$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB21D/632CD3E6A7F611EDB9D60C43C4F9AE02/mx6BiM5kOX6LQkHmdY1CnaD_LnA.mft File: mx6BiM5kOX6LQkHmdY1CnaD_LnA.mft (raw, json) Hash identifier: aanHsXuK0oJsnjJhbKpDcrgYoH155UFKA3ocuYQZ9f8= Subject key identifier: 95:30:DB:21:FD:C7:53:53:D6:3E:91:CB:16:E6:F4:5A:B0:E5:7F:4B Authority key identifier: 9B:1E:81:88:CE:64:39:7E:8B:42:41:E6:75:8D:42:9D:A0:FF:2E:70 Certificate issuer: /CN=A91CB21D/serialNumber=9B1E8188CE64397E8B4241E6758D429DA0FF2E70 Certificate serial: 01B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mx6BiM5kOX6LQkHmdY1CnaD_LnA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB21D/632CD3E6A7F611EDB9D60C43C4F9AE02/mx6BiM5kOX6LQkHmdY1CnaD_LnA.mft Manifest number: 01AE Signing time: Sat 31 May 2025 02:52:11 +0000 Manifest this update: Sat 31 May 2025 02:52:10 +0000 Manifest next update: Sat 07 Jun 2025 02:52:10 +0000 Files and hashes: 1: mx6BiM5kOX6LQkHmdY1CnaD_LnA.crl (hash: yx4q5X4SvWvEnLlbwXQWeAwESQlq8RRaho/TcQyYedM=) 2: 11F911FAA8D811ED90192E3CC4F9AE02.roa (hash: 1slDbS6OMsVzRicTRklA2Gp5/wmmSnjZBoyP9DPcUVQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB21D/632CD3E6A7F611EDB9D60C43C4F9AE02/mx6BiM5kOX6LQkHmdY1CnaD_LnA.crl rsync://rpki.apnic.net/member_repository/A91CB21D/632CD3E6A7F611EDB9D60C43C4F9AE02/mx6BiM5kOX6LQkHmdY1CnaD_LnA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mx6BiM5kOX6LQkHmdY1CnaD_LnA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 02:52:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 434 (0x1b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB21D, serialNumber=9B1E8188CE64397E8B4241E6758D429DA0FF2E70 Validity Not Before: May 31 02:52:10 2025 GMT Not After : Jun 7 02:52:10 2025 GMT Subject: CN=683a6eda-bc25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:a8:23:b4:b6:b1:72:b6:6f:aa:0a:de:75:60: 90:8c:90:1b:22:83:d8:bb:1f:69:a4:83:4d:42:ea: 95:3d:90:83:64:97:33:13:3f:c7:d9:6c:65:03:5e: 4e:3e:2c:e7:1f:e6:96:60:17:ce:7d:d6:4e:b6:63: 77:b3:ba:ca:ef:5b:15:7d:7d:04:42:d9:66:bf:02: ef:ed:05:9c:13:25:a3:3a:62:82:5b:ea:21:c0:e2: 34:04:70:30:9c:37:05:70:f1:07:e7:d8:77:47:78: ea:2c:35:13:a0:71:2d:06:dc:90:53:71:e8:31:99: 4e:fa:5f:53:a4:ae:1f:a7:1c:50:50:e6:c6:04:50: 8b:86:eb:5c:56:f3:18:74:79:02:4a:7a:7f:7e:2f: 90:6c:87:55:4e:ab:1c:c4:22:ce:59:4d:00:b6:9c: 7d:81:bf:5e:b1:05:e8:16:d5:95:72:4d:06:7e:cb: e8:c6:e8:60:c2:2f:3d:be:65:22:83:29:86:1c:54: 41:ed:04:98:d7:a2:59:83:79:ba:a8:35:19:1a:c0: a6:c6:bd:55:0e:e4:f0:8a:ef:3e:0c:c8:09:57:92: 70:13:73:b9:1e:e7:2e:43:78:ba:98:45:42:2a:35: e0:7c:1d:97:1d:9c:4e:97:a6:41:7b:14:11:40:b2: ac:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:30:DB:21:FD:C7:53:53:D6:3E:91:CB:16:E6:F4:5A:B0:E5:7F:4B X509v3 Authority Key Identifier: