$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFCF8/05E4C2D28B0211EC85F2D074C4F9AE02/fF4N3E9YaXR7KjWMm3wPMejY3Ys.mft File: fF4N3E9YaXR7KjWMm3wPMejY3Ys.mft (raw, json) Hash identifier: go3pfEVDTTM5gEGyRFfhjbrHBfvf/ePofb8pXRr9+aE= Subject key identifier: B9:FF:AA:F9:46:6D:6A:25:BB:22:6C:D9:CB:2E:24:9F:1D:67:59:39 Authority key identifier: 7C:5E:0D:DC:4F:58:69:74:7B:2A:35:8C:9B:7C:0F:31:E8:D8:DD:8B Certificate issuer: /CN=A91CFCF8/serialNumber=7C5E0DDC4F5869747B2A358C9B7C0F31E8D8DD8B Certificate serial: 03F0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fF4N3E9YaXR7KjWMm3wPMejY3Ys.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFCF8/05E4C2D28B0211EC85F2D074C4F9AE02/fF4N3E9YaXR7KjWMm3wPMejY3Ys.mft Manifest number: 03D8 Signing time: Sat 31 May 2025 00:50:38 +0000 Manifest this update: Sat 31 May 2025 00:50:37 +0000 Manifest next update: Sat 07 Jun 2025 00:50:37 +0000 Files and hashes: 1: fF4N3E9YaXR7KjWMm3wPMejY3Ys.crl (hash: KnFE33OStdUwDPZq6qgZiSBhX12WxfzectKzA+wC5d0=) 2: 13A285FAB19A11EF8A0E4356C4F9AE02.roa (hash: 0AdbgXl2PM0dKWxojYYhrZuTuIt1BCoahGNDArgAJi4=) 3: C76E25524B1711EE8CE6C778C4F9AE02.roa (hash: HsErDDItwf5JjFC0N3vp/RvWt4W7KbQd/xCB8B2lvo4=) 4: 844FB44036A211EEAE901A49C4F9AE02.roa (hash: GNVfwfyUifybt9+TxmCqpnk4LFqX/6GaqA3Bsi9KVRs=) 5: DC32812203E911F099ED6083C4F9AE02.roa (hash: J4XsQqIXXNrH3AjPKCK2loEl+rnRQyBlEzKkOSyTXKc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFCF8/05E4C2D28B0211EC85F2D074C4F9AE02/fF4N3E9YaXR7KjWMm3wPMejY3Ys.crl rsync://rpki.apnic.net/member_repository/A91CFCF8/05E4C2D28B0211EC85F2D074C4F9AE02/fF4N3E9YaXR7KjWMm3wPMejY3Ys.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fF4N3E9YaXR7KjWMm3wPMejY3Ys.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 00:50:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1008 (0x3f0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFCF8, serialNumber=7C5E0DDC4F5869747B2A358C9B7C0F31E8D8DD8B Validity Not Before: May 31 00:50:37 2025 GMT Not After : Jun 7 00:50:37 2025 GMT Subject: CN=683a525d-6e01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:f7:33:78:9f:d3:29:be:d6:dd:19:2d:2d:8e: 76:d4:7f:2f:d1:d7:d0:0c:84:87:a1:fa:b2:5f:19: a3:c5:10:6b:01:64:81:be:7b:b6:df:78:c2:c9:e8: d8:83:23:72:31:1e:1a:f2:7c:81:98:2e:db:f7:85: b6:5b:ae:81:b9:77:61:34:cd:08:f5:4e:ac:69:64: d5:47:6b:95:02:96:d6:07:35:08:0a:78:d4:38:80: 3a:b6:06:bb:90:f5:6c:4c:27:eb:fd:dd:8d:37:9a: 39:25:db:93:b0:82:6b:6f:ce:5e:c0:d8:e9:6e:fb: 3e:d8:33:2a:05:8c:ba:68:08:1d:2f:d4:cb:36:1e: a6:f0:7c:81:14:37:4e:04:72:ec:4c:09:a1:df:ff: 69:88:69:06:f9:de:8a:62:50:d4:b7:14:73:c5:fd: c3:f5:dd:6f:e7:c5:4f:ef:ad:62:3c:12:46:00:f4: a6:8d:13:b6:7b:b5:c3:37:fa:94:c9:47:d4:03:c1: 7f:84:99:f9:3e:35:b4:93:4f:70:6b:41:bf:21:d2: 99:0b:1e:b8:f6:94:e1:00:bf:68:6e:28:9d:98:69: 6d:2b:a8:9c:34:dc:89:ae:41:95:da:bb:e4:b8:53: 38:37:34:f3:3e:dd:bd:9c:f0:88:55:76:1f:4a:3b: d4:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:FF:AA:F9:46:6D:6A:25:BB:22:6C:D9:CB:2E:24:9F:1D:67:59:39 X509v3 Authority Key Identifier: keyid:7C:5E:0D:DC:4F:58:69:74:7B:2A:35:8C:9B:7C:0F:31:E8:D8:DD:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFCF8/05E4C2D28B0211EC85F2D074C4F9AE02/fF4N3E9YaXR7KjWMm3wPMejY3Ys.