$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB765/A4DDFA941F3B11ECB7DC452FC4F9AE02/rfMS6mi38F2mEBCA-YMi-9ZZGLI.mft File: rfMS6mi38F2mEBCA-YMi-9ZZGLI.mft (raw, json) Hash identifier: kxMf9NC7idRlfG8SNV0sg5KbeLWhBulAPjvdNakJcrg= Subject key identifier: 99:CA:34:F1:E2:C2:65:8A:68:23:E2:DF:3D:5F:25:9B:88:DD:ED:E8 Authority key identifier: AD:F3:12:EA:68:B7:F0:5D:A6:10:10:80:F9:83:22:FB:D6:59:18:B2 Certificate issuer: /CN=A91CB765/serialNumber=ADF312EA68B7F05DA6101080F98322FBD65918B2 Certificate serial: 04ED Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rfMS6mi38F2mEBCA-YMi-9ZZGLI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB765/A4DDFA941F3B11ECB7DC452FC4F9AE02/rfMS6mi38F2mEBCA-YMi-9ZZGLI.mft Manifest number: 04DE Signing time: Fri 30 May 2025 23:58:57 +0000 Manifest this update: Fri 30 May 2025 23:58:56 +0000 Manifest next update: Fri 06 Jun 2025 23:58:56 +0000 Files and hashes: 1: rfMS6mi38F2mEBCA-YMi-9ZZGLI.crl (hash: QMgJh8JTQSba1SQ/fBySjURPK2Si10G018pv99L5kok=) 2: F9A8F3561F3D11ECB2E88C32C4F9AE02.roa (hash: VeKl0MHR8TI54m6waTajw/toZ1ifpbQZ1lUNcn/xegU=) 3: E66070EE36F911F0B0111510C4F9AE02.roa (hash: s0fTkj19sRTx/+BDg72CnNonlKPiE7C9YigY/ZfS3pw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB765/A4DDFA941F3B11ECB7DC452FC4F9AE02/rfMS6mi38F2mEBCA-YMi-9ZZGLI.crl rsync://rpki.apnic.net/member_repository/A91CB765/A4DDFA941F3B11ECB7DC452FC4F9AE02/rfMS6mi38F2mEBCA-YMi-9ZZGLI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rfMS6mi38F2mEBCA-YMi-9ZZGLI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 23:58:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1261 (0x4ed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB765, serialNumber=ADF312EA68B7F05DA6101080F98322FBD65918B2 Validity Not Before: May 30 23:58:56 2025 GMT Not After : Jun 6 23:58:56 2025 GMT Subject: CN=683a4641-725e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:49:39:c9:41:ab:6f:a9:26:b1:52:f7:4e:df: 6c:4f:aa:cd:4f:e4:1f:64:da:49:f1:1f:75:8f:36: e8:c8:7f:ce:5d:b5:3f:fa:8f:91:8f:dd:28:6a:2f: ae:16:f9:b7:64:03:f7:88:71:56:e5:e8:d9:f2:97: 9a:2d:d8:d0:b2:e6:35:3e:d5:9f:e7:85:81:0d:af: bf:7b:ef:f6:5d:24:c6:d7:b0:cd:65:2b:53:1c:95: 8e:e1:ce:56:8f:8a:ec:ea:ba:d0:0e:38:22:21:5b: c8:11:a0:e6:b4:1a:65:29:a7:9f:e3:8b:ec:b6:8d: c9:4d:26:37:dd:99:cb:bf:9d:c9:2d:7b:1f:96:b9: a6:3d:b1:72:bb:23:53:a2:70:0e:8f:fc:3d:c3:d4: 54:65:13:03:af:2e:46:43:da:3d:a3:27:c6:09:98: 65:e1:33:80:f0:6b:20:49:cf:3d:97:91:cc:8c:a3: fa:22:84:e7:6c:ee:b2:a2:9f:b4:9f:90:24:cf:40: d8:ae:2e:80:e2:ec:2f:c3:13:07:6e:55:cc:20:e4: 79:dd:47:45:7c:15:9a:22:12:f0:6a:41:30:b7:ec: 3d:bb:2c:9e:27:a2:32:c2:af:c4:83:a9:12:b9:e0: 9c:60:b2:5f:f6:26:3f:a0:6a:0a:9a:fb:6e:64:63: 22:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:CA:34:F1:E2:C2:65:8A:68:23:E2:DF:3D:5F:25:9B:88:DD:ED:E8 X509v3 Authority Key Identifier: