$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE3C4/7692278A7F9711EBADDC5F15C4F9AE02/_K1GEVffaBwFC9O-7qLqzfttUks.mft File: _K1GEVffaBwFC9O-7qLqzfttUks.mft (raw, json) Hash identifier: NCvJKUdPxF01ak8PrXvYqE1SPRxXX8Ha8mGrbMw4lcE= Subject key identifier: 5A:F1:26:50:16:C9:EF:9A:CC:FF:27:72:88:D6:AF:0B:01:89:FD:64 Authority key identifier: FC:AD:46:11:57:DF:68:1C:05:0B:D3:BE:EE:A2:EA:CD:FB:6D:52:4B Certificate issuer: /CN=A91CE3C4/serialNumber=FCAD461157DF681C050BD3BEEEA2EACDFB6D524B Certificate serial: 06A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_K1GEVffaBwFC9O-7qLqzfttUks.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE3C4/7692278A7F9711EBADDC5F15C4F9AE02/_K1GEVffaBwFC9O-7qLqzfttUks.mft Manifest number: 0687 Signing time: Wed 04 Jun 2025 22:15:05 +0000 Manifest this update: Wed 04 Jun 2025 22:15:04 +0000 Manifest next update: Wed 11 Jun 2025 22:15:04 +0000 Files and hashes: 1: _K1GEVffaBwFC9O-7qLqzfttUks.crl (hash: KtsJ1y8lzgJCr2RA4V7C3iHvU3DprN0MS7eZcleux0M=) 2: D55D5DE2F07011EDAD0F5D62C4F9AE02.roa (hash: /1MqSHd9nBk2qp9htlm8FxJMAo4wrus2nnyIHoN3C0s=) 3: BC582AA44FEA11EFBFC72970C4F9AE02.roa (hash: LDQwB/Aaa/EPGkedxIat/R/y9ZuThpBdxq2PBP79Mgo=) 4: 26F87D4A272711EC88E40644C4F9AE02.roa (hash: hPYxf/s2MeHBMdE9aQ/4MQvo1zAB47EkXGZaUhlKPWs=) 5: 50D705A87FA911EBA8C11D63C4F9AE02.roa (hash: XPZflDMOHrz8WA93u6KTrDyNAlgfVwGC6hkcyOuXo4w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE3C4/7692278A7F9711EBADDC5F15C4F9AE02/_K1GEVffaBwFC9O-7qLqzfttUks.crl rsync://rpki.apnic.net/member_repository/A91CE3C4/7692278A7F9711EBADDC5F15C4F9AE02/_K1GEVffaBwFC9O-7qLqzfttUks.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_K1GEVffaBwFC9O-7qLqzfttUks.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Jun 2025 22:15:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1705 (0x6a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE3C4, serialNumber=FCAD461157DF681C050BD3BEEEA2EACDFB6D524B Validity Not Before: Jun 4 22:15:04 2025 GMT Not After : Jun 11 22:15:04 2025 GMT Subject: CN=6840c568-44b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:1b:2d:a4:72:e0:f1:b4:80:f7:6d:f1:d9:ac: 01:14:7f:49:60:85:e8:cd:2b:67:29:e5:fe:7d:9c: ac:ea:8a:44:e0:53:d2:78:0a:f0:07:df:b5:8a:a3: 28:3a:8b:94:a0:2d:45:5d:63:93:a2:57:8d:4f:c2: 5a:b9:94:8d:00:6f:90:6c:bf:68:c1:4d:12:ce:e5: 88:cf:29:b6:9b:49:e3:27:4d:75:2a:da:f6:70:b1: 1b:a5:0a:5b:a5:e3:43:6e:f3:77:20:dd:cc:a5:5d: ae:d7:d5:68:0d:b3:d7:64:98:c0:13:64:f8:75:37: cf:98:6d:ab:01:5c:9b:b2:8c:89:b1:7d:2e:53:f0: d6:00:aa:40:a3:a4:bb:09:78:1e:ba:e6:8a:86:9f: 89:e4:11:de:1a:7b:80:5a:ba:0c:76:8f:1d:da:6c: d7:35:e2:b4:fc:42:98:53:87:47:d5:32:f2:a9:09: 57:14:1b:dd:8a:4d:0d:c4:b0:79:8f:73:5d:57:cd: 4a:1f:9f:51:38:ac:59:27:9a:67:62:fb:94:df:11: 63:ff:a4:c2:bd:ef:21:aa:8a:be:75:b1:69:f0:f0: 5b:7f:0c:ac:48:78:e3:06:a9:c7:de:10:1d:b1:89: 91:db:f9:8f:5c:e7:d5:db:7c:b6:9f:ce:f8:d4:ea: f8:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:F1:26:50:16:C9:EF:9A:CC:FF:27:72:88:D6:AF:0B:01:89:FD:64 X509v3 Authority Key Identifier: keyid:FC:AD:46:11:57:DF:68:1C:05:0B:D3:BE:EE:A2:EA:CD:FB:6D:52:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE3C4/7692278A7F9711EBADDC5F15C4F9AE02/_K1GEVffaBwFC9O-7qLqzfttUks.