$ rpki-client -vvf rpki.apnic.net/member_repository/A91D61DF/0D0C5F741C6611EE9A132B84C4F9AE02/Fb8hC3N4HVzAvpm9OdcLL-tOuGw.mft File: Fb8hC3N4HVzAvpm9OdcLL-tOuGw.mft (raw, json) Hash identifier: Q4CzkD44Plfn9RfO3zyFWih3VjaZocy51o9FbhBKFOs= Subject key identifier: 28:57:65:E1:38:A4:D8:D1:42:8F:EC:89:55:03:B4:3B:25:11:17:69 Authority key identifier: 15:BF:21:0B:73:78:1D:5C:C0:BE:99:BD:39:D7:0B:2F:EB:4E:B8:6C Certificate issuer: /CN=A91D61DF/serialNumber=15BF210B73781D5CC0BE99BD39D70B2FEB4EB86C Certificate serial: 016E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fb8hC3N4HVzAvpm9OdcLL-tOuGw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D61DF/0D0C5F741C6611EE9A132B84C4F9AE02/Fb8hC3N4HVzAvpm9OdcLL-tOuGw.mft Manifest number: 0168 Signing time: Sat 31 May 2025 03:37:06 +0000 Manifest this update: Sat 31 May 2025 03:37:05 +0000 Manifest next update: Sat 07 Jun 2025 03:37:05 +0000 Files and hashes: 1: Fb8hC3N4HVzAvpm9OdcLL-tOuGw.crl (hash: f07yb+e8o/CjQ3Cf8W/nxFAzS3aHy4V7rtoc5khYJCA=) 2: 1D52E8E860D711EEA524AE64C4F9AE02.roa (hash: GbdpkuqmY37s9wPgW3tN3BtEev3tZBJWQSfg/vR2zzo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D61DF/0D0C5F741C6611EE9A132B84C4F9AE02/Fb8hC3N4HVzAvpm9OdcLL-tOuGw.crl rsync://rpki.apnic.net/member_repository/A91D61DF/0D0C5F741C6611EE9A132B84C4F9AE02/Fb8hC3N4HVzAvpm9OdcLL-tOuGw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fb8hC3N4HVzAvpm9OdcLL-tOuGw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 03:37:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 366 (0x16e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D61DF, serialNumber=15BF210B73781D5CC0BE99BD39D70B2FEB4EB86C Validity Not Before: May 31 03:37:05 2025 GMT Not After : Jun 7 03:37:05 2025 GMT Subject: CN=683a7962-a196 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:4f:32:17:b5:2c:6b:1d:b2:19:77:4a:3b:98: 92:e8:f3:6f:49:13:13:e5:4d:ac:28:4e:98:ad:93: b0:1b:c1:b6:41:60:d9:53:9b:0a:ce:20:33:a3:2f: 26:e5:92:4e:86:38:04:ce:f4:d1:36:6a:5b:71:c7: 09:30:5d:63:6a:c9:7f:25:48:74:eb:4e:a1:6a:0c: db:5f:3b:1d:3b:66:b0:72:5c:63:25:ef:a6:3f:25: 18:02:30:f0:3e:4d:ef:9d:5f:81:66:40:39:cc:b7: 77:53:eb:36:24:f6:df:44:93:b2:84:76:f5:8e:68: 7d:b1:94:04:c4:94:75:64:6f:bd:d7:84:f3:07:ea: 93:f5:14:fe:33:9d:b2:9d:b9:a4:47:09:2f:ab:a7: ff:68:fc:c3:2c:ab:2c:6b:b5:11:ad:e6:8d:47:cb: 87:77:c0:62:d3:6a:7c:5f:af:ef:6b:07:3d:4b:b3: c5:2d:7e:26:47:40:8b:25:98:5e:eb:f3:4a:b7:d7: ce:eb:e1:0c:e0:52:75:30:30:5b:93:cf:91:58:0f: 0f:58:0c:b7:81:b2:64:77:90:b3:e4:d7:2a:d0:36: 78:fa:c6:0c:3a:39:96:86:a0:46:e2:6e:25:67:36: e7:26:48:11:5f:cc:c4:d9:de:4d:b8:2c:db:31:e3: 48:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:57:65:E1:38:A4:D8:D1:42:8F:EC:89:55:03:B4:3B:25:11:17:69 X509v3 Authority Key Identifier: