$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5ECA/BFD23206B92511EBB0E2CB82C4F9AE02/-4BdU3nLB9UqQR7__QSRyjm3vyc.mft File: -4BdU3nLB9UqQR7__QSRyjm3vyc.mft (raw, json) Hash identifier: SzhSCH9/G7gSVYYrOqmwQGd5ZrnQREcaKU8w8Xh12Wc= Subject key identifier: 68:48:6E:DA:7C:F4:0F:BC:39:12:45:42:F2:78:64:AC:46:7A:9C:DC Authority key identifier: FB:80:5D:53:79:CB:07:D5:2A:41:1E:FF:FD:04:91:CA:39:B7:BF:27 Certificate issuer: /CN=A91D5ECA/serialNumber=FB805D5379CB07D52A411EFFFD0491CA39B7BF27 Certificate serial: 05E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-4BdU3nLB9UqQR7__QSRyjm3vyc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D5ECA/BFD23206B92511EBB0E2CB82C4F9AE02/-4BdU3nLB9UqQR7__QSRyjm3vyc.mft Manifest number: 05DC Signing time: Fri 30 May 2025 23:11:47 +0000 Manifest this update: Fri 30 May 2025 23:11:46 +0000 Manifest next update: Fri 06 Jun 2025 23:11:46 +0000 Files and hashes: 1: -4BdU3nLB9UqQR7__QSRyjm3vyc.crl (hash: 5JyXAiQ3Asng78XcqBzAfeqLSdjyfFB0Ki5d3cBTKDI=) 2: F4740B2CB92711EBA6B43A86C4F9AE02.roa (hash: UVYU38/2P4ZcsBnZKHRUezkcR8i0kOVNyl3hZT7lyzo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D5ECA/BFD23206B92511EBB0E2CB82C4F9AE02/-4BdU3nLB9UqQR7__QSRyjm3vyc.crl rsync://rpki.apnic.net/member_repository/A91D5ECA/BFD23206B92511EBB0E2CB82C4F9AE02/-4BdU3nLB9UqQR7__QSRyjm3vyc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-4BdU3nLB9UqQR7__QSRyjm3vyc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 23:11:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1505 (0x5e1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D5ECA, serialNumber=FB805D5379CB07D52A411EFFFD0491CA39B7BF27 Validity Not Before: May 30 23:11:46 2025 GMT Not After : Jun 6 23:11:46 2025 GMT Subject: CN=683a3b32-30bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:74:c7:69:08:21:ed:e5:43:c8:41:11:0a:c1: 28:78:9a:ca:97:fd:ef:de:90:ce:71:be:11:43:f6: 51:2d:49:87:0e:45:74:a2:79:1f:0d:e4:73:4c:9f: 45:1e:6b:f3:d9:c7:db:d9:0f:6f:37:83:4f:01:49: e5:2e:c9:ee:36:c5:84:8b:38:20:3b:2e:2f:8e:53: b6:49:48:e9:ef:d9:5f:52:75:41:00:76:7f:a0:fc: 6b:09:4d:95:74:8f:bc:f2:82:57:01:6e:04:e2:0b: 54:ef:71:52:4f:9c:39:6b:50:02:24:fa:2d:50:29: 8c:2c:a1:13:a7:0f:42:80:b7:d2:df:6a:ea:a3:c2: 86:7c:eb:07:b9:4b:92:a3:3c:ab:32:a5:44:a9:7c: 2b:67:1d:a3:cc:9b:e2:79:1b:9f:4c:88:3e:e4:b6: 50:c0:57:72:4d:a2:d6:df:73:bc:03:62:52:a1:b0: 13:3c:f4:15:80:09:e8:27:b6:bc:8b:42:24:63:5a: b2:15:03:a7:e1:83:e4:57:0e:09:af:60:2c:99:bd: 0e:cd:e3:00:37:b2:71:57:e1:a9:0b:3c:d2:39:4d: be:41:74:48:e8:08:36:2c:8d:40:40:dc:17:10:89: 70:45:23:de:3c:9c:ea:e4:10:ec:24:40:2f:42:92: a0:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:48:6E:DA:7C:F4:0F:BC:39:12:45:42:F2:78:64:AC:46:7A:9C:DC X509v3 Authority Key Identifier: