$ rpki-client -vvf rpki.apnic.net/member_repository/A91C956C/FB305A5E0C8A11ECA3191B0CC4F9AE02/US2b3oE8t7x3GQqE-bGNuOtOIl8.mft File: US2b3oE8t7x3GQqE-bGNuOtOIl8.mft (raw, json) Hash identifier: jl0lDN/V0xBkZeoLJvLd250nw959cjtBQ3XG7KTv8VM= Subject key identifier: A9:FB:77:47:BB:F6:DC:64:77:E3:ED:F3:5B:4F:AA:E5:CA:95:7B:AB Authority key identifier: 51:2D:9B:DE:81:3C:B7:BC:77:19:0A:84:F9:B1:8D:B8:EB:4E:22:5F Certificate issuer: /CN=A91C956C/serialNumber=512D9BDE813CB7BC77190A84F9B18DB8EB4E225F Certificate serial: 0519 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/US2b3oE8t7x3GQqE-bGNuOtOIl8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C956C/FB305A5E0C8A11ECA3191B0CC4F9AE02/US2b3oE8t7x3GQqE-bGNuOtOIl8.mft Manifest number: 050C Signing time: Fri 30 May 2025 23:52:14 +0000 Manifest this update: Fri 30 May 2025 23:52:14 +0000 Manifest next update: Fri 06 Jun 2025 23:52:14 +0000 Files and hashes: 1: US2b3oE8t7x3GQqE-bGNuOtOIl8.crl (hash: kEqdrw5GLufqkEtymhPLs6xXhFPm1mQZrpHJjdyIACU=) 2: 2F3F56C42BB411EF8D887F3AC4F9AE02.roa (hash: Qi+WEKvtCWtvGFWFUb38yBqHoAd83mtV7+scTOUOMc4=) 3: E1755B4E24D711EDBE2C660BC4F9AE02.roa (hash: aLricGiGlyJJZTbRrMECo3zkg40wJti6wIrN+dUyP7s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C956C/FB305A5E0C8A11ECA3191B0CC4F9AE02/US2b3oE8t7x3GQqE-bGNuOtOIl8.crl rsync://rpki.apnic.net/member_repository/A91C956C/FB305A5E0C8A11ECA3191B0CC4F9AE02/US2b3oE8t7x3GQqE-bGNuOtOIl8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/US2b3oE8t7x3GQqE-bGNuOtOIl8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 23:52:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1305 (0x519) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C956C, serialNumber=512D9BDE813CB7BC77190A84F9B18DB8EB4E225F Validity Not Before: May 30 23:52:14 2025 GMT Not After : Jun 6 23:52:14 2025 GMT Subject: CN=683a44ae-ca29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:29:74:0f:a0:99:05:c1:3d:d7:f5:bf:ed:b8: 8a:4b:c9:46:7f:3d:97:2f:ac:3a:63:3c:6e:99:7a: a7:62:69:bd:19:c9:92:81:26:f5:d8:3c:36:f7:59: 79:29:a9:9a:29:94:f4:b3:14:ce:3f:61:23:22:74: 4f:1e:80:8c:e1:8e:8e:68:a4:0d:93:2d:b5:6c:07: 4e:c0:39:4b:42:cc:bf:e5:bb:d3:3e:94:8c:96:b6: c1:81:01:71:f7:cd:60:00:0b:f6:d0:9d:93:9d:08: 1e:0b:ed:8a:65:7a:a3:69:4d:8f:8a:00:ad:e5:77: 15:26:4e:bf:09:8d:70:1f:b9:75:86:f4:42:68:1a: 9f:62:63:33:3e:5f:27:fe:ce:11:73:f9:82:18:39: 6c:da:04:05:e2:03:07:d5:7d:e3:85:97:5d:9d:41: 54:e4:78:6f:f4:3a:78:ba:7f:95:c7:09:97:da:1f: e6:62:91:1b:bb:9f:01:60:41:e8:5d:47:35:02:55: a9:dc:db:7d:a1:d2:2f:78:73:f8:86:c3:e5:c8:fe: e4:d0:61:db:63:d7:c3:12:de:64:73:26:37:77:04: ac:ac:fe:ec:38:60:b8:de:20:25:4b:2c:b2:37:8b: f1:28:2a:c4:77:ab:e1:7f:36:8a:65:a0:27:e7:d1: f2:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:FB:77:47:BB:F6:DC:64:77:E3:ED:F3:5B:4F:AA:E5:CA:95:7B:AB X509v3 Authority Key Identifier: keyid:51:2D:9B:DE:81:3C:B7:BC:77:19:0A:84:F9:B1:8D:B8:EB:4E:22:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C956C/FB305A5E0C8A11ECA3191B0CC4F9AE02/US2b3oE8t7x3GQqE-bGNuOtOIl8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/US2b3oE8t7x3GQqE-bGNuOtOIl8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C956C/FB305A5E0C8A11ECA3191B0CC4F9AE02/US2b3oE8t7x3GQqE-bGNuOtOIl8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:14:19:ed:d4:0e:27:17:f0:58:a7:06:d8:cb:ba:72:a6:d0: 60:a2:65:19:5d:0c:90:8e:f7:a3:38:63:0a:f7:0a:f1:76:34: 86:6b:a1:69:3c:3b:7a:89:4f:60:cb:de:39:6a:0a:75:de:bf: af:fc:08:f6:4e:b5:23:eb:84:ba:d2:0f:b1:8c:76:19:df:0b: 33:f6:df:cb:75:3e:a8:be:97:aa:3f:1d:70:c0:b3:e9:df:a3: a8:7e:4c:4b:77:31:a0:ad:41:6f:ff:77:15:99:b3:28:33:4c: ca:a9:db:80:8e:6a:75:85:f9:31:21:17:ab:8b:b8:b2:3a:b9: bb:33:a0:7b:c1:61:2f:2a:0b:b3:09:f4:f5:cf:33:96:b5:8f: 9b:94:a0:55:15:18:8e:5d:9b:5b:e1:c0:6d:71:b4:2a:ec:27: 32:59:6b:48:5d:a2:9e:4e:88:88:e8:2b:b3:78:34:9d:06:0e: bc:83:d1:74:ef:17:b6:93:e5:c6:37:a7:b2:22:c9:6d:74:eb: b2:a4:78:34:fa:41:35:8e:fd:be:68:9b:de:b3:d2:53:93:57: 67:bd:b7:2a:a2:bb:d5:c9:d5:99:71:5d:9d:3c:67:8c:ae:3e: b2:f6:ca:85:ec:b4:9d:66:59:2b:3f:84:e6:66:7e:a3:89:0b: b2:40:4e:72 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBRkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzk1NkMxMTAvBgNVBAUTKDUxMkQ5QkRFODEzQ0I3QkM3NzE5MEE4NEY5QjE4REI4 RUI0RTIyNUYwHhcNMjUwNTMwMjM1MjE0WhcNMjUwNjA2MjM1MjE0WjAYMRYwFAYD VQQDEw02ODNhNDRhZS1jYTI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8il0D6CZBcE91/W/7biKS8lGfz2XL6w6YzxumXqnYmm9GcmSgSb12Dw291l5 KamaKZT0sxTOP2EjInRPHoCM4Y6OaKQNky21bAdOwDlLQsy/5bvTPpSMlrbBgQFx 981gAAv20J2TnQgeC+2KZXqjaU2PigCt5XcVJk6/CY1wH7l1hvRCaBqfYmMzPl8n /s4Rc/mCGDls2gQF4gMH1X3jhZddnUFU5Hhv9Dp4un+VxwmX2h/mYpEbu58BYEHo XUc1AlWp3Nt9odIveHP4hsPlyP7k0GHbY9fDEt5kcyY3dwSsrP7sOGC43iAlSyyy N4vxKCrEd6vhfzaKZaAn59HyAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKn7d0e7 9txkd+Pt81tPquXKlXurMB8GA1UdIwQYMBaAFFEtm96BPLe8dxkKhPmxjbjrTiJf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTU2Qy9GQjMwNUE1RTBD OEExMUVDQTMxOTFCMENDNEY5QUUwMi9VUzJiM29FOHQ3eDNHUXFFLWJHTnVPdE9J bDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VTMmIzb0U4dDd4M0dRcUUtYkdOdU90T0lsOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTU2Qy9GQjMwNUE1RTBDOEExMUVDQTMxOTFCMENDNEY5QUUwMi9VUzJiM29FOHQ3 eDNHUXFFLWJHTnVPdE9JbDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAvFBnt1A4nF/BYpwbYy7pyptBgomUZXQyQjvejOGMK9wrxdjSGa6Fp PDt6iU9gy945agp13r+v/Aj2TrUj64S60g+xjHYZ3wsz9t/LdT6ovpeqPx1wwLPp 36OofkxLdzGgrUFv/3cVmbMoM0zKqduAjmp1hfkxIReri7iyOrm7M6B7wWEvKguz CfT1zzOWtY+blKBVFRiOXZtb4cBtcbQq7CcyWWtIXaKeToiI6CuzeDSdBg68g9F0 7xe2k+XGN6eyIsltdOuypHg0+kE1jv2+aJves9JTk1dnvbcqorvVydWZcV2dPGeM rj6y9sqF7LSdZlkrP4TmZn6jiQuyQE5y -----END CERTIFICATE-----Generated at Sat May 31 17:31:59 2025 by rpki-client