$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/FsZicm9KAJEz1lkWZCOeAMaBoAQ.mft File: FsZicm9KAJEz1lkWZCOeAMaBoAQ.mft (raw, json) Hash identifier: LPbmyjAI59HU2kUMyYGckrl7+L95S6XwrzI4ToCYgSE= Subject key identifier: 18:9E:36:93:89:F1:AE:EA:F3:92:80:E6:60:4E:4F:46:7B:EA:85:46 Authority key identifier: 16:C6:62:72:6F:4A:00:91:33:D6:59:16:64:23:9E:00:C6:81:A0:04 Certificate issuer: /CN=A91CB14D/serialNumber=16C662726F4A009133D6591664239E00C681A004 Certificate serial: FB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FsZicm9KAJEz1lkWZCOeAMaBoAQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/FsZicm9KAJEz1lkWZCOeAMaBoAQ.mft Manifest number: 0964 Signing time: Fri 30 May 2025 20:53:57 +0000 Manifest this update: Fri 30 May 2025 20:53:57 +0000 Manifest next update: Fri 06 Jun 2025 20:53:57 +0000 Files and hashes: 1: FsZicm9KAJEz1lkWZCOeAMaBoAQ.crl (hash: 2vFPwGxAz6LGcm7U8M9H38mLp0a1sN52YSOiYvtvA/w=) 2: C483C80CDE4011EFB4A11D5CC4F9AE02.roa (hash: AnxZMWG1/qyOSRCk3a+YCfaArWrcp/mUCUyzTLKhm8g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/FsZicm9KAJEz1lkWZCOeAMaBoAQ.crl rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/FsZicm9KAJEz1lkWZCOeAMaBoAQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FsZicm9KAJEz1lkWZCOeAMaBoAQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 20:53:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 251 (0xfb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB14D, serialNumber=16C662726F4A009133D6591664239E00C681A004 Validity Not Before: May 30 20:53:57 2025 GMT Not After : Jun 6 20:53:57 2025 GMT Subject: CN=683a1ae5-aea2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:72:4b:df:4e:28:be:fd:e6:d0:18:ea:bc:fc: a8:f6:c3:d5:d8:ab:eb:90:a4:39:1c:2f:89:bd:fc: d6:01:cb:44:9a:be:0a:6c:dd:f3:42:cd:95:80:9f: 66:24:80:8b:c9:43:eb:ee:23:8e:3c:65:6f:9d:d8: 4f:9a:5b:eb:11:14:3e:b5:00:1f:96:24:56:ca:8f: cb:63:48:e6:52:64:fc:4b:da:cf:b8:10:ae:32:f4: 9f:a1:66:06:49:a8:0f:13:1b:19:89:2f:8c:fb:bd: 57:29:34:9d:67:ac:86:61:2a:ff:bc:e4:68:73:84: c8:11:43:4b:05:72:85:e4:6b:1e:80:17:4b:3f:6c: 8b:d0:37:fc:11:3b:03:87:04:d2:0a:7f:d6:4b:e7: e3:97:8c:70:b1:a1:ab:af:f7:30:f8:44:fb:0e:c6: d2:2f:70:a2:f2:cf:44:a8:73:f0:bf:63:c6:25:77: e8:a3:f0:70:d4:05:07:0f:ec:cb:0c:1f:d8:b3:54: 4d:a9:4a:47:37:b9:20:b1:87:f6:9a:9d:df:ea:a2: 1b:68:08:ed:03:85:22:75:ac:ef:05:cd:ab:39:d3: f1:14:18:fa:a1:0b:26:f7:a9:e5:5d:2b:c6:b4:cc: db:2b:37:be:83:d7:74:74:e3:3d:45:62:3e:b5:e0: a8:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:9E:36:93:89:F1:AE:EA:F3:92:80:E6:60:4E:4F:46:7B:EA:85:46 X509v3 Authority Key Identifier: