$ rpki-client -vvf rpki.apnic.net/member_repository/A91D7103/7AB8112A42D211EEB7C4D01EC4F9AE02/raez5kKEQOUk2gaDhqHt8yH4gR4.mft File: raez5kKEQOUk2gaDhqHt8yH4gR4.mft (raw, json) Hash identifier: IFDdIduisXfanbGJp0zuDBJZPWuxWasiH7+rcSwstQg= Subject key identifier: 93:02:0C:23:2E:29:97:26:70:B4:9A:51:87:B2:EE:79:75:98:0A:F5 Authority key identifier: AD:A7:B3:E6:42:84:40:E5:24:DA:06:83:86:A1:ED:F3:21:F8:81:1E Certificate issuer: /CN=A91D7103/serialNumber=ADA7B3E6428440E524DA068386A1EDF321F8811E Certificate serial: 014F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/raez5kKEQOUk2gaDhqHt8yH4gR4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D7103/7AB8112A42D211EEB7C4D01EC4F9AE02/raez5kKEQOUk2gaDhqHt8yH4gR4.mft Manifest number: 014B Signing time: Sat 31 May 2025 03:52:27 +0000 Manifest this update: Sat 31 May 2025 03:52:27 +0000 Manifest next update: Sat 07 Jun 2025 03:52:26 +0000 Files and hashes: 1: raez5kKEQOUk2gaDhqHt8yH4gR4.crl (hash: tKKmYCcSGMxh1GYauysNFzET6EebNDfNtM/GQptwp4o=) 2: EFB54FEC42D211EE9D8A0832C4F9AE02.roa (hash: tNlqnTYXK/FVcXJJVdKao/xTVsvmNPHSSjgb9yu5e3k=) 3: 1E35039C42D511EEAE5F803AC4F9AE02.roa (hash: hdZa/uU6R1KyL95TVJPIwe+LkDp1/9Z9cxgyNi7o3uo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D7103/7AB8112A42D211EEB7C4D01EC4F9AE02/raez5kKEQOUk2gaDhqHt8yH4gR4.crl rsync://rpki.apnic.net/member_repository/A91D7103/7AB8112A42D211EEB7C4D01EC4F9AE02/raez5kKEQOUk2gaDhqHt8yH4gR4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/raez5kKEQOUk2gaDhqHt8yH4gR4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 03:52:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 335 (0x14f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D7103, serialNumber=ADA7B3E6428440E524DA068386A1EDF321F8811E Validity Not Before: May 31 03:52:27 2025 GMT Not After : Jun 7 03:52:26 2025 GMT Subject: CN=683a7cfb-42bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:fc:bb:44:36:cd:2d:98:0b:aa:49:3c:3d:ea: 59:94:60:e8:b2:c1:1e:1d:57:3d:de:a4:9b:7f:61: 3a:fd:ce:f0:9f:49:51:1c:eb:29:ce:f7:e8:60:80: 4f:4f:a9:67:7e:10:d8:63:41:61:6d:74:7f:4b:21: cb:31:7b:3a:ba:dc:90:8b:fe:5d:d9:0b:33:61:df: db:e5:1e:49:f2:36:72:08:7e:e6:f6:65:40:b2:6e: d1:09:82:b3:a8:00:c4:4f:c8:a0:d4:a1:a4:da:79: ca:b4:ae:4f:7b:73:4c:c7:2a:ea:a8:2c:7b:82:9b: a7:40:5c:fa:3e:01:f0:c9:b9:cf:a3:ba:d5:e9:41: 74:fb:8b:f6:0d:79:39:df:e8:2f:22:9c:06:3c:ac: 29:05:df:34:d7:20:dc:d7:04:51:01:12:3b:05:87: 0e:10:e7:a8:55:6a:33:e2:4b:8a:3c:eb:e8:ad:a0: cb:f9:e5:b8:57:f2:6d:92:60:60:6d:ec:f6:44:c6: b5:6b:06:2a:68:e4:08:e1:1f:ea:48:74:bd:d9:b2: cf:80:53:79:4f:e7:c6:f2:af:6b:a0:67:e8:5a:52: 4e:45:aa:80:f8:1e:69:0c:fc:92:89:27:58:a8:14: 85:1a:47:1c:1e:1a:1e:10:74:f1:c2:b8:06:c3:65: b6:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:02:0C:23:2E:29:97:26:70:B4:9A:51:87:B2:EE:79:75:98:0A:F5 X509v3 Authority Key Identifier: keyid:AD:A7:B3:E6:42:84:40:E5:24:DA:06:83:86:A1:ED:F3:21:F8:81:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D7103/7AB8112A42D211EEB7C4D01EC4F9AE02/raez5kKEQOUk2gaDhqHt8yH4gR4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/raez5kKEQOUk2gaDhqHt8yH4gR4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D7103/7AB8112A42D211EEB7C4D01EC4F9AE02/raez5kKEQOUk2gaDhqHt8yH4gR4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:40:bf:38:d7:f0:24:87:92:85:02:8c:9d:30:1c:dd:5e:05: 02:fc:30:bd:ed:75:24:5f:b2:5e:dc:b6:fe:6a:04:30:13:83: a5:ad:0c:e5:71:9b:97:89:bd:1b:ac:a2:ef:fb:cc:0a:68:00: 88:03:bc:5c:8c:f0:05:ab:38:67:36:99:8f:7b:d3:15:c3:30: b9:c7:b3:2d:a0:55:c7:9b:0a:b2:cc:45:41:2a:23:f0:49:24: c3:48:a1:a2:4d:16:26:51:df:d9:40:14:c9:41:8e:93:d3:6f: d5:60:ed:a3:4e:71:f4:2a:fc:9d:23:23:80:82:5d:24:cb:ef: e5:54:59:43:9b:bb:ba:cd:a3:52:29:3f:1c:e3:43:13:12:54: cb:5b:60:6e:f7:03:3e:7f:c7:e1:85:d2:e5:d9:fc:cd:f4:24: 94:b2:29:b7:9b:f4:27:8a:cc:2e:fd:c6:90:3c:91:77:9b:78: 45:21:bc:32:0f:4d:78:10:d7:3e:9a:21:58:5b:5d:d7:56:b4: 10:dc:d7:a8:56:4e:5b:32:a2:ad:cf:5e:eb:29:7d:42:95:e9: ed:04:a9:d2:ac:fa:a4:5d:af:92:23:53:ee:05:1f:af:b2:05: 8a:ac:26:6e:a5:dc:99:10:81:22:8f:fc:0a:3a:fb:2a:c0:53: b4:d5:5d:96 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAU8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDcxMDMxMTAvBgNVBAUTKEFEQTdCM0U2NDI4NDQwRTUyNERBMDY4Mzg2QTFFREYz MjFGODgxMUUwHhcNMjUwNTMxMDM1MjI3WhcNMjUwNjA3MDM1MjI2WjAYMRYwFAYD VQQDEw02ODNhN2NmYi00MmJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyPy7RDbNLZgLqkk8PepZlGDossEeHVc93qSbf2E6/c7wn0lRHOspzvfoYIBP T6lnfhDYY0FhbXR/SyHLMXs6utyQi/5d2QszYd/b5R5J8jZyCH7m9mVAsm7RCYKz qADET8ig1KGk2nnKtK5Pe3NMxyrqqCx7gpunQFz6PgHwybnPo7rV6UF0+4v2DXk5 3+gvIpwGPKwpBd801yDc1wRRARI7BYcOEOeoVWoz4kuKPOvoraDL+eW4V/JtkmBg bez2RMa1awYqaOQI4R/qSHS92bLPgFN5T+fG8q9roGfoWlJORaqA+B5pDPySiSdY qBSFGkccHhoeEHTxwrgGw2W2OQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJMCDCMu KZcmcLSaUYey7nl1mAr1MB8GA1UdIwQYMBaAFK2ns+ZChEDlJNoGg4ah7fMh+IEe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENzEwMy83QUI4MTEyQTQy RDIxMUVFQjdDNEQwMUVDNEY5QUUwMi9yYWV6NWtLRVFPVWsyZ2FEaHFIdDh5SDRn UjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JhZXo1a0tFUU9VazJnYURocUh0OHlINGdSNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NzEwMy83QUI4MTEyQTQyRDIxMUVFQjdDNEQwMUVDNEY5QUUwMi9yYWV6NWtLRVFP VWsyZ2FEaHFIdDh5SDRnUjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAaQL841/Akh5KFAoydMBzdXgUC/DC97XUkX7Je3Lb+agQwE4OlrQzl cZuXib0brKLv+8wKaACIA7xcjPAFqzhnNpmPe9MVwzC5x7MtoFXHmwqyzEVBKiPw SSTDSKGiTRYmUd/ZQBTJQY6T02/VYO2jTnH0KvydIyOAgl0ky+/lVFlDm7u6zaNS KT8c40MTElTLW2Bu9wM+f8fhhdLl2fzN9CSUsim3m/Qniswu/caQPJF3m3hFIbwy D014ENc+miFYW13XVrQQ3NeoVk5bMqKtz17rKX1ClentBKnSrPqkXa+SI1PuBR+v sgWKrCZupdyZEIEij/wKOvsqwFO01V2W -----END CERTIFICATE-----Generated at Sat May 31 17:03:26 2025 by rpki-client