$ rpki-client -vvf rpki.apnic.net/member_repository/A91D7771/55F2F0FEB17D11ECB9736241C4F9AE02/MMWCtnmSUrqsOzgaukzDN6v5feM.mft File: MMWCtnmSUrqsOzgaukzDN6v5feM.mft (raw, json) Hash identifier: kiavETzK/J7UVeOc+wCHtIZmPpXs89HhMKonuWItTJE= Subject key identifier: 31:28:BA:E8:18:2D:52:D0:1C:49:15:35:48:3F:9A:E7:0F:98:4D:30 Authority key identifier: 30:C5:82:B6:79:92:52:BA:AC:3B:38:1A:BA:4C:C3:37:AB:F9:7D:E3 Certificate issuer: /CN=A91D7771/serialNumber=30C582B6799252BAAC3B381ABA4CC337ABF97DE3 Certificate serial: 038B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MMWCtnmSUrqsOzgaukzDN6v5feM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D7771/55F2F0FEB17D11ECB9736241C4F9AE02/MMWCtnmSUrqsOzgaukzDN6v5feM.mft Manifest number: 037A Signing time: Sat 31 May 2025 01:09:13 +0000 Manifest this update: Sat 31 May 2025 01:09:13 +0000 Manifest next update: Sat 07 Jun 2025 01:09:13 +0000 Files and hashes: 1: MMWCtnmSUrqsOzgaukzDN6v5feM.crl (hash: PYALcp9jiv5dfHr42++nj/aCNDOLyFzEIVqF4QIlxfA=) 2: 9F88C3542ADF11F0B3006D40C4F9AE02.roa (hash: ApGs4R3HHaZ4yg8648RrrAd6hyarye3BQyXeeIyKxrg=) 3: 9E7F692C2ADF11F0B3006D40C4F9AE02.roa (hash: +5a166Qflas3aLR9Nf7vhA89ozfefd/BEiGQIYX5xJM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D7771/55F2F0FEB17D11ECB9736241C4F9AE02/MMWCtnmSUrqsOzgaukzDN6v5feM.crl rsync://rpki.apnic.net/member_repository/A91D7771/55F2F0FEB17D11ECB9736241C4F9AE02/MMWCtnmSUrqsOzgaukzDN6v5feM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MMWCtnmSUrqsOzgaukzDN6v5feM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 01:09:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 907 (0x38b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D7771, serialNumber=30C582B6799252BAAC3B381ABA4CC337ABF97DE3 Validity Not Before: May 31 01:09:13 2025 GMT Not After : Jun 7 01:09:13 2025 GMT Subject: CN=683a56b9-79e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:0c:38:fb:8b:22:52:ea:b0:78:5e:fc:41:a8: c4:a6:cc:20:7c:4a:4c:62:24:1d:1a:72:b5:e3:65: 6d:93:3c:12:2a:7b:f8:63:e3:a2:4e:d9:8f:eb:9e: 18:86:04:1a:15:60:5c:db:6c:77:8b:77:eb:93:96: dd:35:1d:84:23:cf:57:ee:ba:70:5e:ef:c7:ed:42: fc:71:59:64:ef:e3:aa:19:f1:dc:26:2f:f0:26:b4: 59:cf:41:e1:b7:5a:c8:51:f4:98:1b:eb:58:60:f1: 70:f2:2e:94:9a:33:74:85:66:23:18:1e:bc:03:e1: ef:b4:e7:69:fe:82:34:aa:37:0f:6a:54:34:5e:32: e1:62:85:41:5b:52:08:1a:6e:52:63:ac:33:ef:2f: ba:a3:11:cf:a1:c5:27:2a:d5:a8:ad:4f:8c:b3:72: 41:ff:6a:45:07:b6:45:fd:5c:e7:e6:11:3d:91:e4: b0:ec:85:fb:b1:17:e9:d6:dc:79:1e:ac:bc:5c:dd: e8:7a:d6:98:24:86:11:cc:3e:61:f9:9f:29:8c:78: fc:ec:34:f7:29:3e:0f:91:af:26:1d:7e:59:cf:55: bd:d9:c8:e4:92:b6:ca:88:09:77:4a:12:84:1b:0f: 7a:2c:45:52:a8:98:4e:c1:7b:6b:3c:25:4f:ee:ab: ea:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:28:BA:E8:18:2D:52:D0:1C:49:15:35:48:3F:9A:E7:0F:98:4D:30 X509v3 Authority Key Identifier: