$ rpki-client -vvf rpki.apnic.net/member_repository/A91D298D/337A6432F1A611EAB95C0E2FC4F9AE02/_vLBxOoJZEd1FMGqlG5sQXeNBr8.mft File: _vLBxOoJZEd1FMGqlG5sQXeNBr8.mft (raw, json) Hash identifier: fWafOLx0SNS/LLokJUkCSSAuNudR3FjTiVUDoS4nmcg= Subject key identifier: 41:06:D5:E0:EA:7B:1A:DF:97:8A:1F:56:58:55:E5:37:5F:30:35:3C Authority key identifier: FE:F2:C1:C4:EA:09:64:47:75:14:C1:AA:94:6E:6C:41:77:8D:06:BF Certificate issuer: /CN=A91D298D/serialNumber=FEF2C1C4EA0964477514C1AA946E6C41778D06BF Certificate serial: 0865 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_vLBxOoJZEd1FMGqlG5sQXeNBr8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D298D/337A6432F1A611EAB95C0E2FC4F9AE02/_vLBxOoJZEd1FMGqlG5sQXeNBr8.mft Manifest number: 082C Signing time: Fri 30 May 2025 21:17:32 +0000 Manifest this update: Fri 30 May 2025 21:17:32 +0000 Manifest next update: Fri 06 Jun 2025 21:17:32 +0000 Files and hashes: 1: _vLBxOoJZEd1FMGqlG5sQXeNBr8.crl (hash: e63SP+gPHPaVHG4S9k7pcgs0uPLSLdB52rRpXhS8oUk=) 2: 65519ACC506C11EC99354984C4F9AE02.roa (hash: FSKLxu00ctg24+HmZkC2VPQWpobiDfHHaUN+7Y4NQZA=) 3: 01BB1B8E7C0411EFB0D29158C4F9AE02.roa (hash: KU0OYgNotYA3UtDO5hlxYlQJ813PAymWu54BIJPXlUQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D298D/337A6432F1A611EAB95C0E2FC4F9AE02/_vLBxOoJZEd1FMGqlG5sQXeNBr8.crl rsync://rpki.apnic.net/member_repository/A91D298D/337A6432F1A611EAB95C0E2FC4F9AE02/_vLBxOoJZEd1FMGqlG5sQXeNBr8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_vLBxOoJZEd1FMGqlG5sQXeNBr8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 21:17:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2149 (0x865) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D298D, serialNumber=FEF2C1C4EA0964477514C1AA946E6C41778D06BF Validity Not Before: May 30 21:17:32 2025 GMT Not After : Jun 6 21:17:32 2025 GMT Subject: CN=683a206c-b2de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:11:64:10:ad:32:9e:10:31:ee:2a:0c:c2:9f: 4b:e6:52:41:92:38:64:c7:49:4b:81:cc:0d:db:b7: 10:fa:87:15:de:ca:d2:b7:dc:62:d5:8b:88:c6:a4: e1:81:4c:81:ed:dd:a2:c5:4c:c1:6f:31:ad:66:fe: d4:01:19:cb:f5:c4:b8:3e:14:1c:ed:bd:10:fd:35: dd:4c:80:cd:56:99:2d:fe:72:66:bb:53:c2:26:af: 64:34:95:57:87:e1:b9:dc:89:81:7d:c1:94:49:0d: 38:e4:dc:60:7b:6b:a5:8f:13:7c:87:31:1d:b0:00: bf:36:14:35:9a:3f:07:78:de:0a:bb:44:29:89:0c: 6d:88:9a:b0:bf:9b:81:79:61:f9:0c:19:9e:bd:75: 52:ea:1d:70:74:84:93:ae:cf:3e:d5:ea:c4:7e:a3: cf:9e:59:ed:67:d3:ff:56:3f:24:9f:2c:98:c1:b7: 4b:df:22:07:64:58:2f:e8:37:f4:69:77:42:2a:33: 93:b4:29:27:f0:29:97:98:14:eb:91:e0:0e:56:4f: 0b:17:3c:f1:cc:4d:57:cf:8e:13:58:81:90:67:51: 3f:19:53:b1:f7:a8:70:df:e5:41:41:16:a1:10:e5: 40:6e:de:13:ba:90:a3:f7:64:f7:35:01:a6:11:17: c2:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:06:D5:E0:EA:7B:1A:DF:97:8A:1F:56:58:55:E5:37:5F:30:35:3C X509v3 Authority Key Identifier: