$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1AC7/81A4C4D66E4311EA949D9922C4F9AE02/akXWGoN3DJDQWMdBUx2NnGtnk1o.mft File: akXWGoN3DJDQWMdBUx2NnGtnk1o.mft (raw, json) Hash identifier: K8hLQQl2c8//q4963tz5K/7KBrJCTAp/b+R5UadgwSg= Subject key identifier: 26:AE:27:2C:F0:45:40:B5:EC:9F:FA:9A:88:0C:D8:6D:7F:11:1A:2A Authority key identifier: 6A:45:D6:1A:83:77:0C:90:D0:58:C7:41:53:1D:8D:9C:6B:67:93:5A Certificate issuer: /CN=A91D1AC7/serialNumber=6A45D61A83770C90D058C741531D8D9C6B67935A Certificate serial: 0A41 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akXWGoN3DJDQWMdBUx2NnGtnk1o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1AC7/81A4C4D66E4311EA949D9922C4F9AE02/akXWGoN3DJDQWMdBUx2NnGtnk1o.mft Manifest number: 0A2C Signing time: Fri 30 May 2025 19:58:13 +0000 Manifest this update: Fri 30 May 2025 19:58:13 +0000 Manifest next update: Fri 06 Jun 2025 19:58:13 +0000 Files and hashes: 1: akXWGoN3DJDQWMdBUx2NnGtnk1o.crl (hash: zH1xZUGaCiRRdR6nBMSEkmgKbvKFGolqyfN3VflySTc=) 2: 57C25DB2E42811EA881AB667C4F9AE02.roa (hash: E9181+VVT+rwNNkc7uINFuNWW6wPgms9gTqr7A850dY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1AC7/81A4C4D66E4311EA949D9922C4F9AE02/akXWGoN3DJDQWMdBUx2NnGtnk1o.crl rsync://rpki.apnic.net/member_repository/A91D1AC7/81A4C4D66E4311EA949D9922C4F9AE02/akXWGoN3DJDQWMdBUx2NnGtnk1o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akXWGoN3DJDQWMdBUx2NnGtnk1o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 19:58:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2625 (0xa41) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1AC7, serialNumber=6A45D61A83770C90D058C741531D8D9C6B67935A Validity Not Before: May 30 19:58:13 2025 GMT Not After : Jun 6 19:58:13 2025 GMT Subject: CN=683a0dd5-a343 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:44:af:a9:82:ac:8a:02:e7:0e:19:6c:b9:90: 36:f7:44:2e:cd:89:3c:78:74:0d:04:30:37:ae:f0: 30:8e:ed:b5:cd:73:ab:46:41:df:43:a4:b2:0d:4a: 25:9b:e6:6f:1a:bc:95:2d:8b:06:7d:d7:45:b6:9d: 30:8b:47:98:1e:69:6d:92:0f:09:2e:cf:93:32:0e: 6b:ff:d0:18:b9:cf:11:b6:82:20:a9:68:0f:33:c5: 3f:04:bf:50:38:cf:61:9b:68:7d:c2:ba:eb:77:63: a3:fa:d3:1f:83:f4:d3:5b:3e:14:ba:84:6a:e3:54: 54:26:1f:bd:3a:89:03:e1:68:9b:a2:ef:6c:c3:4b: 56:98:43:ef:ef:d4:cd:87:32:6e:0b:26:a2:a8:c7: 50:db:52:f9:34:ed:5a:a6:6b:7b:d0:f0:fb:bc:2c: 5f:88:0b:8e:e6:a1:9a:31:81:ee:a8:14:56:21:5c: e3:6f:25:1a:6b:8e:da:6c:3f:b5:39:ba:e4:d6:93: b4:6f:99:66:32:98:b9:5b:40:5c:6e:25:96:6a:cb: 62:62:e4:a1:6f:90:c4:9c:ef:bc:d8:0d:41:4c:57: 8d:a5:8d:6b:06:fc:fd:a2:75:8b:6e:8f:3d:83:f4: 55:cd:0e:42:9f:de:25:0c:bc:ea:20:64:58:72:c5: 6c:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:AE:27:2C:F0:45:40:B5:EC:9F:FA:9A:88:0C:D8:6D:7F:11:1A:2A X509v3 Authority Key Identifier: keyid:6A:45:D6:1A:83:77:0C:90:D0:58:C7:41:53:1D:8D:9C:6B:67:93:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1AC7/81A4C4D66E4311EA949D9922C4F9AE02/akXWGoN3DJDQWMdBUx2NnGtnk1o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akXWGoN3DJDQWMdBUx2NnGtnk1o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1AC7/81A4C4D66E4311EA949D9922C4F9AE02/akXWGoN3DJDQWMdBUx2NnGtnk1o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:2d:9c:87:b5:42:90:4c:ad:fa:7e:71:1f:34:34:bc:cc:6a: 72:27:49:6c:dd:cd:0f:37:f1:05:62:22:8b:67:b5:6c:13:09: d6:56:ed:d5:93:8f:8a:a6:2d:f1:a6:64:15:68:21:7d:5a:14: b2:54:21:24:cc:89:16:50:69:83:b1:74:14:45:4a:70:42:25: 2b:de:aa:e4:73:e3:7d:8b:cc:89:ef:8e:0a:1f:18:b2:d4:67: 59:f4:2b:86:e3:7e:cd:88:e3:0c:1e:5a:0a:83:91:aa:f4:02: 95:95:51:ef:5c:1c:cf:08:3f:d3:6b:51:bf:d9:1c:12:99:84: 48:5b:4f:e0:cf:b1:69:e7:b8:e7:d2:cf:58:9a:62:a2:c6:4b: f0:e3:37:2c:22:19:b9:d3:6b:85:a6:18:90:51:d6:68:97:64: 14:cc:1c:0d:fe:80:07:a6:b9:83:8e:fb:6d:88:f1:67:fc:1c: dd:db:b4:d9:c1:e4:a5:4e:cd:d3:3c:bb:18:86:a9:a7:13:4b: 36:a7:db:d9:73:de:1e:ec:3f:3b:6a:fc:14:b6:08:8f:c7:10: 05:40:c6:06:c6:6c:d6:c7:65:f1:9b:8f:95:ff:97:32:a1:49: 25:b3:36:3b:ea:a6:e9:94:a4:d4:5d:38:11:6a:96:1d:bd:64: 8a:dd:3b:21 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCkEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDFBQzcxMTAvBgNVBAUTKDZBNDVENjFBODM3NzBDOTBEMDU4Qzc0MTUzMUQ4RDlD NkI2NzkzNUEwHhcNMjUwNTMwMTk1ODEzWhcNMjUwNjA2MTk1ODEzWjAYMRYwFAYD VQQDEw02ODNhMGRkNS1hMzQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyUSvqYKsigLnDhlsuZA290QuzYk8eHQNBDA3rvAwju21zXOrRkHfQ6SyDUol m+ZvGryVLYsGfddFtp0wi0eYHmltkg8JLs+TMg5r/9AYuc8RtoIgqWgPM8U/BL9Q OM9hm2h9wrrrd2Oj+tMfg/TTWz4UuoRq41RUJh+9OokD4Wibou9sw0tWmEPv79TN hzJuCyaiqMdQ21L5NO1apmt70PD7vCxfiAuO5qGaMYHuqBRWIVzjbyUaa47abD+1 Obrk1pO0b5lmMpi5W0BcbiWWastiYuShb5DEnO+82A1BTFeNpY1rBvz9onWLbo89 g/RVzQ5Cn94lDLzqIGRYcsVswQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCauJyzw RUC17J/6mogM2G1/ERoqMB8GA1UdIwQYMBaAFGpF1hqDdwyQ0FjHQVMdjZxrZ5Na MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMUFDNy84MUE0QzRENjZF NDMxMUVBOTQ5RDk5MjJDNEY5QUUwMi9ha1hXR29OM0RKRFFXTWRCVXgyTm5HdG5r MW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FrWFdHb04zREpEUVdNZEJVeDJObkd0bmsxby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MUFDNy84MUE0QzRENjZFNDMxMUVBOTQ5RDk5MjJDNEY5QUUwMi9ha1hXR29OM0RK RFFXTWRCVXgyTm5HdG5rMW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAiLZyHtUKQTK36fnEfNDS8zGpyJ0ls3c0PN/EFYiKLZ7VsEwnWVu3V k4+Kpi3xpmQVaCF9WhSyVCEkzIkWUGmDsXQURUpwQiUr3qrkc+N9i8yJ744KHxiy 1GdZ9CuG437NiOMMHloKg5Gq9AKVlVHvXBzPCD/Ta1G/2RwSmYRIW0/gz7Fp57jn 0s9YmmKixkvw4zcsIhm502uFphiQUdZol2QUzBwN/oAHprmDjvttiPFn/Bzd27TZ weSlTs3TPLsYhqmnE0s2p9vZc94e7D87avwUtgiPxxAFQMYGxmzWx2Xxm4+V/5cy oUklszY76qbplKTUXTgRapYdvWSK3Tsh -----END CERTIFICATE-----Generated at Sat May 31 16:40:38 2025 by rpki-client