$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.mft File: _0lSk8tfFeXRS6zC2xBSsuLIJcg.mft (raw, json) Hash identifier: uKqzwPbHTt549hrlpMEQ2SQTg8YGECAGX6IndPwNXrc= Subject key identifier: 0F:ED:DF:27:27:D8:70:00:24:16:9E:25:73:DF:A9:C0:D4:F6:95:83 Authority key identifier: FF:49:52:93:CB:5F:15:E5:D1:4B:AC:C2:DB:10:52:B2:E2:C8:25:C8 Certificate issuer: /CN=A91CEAA2/serialNumber=FF495293CB5F15E5D14BACC2DB1052B2E2C825C8 Certificate serial: 34B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.mft Manifest number: 349F Signing time: Fri 30 May 2025 14:58:14 +0000 Manifest this update: Fri 30 May 2025 14:58:14 +0000 Manifest next update: Fri 06 Jun 2025 14:58:14 +0000 Files and hashes: 1: _0lSk8tfFeXRS6zC2xBSsuLIJcg.crl (hash: 0XLasxJoyCp3oJhCluRzEPf9yBX6lWeL4yI5v1UV0is=) 2: 767E7B3CA60211EFBFCDB65FC4F9AE02.roa (hash: sDAVT78GpTIvV3Pk7DGbULa+i4kn7uu7qVMnxNmpH28=) 3: B2306182F3F911EAB9D11D26C4F9AE02.roa (hash: XuAw72l1y8+xZhjG02bLa91Tpql6DxMPw1rT8RJ+tTY=) 4: 0DEF13D4FC1711EC919B6757C4F9AE02.roa (hash: ZplEo/zP0jHGZr0dLBLSTaxCxcoclbSDg8qfGUwBkSQ=) 5: 75906378FC1F11ECAD09AF21C4F9AE02.roa (hash: KUnun5lZEQw4kuW5EOrvbt/fHn0giqX+CGkWFRK4Ts8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.crl rsync://rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 14:58:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13497 (0x34b9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CEAA2, serialNumber=FF495293CB5F15E5D14BACC2DB1052B2E2C825C8 Validity Not Before: May 30 14:58:14 2025 GMT Not After : Jun 6 14:58:14 2025 GMT Subject: CN=6839c786-442a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:df:29:a6:e0:1c:e6:8e:65:2a:61:99:18:ec: dc:2e:29:07:f6:59:ae:7b:fd:b0:67:89:6c:48:ff: af:88:45:49:82:8b:46:f1:40:96:8d:52:f0:cc:6c: 49:d8:c3:29:d9:2f:46:8f:ba:74:9c:aa:78:77:6a: 9f:2f:36:26:d1:80:90:47:6d:f3:98:a8:2b:61:67: ac:76:e5:6d:af:5e:53:a0:f6:b2:96:a3:ec:d5:ad: cf:a7:d8:c8:9c:cb:db:11:82:f3:ad:4d:3e:3e:aa: c7:ea:96:da:c8:dd:74:96:01:8c:7b:8d:77:a2:45: d4:b6:e7:f0:71:81:17:79:78:f6:db:9c:98:8f:eb: 4f:bd:4e:de:dc:a2:a2:fe:77:24:b8:7d:1d:15:6f: ed:de:65:1b:24:39:1f:b1:77:a0:4f:1d:a9:35:83: f8:80:1e:dd:86:90:89:4a:f0:db:14:b3:90:36:6a: c2:a6:10:95:50:46:23:52:f9:4b:cc:2a:da:58:a6: d0:9a:e5:4d:6f:a1:f7:c8:02:e3:57:b7:6d:67:dc: c5:e1:ac:a3:22:6f:e2:36:60:f8:e0:bc:b5:37:03: 6f:10:84:9d:7b:40:82:3e:85:0f:35:db:a7:40:7b: cf:ca:99:a6:cf:ee:f3:39:69:fd:03:54:ea:63:18: e6:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:ED:DF:27:27:D8:70:00:24:16:9E:25:73:DF:A9:C0:D4:F6:95:83 X509v3 Authority Key