$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA815/8DCD1EA81D9B11E291D2848908B02CD2/K90xURFt6dvFXPw9LNrKWOdLGeY.mft File: K90xURFt6dvFXPw9LNrKWOdLGeY.mft (raw, json) Hash identifier: 7DUMOJprLy9Qlop6aXuPOXwHyTpi4k203JzyNIwSzs4= Subject key identifier: 56:C5:48:C1:61:11:AA:F4:8E:4D:73:B2:E7:BC:5D:28:50:B0:A7:7D Authority key identifier: 2B:DD:31:51:11:6D:E9:DB:C5:5C:FC:3D:2C:DA:CA:58:E7:4B:19:E6 Certificate issuer: /CN=A91CA815/serialNumber=2BDD3151116DE9DBC55CFC3D2CDACA58E74B19E6 Certificate serial: 34A0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K90xURFt6dvFXPw9LNrKWOdLGeY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CA815/8DCD1EA81D9B11E291D2848908B02CD2/K90xURFt6dvFXPw9LNrKWOdLGeY.mft Manifest number: 3495 Signing time: Sat 31 May 2025 14:57:09 +0000 Manifest this update: Sat 31 May 2025 14:57:09 +0000 Manifest next update: Sat 07 Jun 2025 14:57:09 +0000 Files and hashes: 1: K90xURFt6dvFXPw9LNrKWOdLGeY.crl (hash: iYiJEotZ/eq06+rEnLJmUDEVK60Eo3npKtY081lYMxQ=) 2: E9E555FA506211EAA2BC3E2EC4F9AE02.roa (hash: 8wn1BShCqNm3QYIhzMCvnBkRSH1pV/AljqzDWjCUBxQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CA815/8DCD1EA81D9B11E291D2848908B02CD2/K90xURFt6dvFXPw9LNrKWOdLGeY.crl rsync://rpki.apnic.net/member_repository/A91CA815/8DCD1EA81D9B11E291D2848908B02CD2/K90xURFt6dvFXPw9LNrKWOdLGeY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K90xURFt6dvFXPw9LNrKWOdLGeY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 14:57:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13472 (0x34a0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CA815, serialNumber=2BDD3151116DE9DBC55CFC3D2CDACA58E74B19E6 Validity Not Before: May 31 14:57:09 2025 GMT Not After : Jun 7 14:57:09 2025 GMT Subject: CN=683b18c5-4a8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:67:db:07:0f:68:7d:48:40:42:a2:49:1f:1b: 17:58:25:7e:75:c0:b6:b7:b7:f8:7b:e1:2d:78:6e: b7:9c:0e:76:44:c3:d2:74:cc:6a:d9:d7:3c:47:b7: e3:34:3f:f5:8d:92:07:85:fa:62:50:6b:65:4b:05: 7a:59:14:81:3d:77:05:f4:05:16:d0:10:3f:fc:83: 77:ab:12:e5:54:11:3e:52:7f:88:77:49:b8:b3:86: a1:18:df:43:cc:8a:d5:12:27:a3:42:58:70:03:9c: 53:9e:0c:a9:e1:36:26:b0:62:6c:e3:db:a7:a3:04: 5b:18:b5:e8:94:19:08:d6:96:ca:47:c0:53:6a:f2: 3e:a0:fa:69:1d:51:4c:21:49:66:e1:bb:66:fe:66: 10:64:5c:04:c0:9e:9a:07:5e:c6:a7:0e:06:ec:2a: 82:6d:c6:73:89:e1:88:59:e6:35:3a:33:a3:c4:4d: 27:65:f7:1e:4d:35:8b:01:46:47:b0:29:89:95:79: d1:52:85:6f:85:d4:48:0e:00:ef:23:c9:7b:b7:a5: af:30:d4:1a:33:4f:53:00:df:6d:e1:a1:e4:1d:16: ed:d1:bb:39:f9:ec:a4:b4:13:57:00:c1:93:fb:e5: 34:5c:fc:ff:07:ae:78:26:d9:c8:14:97:6c:f0:d9: 45:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:C5:48:C1:61:11:AA:F4:8E:4D:73:B2:E7:BC:5D:28:50:B0:A7:7D X509v3 Authority Key Identifier: keyid:2B:DD:31:51:11:6D:E9:DB:C5:5C:FC:3D:2C:DA:CA:58:E7:4B:19:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CA815/8DCD1EA81D9B11E291D2848908B02CD2/K90xURFt6dvFXPw9LNrKWOdLGeY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K90xURFt6dvFXPw9LNrKWOdLGeY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA815/8DCD1EA81D9B11E291D2848908B02CD2/K90xURFt6dvFXPw9LNrKWOdLGeY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:19:8b:b4:b8:3d:f4:63:d5:08:7c:d7:ca:11:36:d8:9b:9a: b0:42:c9:e2:62:13:ac:6a:0a:ca:e8:67:04:46:4c:61:67:34: ac:12:ce:2c:8b:e3:a3:ab:44:df:ff:9b:53:36:b8:cc:97:a9: c2:2e:d4:16:a9:b9:f9:e5:53:7c:6e:64:13:49:14:c5:a9:e0: df:8d:39:2d:fe:64:0a:df:bf:f2:23:0a:e6:db:a3:86:69:33: ba:73:68:8c:4f:e1:01:34:6f:d0:92:a0:df:eb:3f:cb:ba:4e: 9f:19:b4:6a:2a:a3:cc:19:55:13:12:98:e5:2d:37:92:94:cb: 29:50:81:de:d4:3b:bf:37:3c:24:2a:b4:1e:2c:e0:96:20:86: 1d:87:96:14:2b:10:38:da:29:48:a1:ee:30:a2:67:d8:55:f0: 81:9f:41:95:ef:0e:25:78:2a:3a:1d:92:58:39:31:6d:6c:00: a3:81:5e:be:48:8d:3a:9c:0c:ed:49:c7:b0:c7:e0:a3:19:7a: fd:c6:b0:c5:01:fb:b0:4b:b5:bf:40:61:58:2f:01:ba:f7:ac: 4d:44:6a:2f:0c:80:3e:1d:5d:a1:aa:b8:88:fb:7e:7e:32:6e: 59:ac:ba:8b:37:ca:03:8c:60:8c:6c:6f:8f:5d:54:8b:d3:9a: f6:5b:69:4b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNKAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0E4MTUxMTAvBgNVBAUTKDJCREQzMTUxMTE2REU5REJDNTVDRkMzRDJDREFDQTU4 RTc0QjE5RTYwHhcNMjUwNTMxMTQ1NzA5WhcNMjUwNjA3MTQ1NzA5WjAYMRYwFAYD VQQDEw02ODNiMThjNS00YThkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA32fbBw9ofUhAQqJJHxsXWCV+dcC2t7f4e+EteG63nA52RMPSdMxq2dc8R7fj ND/1jZIHhfpiUGtlSwV6WRSBPXcF9AUW0BA//IN3qxLlVBE+Un+Id0m4s4ahGN9D zIrVEiejQlhwA5xTngyp4TYmsGJs49unowRbGLXolBkI1pbKR8BTavI+oPppHVFM IUlm4btm/mYQZFwEwJ6aB17Gpw4G7CqCbcZzieGIWeY1OjOjxE0nZfceTTWLAUZH sCmJlXnRUoVvhdRIDgDvI8l7t6WvMNQaM09TAN9t4aHkHRbt0bs5+eyktBNXAMGT ++U0XPz/B654JtnIFJds8NlFpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFbFSMFh Ear0jk1zsue8XShQsKd9MB8GA1UdIwQYMBaAFCvdMVERbenbxVz8PSzayljnSxnm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQTgxNS84RENEMUVBODFE OUIxMUUyOTFEMjg0ODkwOEIwMkNEMi9LOTB4VVJGdDZkdkZYUHc5TE5yS1dPZExH ZVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0s5MHhVUkZ0NmR2RlhQdzlMTnJLV09kTEdlWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QTgxNS84RENEMUVBODFEOUIxMUUyOTFEMjg0ODkwOEIwMkNEMi9LOTB4VVJGdDZk dkZYUHc5TE5yS1dPZExHZVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAuGYu0uD30Y9UIfNfKETbYm5qwQsniYhOsagrK6GcERkxhZzSsEs4s i+Ojq0Tf/5tTNrjMl6nCLtQWqbn55VN8bmQTSRTFqeDfjTkt/mQK37/yIwrm26OG aTO6c2iMT+EBNG/QkqDf6z/Luk6fGbRqKqPMGVUTEpjlLTeSlMspUIHe1Du/Nzwk KrQeLOCWIIYdh5YUKxA42ilIoe4womfYVfCBn0GV7w4leCo6HZJYOTFtbACjgV6+ SI06nAztScewx+CjGXr9xrDFAfuwS7W/QGFYLwG696xNRGovDIA+HV2hqriI+35+ Mm5ZrLqLN8oDjGCMbG+PXVSL05r2W2lL -----END CERTIFICATE-----Generated at Sat May 31 17:44:08 2025 by rpki-client