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fF4N3E9YaXR7KjWMm3wPMejY3Ys.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFCF8/05E4C2D28B0211EC85F2D074C4F9AE02/fF4N3E9YaXR7KjWMm3wPMejY3Ys.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:51:0a:48:b2:f0:c2:95:5a:0f:c4:d4:71:6b:b9:8d:d0:62: cc:59:c8:24:5e:e7:d3:ee:3e:9a:71:da:8c:57:81:95:56:8b: 46:e5:b8:8e:43:e5:fb:ea:2a:18:46:b7:88:92:81:6a:ca:0e: d6:ee:cf:b1:53:a1:90:52:a4:7d:ef:c5:ed:12:6d:cf:32:00: 62:68:fd:1f:4d:12:93:05:49:de:9c:c5:76:e7:62:8b:7e:6d: db:10:22:75:84:d7:d8:a4:56:b4:27:d3:65:b0:e0:e8:e1:f4: 99:18:71:9e:82:a7:15:ac:c6:8b:29:60:29:a6:92:7b:4d:89: 5b:f4:aa:05:84:1d:94:96:4a:19:9d:cf:4d:35:87:83:14:dc: 2f:5b:c2:71:1f:bc:bd:df:01:a9:54:83:5e:8c:b1:a3:11:1d: 84:71:14:3e:6c:b4:72:64:35:36:9b:c1:e7:e4:e7:14:cf:4f: 81:42:fa:3d:af:d3:34:ca:37:c2:5f:09:d9:95:16:5c:a8:06: e3:5f:85:2d:cd:37:3f:59:43:08:0b:24:f0:91:b5:d4:f6:d3: 93:f3:bb:ec:00:8a:00:15:2d:97:ca:47:78:36:c0:80:40:d2: 96:5e:c9:d2:a2:66:71:bd:2c:39:1a:d9:84:9c:26:c9:d6:9d: 0f:7a:8b:22 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA/AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ZDRjgxMTAvBgNVBAUTKDdDNUUwRERDNEY1ODY5NzQ3QjJBMzU4QzlCN0MwRjMx RThEOEREOEIwHhcNMjUwNTMxMDA1MDM3WhcNMjUwNjA3MDA1MDM3WjAYMRYwFAYD VQQDEw02ODNhNTI1ZC02ZTAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsvczeJ/TKb7W3RktLY521H8v0dfQDISHofqyXxmjxRBrAWSBvnu233jCyejY gyNyMR4a8nyBmC7b94W2W66BuXdhNM0I9U6saWTVR2uVApbWBzUICnjUOIA6tga7 kPVsTCfr/d2NN5o5JduTsIJrb85ewNjpbvs+2DMqBYy6aAgdL9TLNh6m8HyBFDdO BHLsTAmh3/9piGkG+d6KYlDUtxRzxf3D9d1v58VP761iPBJGAPSmjRO2e7XDN/qU yUfUA8F/hJn5PjW0k09wa0G/IdKZCx649pThAL9obiidmGltK6icNNyJrkGV2rvk uFM4NzTzPt29nPCIVXYfSjvU1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLn/qvlG bWoluyJs2csuJJ8dZ1k5MB8GA1UdIwQYMBaAFHxeDdxPWGl0eyo1jJt8DzHo2N2L MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkNGOC8wNUU0QzJEMjhC MDIxMUVDODVGMkQwNzRDNEY5QUUwMi9mRjROM0U5WWFYUjdLaldNbTN3UE1lalkz WXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZGNE4zRTlZYVhSN0tqV01tM3dQTWVqWTNZcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RkNGOC8wNUU0QzJEMjhCMDIxMUVDODVGMkQwNzRDNEY5QUUwMi9mRjROM0U5WWFY UjdLaldNbTN3UE1lalkzWXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBuUQpIsvDClVoPxNRxa7mN0GLMWcgkXufT7j6acdqMV4GVVotG5biO Q+X76ioYRreIkoFqyg7W7s+xU6GQUqR978XtEm3PMgBiaP0fTRKTBUnenMV252KL fm3bECJ1hNfYpFa0J9NlsODo4fSZGHGegqcVrMaLKWApppJ7TYlb9KoFhB2UlkoZ nc9NNYeDFNwvW8JxH7y93wGpVINejLGjER2EcRQ+bLRyZDU2m8Hn5OcUz0+BQvo9 r9M0yjfCXwnZlRZcqAbjX4UtzTc/WUMICyTwkbXU9tOT87vsAIoAFS2Xykd4NsCA QNKWXsnSomZxvSw5GtmEnCbJ1p0Peosi -----END CERTIFICATE-----Generated at Sat May 31 16:26:59 2025 by rpki-client