Identifier: keyid:FF:49:52:93:CB:5F:15:E5:D1:4B:AC:C2:DB:10:52:B2:E2:C8:25:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c3:08:1d:92:58:8f:fa:3f:85:5c:02:60:0a:b4:cd:27:3f:ab: 8d:60:26:9b:4f:9e:e1:40:c3:7a:3c:4e:3e:b7:07:63:84:50: d4:d0:24:f1:d7:2a:4b:bf:68:a0:1a:a4:6b:84:bf:49:e4:06: b3:c9:12:aa:a7:01:b4:15:39:34:93:83:5b:b2:15:c4:5d:cc: 8f:da:27:c8:4d:eb:c2:f6:ed:55:19:54:be:8b:bf:c6:33:f5: 50:85:76:c5:50:47:57:39:9a:50:82:40:e2:62:16:53:c6:a1: 50:dd:13:55:2b:ee:16:d1:4c:71:e1:03:34:b9:16:1f:cb:98: 66:bd:9e:41:92:7b:33:b6:8c:47:42:1c:31:aa:28:79:e9:21: 62:a9:f7:3e:d5:f9:73:32:aa:ba:a4:fe:2a:a4:d8:17:b9:7e: f9:47:52:44:a2:88:8b:02:c1:6b:8b:83:45:81:c0:6e:7d:5f: f5:e2:d8:dc:7a:7a:4d:02:3b:07:2f:11:ce:fa:cc:99:03:ac: 07:ba:f6:81:dc:7e:28:b8:50:c2:41:f1:af:ac:96:48:3b:1f: 2c:45:01:1b:08:2c:02:87:82:e7:f1:af:92:e3:42:89:d1:dd: 70:15:f5:f8:30:77:98:21:13:e2:8a:8b:d0:22:df:a2:25:0e: 3f:44:7d:0e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNLkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0VBQTIxMTAvBgNVBAUTKEZGNDk1MjkzQ0I1RjE1RTVEMTRCQUNDMkRCMTA1MkIy RTJDODI1QzgwHhcNMjUwNTMwMTQ1ODE0WhcNMjUwNjA2MTQ1ODE0WjAYMRYwFAYD VQQDEw02ODM5Yzc4Ni00NDJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArt8ppuAc5o5lKmGZGOzcLikH9lmue/2wZ4lsSP+viEVJgotG8UCWjVLwzGxJ 2MMp2S9Gj7p0nKp4d2qfLzYm0YCQR23zmKgrYWesduVtr15ToPaylqPs1a3Pp9jI nMvbEYLzrU0+PqrH6pbayN10lgGMe413okXUtufwcYEXeXj225yYj+tPvU7e3KKi /nckuH0dFW/t3mUbJDkfsXegTx2pNYP4gB7dhpCJSvDbFLOQNmrCphCVUEYjUvlL zCraWKbQmuVNb6H3yALjV7dtZ9zF4ayjIm/iNmD44Ly1NwNvEISde0CCPoUPNdun QHvPypmmz+7zOWn9A1TqYxjm4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA/t3ycn 2HAAJBaeJXPfqcDU9pWDMB8GA1UdIwQYMBaAFP9JUpPLXxXl0UuswtsQUrLiyCXI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRUFBMi9EMkFCMjkyQzFE OTkxMUUyQkE1MjlBODYwOEIwMkNEMi9fMGxTazh0ZkZlWFJTNnpDMnhCU3N1TElK Y2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL18wbFNrOHRmRmVYUlM2ekMyeEJTc3VMSUpjZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RUFBMi9EMkFCMjkyQzFEOTkxMUUyQkE1MjlBODYwOEIwMkNEMi9fMGxTazh0ZkZl WFJTNnpDMnhCU3N1TElKY2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDDCB2SWI/6P4VcAmAKtM0nP6uNYCabT57hQMN6PE4+twdjhFDU0CTx 1ypLv2igGqRrhL9J5AazyRKqpwG0FTk0k4NbshXEXcyP2ifITevC9u1VGVS+i7/G M/VQhXbFUEdXOZpQgkDiYhZTxqFQ3RNVK+4W0Uxx4QM0uRYfy5hmvZ5BknsztoxH Qhwxqih56SFiqfc+1flzMqq6pP4qpNgXuX75R1JEooiLAsFri4NFgcBufV/14tjc enpNAjsHLxHO+syZA6wHuvaB3H4ouFDCQfGvrJZIOx8sRQEbCCwCh4Ln8a+S40KJ 0d1wFfX4MHeYIRPiiovQIt+iJQ4/RH0O -----END CERTIFICATE-----Generated at Sat May 31 16:29:30 2025 by rpki-client