keyid:9B:1E:81:88:CE:64:39:7E:8B:42:41:E6:75:8D:42:9D:A0:FF:2E:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB21D/632CD3E6A7F611EDB9D60C43C4F9AE02/mx6BiM5kOX6LQkHmdY1CnaD_LnA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mx6BiM5kOX6LQkHmdY1CnaD_LnA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB21D/632CD3E6A7F611EDB9D60C43C4F9AE02/mx6BiM5kOX6LQkHmdY1CnaD_LnA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:d0:18:a8:92:12:f5:4e:df:6a:5c:61:4e:b1:c0:dc:a7:b9: 7b:c4:48:8d:04:de:47:6f:78:9c:d8:d6:8b:7b:a0:a9:e7:7c: 75:3c:25:d6:9c:04:45:a4:72:0d:b9:c5:59:da:c7:92:54:4b: a9:2f:94:02:53:05:0b:86:94:15:1a:3d:94:8a:91:92:33:c5: 95:ee:3b:be:90:02:c0:a5:61:af:27:c0:87:57:6d:22:58:ac: a3:e4:d7:03:75:bb:50:fc:90:7f:12:2d:b3:0f:d0:36:48:d8: 21:0a:37:d6:3f:43:1f:8f:20:5e:b3:12:1d:34:97:2f:13:03: 1f:8f:35:81:2f:0d:e0:7b:7b:71:cc:bf:dc:29:02:95:42:7b: 1f:97:03:fb:43:d0:2b:ca:87:27:96:5e:0d:f6:a5:df:34:82: 33:3a:11:1b:51:68:d1:13:a8:f0:0b:aa:37:2a:27:f4:18:09: 50:5c:cf:fa:ff:f5:dc:af:9d:ac:fb:75:46:fb:b8:cb:14:65: 86:fa:f1:0c:01:4f:96:20:f5:05:b8:30:67:74:71:3d:36:7f: 21:be:61:58:54:48:43:48:bc:01:1e:0e:5d:dd:05:51:3a:bb: 91:b4:4d:c6:1c:e7:6a:2c:77:2e:b9:66:2c:7e:87:a8:a8:c1: 50:d1:1c:44 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0IyMUQxMTAvBgNVBAUTKDlCMUU4MTg4Q0U2NDM5N0U4QjQyNDFFNjc1OEQ0MjlE QTBGRjJFNzAwHhcNMjUwNTMxMDI1MjEwWhcNMjUwNjA3MDI1MjEwWjAYMRYwFAYD VQQDEw02ODNhNmVkYS1iYzI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnagjtLaxcrZvqgredWCQjJAbIoPYux9ppINNQuqVPZCDZJczEz/H2WxlA15O PiznH+aWYBfOfdZOtmN3s7rK71sVfX0EQtlmvwLv7QWcEyWjOmKCW+ohwOI0BHAw nDcFcPEH59h3R3jqLDUToHEtBtyQU3HoMZlO+l9TpK4fpxxQUObGBFCLhutcVvMY dHkCSnp/fi+QbIdVTqscxCLOWU0Atpx9gb9esQXoFtWVck0Gfsvoxuhgwi89vmUi gymGHFRB7QSY16JZg3m6qDUZGsCmxr1VDuTwiu8+DMgJV5JwE3O5HucuQ3i6mEVC KjXgfB2XHZxOl6ZBexQRQLKsMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJUw2yH9 x1NT1j6Ryxbm9Fqw5X9LMB8GA1UdIwQYMBaAFJsegYjOZDl+i0JB5nWNQp2g/y5w MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjIxRC82MzJDRDNFNkE3 RjYxMUVEQjlENjBDNDNDNEY5QUUwMi9teDZCaU01a09YNkxRa0htZFkxQ25hRF9M bkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL214NkJpTTVrT1g2TFFrSG1kWTFDbmFEX0xuQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QjIxRC82MzJDRDNFNkE3RjYxMUVEQjlENjBDNDNDNEY5QUUwMi9teDZCaU01a09Y NkxRa0htZFkxQ25hRF9MbkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBN0BiokhL1Tt9qXGFOscDcp7l7xEiNBN5Hb3ic2NaLe6Cp53x1PCXW nARFpHINucVZ2seSVEupL5QCUwULhpQVGj2UipGSM8WV7ju+kALApWGvJ8CHV20i WKyj5NcDdbtQ/JB/Ei2zD9A2SNghCjfWP0MfjyBesxIdNJcvEwMfjzWBLw3ge3tx zL/cKQKVQnsflwP7Q9Aryocnll4N9qXfNIIzOhEbUWjRE6jwC6o3Kif0GAlQXM/6 //Xcr52s+3VG+7jLFGWG+vEMAU+WIPUFuDBndHE9Nn8hvmFYVEhDSLwBHg5d3QVR OruRtE3GHOdqLHcuuWYsfoeoqMFQ0RxE -----END CERTIFICATE-----Generated at Sat May 31 16:46:50 2025 by rpki-client