$ rpki-client -vvf rpki.apnic.net/member_repository/A91CBF47/370CA2C01D8A11E2B79B13E408B02CD2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.mft File: MmNx45mCT4AE7ZZ1aBl2CIG3zZY.mft (raw, json) Hash identifier: HGoZKdxjBYt3Swdbq13hCGtFsSbQJ89tnrvTtK3WkPk= Subject key identifier: DC:D9:89:68:5D:0D:38:43:88:FD:6A:7E:C9:68:9E:5D:03:81:EB:D6 Authority key identifier: 32:63:71:E3:99:82:4F:80:04:ED:96:75:68:19:76:08:81:B7:CD:96 Certificate issuer: /CN=A91CBF47/serialNumber=326371E399824F8004ED96756819760881B7CD96 Certificate serial: 3492 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CBF47/370CA2C01D8A11E2B79B13E408B02CD2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.mft Manifest number: 348E Signing time: Sat 31 May 2025 14:32:22 +0000 Manifest this update: Sat 31 May 2025 14:32:22 +0000 Manifest next update: Sat 07 Jun 2025 14:32:22 +0000 Files and hashes: 1: MmNx45mCT4AE7ZZ1aBl2CIG3zZY.crl (hash: eGkUkBJAOtOgeKz1QoYkyITYDFzGaUQgZjzGzwwxA8s=) 2: 608C129E33E011ED979ED20EC4F9AE02.roa (hash: ZrPgwoRLGJ2fTtJOsuC6YjXCZss5mwGvBq/beIOJfYA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CBF47/370CA2C01D8A11E2B79B13E408B02CD2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.crl rsync://rpki.apnic.net/member_repository/A91CBF47/370CA2C01D8A11E2B79B13E408B02CD2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 14:32:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13458 (0x3492) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CBF47, serialNumber=326371E399824F8004ED96756819760881B7CD96 Validity Not Before: May 31 14:32:22 2025 GMT Not After : Jun 7 14:32:22 2025 GMT Subject: CN=683b12f6-f1e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:01:47:97:c6:bb:b2:87:50:14:47:ce:5c:45: 78:0f:d2:ed:8f:3d:f2:66:6e:2c:3e:17:ed:f0:6d: 9f:5d:d0:7c:37:b9:9c:5d:a9:74:85:03:52:d9:ce: 12:91:59:89:81:d0:c1:f1:97:93:3e:2d:d9:79:1a: 8a:91:ed:22:72:71:71:ee:db:8d:db:16:14:2c:1a: 4a:95:8a:f8:14:e3:1d:19:a7:96:2d:a1:54:19:b0: 4b:58:d6:cc:f6:c0:26:33:df:5b:be:ac:f7:e0:83: 90:92:79:d1:30:c3:39:48:87:5b:9d:ad:eb:9a:66: 35:cf:f6:f2:a8:79:61:2f:f8:7d:ea:e6:6b:9e:59: 18:80:6a:5c:2b:3b:d1:fd:ed:be:b3:a8:25:3a:5c: 66:1d:bd:bb:88:2c:1b:99:3e:09:ca:b2:dc:d5:9f: 27:2b:da:c7:aa:14:db:b3:11:55:f4:ba:e4:43:3b: 52:63:ff:29:1e:92:92:de:a4:68:e5:54:a7:53:9f: ae:56:81:e4:d4:b2:bc:ff:84:40:c2:ac:24:6e:ee: 90:a7:75:be:08:6a:2c:7a:24:b0:ba:eb:67:19:52: cc:b8:5e:57:5c:be:76:04:d0:6c:27:9d:6d:ee:c7: 7e:0a:8f:2d:9f:cb:e8:de:b8:a2:ef:8c:94:41:1e: 40:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:D9:89:68:5D:0D:38:43:88:FD:6A:7E:C9:68:9E:5D:03:81:EB:D6 X509v3 Authority Key Identifier: keyid:32:63:71:E3:99:82:4F:80:04:ED:96:75:68:19:76:08:81:B7:CD:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CBF47/370CA2C01D8A11E2B79B13E408B02CD2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBF47/370CA2C01D8A11E2B79B13E408B02CD2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:ab:6d:2a:01:bd:9e:74:74:b6:8b:0e:63:3c:ce:49:c2:8c: cd:ee:0d:d2:9a:67:05:7f:8d:ad:66:1f:9d:61:11:f3:32:db: 02:cc:04:fe:31:84:87:0b:4b:eb:b1:21:1a:df:17:f7:ff:be: c5:ef:eb:90:bd:0c:71:ba:cc:01:de:fd:13:fe:bd:1a:5c:cd: 35:a6:80:18:5d:6b:55:99:f7:8f:c4:5d:ed:85:92:a0:14:c3: d0:6a:eb:7e:dd:83:35:35:5d:39:7e:c9:12:eb:cb:9a:b6:2c: 97:70:22:8a:ca:f4:90:25:7a:41:67:8f:b3:1e:3b:db:6a:de: 85:00:fc:d0:89:58:76:99:9d:44:af:37:9d:5e:b8:12:a4:96: 4c:4e:7a:6c:74:83:eb:5a:31:9f:ee:6f:13:7a:11:a7:b2:54: f3:bd:c2:ca:03:6a:1c:19:b5:94:3a:c1:ba:7c:df:45:86:e3: 9c:45:25:0c:92:5a:59:6a:9c:46:f2:5e:ba:57:42:a9:ea:21: 56:f8:fa:ba:6f:5f:3a:5f:40:f1:cf:e8:a5:60:3c:13:59:d7: f3:81:82:90:99:06:91:0f:6b:bc:e3:58:07:d1:b5:77:f2:9e: 42:65:a4:c0:13:c3:bb:97:72:92:51:64:a4:b7:1f:1b:41:96: df:74:ed:23 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNJIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0JGNDcxMTAvBgNVBAUTKDMyNjM3MUUzOTk4MjRGODAwNEVEOTY3NTY4MTk3NjA4 ODFCN0NEOTYwHhcNMjUwNTMxMTQzMjIyWhcNMjUwNjA3MTQzMjIyWjAYMRYwFAYD VQQDEw02ODNiMTJmNi1mMWU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxQFHl8a7sodQFEfOXEV4D9Ltjz3yZm4sPhft8G2fXdB8N7mcXal0hQNS2c4S kVmJgdDB8ZeTPi3ZeRqKke0icnFx7tuN2xYULBpKlYr4FOMdGaeWLaFUGbBLWNbM 9sAmM99bvqz34IOQknnRMMM5SIdbna3rmmY1z/byqHlhL/h96uZrnlkYgGpcKzvR /e2+s6glOlxmHb27iCwbmT4JyrLc1Z8nK9rHqhTbsxFV9LrkQztSY/8pHpKS3qRo 5VSnU5+uVoHk1LK8/4RAwqwkbu6Qp3W+CGoseiSwuutnGVLMuF5XXL52BNBsJ51t 7sd+Co8tn8vo3rii74yUQR5A6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNzZiWhd DThDiP1qfslonl0DgevWMB8GA1UdIwQYMBaAFDJjceOZgk+ABO2WdWgZdgiBt82W MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQkY0Ny8zNzBDQTJDMDFE OEExMUUyQjc5QjEzRTQwOEIwMkNEMi9NbU54NDVtQ1Q0QUU3WloxYUJsMkNJRzN6 WlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01tTng0NW1DVDRBRTdaWjFhQmwyQ0lHM3paWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QkY0Ny8zNzBDQTJDMDFEOEExMUUyQjc5QjEzRTQwOEIwMkNEMi9NbU54NDVtQ1Q0 QUU3WloxYUJsMkNJRzN6WlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBOq20qAb2edHS2iw5jPM5JwozN7g3SmmcFf42tZh+dYRHzMtsCzAT+ MYSHC0vrsSEa3xf3/77F7+uQvQxxuswB3v0T/r0aXM01poAYXWtVmfePxF3thZKg FMPQaut+3YM1NV05fskS68uatiyXcCKKyvSQJXpBZ4+zHjvbat6FAPzQiVh2mZ1E rzedXrgSpJZMTnpsdIPrWjGf7m8TehGnslTzvcLKA2ocGbWUOsG6fN9FhuOcRSUM klpZapxG8l66V0Kp6iFW+Pq6b186X0Dxz+ilYDwTWdfzgYKQmQaRD2u841gH0bV3 8p5CZaTAE8O7l3KSUWSktx8bQZbfdO0j -----END CERTIFICATE-----Generated at Sat May 31 17:39:18 2025 by rpki-client