$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE39F/C15C41B4FD5711EABC3CA24DC4F9AE02/T_-scXgTOS7hyHajIWceHWwqubQ.mft File: T_-scXgTOS7hyHajIWceHWwqubQ.mft (raw, json) Hash identifier: /NE5I5ynn3nYFBebDdNFYJh9bbEjg1QgLx/9J6Pqbd4= Subject key identifier: 9A:95:15:72:1F:DB:05:80:86:CE:74:17:A6:A9:C2:39:FB:F9:F9:B5 Authority key identifier: 4F:FF:AC:71:78:13:39:2E:E1:C8:76:A3:21:67:1E:1D:6C:2A:B9:B4 Certificate issuer: /CN=A91CE39F/serialNumber=4FFFAC717813392EE1C876A321671E1D6C2AB9B4 Certificate serial: 07D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_-scXgTOS7hyHajIWceHWwqubQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE39F/C15C41B4FD5711EABC3CA24DC4F9AE02/T_-scXgTOS7hyHajIWceHWwqubQ.mft Manifest number: 07C1 Signing time: Fri 30 May 2025 21:24:36 +0000 Manifest this update: Fri 30 May 2025 21:24:36 +0000 Manifest next update: Fri 06 Jun 2025 21:24:36 +0000 Files and hashes: 1: T_-scXgTOS7hyHajIWceHWwqubQ.crl (hash: h3sr/Vl2JLKhXADI+HzNA7ymcUROUMH3fwiGVAWRHjY=) 2: CAF5CED2E1A511EC8AB72944C4F9AE02.roa (hash: zbiYtUOfzyp7ptHvHbV0SU4d4rP1mH83ebF8pRuNsx0=) 3: CC57D98CE1A511EC8AB72944C4F9AE02.roa (hash: ZYqL2fHcbNd2tSbNDmjF+dD/m7i54Wfd/1i3In6hhsU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE39F/C15C41B4FD5711EABC3CA24DC4F9AE02/T_-scXgTOS7hyHajIWceHWwqubQ.crl rsync://rpki.apnic.net/member_repository/A91CE39F/C15C41B4FD5711EABC3CA24DC4F9AE02/T_-scXgTOS7hyHajIWceHWwqubQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_-scXgTOS7hyHajIWceHWwqubQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 21:24:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2005 (0x7d5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE39F, serialNumber=4FFFAC717813392EE1C876A321671E1D6C2AB9B4 Validity Not Before: May 30 21:24:36 2025 GMT Not After : Jun 6 21:24:36 2025 GMT Subject: CN=683a2214-1b90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:47:80:bd:f0:48:3c:d1:13:8a:53:24:78:ea: 11:7b:dc:da:d2:b5:78:71:dd:bc:15:94:ec:91:2f: b4:c1:1c:4e:ce:86:ec:e1:76:b9:84:c3:a1:f0:65: bf:c9:cf:aa:12:89:08:05:2a:c8:45:72:8d:dd:cc: ba:15:82:83:3c:d3:71:88:02:44:a8:65:ad:bd:c6: f1:55:e8:e3:00:7d:f5:07:32:85:55:ba:3c:61:a5: 75:ad:83:3e:bd:78:0e:76:2e:37:e7:c8:c8:5e:04: 71:8b:de:9d:df:57:bb:ed:aa:ba:d7:f5:24:1e:16: 2f:1e:dc:85:30:ae:fc:63:6b:a9:a5:f1:6f:14:75: 74:a3:ad:1b:b9:3f:8f:85:5b:d6:cf:e5:fe:5d:1c: c9:ad:f2:61:1d:97:e1:20:e3:9b:5c:f5:8e:6d:d7: 94:7b:0a:ce:dd:2a:be:5e:df:89:a8:0a:0d:3f:b9: 5e:d0:32:32:36:d2:a1:90:ce:08:3e:28:f4:61:33: 6e:44:45:c8:de:99:21:6f:78:68:4f:56:e7:58:7e: 56:65:ed:08:77:02:55:e8:ab:ae:f0:e0:74:99:bc: fe:e4:08:d0:41:be:4a:64:63:99:5d:05:90:d0:81: 32:66:93:2c:66:0a:fa:79:42:7b:90:a8:b8:5d:2d: 13:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:95:15:72:1F:DB:05:80:86:CE:74:17:A6:A9:C2:39:FB:F9:F9:B5 X509v3 Authority Key Identifier: keyid:4F:FF:AC:71:78:13:39:2E:E1:C8:76:A3:21:67:1E:1D:6C:2A:B9:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE39F/C15C41B4FD5711EABC3CA24DC4F9AE02/T_-scXgTOS7hyHajIWceHWwqubQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_-scXgTOS7hyHajIWceHWwqubQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE39F/C15C41B4FD5711EABC3CA24DC4F9AE02/T_-scXgTOS7hyHajIWceHWwqubQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:17:0c:c1:dc:fd:ba:f6:79:68:12:5a:2b:0f:1a:92:79:a9: fb:15:71:0d:ea:88:d4:ee:2a:21:c7:ae:d5:87:3e:71:f6:9a: 56:70:bc:f0:81:a1:56:ec:76:7f:6d:46:a5:36:32:d3:8d:c7: 2d:8a:f3:96:3f:fe:a9:89:7c:83:3a:f2:71:75:2b:d2:78:d2: fa:67:c7:b4:9d:30:16:0d:ed:01:7b:75:e9:68:47:c1:ee:4b: b7:9d:e4:7b:21:ff:f2:e8:c6:5d:b6:a5:56:95:65:62:ec:a4: a2:30:7e:bd:f1:8c:8a:0f:b4:41:aa:f8:e4:e0:65:7d:ff:b1: 44:5c:cc:dc:db:84:ca:ac:fe:43:d2:1f:02:49:c1:4f:91:a7: 1d:bf:16:59:ba:46:89:5f:4c:8d:ff:2b:23:96:c1:60:ee:e9: 1b:1b:dd:02:b6:ab:45:91:a7:6d:82:8b:5e:d2:5b:97:5d:b0: 59:2c:4d:cb:08:00:e7:01:02:95:c3:2f:60:76:ec:fc:ae:79: 85:ce:e0:3c:4b:ed:46:1b:12:e0:9a:b9:9e:6f:90:3f:07:9b: 2b:6d:17:07:04:4d:53:fd:f0:6d:5c:62:5b:ea:f3:75:50:63: ad:f2:3d:1e:96:75:08:f2:fc:a8:58:3c:53:7a:80:75:88:15: 34:95:81:d2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB9UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0UzOUYxMTAvBgNVBAUTKDRGRkZBQzcxNzgxMzM5MkVFMUM4NzZBMzIxNjcxRTFE NkMyQUI5QjQwHhcNMjUwNTMwMjEyNDM2WhcNMjUwNjA2MjEyNDM2WjAYMRYwFAYD VQQDEw02ODNhMjIxNC0xYjkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvEeAvfBIPNETilMkeOoRe9za0rV4cd28FZTskS+0wRxOzobs4Xa5hMOh8GW/ yc+qEokIBSrIRXKN3cy6FYKDPNNxiAJEqGWtvcbxVejjAH31BzKFVbo8YaV1rYM+ vXgOdi4358jIXgRxi96d31e77aq61/UkHhYvHtyFMK78Y2uppfFvFHV0o60buT+P hVvWz+X+XRzJrfJhHZfhIOObXPWObdeUewrO3Sq+Xt+JqAoNP7le0DIyNtKhkM4I Pij0YTNuREXI3pkhb3hoT1bnWH5WZe0IdwJV6Kuu8OB0mbz+5AjQQb5KZGOZXQWQ 0IEyZpMsZgr6eUJ7kKi4XS0TswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJqVFXIf 2wWAhs50F6apwjn7+fm1MB8GA1UdIwQYMBaAFE//rHF4Ezku4ch2oyFnHh1sKrm0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTM5Ri9DMTVDNDFCNEZE NTcxMUVBQkMzQ0EyNERDNEY5QUUwMi9UXy1zY1hnVE9TN2h5SGFqSVdjZUhXd3F1 YlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RfLXNjWGdUT1M3aHlIYWpJV2NlSFd3cXViUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTM5Ri9DMTVDNDFCNEZENTcxMUVBQkMzQ0EyNERDNEY5QUUwMi9UXy1zY1hnVE9T N2h5SGFqSVdjZUhXd3F1YlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBoFwzB3P269nloElorDxqSean7FXEN6ojU7iohx67Vhz5x9ppWcLzw gaFW7HZ/bUalNjLTjcctivOWP/6piXyDOvJxdSvSeNL6Z8e0nTAWDe0Be3XpaEfB 7ku3neR7If/y6MZdtqVWlWVi7KSiMH698YyKD7RBqvjk4GV9/7FEXMzc24TKrP5D 0h8CScFPkacdvxZZukaJX0yN/ysjlsFg7ukbG90CtqtFkadtgote0luXXbBZLE3L CADnAQKVwy9gduz8rnmFzuA8S+1GGxLgmrmeb5A/B5srbRcHBE1T/fBtXGJb6vN1 UGOt8j0elnUI8vyoWDxTeoB1iBU0lYHS -----END CERTIFICATE-----Generated at Sat May 31 16:34:58 2025 by rpki-client