$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEBAA/2CFD3712CCD011ED98252E75C4F9AE02/MmGGGCRMjWtLpgov7ZcjuZjZoXA.mft File: MmGGGCRMjWtLpgov7ZcjuZjZoXA.mft (raw, json) Hash identifier: 0dZGekBFsEQc6W3/322I5BTFPKTstNQueAP+i0fh0Z4= Subject key identifier: CF:70:B4:F3:ED:33:40:94:EA:7A:52:AF:5C:2B:0A:E3:19:B3:5E:CB Authority key identifier: 32:61:86:18:24:4C:8D:6B:4B:A6:0A:2F:ED:97:23:B9:98:D9:A1:70 Certificate issuer: /CN=A91CEBAA/serialNumber=32618618244C8D6B4BA60A2FED9723B998D9A170 Certificate serial: 01C3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmGGGCRMjWtLpgov7ZcjuZjZoXA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CEBAA/2CFD3712CCD011ED98252E75C4F9AE02/MmGGGCRMjWtLpgov7ZcjuZjZoXA.mft Manifest number: 01AF Signing time: Sat 31 May 2025 03:07:39 +0000 Manifest this update: Sat 31 May 2025 03:07:39 +0000 Manifest next update: Sat 07 Jun 2025 03:07:39 +0000 Files and hashes: 1: MmGGGCRMjWtLpgov7ZcjuZjZoXA.crl (hash: m3xRpeaR/AWLcXVqufW/rtvJ1tn0Fg/U0JWUmNnoCfo=) 2: 7F52DF541CF011F0ACBEBD22C4F9AE02.roa (hash: T+JOCtPDki/xHSSeZ1AMylOFrQqsxCA9cKvI0yaY7C0=) 3: 73CB38E81CF011F0B59DB522C4F9AE02.roa (hash: llOCDx1EbOCJWqDxiCkgBWEB8PNLgQ3QGDsGfn8WZKY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CEBAA/2CFD3712CCD011ED98252E75C4F9AE02/MmGGGCRMjWtLpgov7ZcjuZjZoXA.crl rsync://rpki.apnic.net/member_repository/A91CEBAA/2CFD3712CCD011ED98252E75C4F9AE02/MmGGGCRMjWtLpgov7ZcjuZjZoXA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmGGGCRMjWtLpgov7ZcjuZjZoXA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 03:07:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 451 (0x1c3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CEBAA, serialNumber=32618618244C8D6B4BA60A2FED9723B998D9A170 Validity Not Before: May 31 03:07:39 2025 GMT Not After : Jun 7 03:07:39 2025 GMT Subject: CN=683a727b-e323 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:83:72:93:42:1b:be:7a:ba:ba:82:b8:6f:39: 5f:62:15:93:cf:28:6e:1e:08:53:52:0d:6f:ef:c0: 07:32:4e:74:c2:38:a1:52:da:d7:12:65:22:4e:95: 97:92:3b:37:11:23:0c:0a:8d:20:45:9c:4a:d6:3f: 87:0c:f9:28:98:19:35:84:32:9b:de:70:18:9d:2e: 4a:32:56:cb:79:d3:29:76:2e:b8:f6:41:58:fc:02: 8a:73:b0:44:b2:a1:eb:cd:94:94:93:52:a4:a9:02: c5:90:88:d4:ea:84:4c:2e:8b:a2:1b:d2:27:6c:f9: 82:b0:7e:8a:31:04:1e:21:be:36:8e:8b:85:85:52: 77:5e:f5:5f:ce:20:34:69:d8:fc:e9:a0:1f:db:ef: d2:6a:b7:98:ac:6e:45:44:e1:f0:0c:8b:c4:32:18: a6:04:aa:99:71:93:64:2e:3c:10:6f:92:ca:a3:96: a6:9f:30:d5:43:ff:d2:33:f2:d6:05:0f:c1:91:52: cf:04:d0:46:0f:a5:0f:9c:5a:79:61:3a:a2:34:ad: 5f:38:78:d9:b4:45:d0:0a:ad:05:30:e0:5b:b9:7e: c1:2d:d8:cd:89:fd:78:94:03:08:25:f4:f0:80:61: b2:7b:fb:54:9a:b9:05:79:e4:ef:2f:8d:7b:75:cd: a9:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:70:B4:F3:ED:33:40:94:EA:7A:52:AF:5C:2B:0A:E3:19:B3:5E:CB X509v3 Authority