$ rpki-client -vvf rpki.apnic.net/member_repository/A91D50FB/257BB2C4070E11EAA613727BC4F9AE02/1M9fCWc28k6iQQeSpgPNut2Cfc0.mft File: 1M9fCWc28k6iQQeSpgPNut2Cfc0.mft (raw, json) Hash identifier: jiHNnBn6Ad7bOd85LmBGoiHmJePhFCIHQpovGBYfGmY= Subject key identifier: 25:DB:C6:56:52:A6:07:45:05:14:7B:88:32:67:AF:1A:8A:63:1C:74 Authority key identifier: D4:CF:5F:09:67:36:F2:4E:A2:41:07:92:A6:03:CD:BA:DD:82:7D:CD Certificate issuer: /CN=A91D50FB/serialNumber=D4CF5F096736F24EA2410792A603CDBADD827DCD Certificate serial: 0C45 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1M9fCWc28k6iQQeSpgPNut2Cfc0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D50FB/257BB2C4070E11EAA613727BC4F9AE02/1M9fCWc28k6iQQeSpgPNut2Cfc0.mft Manifest number: 0C3C Signing time: Fri 30 May 2025 18:42:35 +0000 Manifest this update: Fri 30 May 2025 18:42:35 +0000 Manifest next update: Fri 06 Jun 2025 18:42:35 +0000 Files and hashes: 1: 1M9fCWc28k6iQQeSpgPNut2Cfc0.crl (hash: xGJq93RcjzTiL8UhhR+CTtp1gL62RRcw7TxwHbb13lQ=) 2: 97BB54A2070E11EA80718B7BC4F9AE02.roa (hash: fzV6mKN4RsRKk9FHAZNWKpTQRTVNAoWs1ftj78Q3KMk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D50FB/257BB2C4070E11EAA613727BC4F9AE02/1M9fCWc28k6iQQeSpgPNut2Cfc0.crl rsync://rpki.apnic.net/member_repository/A91D50FB/257BB2C4070E11EAA613727BC4F9AE02/1M9fCWc28k6iQQeSpgPNut2Cfc0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1M9fCWc28k6iQQeSpgPNut2Cfc0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 18:42:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3141 (0xc45) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D50FB, serialNumber=D4CF5F096736F24EA2410792A603CDBADD827DCD Validity Not Before: May 30 18:42:35 2025 GMT Not After : Jun 6 18:42:35 2025 GMT Subject: CN=6839fc1b-2994 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:fd:16:de:26:fc:3b:6f:c7:44:f3:82:9e:55: ce:d7:0a:ca:9d:29:34:15:53:5b:3c:f4:80:a4:d6: e1:d4:a4:80:16:78:e9:80:1e:59:1a:3f:b7:0f:73: 87:69:2a:bb:f5:d4:20:e1:ff:4d:9a:a5:33:92:79: 98:c2:06:bc:67:8d:39:6d:d0:5f:bd:3b:56:fa:a5: f8:fd:7f:02:da:69:47:84:78:25:66:fb:6d:c3:af: 9f:ac:82:ee:4c:f7:b2:4f:f8:17:b0:85:7e:e8:76: ab:7e:4c:a9:16:85:83:19:b1:d7:a1:f5:8e:54:77: c8:a3:e2:ee:6e:cd:61:fc:ce:6a:c2:3b:c7:18:de: 87:c1:91:ab:d7:b2:fa:f0:21:75:79:20:cb:4b:21: 73:1b:d1:68:34:bb:36:8d:e7:f5:7b:74:4f:b7:53: 02:40:84:50:37:c2:7f:99:40:9b:2a:3e:2f:d8:69: ed:50:ce:cc:32:49:d7:01:9b:51:dc:b4:8e:53:4d: 5a:53:30:68:c8:7d:89:a8:0b:a2:4d:63:da:35:37: cc:e1:d8:ed:64:ea:5c:17:d6:1d:91:e5:b5:31:b4: 86:89:79:3b:41:e0:d1:aa:e4:4d:fe:bd:42:61:65: 57:98:04:7c:00:a3:12:ef:30:59:6f:a3:74:67:5b: 37:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:DB:C6:56:52:A6:07:45:05:14:7B:88:32:67:AF:1A:8A:63:1C:74 X509v3 Authority Key Identifier: keyid:D4:CF:5F:09:67:36:F2:4E:A2:41:07:92:A6:03:CD:BA:DD:82:7D:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D50FB/257BB2C4070E11EAA613727BC4F9AE02/1M9fCWc28k6iQQeSpgPNut2Cfc0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1M9fCWc28k6iQQeSpgPNut2Cfc0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D50FB/257BB2C4070E11EAA613727BC4F9AE02/1M9fCWc28k6iQQeSpgPNut2Cfc0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:78:7d:09:cb:dd:0c:14:ac:3b:31:58:ed:2e:2f:a3:4e:be: fb:8d:33:23:4c:35:c5:8e:43:da:67:50:9d:b0:11:c3:d7:20: 67:2d:73:b3:99:c3:b3:96:1b:b1:c0:55:f2:3b:47:82:9e:ac: c7:86:11:a6:26:6c:32:be:6a:d4:22:77:00:63:b8:3f:b8:57: 9b:de:c5:e4:16:3f:3c:26:e6:dc:1c:26:4f:4b:e1:a2:88:99: ca:cb:81:a1:64:23:1c:de:ee:cf:38:65:8d:e3:e5:c6:2e:1e: 2e:f6:90:eb:9d:8f:58:d4:ce:49:4f:bf:f4:8d:7c:2b:60:cc: 20:75:8b:78:45:55:75:27:ec:50:6b:5c:ec:20:ff:8a:a8:08: 86:4a:1b:70:12:d7:d1:72:2e:8c:83:25:1a:b1:0f:3d:39:26: bb:67:9f:02:44:6f:7f:0c:eb:45:5e:c3:84:52:2e:f9:56:23: 44:4a:4e:b0:c4:9a:d5:7f:1b:96:af:84:12:0d:b3:af:58:ea: 40:91:77:61:0c:79:e2:44:62:ec:80:e3:93:f3:f3:d0:48:eb: 9e:5e:2d:24:41:ba:b1:a8:49:99:70:f9:64:94:e6:55:b1:43: fd:56:e7:bf:44:a9:09:bf:ad:7e:56:d3:ff:ac:40:e0:0d:eb: 86:fb:b2:ac -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDEUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDUwRkIxMTAvBgNVBAUTKEQ0Q0Y1RjA5NjczNkYyNEVBMjQxMDc5MkE2MDNDREJB REQ4MjdEQ0QwHhcNMjUwNTMwMTg0MjM1WhcNMjUwNjA2MTg0MjM1WjAYMRYwFAYD VQQDEw02ODM5ZmMxYi0yOTk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnv0W3ib8O2/HRPOCnlXO1wrKnSk0FVNbPPSApNbh1KSAFnjpgB5ZGj+3D3OH aSq79dQg4f9NmqUzknmYwga8Z405bdBfvTtW+qX4/X8C2mlHhHglZvttw6+frILu TPeyT/gXsIV+6HarfkypFoWDGbHXofWOVHfIo+Lubs1h/M5qwjvHGN6HwZGr17L6 8CF1eSDLSyFzG9FoNLs2jef1e3RPt1MCQIRQN8J/mUCbKj4v2GntUM7MMknXAZtR 3LSOU01aUzBoyH2JqAuiTWPaNTfM4djtZOpcF9YdkeW1MbSGiXk7QeDRquRN/r1C YWVXmAR8AKMS7zBZb6N0Z1s3SQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCXbxlZS pgdFBRR7iDJnrxqKYxx0MB8GA1UdIwQYMBaAFNTPXwlnNvJOokEHkqYDzbrdgn3N MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENTBGQi8yNTdCQjJDNDA3 MEUxMUVBQTYxMzcyN0JDNEY5QUUwMi8xTTlmQ1djMjhrNmlRUWVTcGdQTnV0MkNm YzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFNOWZDV2MyOGs2aVFRZVNwZ1BOdXQyQ2ZjMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NTBGQi8yNTdCQjJDNDA3MEUxMUVBQTYxMzcyN0JDNEY5QUUwMi8xTTlmQ1djMjhr NmlRUWVTcGdQTnV0MkNmYzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAyeH0Jy90MFKw7MVjtLi+jTr77jTMjTDXFjkPaZ1CdsBHD1yBnLXOz mcOzlhuxwFXyO0eCnqzHhhGmJmwyvmrUIncAY7g/uFeb3sXkFj88JubcHCZPS+Gi iJnKy4GhZCMc3u7POGWN4+XGLh4u9pDrnY9Y1M5JT7/0jXwrYMwgdYt4RVV1J+xQ a1zsIP+KqAiGShtwEtfRci6MgyUasQ89OSa7Z58CRG9/DOtFXsOEUi75ViNESk6w xJrVfxuWr4QSDbOvWOpAkXdhDHniRGLsgOOT8/PQSOueXi0kQbqxqEmZcPlklOZV sUP9Vue/RKkJv61+VtP/rEDgDeuG+7Ks -----END CERTIFICATE-----Generated at Sat May 31 17:51:36 2025 by rpki-client