keyid:FE:F2:C1:C4:EA:09:64:47:75:14:C1:AA:94:6E:6C:41:77:8D:06:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D298D/337A6432F1A611EAB95C0E2FC4F9AE02/_vLBxOoJZEd1FMGqlG5sQXeNBr8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_vLBxOoJZEd1FMGqlG5sQXeNBr8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D298D/337A6432F1A611EAB95C0E2FC4F9AE02/_vLBxOoJZEd1FMGqlG5sQXeNBr8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:d5:0f:72:e3:df:1f:90:ad:ad:df:4c:60:79:ba:6a:af:c4: 98:41:05:55:02:0a:4c:08:21:10:91:5b:72:e6:d0:75:c6:84: 51:ca:5d:a1:c9:94:e8:34:44:f4:a1:b2:4a:98:6e:cc:40:49: 41:e1:0d:71:6a:fb:f1:b3:ff:01:4b:b0:66:16:7b:28:2d:9d: 1b:6d:23:7c:95:fc:d4:fb:44:b8:88:0a:53:cd:be:1e:81:5b: 08:7f:47:6d:71:37:38:11:29:89:19:e9:ca:0a:d3:60:56:85: 85:24:f8:92:3a:ad:0a:ce:53:02:4a:19:a8:b7:b2:46:32:48: 47:7e:61:d2:69:42:44:64:a4:8e:dc:9a:f2:95:a9:47:cc:ad: 1a:da:9d:1a:8c:9a:c3:f6:b2:ec:ac:95:76:f9:a7:eb:47:21: 79:8b:af:a2:2c:85:0a:85:58:8b:34:b0:e0:50:b4:c7:f9:11: 4c:1c:b5:8d:ad:1d:12:40:30:52:0a:74:aa:61:76:93:19:7b: 1a:50:4e:f0:3a:6e:c8:bf:52:1e:4b:44:0f:e9:de:f7:ad:ed: fa:f2:95:7b:b9:bf:f5:ab:fa:ea:5a:0c:83:07:5d:fa:cc:ff: d2:b0:8b:16:b0:ea:b5:02:11:81:74:c0:4d:8a:23:77:70:15: 52:24:37:78 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCGUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDI5OEQxMTAvBgNVBAUTKEZFRjJDMUM0RUEwOTY0NDc3NTE0QzFBQTk0NkU2QzQx Nzc4RDA2QkYwHhcNMjUwNTMwMjExNzMyWhcNMjUwNjA2MjExNzMyWjAYMRYwFAYD VQQDEw02ODNhMjA2Yy1iMmRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwRFkEK0ynhAx7ioMwp9L5lJBkjhkx0lLgcwN27cQ+ocV3srSt9xi1YuIxqTh gUyB7d2ixUzBbzGtZv7UARnL9cS4PhQc7b0Q/TXdTIDNVpkt/nJmu1PCJq9kNJVX h+G53ImBfcGUSQ045Nxge2uljxN8hzEdsAC/NhQ1mj8HeN4Ku0QpiQxtiJqwv5uB eWH5DBmevXVS6h1wdISTrs8+1erEfqPPnlntZ9P/Vj8knyyYwbdL3yIHZFgv6Df0 aXdCKjOTtCkn8CmXmBTrkeAOVk8LFzzxzE1Xz44TWIGQZ1E/GVOx96hw3+VBQRah EOVAbt4TupCj92T3NQGmERfCswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEEG1eDq exrfl4ofVlhV5TdfMDU8MB8GA1UdIwQYMBaAFP7ywcTqCWRHdRTBqpRubEF3jQa/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMjk4RC8zMzdBNjQzMkYx QTYxMUVBQjk1QzBFMkZDNEY5QUUwMi9fdkxCeE9vSlpFZDFGTUdxbEc1c1FYZU5C cjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL192TEJ4T29KWkVkMUZNR3FsRzVzUVhlTkJyOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Mjk4RC8zMzdBNjQzMkYxQTYxMUVBQjk1QzBFMkZDNEY5QUUwMi9fdkxCeE9vSlpF ZDFGTUdxbEc1c1FYZU5CcjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAP1Q9y498fkK2t30xgebpqr8SYQQVVAgpMCCEQkVty5tB1xoRRyl2h yZToNET0obJKmG7MQElB4Q1xavvxs/8BS7BmFnsoLZ0bbSN8lfzU+0S4iApTzb4e gVsIf0dtcTc4ESmJGenKCtNgVoWFJPiSOq0KzlMCShmot7JGMkhHfmHSaUJEZKSO 3JrylalHzK0a2p0ajJrD9rLsrJV2+afrRyF5i6+iLIUKhViLNLDgULTH+RFMHLWN rR0SQDBSCnSqYXaTGXsaUE7wOm7Iv1IeS0QP6d73re368pV7ub/1q/rqWgyDB136 zP/SsIsWsOq1AhGBdMBNiiN3cBVSJDd4 -----END CERTIFICATE-----Generated at Sat May 31 17:09:00 2025 by rpki-client