$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8DD9/A387CF8E2FD211F0A9AC5E2FC4F9AE02/f_yAVlB0LOpQmG0Rq8tz4PVQWPk.mft File: f_yAVlB0LOpQmG0Rq8tz4PVQWPk.mft (raw, json) Hash identifier: YMcaq2ow8Hq+RyfgtIWqcjODrt3hl7OYWCDo+9nTD+s= Subject key identifier: 65:AA:13:54:57:F5:A3:88:8C:CB:93:30:6F:60:25:E4:DF:95:CD:67 Authority key identifier: 7F:FC:80:56:50:74:2C:EA:50:98:6D:11:AB:CB:73:E0:F5:50:58:F9 Certificate issuer: /CN=A91D8DD9/serialNumber=7FFC805650742CEA50986D11ABCB73E0F55058F9 Certificate serial: 0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_yAVlB0LOpQmG0Rq8tz4PVQWPk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D8DD9/A387CF8E2FD211F0A9AC5E2FC4F9AE02/f_yAVlB0LOpQmG0Rq8tz4PVQWPk.mft Manifest number: 09 Signing time: Sat 31 May 2025 07:40:37 +0000 Manifest this update: Sat 31 May 2025 07:40:36 +0000 Manifest next update: Sat 07 Jun 2025 07:40:36 +0000 Files and hashes: 1: f_yAVlB0LOpQmG0Rq8tz4PVQWPk.crl (hash: n40j4SfWJJj2g+KuUXLy7cQAo37CcT+a7rZtvU+8Css=) 2: 9BCD7C8E2FD311F0A93F2250C4F9AE02.roa (hash: vDWq5W9RCH51uCc7RR26CZCfoA3jrfAEXK2LnEYPwlQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D8DD9/A387CF8E2FD211F0A9AC5E2FC4F9AE02/f_yAVlB0LOpQmG0Rq8tz4PVQWPk.crl rsync://rpki.apnic.net/member_repository/A91D8DD9/A387CF8E2FD211F0A9AC5E2FC4F9AE02/f_yAVlB0LOpQmG0Rq8tz4PVQWPk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_yAVlB0LOpQmG0Rq8tz4PVQWPk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 07:40:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10 (0xa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D8DD9, serialNumber=7FFC805650742CEA50986D11ABCB73E0F55058F9 Validity Not Before: May 31 07:40:36 2025 GMT Not After : Jun 7 07:40:36 2025 GMT Subject: CN=683ab275-fdda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:82:ac:2f:6c:bb:29:76:17:88:f8:0d:d4:06: 16:d2:0d:8b:6b:69:41:09:16:cd:87:b5:33:bb:4f: ff:43:e3:b6:73:a1:8e:0f:15:1c:30:5e:c5:72:fd: b1:16:31:44:dc:01:33:a9:9f:07:b1:86:5d:8b:da: ed:cc:43:9d:ba:42:44:a1:81:4a:be:9a:95:e7:73: c8:7b:33:e7:43:02:03:00:7f:c0:84:55:f1:dc:b2: b6:f8:67:c2:04:40:77:a8:23:2c:c5:c6:7d:50:9d: 53:ed:71:7f:33:8d:42:94:4b:7b:4f:f1:5d:18:b4: a4:72:4d:2d:4a:87:9e:52:22:51:7a:da:af:ee:97: 17:ff:03:45:5e:cd:39:d0:67:21:c1:71:ff:6f:8a: 5e:37:2d:a9:c8:b2:7a:da:3d:84:44:c9:26:a9:08: 29:8e:64:42:6c:d7:ac:a8:37:b7:9a:bb:04:3d:2a: b9:d7:41:6b:21:2c:2a:b8:50:0c:d7:b8:c7:b9:22: 32:07:4c:53:ce:cc:b9:fd:fe:aa:c4:67:c1:eb:31: 04:92:bb:d7:93:d6:a2:e9:2e:74:4f:d8:70:a2:f8: 74:ec:12:4b:3f:f8:e6:80:5d:df:66:f9:d3:6e:6a: 1f:b1:45:34:a5:35:37:b7:b5:8a:37:29:87:ef:08: 2a:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:AA:13:54:57:F5:A3:88:8C:CB:93:30:6F:60:25:E4:DF:95:CD:67 X509v3 Authority Key Identifier: keyid:7F:FC:80:56:50:74:2C:EA:50:98:6D:11:AB:CB:73:E0:F5:50:58:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D8DD9/A387CF8E2FD211F0A9AC5E2FC4F9AE02/f_yAVlB0LOpQmG0Rq8tz4PVQWPk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_yAVlB0LOpQmG0Rq8tz4PVQWPk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8DD9/A387CF8E2FD211F0A9AC5E2FC4F9AE02/f_yAVlB0LOpQmG0Rq8tz4PVQWPk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:45:32:c8:ca:44:4e:45:c9:f5:cb:7b:86:a0:4a:7e:85:26: 67:f6:6f:4d:c0:a6:e6:6e:af:5e:e5:3f:84:aa:53:7a:6a:4b: b7:0a:3a:6a:e3:16:5e:db:d0:5c:a5:1d:fd:09:18:0a:a3:1b: da:3b:b2:ef:ae:ac:3f:40:85:1b:02:54:85:9c:4f:cf:6f:ed: 5a:ec:c7:72:e8:01:ba:19:af:13:45:e4:92:35:69:7a:97:7c: 06:e5:56:63:94:8f:30:02:ca:5f:a4:a9:7f:bb:09:96:df:c2: 94:ab:af:96:03:89:00:c9:45:4a:c3:e9:52:6e:b0:05:af:26: eb:7e:4d:7b:f6:e8:f6:20:6e:f4:9f:8a:b9:98:ee:ea:73:c5: f8:10:a0:5a:55:77:b0:61:65:e2:fd:9c:54:2f:53:eb:d6:9d: 95:10:c8:c5:c6:fc:19:57:d7:d5:34:49:a3:2f:29:70:a6:80: 96:6f:a0:5d:c4:77:81:50:bf:b6:f6:5a:e6:ba:a0:13:0c:b5: 39:eb:83:7f:2a:40:75:59:dc:99:bc:8a:d2:2e:96:4a:85:99: 0c:37:11:79:89:3b:50:a3:ed:fb:4e:ff:18:9a:1c:d7:a9:c9: 7d:7c:d3:a2:24:90:cb:9e:12:de:a9:20:a2:db:38:26:34:12: 4c:56:35:46 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE OEREOTExMC8GA1UEBRMoN0ZGQzgwNTY1MDc0MkNFQTUwOTg2RDExQUJDQjczRTBG NTUwNThGOTAeFw0yNTA1MzEwNzQwMzZaFw0yNTA2MDcwNzQwMzZaMBgxFjAUBgNV BAMTDTY4M2FiMjc1LWZkZGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDwgqwvbLspdheI+A3UBhbSDYtraUEJFs2HtTO7T/9D47ZzoY4PFRwwXsVy/bEW MUTcATOpnwexhl2L2u3MQ526QkShgUq+mpXnc8h7M+dDAgMAf8CEVfHcsrb4Z8IE QHeoIyzFxn1QnVPtcX8zjUKUS3tP8V0YtKRyTS1Kh55SIlF62q/ulxf/A0VezTnQ ZyHBcf9vil43LanIsnraPYREySapCCmOZEJs16yoN7eauwQ9KrnXQWshLCq4UAzX uMe5IjIHTFPOzLn9/qrEZ8HrMQSSu9eT1qLpLnRP2HCi+HTsEks/+OaAXd9m+dNu ah+xRTSlNTe3tYo3KYfvCCpxAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUZaoTVFf1 o4iMy5Mwb2Al5N+VzWcwHwYDVR0jBBgwFoAUf/yAVlB0LOpQmG0Rq8tz4PVQWPkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ4REQ5L0EzODdDRjhFMkZE MjExRjBBOUFDNUUyRkM0RjlBRTAyL2ZfeUFWbEIwTE9wUW1HMFJxOHR6NFBWUVdQ ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZl95QVZsQjBMT3BRbUcwUnE4dHo0UFZRV1BrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ4 REQ5L0EzODdDRjhFMkZEMjExRjBBOUFDNUUyRkM0RjlBRTAyL2ZfeUFWbEIwTE9w UW1HMFJxOHR6NFBWUVdQay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAANFMsjKRE5FyfXLe4agSn6FJmf2b03ApuZur17lP4SqU3pqS7cKOmrj Fl7b0FylHf0JGAqjG9o7su+urD9AhRsCVIWcT89v7Vrsx3LoAboZrxNF5JI1aXqX fAblVmOUjzACyl+kqX+7CZbfwpSrr5YDiQDJRUrD6VJusAWvJut+TXv26PYgbvSf irmY7upzxfgQoFpVd7BhZeL9nFQvU+vWnZUQyMXG/BlX19U0SaMvKXCmgJZvoF3E d4FQv7b2Wua6oBMMtTnrg38qQHVZ3Jm8itIulkqFmQw3EXmJO1Cj7ftO/xiaHNep yX1806IkkMueEt6pIKLbOCY0EkxWNUY= -----END CERTIFICATE-----Generated at Sat May 31 16:28:45 2025 by rpki-client