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_K1GEVffaBwFC9O-7qLqzfttUks.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE3C4/7692278A7F9711EBADDC5F15C4F9AE02/_K1GEVffaBwFC9O-7qLqzfttUks.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:30:49:ae:1a:5d:3e:fa:d2:75:b9:23:7a:20:4c:a3:0b:0d: c1:9a:26:60:ae:25:30:f0:da:c4:dc:d5:72:42:d8:78:a3:4a: cf:e0:b4:56:d5:bb:45:c7:27:2b:97:d6:9a:4f:7b:84:3e:0e: d6:7a:1c:0f:0a:1b:c3:a2:83:ec:9d:bf:83:56:f7:9c:80:0e: 7e:9c:df:47:a1:60:62:d4:33:16:80:27:31:0a:b4:44:48:ca: af:8b:4e:f8:c3:a3:43:e5:77:04:b0:45:c7:ff:7f:a0:79:e7: 4b:13:84:9e:b3:f6:1d:04:2b:df:cf:98:20:3b:f9:7b:9e:bf: 01:c1:fc:2b:e4:06:ca:bc:50:32:1d:f1:b8:2d:a3:d5:80:3f: a2:90:8e:ee:84:88:ef:ba:77:83:1b:8e:80:f0:a3:63:54:00: 50:86:b7:7b:e6:0d:b9:18:41:a3:f9:cc:ae:4c:b8:80:71:c1: 66:91:03:60:be:f2:a3:ef:df:f2:46:0f:bd:80:8d:24:49:7b: 19:42:2e:ac:0a:de:ae:50:e5:15:d1:24:65:61:ee:5d:45:4b: 86:3f:a1:02:3d:d5:65:dd:12:5d:c4:26:39:85:e7:b0:aa:0e: 86:51:43:2c:4a:1f:df:cd:fe:0f:16:06:f1:27:21:5c:71:4e: c2:ee:bb:a9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBqkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0UzQzQxMTAvBgNVBAUTKEZDQUQ0NjExNTdERjY4MUMwNTBCRDNCRUVFQTJFQUNE RkI2RDUyNEIwHhcNMjUwNjA0MjIxNTA0WhcNMjUwNjExMjIxNTA0WjAYMRYwFAYD VQQDEw02ODQwYzU2OC00NGIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyxstpHLg8bSA923x2awBFH9JYIXozStnKeX+fZys6opE4FPSeArwB9+1iqMo OouUoC1FXWOToleNT8JauZSNAG+QbL9owU0SzuWIzym2m0njJ011Ktr2cLEbpQpb peNDbvN3IN3MpV2u19VoDbPXZJjAE2T4dTfPmG2rAVybsoyJsX0uU/DWAKpAo6S7 CXgeuuaKhp+J5BHeGnuAWroMdo8d2mzXNeK0/EKYU4dH1TLyqQlXFBvdik0NxLB5 j3NdV81KH59ROKxZJ5pnYvuU3xFj/6TCve8hqoq+dbFp8PBbfwysSHjjBqnH3hAd sYmR2/mPXOfV23y2n8741Or4fwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFrxJlAW ye+azP8ncojWrwsBif1kMB8GA1UdIwQYMBaAFPytRhFX32gcBQvTvu6i6s37bVJL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTNDNC83NjkyMjc4QTdG OTcxMUVCQUREQzVGMTVDNEY5QUUwMi9fSzFHRVZmZmFCd0ZDOU8tN3FMcXpmdHRV a3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19LMUdFVmZmYUJ3RkM5Ty03cUxxemZ0dFVrcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTNDNC83NjkyMjc4QTdGOTcxMUVCQUREQzVGMTVDNEY5QUUwMi9fSzFHRVZmZmFC d0ZDOU8tN3FMcXpmdHRVa3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAMMEmuGl0++tJ1uSN6IEyjCw3BmiZgriUw8NrE3NVyQth4o0rP4LRW 1btFxycrl9aaT3uEPg7WehwPChvDooPsnb+DVvecgA5+nN9HoWBi1DMWgCcxCrRE SMqvi074w6ND5XcEsEXH/3+geedLE4Ses/YdBCvfz5ggO/l7nr8Bwfwr5AbKvFAy HfG4LaPVgD+ikI7uhIjvuneDG46A8KNjVABQhrd75g25GEGj+cyuTLiAccFmkQNg vvKj79/yRg+9gI0kSXsZQi6sCt6uUOUV0SRlYe5dRUuGP6ECPdVl3RJdxCY5heew qg6GUUMsSh/fzf4PFgbxJyFccU7C7rup -----END CERTIFICATE-----Generated at Fri Jun 6 17:08:34 2025 by rpki-client