$ rpki-client -vvf rpki.apnic.net/member_repository/A91D82F4/936E59BE537D11EBB2BD7B53C4F9AE02/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.mft File: S-rsM3xuifJ5SpdE4W2RnJx5Ox4.mft (raw, json) Hash identifier: L1UBJQF/6uWVUBlpSaBH9qAlZd2P3ZlM6a6ox7kAhCk= Subject key identifier: CD:B9:88:96:B8:FB:3E:33:71:DD:29:0E:CF:E7:C6:63:BB:C2:2F:B5 Authority key identifier: 4B:EA:EC:33:7C:6E:89:F2:79:4A:97:44:E1:6D:91:9C:9C:79:3B:1E Certificate issuer: /CN=A91D82F4/serialNumber=4BEAEC337C6E89F2794A9744E16D919C9C793B1E Certificate serial: 06E5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D82F4/936E59BE537D11EBB2BD7B53C4F9AE02/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.mft Manifest number: 06DC Signing time: Fri 30 May 2025 22:12:55 +0000 Manifest this update: Fri 30 May 2025 22:12:55 +0000 Manifest next update: Fri 06 Jun 2025 22:12:55 +0000 Files and hashes: 1: S-rsM3xuifJ5SpdE4W2RnJx5Ox4.crl (hash: RbkwUo7v3jHQ+tdQ4h9Nq4Zf1Aw3qOwN3JaZlZr1s2Q=) 2: A2EF68E66EAD11EC8796A251C4F9AE02.roa (hash: hiz98+Tla2jui/7o4KW1a6oKm5a+tUfazFi0UQ7ozaI=) 3: 56617572537F11EB9C970658C4F9AE02.roa (hash: xS7amPwlmGL+CP12HQjnbonilF649h5RUnRZcUUg8FE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D82F4/936E59BE537D11EBB2BD7B53C4F9AE02/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.crl rsync://rpki.apnic.net/member_repository/A91D82F4/936E59BE537D11EBB2BD7B53C4F9AE02/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 22:12:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1765 (0x6e5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D82F4, serialNumber=4BEAEC337C6E89F2794A9744E16D919C9C793B1E Validity Not Before: May 30 22:12:55 2025 GMT Not After : Jun 6 22:12:55 2025 GMT Subject: CN=683a2d67-b920 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:2e:93:39:29:e9:5c:c5:6b:6f:e2:a4:c0:bc: 4a:48:f6:6d:9b:d1:dd:68:19:19:35:65:6d:6b:68: d2:e1:b5:2a:87:07:55:81:63:9d:57:ea:d6:a6:b8: 55:6f:52:60:49:ea:2a:d9:c7:ff:2b:b8:d2:a7:df: a5:cf:7b:4e:0a:58:b6:8a:15:15:de:d8:7c:49:d6: fd:37:35:80:17:0f:fe:87:66:5c:e0:81:e8:72:0e: 04:03:8a:df:3e:54:74:24:2b:ac:73:5e:2e:c5:b4: 18:e8:3a:a6:9c:57:ef:f2:03:ff:3a:e7:30:cf:bc: 6a:11:d9:e8:e1:81:96:0c:47:74:f0:86:28:08:fe: 9f:5a:59:cb:82:4a:98:5f:85:85:ad:4f:1a:4e:0e: dd:9a:7a:e7:d9:1a:43:5a:ac:24:18:cb:0b:84:25: 7b:f4:df:a2:dc:09:b3:2d:c7:30:28:38:4e:7d:94: 2e:58:09:50:c1:53:c4:40:c2:b0:bb:5c:79:ba:2a: a6:d5:88:1b:68:66:a9:65:58:97:50:5f:d3:71:7a: 20:55:cd:eb:63:59:d6:c7:9e:2c:af:55:21:ea:56: 31:62:fb:52:c8:01:2d:1e:24:38:c3:25:35:b8:7d: f8:52:6b:1f:f3:26:36:6a:ae:30:59:da:ed:a9:84: 55:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:B9:88:96:B8:FB:3E:33:71:DD:29:0E:CF:E7:C6:63:BB:C2:2F:B5 X509v3 Authority Key Identifier: keyid:4B:EA:EC:33:7C:6E:89:F2:79:4A:97:44:E1:6D:91:9C:9C:79:3B:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D82F4/936E59BE537D11EBB2BD7B53C4F9AE02/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D82F4/936E59BE537D11EBB2BD7B53C4F9AE02/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:e6:53:9f:f5:56:f7:7e:2b:62:31:0e:60:3c:33:2e:4b:c3: 88:08:c9:b8:40:1a:70:56:eb:8b:f9:16:ac:35:61:d8:32:43: 34:5c:dd:18:8e:a7:7a:cb:4f:67:96:a1:60:e9:d1:06:13:8e: e3:39:2e:49:63:e7:ba:31:e3:59:7c:91:2e:2f:45:d7:f5:dd: 01:24:59:da:69:1f:63:52:7c:d0:d7:b7:74:c6:64:31:4f:df: fb:c5:4a:99:65:93:28:53:22:d5:fd:8e:17:1f:77:0f:4a:42: b3:bb:9f:20:79:1a:b2:2b:94:12:f7:a2:a7:b1:f3:4b:d7:d4: da:c5:4c:d9:8d:41:45:7a:9b:d7:da:85:87:bb:e9:6d:74:8c: 09:52:04:1c:81:a5:82:a5:a3:95:33:a8:8b:20:67:78:e3:ef: c9:7e:83:c4:a0:9f:35:e9:a2:0f:3a:91:11:b9:6f:25:43:3e: cc:8b:90:2a:d1:04:8c:28:fe:e4:65:82:b0:27:f5:4c:c9:d9: 3f:a3:77:3b:d5:20:94:ed:44:2c:d6:76:a6:d9:de:29:62:02: 13:a2:72:79:42:61:e8:1a:56:a7:36:71:15:fc:6c:95:56:b9: 55:01:39:a3:b1:9b:36:84:9b:59:57:7e:2d:b3:50:f8:08:8d: ef:af:70:e5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBuUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDgyRjQxMTAvBgNVBAUTKDRCRUFFQzMzN0M2RTg5RjI3OTRBOTc0NEUxNkQ5MTlD OUM3OTNCMUUwHhcNMjUwNTMwMjIxMjU1WhcNMjUwNjA2MjIxMjU1WjAYMRYwFAYD VQQDEw02ODNhMmQ2Ny1iOTIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2C6TOSnpXMVrb+KkwLxKSPZtm9HdaBkZNWVta2jS4bUqhwdVgWOdV+rWprhV b1JgSeoq2cf/K7jSp9+lz3tOCli2ihUV3th8Sdb9NzWAFw/+h2Zc4IHocg4EA4rf PlR0JCusc14uxbQY6DqmnFfv8gP/Oucwz7xqEdno4YGWDEd08IYoCP6fWlnLgkqY X4WFrU8aTg7dmnrn2RpDWqwkGMsLhCV79N+i3AmzLccwKDhOfZQuWAlQwVPEQMKw u1x5uiqm1YgbaGapZViXUF/TcXogVc3rY1nWx54sr1Uh6lYxYvtSyAEtHiQ4wyU1 uH34Umsf8yY2aq4wWdrtqYRVkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM25iJa4 +z4zcd0pDs/nxmO7wi+1MB8GA1UdIwQYMBaAFEvq7DN8bonyeUqXROFtkZyceTse MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODJGNC85MzZFNTlCRTUz N0QxMUVCQjJCRDdCNTNDNEY5QUUwMi9TLXJzTTN4dWlmSjVTcGRFNFcyUm5KeDVP eDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1MtcnNNM3h1aWZKNVNwZEU0VzJSbkp4NU94NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE ODJGNC85MzZFNTlCRTUzN0QxMUVCQjJCRDdCNTNDNEY5QUUwMi9TLXJzTTN4dWlm SjVTcGRFNFcyUm5KeDVPeDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQ5lOf9Vb3fitiMQ5gPDMuS8OICMm4QBpwVuuL+RasNWHYMkM0XN0Y jqd6y09nlqFg6dEGE47jOS5JY+e6MeNZfJEuL0XX9d0BJFnaaR9jUnzQ17d0xmQx T9/7xUqZZZMoUyLV/Y4XH3cPSkKzu58geRqyK5QS96KnsfNL19TaxUzZjUFFepvX 2oWHu+ltdIwJUgQcgaWCpaOVM6iLIGd44+/JfoPEoJ816aIPOpERuW8lQz7Mi5Aq 0QSMKP7kZYKwJ/VMydk/o3c71SCU7UQs1nam2d4pYgITonJ5QmHoGlanNnEV/GyV VrlVATmjsZs2hJtZV34ts1D4CI3vr3Dl -----END CERTIFICATE-----Generated at Sat May 31 17:51:39 2025 by rpki-client