keyid:AD:F3:12:EA:68:B7:F0:5D:A6:10:10:80:F9:83:22:FB:D6:59:18:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB765/A4DDFA941F3B11ECB7DC452FC4F9AE02/rfMS6mi38F2mEBCA-YMi-9ZZGLI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rfMS6mi38F2mEBCA-YMi-9ZZGLI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB765/A4DDFA941F3B11ECB7DC452FC4F9AE02/rfMS6mi38F2mEBCA-YMi-9ZZGLI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:5d:a8:40:fc:da:6f:28:4f:81:52:1d:de:d9:e6:f3:d4:be: a3:d1:94:4b:2c:c8:d7:73:32:8e:50:41:fd:85:b6:ab:d0:e7: c3:f9:3f:b4:4c:87:66:e5:ba:bf:80:fa:70:6b:76:ee:de:f9: 4d:4e:b0:cf:11:fa:5a:34:e7:74:4d:ef:0b:29:0d:c0:0f:0d: b7:a6:96:ed:7d:33:0f:88:fc:c2:56:a5:cf:c7:93:78:29:df: 0b:a6:19:6b:de:65:70:14:ba:a2:c7:0d:b6:06:e7:cd:7c:cf: 19:27:b8:d8:ed:19:f8:eb:ba:88:48:bd:72:08:3f:57:da:7b: ec:4c:8c:ab:65:39:c3:cb:1c:6e:a8:f4:b4:2b:8a:18:dd:d2: 84:1c:41:b6:21:df:59:65:a1:5e:54:39:08:99:3d:20:c1:c9: 15:a0:4a:4b:3e:db:17:68:5e:a3:cc:fb:7a:f9:f2:16:91:51: 82:d8:46:9c:7b:f9:71:13:04:91:be:6d:c3:a2:cd:4d:20:83: 8d:94:75:ad:7a:6e:0d:4b:5b:b2:6a:77:78:41:de:01:63:53: bd:29:88:45:95:92:a3:03:32:8b:bb:d4:47:2d:13:04:39:22: f5:eb:47:34:62:0c:c4:56:ee:36:83:9e:4c:1a:dd:d1:ff:37: d0:9a:c3:c5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBO0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0I3NjUxMTAvBgNVBAUTKEFERjMxMkVBNjhCN0YwNURBNjEwMTA4MEY5ODMyMkZC RDY1OTE4QjIwHhcNMjUwNTMwMjM1ODU2WhcNMjUwNjA2MjM1ODU2WjAYMRYwFAYD VQQDEw02ODNhNDY0MS03MjVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo0k5yUGrb6kmsVL3Tt9sT6rNT+QfZNpJ8R91jzboyH/OXbU/+o+Rj90oai+u Fvm3ZAP3iHFW5ejZ8peaLdjQsuY1PtWf54WBDa+/e+/2XSTG17DNZStTHJWO4c5W j4rs6rrQDjgiIVvIEaDmtBplKaef44vsto3JTSY33ZnLv53JLXsflrmmPbFyuyNT onAOj/w9w9RUZRMDry5GQ9o9oyfGCZhl4TOA8GsgSc89l5HMjKP6IoTnbO6yop+0 n5Akz0DYri6A4uwvwxMHblXMIOR53UdFfBWaIhLwakEwt+w9uyyeJ6Iywq/Eg6kS ueCcYLJf9iY/oGoKmvtuZGMi2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJnKNPHi wmWKaCPi3z1fJZuI3e3oMB8GA1UdIwQYMBaAFK3zEupot/BdphAQgPmDIvvWWRiy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjc2NS9BNERERkE5NDFG M0IxMUVDQjdEQzQ1MkZDNEY5QUUwMi9yZk1TNm1pMzhGMm1FQkNBLVlNaS05WlpH TEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JmTVM2bWkzOEYybUVCQ0EtWU1pLTlaWkdMSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Qjc2NS9BNERERkE5NDFGM0IxMUVDQjdEQzQ1MkZDNEY5QUUwMi9yZk1TNm1pMzhG Mm1FQkNBLVlNaS05WlpHTEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCCXahA/NpvKE+BUh3e2ebz1L6j0ZRLLMjXczKOUEH9hbar0OfD+T+0 TIdm5bq/gPpwa3bu3vlNTrDPEfpaNOd0Te8LKQ3ADw23ppbtfTMPiPzCVqXPx5N4 Kd8Lphlr3mVwFLqixw22BufNfM8ZJ7jY7Rn467qISL1yCD9X2nvsTIyrZTnDyxxu qPS0K4oY3dKEHEG2Id9ZZaFeVDkImT0gwckVoEpLPtsXaF6jzPt6+fIWkVGC2Eac e/lxEwSRvm3Dos1NIIONlHWtem4NS1uyand4Qd4BY1O9KYhFlZKjAzKLu9RHLRME OSL160c0YgzEVu42g55MGt3R/zfQmsPF -----END CERTIFICATE-----Generated at Sat May 31 16:59:24 2025 by rpki-client