manifest next update: Fri 06 Jun 2025 23:41:46 +0000 Files and hashes: 1: iXCkAMzM8BCTPDMMN2Ch7F204K0.crl (hash: xdmqHRlETKum86nxhMOmDczO/eCBEBdDmz93c7b9ArY=) 2: C3CE90CEF99A11EB936CCA1EC4F9AE02.roa (hash: xQl2oR7pAbge5iF8YPhv/hbmMFqMQxGSZC11zhknFak=) 3: AD1469EC7A3911ECB5639D41C4F9AE02.roa (hash: M0rop6u3XFd48CsMz0Ik0R+4A+HjyQyG2cdgIdeoY8E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C92DC/C60578A0F99811EB8AF49C1DC4F9AE02/iXCkAMzM8BCTPDMMN2Ch7F204K0.crl rsync://rpki.apnic.net/member_repository/A91C92DC/C60578A0F99811EB8AF49C1DC4F9AE02/iXCkAMzM8BCTPDMMN2Ch7F204K0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXCkAMzM8BCTPDMMN2Ch7F204K0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 23:41:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1345 (0x541) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C92DC, serialNumber=8970A400CCCCF010933C330C3760A1EC5DB4E0AD Validity Not Before: May 30 23:41:46 2025 GMT Not After : Jun 6 23:41:46 2025 GMT Subject: CN=683a423a-4b3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:79:a8:ee:fd:a3:41:21:84:c7:29:fe:b4:eb: 7a:94:4c:27:c7:b5:77:6d:16:a6:32:e8:a9:79:24: a1:a9:9c:c0:5c:4a:e1:da:48:c7:36:de:14:78:18: f9:3e:2b:b3:04:14:55:b1:4a:86:d9:96:d4:77:e7: 03:5a:15:19:1b:7e:8e:0a:55:ab:5c:03:a4:91:e4: f7:e5:26:06:1d:9a:46:d9:4d:38:e8:06:b4:ee:f8: c1:93:d1:e7:8a:2a:a5:15:88:b6:07:1e:02:12:d5: fa:c8:2c:2f:04:1b:77:30:d7:4a:30:e8:b5:fa:dc: bb:c8:ba:2a:73:81:cf:06:5a:4f:3e:db:3b:35:b3: cf:48:35:7d:80:97:34:52:9c:18:21:3b:4a:23:ee: cf:cb:9c:98:58:82:a9:9a:a9:60:d2:be:03:d0:2b: 74:a9:18:0f:b2:3a:0f:82:f1:5d:17:bc:48:c6:b7: 3a:8c:59:bb:4e:4d:52:77:3c:90:6b:fe:5a:99:1b: 63:f5:99:7a:29:31:0c:fa:17:d1:6b:03:7e:08:b7: 8a:ea:85:63:37:05:32:49:71:77:f6:cd:ce:f7:5a: a7:87:b8:0f:47:2b:82:fd:4d:c0:be:e8:d2:60:b9: f0:b8:68:4a:29:e4:69:5d:db:c9:25:c3:74:b4:5f: 93:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:0A:A9:5E:58:DA:F9:12:4A:74:A4:33:47:92:E3:61:7F:3F:9F:2D X509v3 Authority Key Identifier: keyid:89:70:A4:00:CC:CC:F0:10:93:3C:33:0C:37:60:A1:EC:5D:B4:E0:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C92DC/C60578A0F99811EB8AF49C1DC4F9AE02/iXCkAMzM8BCTPDMMN2Ch7F204K0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXCkAMzM8BCTPDMMN2Ch7F204K0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C92DC/C60578A0F99811EB8AF49C1DC4F9AE02/iXCkAMzM8BCTPDMMN2Ch7F204K0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:88:0e:c3:75:fb:a6:cd:db:ff:3d:fe:3f:46:09:25:42:1f: 