$ rpki-client -vvf rpki.apnic.net/member_repository/A91D774B/8FAB216643B111EC9A51A52EC4F9AE02/mPVq6odEo9Few5KtBtYIN3BGJUE.mft File: mPVq6odEo9Few5KtBtYIN3BGJUE.mft (raw, json) Hash identifier: qNufDMGFzhpbdOhByhFgyMNhh6LOIjIJeKuqkh9+B7A= Subject key identifier: D4:EC:D3:15:51:91:E9:57:32:DA:F0:CC:D4:52:8F:B7:44:86:73:93 Authority key identifier: 98:F5:6A:EA:87:44:A3:D1:5E:C3:92:AD:06:D6:08:37:70:46:25:41 Certificate issuer: /CN=A91D774B/serialNumber=98F56AEA8744A3D15EC392AD06D6083770462541 Certificate serial: 0494 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mPVq6odEo9Few5KtBtYIN3BGJUE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D774B/8FAB216643B111EC9A51A52EC4F9AE02/mPVq6odEo9Few5KtBtYIN3BGJUE.mft Manifest number: 0488 Signing time: Sat 07 Jun 2025 00:06:29 +0000 Manifest this update: Sat 07 Jun 2025 00:06:29 +0000 Manifest next update: Sat 14 Jun 2025 00:06:29 +0000 Files and hashes: 1: mPVq6odEo9Few5KtBtYIN3BGJUE.crl (hash: GtIgZMMifFRmPUbrvs/AHlYylfonhzc2ELIzTfwprm0=) 2: 30B8A186DBEF11EFAF6FF37AC4F9AE02.roa (hash: C2tgoi4ndceE+FSZfwDXIED+n+ZW+4Wp1mUo8nhP9gw=) 3: CB7E6CF0DBEF11EF9FC5007CC4F9AE02.roa (hash: jv1ungDFXqLOGYMpTJjaYjynG3firC0fxKibhbmN4oA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D774B/8FAB216643B111EC9A51A52EC4F9AE02/mPVq6odEo9Few5KtBtYIN3BGJUE.crl rsync://rpki.apnic.net/member_repository/A91D774B/8FAB216643B111EC9A51A52EC4F9AE02/mPVq6odEo9Few5KtBtYIN3BGJUE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mPVq6odEo9Few5KtBtYIN3BGJUE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 14 Jun 2025 00:06:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1172 (0x494) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D774B, serialNumber=98F56AEA8744A3D15EC392AD06D6083770462541 Validity Not Before: Jun 7 00:06:29 2025 GMT Not After : Jun 14 00:06:29 2025 GMT Subject: CN=68438285-4fb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:a4:fd:55:b0:35:55:ca:9a:dd:84:02:25:2c: 97:44:f5:f6:13:12:f5:6c:c7:5e:11:aa:a1:87:9c: f9:1d:32:a9:c8:48:fc:3c:38:0d:dc:73:72:13:9c: e3:28:39:b6:34:3b:bc:d6:75:52:b6:b2:3d:bd:22: 27:11:70:51:09:df:0a:ab:7d:86:c0:00:60:f5:71: 3a:3b:33:8e:5c:7b:15:fa:81:05:24:08:2d:9b:59: b4:48:92:cb:cd:75:60:05:33:20:79:66:46:57:df: 45:e9:cc:50:a1:8b:69:51:3e:b7:84:c7:32:bb:aa: 73:5f:9e:5d:38:20:21:26:98:d8:88:8d:60:99:e0: 8d:f3:db:28:34:e6:ad:58:b1:53:d6:8d:0b:7e:3b: 85:56:a8:76:b7:aa:8a:7c:56:16:a3:77:69:69:54: 49:43:7f:e3:2d:1c:3b:71:7c:70:d6:9f:be:e0:08: a3:26:66:b6:f3:37:a5:9f:25:07:eb:af:69:b8:06: a1:db:15:f3:0f:6a:60:31:17:27:2e:6a:9b:40:53: a2:51:eb:cd:db:3a:22:37:ba:47:65:9d:26:02:f2: 15:ca:09:7c:8d:51:3d:24:84:96:5d:e9:8d:16:31: bc:78:1d:43:69:7e:68:01:00:1a:dd:3b:24:5c:9b: 15:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:EC:D3:15:51:91:E9:57:32:DA:F0:CC:D4:52:8F:B7:44:86:73:93 X509v3 Authority Key Identifier: keyid:98:F5:6A:EA:87:44:A3:D1:5E:C3:92:AD:06:D6:08:37:70:46:25:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D774B/8FAB216643B111EC9A51A52EC4F9AE02/mPVq6odEo9Few5KtBtYIN3BGJUE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mPVq6odEo9Few5KtBtYIN3BGJUE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D774B/8FAB216643B111EC9A51A52EC4F9AE02/mPVq6odEo9Few5KtBtYIN3BGJUE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:5c:9d:38:4a:32:b4:74:fa:d1:82:87:89:e6:84:48:b7:7e: e6:3c:b2:42:7a:ef:4f:25:32:74:28:77:bb:5c:87:3a:65:fd: c4:37:28:cb:5d:2f:53:12:10:fc:b5:6c:44:7e:88:91:74:d2: c6:80:f8:d9:e9:3e:6a:2f:88:db:93:81:ec:d3:89:37:e2:4a: 30:15:6a:26:a9:8c:a5:2c:29:0f:02:af:a0:9b:47:65:41:22: 93:b5:24:b7:ad:ba:20:38:c7:e0:ca:ff:92:ae:3c:b0:8f:ae: 52:41:f5:08:78:89:64:05:de:86:e5:b4:7d:c5:1b:9c:2b:7a: 74:f4:a7:1c:b3:79:99:5e:8f:c8:3a:49:9d:c2:91:61:b3:ce: f7:c0:8a:70:36:41:5a:57:b0:26:b9:e9:5d:16:e6:41:68:33: 1e:32:e7:1f:6e:5f:f9:e1:39:0d:b6:05:b7:c4:3d:52:f8:45: ac:a0:74:95:c5:83:ba:7f:c6:d2:78:71:a5:d1:e8:6a:f3:d3: 77:da:01:cc:d0:59:22:f9:c5:d3:93:b1:8b:db:4a:84:73:75: dd:2a:b3:46:ad:39:0e:4e:c4:5a:51:82:d4:9b:2f:ea:d9:d7: d6:9d:36:66:d6:12:c0:90:d4:91:d3:69:2f:b1:98:93:68:62: f7:82:78:6a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBJQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDc3NEIxMTAvBgNVBAUTKDk4RjU2QUVBODc0NEEzRDE1RUMzOTJBRDA2RDYwODM3 NzA0NjI1NDEwHhcNMjUwNjA3MDAwNjI5WhcNMjUwNjE0MDAwNjI5WjAYMRYwFAYD VQQDEw02ODQzODI4NS00ZmI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqKT9VbA1Vcqa3YQCJSyXRPX2ExL1bMdeEaqhh5z5HTKpyEj8PDgN3HNyE5zj KDm2NDu81nVStrI9vSInEXBRCd8Kq32GwABg9XE6OzOOXHsV+oEFJAgtm1m0SJLL zXVgBTMgeWZGV99F6cxQoYtpUT63hMcyu6pzX55dOCAhJpjYiI1gmeCN89soNOat WLFT1o0LfjuFVqh2t6qKfFYWo3dpaVRJQ3/jLRw7cXxw1p++4AijJma28zelnyUH 669puAah2xXzD2pgMRcnLmqbQFOiUevN2zoiN7pHZZ0mAvIVygl8jVE9JISWXemN FjG8eB1DaX5oAQAa3TskXJsVpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNTs0xVR kelXMtrwzNRSj7dEhnOTMB8GA1UdIwQYMBaAFJj1auqHRKPRXsOSrQbWCDdwRiVB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENzc0Qi84RkFCMjE2NjQz QjExMUVDOUE1MUE1MkVDNEY5QUUwMi9tUFZxNm9kRW85RmV3NUt0QnRZSU4zQkdK VUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21QVnE2b2RFbzlGZXc1S3RCdFlJTjNCR0pVRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Nzc0Qi84RkFCMjE2NjQzQjExMUVDOUE1MUE1MkVDNEY5QUUwMi9tUFZxNm9kRW85 RmV3NUt0QnRZSU4zQkdKVUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBoXJ04SjK0dPrRgoeJ5oRIt37mPLJCeu9PJTJ0KHe7XIc6Zf3ENyjL XS9TEhD8tWxEfoiRdNLGgPjZ6T5qL4jbk4Hs04k34kowFWomqYylLCkPAq+gm0dl QSKTtSS3rbogOMfgyv+Srjywj65SQfUIeIlkBd6G5bR9xRucK3p09Kccs3mZXo/I OkmdwpFhs873wIpwNkFaV7AmueldFuZBaDMeMucfbl/54TkNtgW3xD1S+EWsoHSV xYO6f8bSeHGl0ehq89N32gHM0Fki+cXTk7GL20qEc3XdKrNGrTkOTsRaUYLUmy/q 2dfWnTZm1hLAkNSR02kvsZiTaGL3gnhq -----END CERTIFICATE-----Generated at Sun Jun 8 15:55:04 2025 by rpki-client