keyid:30:C5:82:B6:79:92:52:BA:AC:3B:38:1A:BA:4C:C3:37:AB:F9:7D:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D7771/55F2F0FEB17D11ECB9736241C4F9AE02/MMWCtnmSUrqsOzgaukzDN6v5feM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MMWCtnmSUrqsOzgaukzDN6v5feM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D7771/55F2F0FEB17D11ECB9736241C4F9AE02/MMWCtnmSUrqsOzgaukzDN6v5feM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:77:64:11:42:cf:6a:ca:bc:70:57:be:cb:68:57:36:79:0b: a6:f1:95:f0:2e:7a:da:46:68:84:2d:02:cd:ef:47:36:d8:0e: 58:58:e6:30:95:59:53:3e:ef:16:a7:52:bf:c9:41:a5:f3:8b: 89:c9:f8:6e:c7:7a:30:37:42:1c:2c:e3:a3:5a:98:28:5f:6d: 35:c7:d6:aa:a1:e0:6a:cd:ef:ef:82:b4:d0:46:b4:35:75:d9: a7:f6:ba:81:ce:e5:b2:53:5f:32:73:8e:42:0c:85:a6:b7:c0: 6d:0d:da:0b:35:08:80:63:6a:08:68:c4:8c:45:fe:25:c8:b4: d2:96:55:43:b4:cb:b7:44:b2:68:28:64:24:11:50:ac:38:13: a9:04:60:c8:01:76:6c:8e:5f:c9:05:d0:59:cd:e8:db:af:28: 58:e9:c0:58:6f:d0:16:97:dc:7b:3b:65:1e:bf:a1:39:aa:a9: 85:07:95:b5:d8:aa:16:f5:1e:dd:53:aa:f5:a8:27:90:1a:1f: f2:5f:a7:c6:ec:b8:bf:6f:8e:f5:da:14:2b:09:b3:50:5f:fd: 48:62:14:26:f1:d6:51:21:64:b3:c7:3f:3d:36:eb:f2:dc:7f: b8:e2:2c:6b:7b:fb:99:8b:47:90:f4:ff:eb:f3:9d:72:51:a4: b3:55:0e:b3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA4swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDc3NzExMTAvBgNVBAUTKDMwQzU4MkI2Nzk5MjUyQkFBQzNCMzgxQUJBNENDMzM3 QUJGOTdERTMwHhcNMjUwNTMxMDEwOTEzWhcNMjUwNjA3MDEwOTEzWjAYMRYwFAYD VQQDEw02ODNhNTZiOS03OWU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4gw4+4siUuqweF78QajEpswgfEpMYiQdGnK142VtkzwSKnv4Y+OiTtmP654Y hgQaFWBc22x3i3frk5bdNR2EI89X7rpwXu/H7UL8cVlk7+OqGfHcJi/wJrRZz0Hh t1rIUfSYG+tYYPFw8i6UmjN0hWYjGB68A+HvtOdp/oI0qjcPalQ0XjLhYoVBW1II Gm5SY6wz7y+6oxHPocUnKtWorU+Ms3JB/2pFB7ZF/Vzn5hE9keSw7IX7sRfp1tx5 Hqy8XN3oetaYJIYRzD5h+Z8pjHj87DT3KT4Pka8mHX5Zz1W92cjkkrbKiAl3ShKE Gw96LEVSqJhOwXtrPCVP7qvqTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDEouugY LVLQHEkVNUg/mucPmE0wMB8GA1UdIwQYMBaAFDDFgrZ5klK6rDs4GrpMwzer+X3j MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENzc3MS81NUYyRjBGRUIx N0QxMUVDQjk3MzYyNDFDNEY5QUUwMi9NTVdDdG5tU1VycXNPemdhdWt6RE42djVm ZU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01NV0N0bm1TVXJxc096Z2F1a3pETjZ2NWZlTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Nzc3MS81NUYyRjBGRUIxN0QxMUVDQjk3MzYyNDFDNEY5QUUwMi9NTVdDdG5tU1Vy cXNPemdhdWt6RE42djVmZU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA7d2QRQs9qyrxwV77LaFc2eQum8ZXwLnraRmiELQLN70c22A5YWOYw lVlTPu8Wp1K/yUGl84uJyfhux3owN0IcLOOjWpgoX201x9aqoeBqze/vgrTQRrQ1 ddmn9rqBzuWyU18yc45CDIWmt8BtDdoLNQiAY2oIaMSMRf4lyLTSllVDtMu3RLJo KGQkEVCsOBOpBGDIAXZsjl/JBdBZzejbryhY6cBYb9AWl9x7O2Uev6E5qqmFB5W1 2KoW9R7dU6r1qCeQGh/yX6fG7Li/b4712hQrCbNQX/1IYhQm8dZRIWSzxz89Nuvy 3H+44ixre/uZi0eQ9P/r851yUaSzVQ6z -----END CERTIFICATE-----Generated at Sat May 31 17:39:22 2025 by rpki-client