keyid:16:C6:62:72:6F:4A:00:91:33:D6:59:16:64:23:9E:00:C6:81:A0:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/FsZicm9KAJEz1lkWZCOeAMaBoAQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FsZicm9KAJEz1lkWZCOeAMaBoAQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/FsZicm9KAJEz1lkWZCOeAMaBoAQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:f5:32:c1:8a:04:ca:5e:91:cd:0d:5b:1b:fb:2f:28:cd:5e: 60:f3:b9:8a:c5:1c:d2:ba:ca:8a:f1:d9:8f:ce:a2:af:c8:89: 30:cd:a9:50:c5:d7:b3:67:58:81:4b:88:df:11:41:f4:15:2e: c1:12:cb:bb:32:a8:6b:e8:22:ae:83:93:22:07:19:fb:bc:a5: 82:ce:74:dd:f4:b1:97:02:de:3c:fc:b6:07:fa:64:9e:11:3c: 49:46:21:9d:bd:90:68:4d:aa:21:9f:f1:fd:e7:dd:eb:f0:53: 95:4c:03:3f:a4:3b:00:18:95:0e:20:06:58:58:5d:2a:76:06: 57:84:86:28:5c:3e:f3:91:57:e8:30:b6:79:11:7f:a7:81:a9: 95:50:9b:59:2e:da:50:e1:4f:15:16:09:8e:d9:0b:e2:f8:4d: 60:99:68:32:a1:ab:67:5e:47:30:f0:ae:ae:74:5a:53:77:b5: 04:7b:0e:4c:36:97:af:68:99:d4:b2:a3:7d:36:35:a2:94:c8: 32:be:0a:8d:64:0a:82:c3:40:37:58:2a:0e:a6:e6:6c:99:eb: dd:2f:07:b3:00:cb:db:af:cc:cd:a9:a0:6d:11:c5:fc:90:9f: 22:ca:41:0a:ae:d4:8c:1b:36:ff:28:91:04:8d:62:6c:6a:95: 41:d0:ef:9f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0IxNEQxMTAvBgNVBAUTKDE2QzY2MjcyNkY0QTAwOTEzM0Q2NTkxNjY0MjM5RTAw QzY4MUEwMDQwHhcNMjUwNTMwMjA1MzU3WhcNMjUwNjA2MjA1MzU3WjAYMRYwFAYD VQQDEw02ODNhMWFlNS1hZWEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyXJL304ovv3m0BjqvPyo9sPV2KvrkKQ5HC+JvfzWActEmr4KbN3zQs2VgJ9m JICLyUPr7iOOPGVvndhPmlvrERQ+tQAfliRWyo/LY0jmUmT8S9rPuBCuMvSfoWYG SagPExsZiS+M+71XKTSdZ6yGYSr/vORoc4TIEUNLBXKF5GsegBdLP2yL0Df8ETsD hwTSCn/WS+fjl4xwsaGrr/cw+ET7DsbSL3Ci8s9EqHPwv2PGJXfoo/Bw1AUHD+zL DB/Ys1RNqUpHN7kgsYf2mp3f6qIbaAjtA4UidazvBc2rOdPxFBj6oQsm96nlXSvG tMzbKze+g9d0dOM9RWI+teCofQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBieNpOJ 8a7q85KA5mBOT0Z76oVGMB8GA1UdIwQYMBaAFBbGYnJvSgCRM9ZZFmQjngDGgaAE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjE0RC8zMEZFMEFGRUM0 QzYxMUVBQThENUJFNjZDNEY5QUUwMi9Gc1ppY205S0FKRXoxbGtXWkNPZUFNYUJv QVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZzWmljbTlLQUpFejFsa1daQ09lQU1hQm9BUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QjE0RC8zMEZFMEFGRUM0QzYxMUVBQThENUJFNjZDNEY5QUUwMi9Gc1ppY205S0FK RXoxbGtXWkNPZUFNYUJvQVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBY9TLBigTKXpHNDVsb+y8ozV5g87mKxRzSusqK8dmPzqKvyIkwzalQ xdezZ1iBS4jfEUH0FS7BEsu7Mqhr6CKug5MiBxn7vKWCznTd9LGXAt48/LYH+mSe ETxJRiGdvZBoTaohn/H9593r8FOVTAM/pDsAGJUOIAZYWF0qdgZXhIYoXD7zkVfo MLZ5EX+ngamVUJtZLtpQ4U8VFgmO2Qvi+E1gmWgyoatnXkcw8K6udFpTd7UEew5M NpevaJnUsqN9NjWilMgyvgqNZAqCw0A3WCoOpuZsmevdLwezAMvbr8zNqaBtEcX8 kJ8iykEKrtSMGzb/KJEEjWJsapVB0O+f -----END CERTIFICATE-----Generated at Sat May 31 17:27:56 2025 by rpki-client