keyid:15:BF:21:0B:73:78:1D:5C:C0:BE:99:BD:39:D7:0B:2F:EB:4E:B8:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D61DF/0D0C5F741C6611EE9A132B84C4F9AE02/Fb8hC3N4HVzAvpm9OdcLL-tOuGw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fb8hC3N4HVzAvpm9OdcLL-tOuGw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D61DF/0D0C5F741C6611EE9A132B84C4F9AE02/Fb8hC3N4HVzAvpm9OdcLL-tOuGw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:ec:5b:7c:c5:04:9e:cb:40:12:1b:84:00:eb:aa:14:63:54: 4a:23:8e:cd:f9:5a:a0:9c:f6:80:5b:b4:e3:5e:97:a5:96:f3: 46:bd:15:35:f8:a4:47:43:27:38:4c:b9:e0:c2:7e:0c:8c:1c: b1:05:1c:44:41:76:81:ea:07:aa:d8:80:55:a6:04:14:4d:5a: 05:26:76:dc:8e:4a:94:6d:ff:64:63:9e:db:bf:13:62:17:54: 26:42:a4:12:00:3a:ff:fc:66:98:0c:9a:ca:d2:47:70:d4:e1: bd:8d:2a:cf:f1:36:c2:45:a8:ea:f4:51:4d:33:93:97:a8:4d: 3d:a0:7e:89:0b:04:02:22:04:14:af:8e:43:9f:74:1a:eb:b2: 2e:13:e4:67:00:d5:c5:3d:ae:da:92:b4:cf:cc:cb:8f:68:fe: 94:cd:5c:00:04:aa:00:0a:cd:e3:83:ac:f0:ca:4a:3b:10:aa: 7a:80:b7:57:9c:37:4e:64:0b:47:02:75:5e:8a:b7:66:82:22: bf:0e:9d:8b:fb:4e:5f:0b:a5:9e:f0:a6:d7:0b:a7:26:20:e1: 6c:c8:80:a6:6a:34:b7:5b:bd:a0:3f:27:07:72:e1:7a:f7:bf: ba:19:3e:53:54:28:2a:47:4d:2d:97:63:1f:87:40:a1:f1:98: 11:af:e1:7c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAW4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDYxREYxMTAvBgNVBAUTKDE1QkYyMTBCNzM3ODFENUNDMEJFOTlCRDM5RDcwQjJG RUI0RUI4NkMwHhcNMjUwNTMxMDMzNzA1WhcNMjUwNjA3MDMzNzA1WjAYMRYwFAYD VQQDEw02ODNhNzk2Mi1hMTk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyU8yF7Usax2yGXdKO5iS6PNvSRMT5U2sKE6YrZOwG8G2QWDZU5sKziAzoy8m 5ZJOhjgEzvTRNmpbcccJMF1jasl/JUh0606hagzbXzsdO2awclxjJe+mPyUYAjDw Pk3vnV+BZkA5zLd3U+s2JPbfRJOyhHb1jmh9sZQExJR1ZG+914TzB+qT9RT+M52y nbmkRwkvq6f/aPzDLKssa7URreaNR8uHd8Bi02p8X6/vawc9S7PFLX4mR0CLJZhe 6/NKt9fO6+EM4FJ1MDBbk8+RWA8PWAy3gbJkd5Cz5Ncq0DZ4+sYMOjmWhqBG4m4l ZzbnJkgRX8zE2d5NuCzbMeNI4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFChXZeE4 pNjRQo/siVUDtDslERdpMB8GA1UdIwQYMBaAFBW/IQtzeB1cwL6ZvTnXCy/rTrhs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjFERi8wRDBDNUY3NDFD NjYxMUVFOUExMzJCODRDNEY5QUUwMi9GYjhoQzNONEhWekF2cG05T2RjTEwtdE91 R3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZiOGhDM040SFZ6QXZwbTlPZGNMTC10T3VHdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NjFERi8wRDBDNUY3NDFDNjYxMUVFOUExMzJCODRDNEY5QUUwMi9GYjhoQzNONEhW ekF2cG05T2RjTEwtdE91R3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAP7Ft8xQSey0ASG4QA66oUY1RKI47N+VqgnPaAW7TjXpellvNGvRU1 +KRHQyc4TLngwn4MjByxBRxEQXaB6geq2IBVpgQUTVoFJnbcjkqUbf9kY57bvxNi F1QmQqQSADr//GaYDJrK0kdw1OG9jSrP8TbCRajq9FFNM5OXqE09oH6JCwQCIgQU r45Dn3Qa67IuE+RnANXFPa7akrTPzMuPaP6UzVwABKoACs3jg6zwyko7EKp6gLdX nDdOZAtHAnVeirdmgiK/Dp2L+05fC6We8KbXC6cmIOFsyICmajS3W72gPycHcuF6 97+6GT5TVCgqR00tl2Mfh0Ch8ZgRr+F8 -----END CERTIFICATE-----Generated at Sat May 31 14:59:32 2025 by rpki-client