4f:9b:cc:59:e0:da:1d:1f:0b:ef:c0:44:41:db:a3:45:2b:1c: 88:6a:33:2c:55:b6:5a:b9:93:0f:21:1c:1f:37:42:7d:61:e1: b5:67:08:de:ea:b7:b9:49:60:10:1a:3f:00:b2:fa:96:fe:1e: f8:a1:1e:3e:a6:9e:90:5f:1b:8e:46:0f:a3:0b:8f:0f:9b:a9: d3:92:e8:87:60:07:d3:3e:31:e9:be:a3:54:db:ac:fd:c7:a0: 66:06:40:8a:f2:9e:8c:04:fe:89:1b:83:7d:bc:87:47:4a:21: a2:21:b9:4f:ed:63:21:84:c5:24:56:85:8a:4b:e3:28:9c:95: f8:09:79:e6:46:05:ae:32:f1:13:a5:9c:6c:40:4a:62:2a:3c: a0:ae:fb:9e:2d:0b:56:3e:38:64:83:48:d2:2a:93:cb:58:74: 18:75:e1:c6:2e:7a:11:b3:b2:c4:97:8b:d5:50:34:eb:6c:cd: 38:e1:26:aa:32:75:a7:dc:04:98:02:59:f9:14:d4:d6:7c:c4: 13:f8:51:2d:ce:c9:3d:77:14:ed:40:c2:9f:c3:88:80:53:ec: 97:8b:d4:17:0b:8f:56:ef:79:30:eb:8f:42:99:d2:99:ec:c3: 2c:4b:f8:e6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBUEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzkyREMxMTAvBgNVBAUTKDg5NzBBNDAwQ0NDQ0YwMTA5MzNDMzMwQzM3NjBBMUVD NURCNEUwQUQwHhcNMjUwNTMwMjM0MTQ2WhcNMjUwNjA2MjM0MTQ2WjAYMRYwFAYD VQQDEw02ODNhNDIzYS00YjNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwnmo7v2jQSGExyn+tOt6lEwnx7V3bRamMuipeSShqZzAXErh2kjHNt4UeBj5 PiuzBBRVsUqG2ZbUd+cDWhUZG36OClWrXAOkkeT35SYGHZpG2U046Aa07vjBk9Hn iiqlFYi2Bx4CEtX6yCwvBBt3MNdKMOi1+ty7yLoqc4HPBlpPPts7NbPPSDV9gJc0 UpwYITtKI+7Py5yYWIKpmqlg0r4D0Ct0qRgPsjoPgvFdF7xIxrc6jFm7Tk1SdzyQ a/5amRtj9Zl6KTEM+hfRawN+CLeK6oVjNwUySXF39s3O91qnh7gPRyuC/U3AvujS YLnwuGhKKeRpXdvJJcN0tF+TnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMgKqV5Y 2vkSSnSkM0eS42F/P58tMB8GA1UdIwQYMBaAFIlwpADMzPAQkzwzDDdgoexdtOCt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTJEQy9DNjA1NzhBMEY5 OTgxMUVCOEFGNDlDMURDNEY5QUUwMi9pWENrQU16TThCQ1RQRE1NTjJDaDdGMjA0 SzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lYQ2tBTXpNOEJDVFBETU1OMkNoN0YyMDRLMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTJEQy9DNjA1NzhBMEY5OTgxMUVCOEFGNDlDMURDNEY5QUUwMi9pWENrQU16TThC Q1RQRE1NTjJDaDdGMjA0SzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB5iA7Ddfumzdv/Pf4/RgklQh9Pm8xZ4NodHwvvwERB26NFKxyIajMs VbZauZMPIRwfN0J9YeG1Zwje6re5SWAQGj8AsvqW/h74oR4+pp6QXxuORg+jC48P m6nTkuiHYAfTPjHpvqNU26z9x6BmBkCK8p6MBP6JG4N9vIdHSiGiIblP7WMhhMUk VoWKS+MonJX4CXnmRgWuMvETpZxsQEpiKjygrvueLQtWPjhkg0jSKpPLWHQYdeHG LnoRs7LEl4vVUDTrbM044SaqMnWn3ASYAln5FNTWfMQT+FEtzsk9dxTtQMKfw4iA U+yXi9QXC49W73kw649CmdKZ7MMsS/jm -----END CERTIFICATE-----Generated at Sat May 31 14:35:08 2025 by rpki-client