keyid:FB:80:5D:53:79:CB:07:D5:2A:41:1E:FF:FD:04:91:CA:39:B7:BF:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D5ECA/BFD23206B92511EBB0E2CB82C4F9AE02/-4BdU3nLB9UqQR7__QSRyjm3vyc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-4BdU3nLB9UqQR7__QSRyjm3vyc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5ECA/BFD23206B92511EBB0E2CB82C4F9AE02/-4BdU3nLB9UqQR7__QSRyjm3vyc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d1:4b:61:ff:0b:3b:8d:a8:33:2b:13:52:00:d9:3c:bc:19:2e: 85:ae:e5:0a:0b:1b:87:7a:43:8c:61:22:ec:13:ff:56:e9:ae: 9f:bd:c3:60:1a:61:2b:dd:84:db:6e:ee:c7:87:5d:50:46:d7: 6b:b1:db:f9:4b:10:ce:dc:53:c8:bf:3a:48:7b:b4:bb:74:65: f1:24:98:35:06:98:e8:61:1e:da:c1:95:95:93:4f:b8:30:2f: 23:6a:b5:a9:e8:1b:43:01:de:8b:87:fe:00:9d:36:5c:42:8c: 86:98:a3:10:d1:2a:18:9b:36:56:35:41:9c:4d:cc:98:cf:d0: 8b:98:09:03:a7:8f:5e:d1:41:ba:d8:83:3e:56:da:b2:9e:db: 90:92:5e:f7:f3:d9:bd:8f:18:96:73:8d:d2:20:7e:fe:23:04: a9:74:ae:0c:05:3b:07:30:b0:b4:e2:cf:66:c9:aa:85:80:75: ad:1b:c8:9d:c8:23:e3:8a:9b:61:5f:66:71:3c:f3:4a:b5:17: 57:68:c0:a1:ed:50:1f:be:48:17:15:8b:ce:ec:1c:ef:78:ff: b7:9d:9f:11:74:68:55:56:5d:62:2d:d4:bb:f5:e9:b2:ab:1c: ed:71:73:8f:78:54:72:53:7f:87:73:dd:7c:fd:27:f8:2c:97: 8b:8c:07:09 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBeEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDVFQ0ExMTAvBgNVBAUTKEZCODA1RDUzNzlDQjA3RDUyQTQxMUVGRkZEMDQ5MUNB MzlCN0JGMjcwHhcNMjUwNTMwMjMxMTQ2WhcNMjUwNjA2MjMxMTQ2WjAYMRYwFAYD VQQDEw02ODNhM2IzMi0zMGJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtnTHaQgh7eVDyEERCsEoeJrKl/3v3pDOcb4RQ/ZRLUmHDkV0onkfDeRzTJ9F Hmvz2cfb2Q9vN4NPAUnlLsnuNsWEizggOy4vjlO2SUjp79lfUnVBAHZ/oPxrCU2V dI+88oJXAW4E4gtU73FST5w5a1ACJPotUCmMLKETpw9CgLfS32rqo8KGfOsHuUuS ozyrMqVEqXwrZx2jzJvieRufTIg+5LZQwFdyTaLW33O8A2JSobATPPQVgAnoJ7a8 i0IkY1qyFQOn4YPkVw4Jr2Asmb0OzeMAN7JxV+GpCzzSOU2+QXRI6Ag2LI1AQNwX EIlwRSPePJzq5BDsJEAvQpKg/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGhIbtp8 9A+8ORJFQvJ4ZKxGepzcMB8GA1UdIwQYMBaAFPuAXVN5ywfVKkEe//0Ekco5t78n MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENUVDQS9CRkQyMzIwNkI5 MjUxMUVCQjBFMkNCODJDNEY5QUUwMi8tNEJkVTNuTEI5VXFRUjdfX1FTUnlqbTN2 eWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy00QmRVM25MQjlVcVFSN19fUVNSeWptM3Z5Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NUVDQS9CRkQyMzIwNkI5MjUxMUVCQjBFMkNCODJDNEY5QUUwMi8tNEJkVTNuTEI5 VXFRUjdfX1FTUnlqbTN2eWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDRS2H/CzuNqDMrE1IA2Ty8GS6FruUKCxuHekOMYSLsE/9W6a6fvcNg GmEr3YTbbu7Hh11QRtdrsdv5SxDO3FPIvzpIe7S7dGXxJJg1BpjoYR7awZWVk0+4 MC8jarWp6BtDAd6Lh/4AnTZcQoyGmKMQ0SoYmzZWNUGcTcyYz9CLmAkDp49e0UG6 2IM+VtqyntuQkl7389m9jxiWc43SIH7+IwSpdK4MBTsHMLC04s9myaqFgHWtG8id yCPjipthX2ZxPPNKtRdXaMCh7VAfvkgXFYvO7BzveP+3nZ8RdGhVVl1iLdS79emy qxztcXOPeFRyU3+Hc918/Sf4LJeLjAcJ -----END CERTIFICATE-----Generated at Sat May 31 16:49:04 2025 by rpki-client