Key Identifier: keyid:32:61:86:18:24:4C:8D:6B:4B:A6:0A:2F:ED:97:23:B9:98:D9:A1:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CEBAA/2CFD3712CCD011ED98252E75C4F9AE02/MmGGGCRMjWtLpgov7ZcjuZjZoXA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmGGGCRMjWtLpgov7ZcjuZjZoXA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEBAA/2CFD3712CCD011ED98252E75C4F9AE02/MmGGGCRMjWtLpgov7ZcjuZjZoXA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:be:3f:07:6c:e6:19:82:58:9d:68:c8:04:b0:09:08:79:34: 4e:7b:ac:97:1c:02:da:d7:b5:36:92:40:5a:42:92:21:80:91: 1f:e8:93:0e:a1:4a:1c:ee:2f:32:d4:3c:af:f2:83:4e:8c:65: d5:df:10:f9:79:88:41:00:95:a1:f5:52:8e:2c:f1:e7:1e:dc: 3b:72:5f:3e:70:0e:89:1a:df:03:7c:f5:a5:9f:14:29:00:26: cd:57:f7:15:5b:5f:be:51:1a:af:6f:af:94:63:eb:fd:62:13: 63:d8:bd:31:27:f2:64:b1:0f:67:62:ec:24:ee:ba:7c:7a:02: 61:4c:39:69:81:25:fc:f0:e6:c5:9a:9d:d8:f5:91:1d:06:2e: d4:b9:56:37:83:bc:3b:c9:d4:60:2b:10:fd:ee:17:82:80:67: 40:e9:67:fb:a6:35:53:9b:a3:9f:a6:3a:23:2b:7f:65:54:e5: 2d:c7:1c:a1:97:20:96:48:b2:21:f7:96:59:46:a6:55:1e:d9: 1b:f7:2b:ee:4d:3c:be:a9:d0:dc:4c:6f:cd:12:12:9f:5f:a6: 01:5c:64:d0:ec:72:51:90:db:4a:ca:fa:63:9f:c8:07:5c:10: 63:cb:04:68:f5:02:91:39:b9:b0:1f:80:dd:ee:40:e1:92:c5: 54:07:44:5d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0VCQUExMTAvBgNVBAUTKDMyNjE4NjE4MjQ0QzhENkI0QkE2MEEyRkVEOTcyM0I5 OThEOUExNzAwHhcNMjUwNTMxMDMwNzM5WhcNMjUwNjA3MDMwNzM5WjAYMRYwFAYD VQQDEw02ODNhNzI3Yi1lMzIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuoNyk0Ibvnq6uoK4bzlfYhWTzyhuHghTUg1v78AHMk50wjihUtrXEmUiTpWX kjs3ESMMCo0gRZxK1j+HDPkomBk1hDKb3nAYnS5KMlbLedMpdi649kFY/AKKc7BE sqHrzZSUk1KkqQLFkIjU6oRMLouiG9InbPmCsH6KMQQeIb42jouFhVJ3XvVfziA0 adj86aAf2+/SareYrG5FROHwDIvEMhimBKqZcZNkLjwQb5LKo5amnzDVQ//SM/LW BQ/BkVLPBNBGD6UPnFp5YTqiNK1fOHjZtEXQCq0FMOBbuX7BLdjNif14lAMIJfTw gGGye/tUmrkFeeTvL417dc2pAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM9wtPPt M0CU6npSr1wrCuMZs17LMB8GA1UdIwQYMBaAFDJhhhgkTI1rS6YKL+2XI7mY2aFw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRUJBQS8yQ0ZEMzcxMkND RDAxMUVEOTgyNTJFNzVDNEY5QUUwMi9NbUdHR0NSTWpXdExwZ292N1pjanVaalpv WEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01tR0dHQ1JNald0THBnb3Y3WmNqdVpqWm9YQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RUJBQS8yQ0ZEMzcxMkNDRDAxMUVEOTgyNTJFNzVDNEY5QUUwMi9NbUdHR0NSTWpX dExwZ292N1pjanVaalpvWEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAxvj8HbOYZglidaMgEsAkIeTROe6yXHALa17U2kkBaQpIhgJEf6JMO oUoc7i8y1Dyv8oNOjGXV3xD5eYhBAJWh9VKOLPHnHtw7cl8+cA6JGt8DfPWlnxQp ACbNV/cVW1++URqvb6+UY+v9YhNj2L0xJ/JksQ9nYuwk7rp8egJhTDlpgSX88ObF mp3Y9ZEdBi7UuVY3g7w7ydRgKxD97heCgGdA6Wf7pjVTm6OfpjojK39lVOUtxxyh lyCWSLIh95ZZRqZVHtkb9yvuTTy+qdDcTG/NEhKfX6YBXGTQ7HJRkNtKyvpjn8gH XBBjywRo9QKRObmwH4Dd7kDhksVUB0Rd -----END CERTIFICATE-----Generated at Sat May 31 17:36:08 2025 by rpki-client