$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC24F/3C130576671011EE9EC9A127C4F9AE02/0m4iMGIY2pbDAvvqrJQ3J1sexu0.mft File: 0m4iMGIY2pbDAvvqrJQ3J1sexu0.mft (raw, json) Hash identifier: 4Wfv+LJYy6xZiNrzzzCmm0Vmus/MhSKC6Wi1oqjVT8Y= Subject key identifier: 33:5C:FC:8B:F7:47:68:8F:A2:6B:31:91:0C:DD:79:9B:87:9F:76:60 Authority key identifier: D2:6E:22:30:62:18:DA:96:C3:02:FB:EA:AC:94:37:27:5B:1E:C6:ED Certificate issuer: /CN=A91DC24F/serialNumber=D26E22306218DA96C302FBEAAC9437275B1EC6ED Certificate serial: 0140 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0m4iMGIY2pbDAvvqrJQ3J1sexu0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC24F/3C130576671011EE9EC9A127C4F9AE02/0m4iMGIY2pbDAvvqrJQ3J1sexu0.mft Manifest number: 0138 Signing time: Sat 31 May 2025 04:08:39 +0000 Manifest this update: Sat 31 May 2025 04:08:39 +0000 Manifest next update: Sat 07 Jun 2025 04:08:39 +0000 Files and hashes: 1: 0m4iMGIY2pbDAvvqrJQ3J1sexu0.crl (hash: s4mX50VE/JoyRV1zVE3XeqxK6IaUSf5EX+7I/yEJvgo=) 2: E4A5F20468D011EE8509F75CC4F9AE02.roa (hash: JQKbNYMf/zVARnkpO4HdrpLHL11BuAmo0S1Bwvh58kQ=) 3: E50B556868D011EE8509F75CC4F9AE02.roa (hash: 15Ef3WoCrFkSaZWsvVqBxZqSnhk/RC+N8roeKpk66Po=) 4: E42B360468D011EE8509F75CC4F9AE02.roa (hash: 3NF/WOhgj9HD4AOf9A4AyqHhiWaUzMkr0bQxzyCSlus=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC24F/3C130576671011EE9EC9A127C4F9AE02/0m4iMGIY2pbDAvvqrJQ3J1sexu0.crl rsync://rpki.apnic.net/member_repository/A91DC24F/3C130576671011EE9EC9A127C4F9AE02/0m4iMGIY2pbDAvvqrJQ3J1sexu0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0m4iMGIY2pbDAvvqrJQ3J1sexu0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 04:08:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 320 (0x140) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC24F, serialNumber=D26E22306218DA96C302FBEAAC9437275B1EC6ED Validity Not Before: May 31 04:08:39 2025 GMT Not After : Jun 7 04:08:39 2025 GMT Subject: CN=683a80c7-0317 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:bc:ea:98:32:28:29:f8:b8:7e:c5:e2:41:f2: 31:92:b1:3e:8e:44:54:5a:84:93:86:4b:c0:60:f1: e1:2f:60:cb:24:b5:60:75:a2:31:80:a6:d5:b4:b4: d5:40:5a:24:ea:db:c2:c3:dc:81:05:ef:61:0d:fe: 26:75:4e:7d:21:66:b4:f4:a6:5a:79:f2:db:cc:66: 3a:67:52:f6:ec:ec:42:bf:9f:8e:12:5e:aa:20:a8: bc:6a:97:e8:00:56:32:14:c8:c5:e4:b8:dc:63:0f: 3a:d5:22:5f:e7:7d:d1:55:b0:5d:0e:8c:b4:cf:9b: 1a:2f:51:a6:e9:08:46:7e:99:3f:63:76:01:a8:df: 5f:4a:89:ed:59:4f:89:bb:3b:67:31:d9:de:84:54: 79:0a:7f:d6:52:4a:7d:93:fe:d9:48:58:76:8b:10: 41:9c:3c:62:c1:f1:74:08:54:08:0f:96:4f:19:e0: a5:30:7a:ca:0a:97:1d:bd:9c:83:1d:5d:4d:8b:e9: a3:1f:86:44:78:c9:df:dc:77:c8:6f:8f:59:23:0b: bf:62:d6:a6:83:c6:d0:cd:87:e3:de:88:6b:e4:2e: 59:39:d8:56:a2:b0:40:e7:80:91:f6:29:5d:f6:ab: 53:9c:9d:b5:f9:bc:00:ea:32:7d:99:85:34:e3:3f: e7:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:5C:FC:8B:F7:47:68:8F:A2:6B:31:91:0C:DD:79:9B:87:9F:76:60 X509v3 Authority Key Identifier: keyid:D2:6E:22:30:62:18:DA:96:C3:02:FB:EA:AC:94:37:27:5B:1E:C6:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC24F/3C130576671011EE9EC9A127C4F9AE02/0m4iMGIY2pbDAvvqrJQ3J1sexu0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0m4iMGIY2pbDAvvqrJQ3J1sexu0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC24F/3C130576671011EE9EC9A127C4F9AE02/0m4iMGIY2pbDAvvqrJQ3J1sexu0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:0b:a6:09:53:12:74:95:15:b7:c4:ba:fa:59:d3:bb:a1:2e: d3:53:6f:0f:82:08:38:05:00:bd:ad:c3:79:de:9c:a9:9c:93: 25:59:c5:84:4b:0e:92:84:e5:31:59:56:01:f4:4d:15:bb:c0: 63:c0:69:2c:e1:e3:00:14:be:b0:50:e5:fa:bd:9c:4d:80:40: e0:f3:5d:6a:4a:79:07:44:e8:a3:c7:56:37:a6:7c:d9:dc:1b: 32:33:43:1b:68:b7:73:6c:a9:7a:26:40:f3:09:1f:28:e2:4f: aa:4f:e3:4e:45:f4:7a:97:cc:46:6f:b5:71:b1:d5:55:fb:b6: fc:e7:62:98:0c:d1:40:1d:aa:8f:e4:bb:27:74:20:e4:d2:8a: 72:b2:20:ee:f5:ba:30:ed:fd:b6:00:26:07:1f:74:bb:0f:d6: 9c:7b:4a:c1:d8:42:b7:76:0c:c2:2f:1e:29:4a:85:3a:a4:de: 9f:de:65:1b:1c:e2:eb:77:3a:59:3d:74:b0:a0:ac:90:d4:a8: df:7d:19:67:c3:83:d6:e7:01:a0:66:2e:a1:ef:f7:6d:69:3b: 9d:5c:de:e7:90:86:a8:d9:68:36:e0:1f:df:ce:3b:9e:d4:38: 57:e7:28:f6:d7:8e:fb:56:67:16:e8:aa:cc:03:ad:eb:51:b3: 78:ab:52:3b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REMyNEYxMTAvBgNVBAUTKEQyNkUyMjMwNjIxOERBOTZDMzAyRkJFQUFDOTQzNzI3 NUIxRUM2RUQwHhcNMjUwNTMxMDQwODM5WhcNMjUwNjA3MDQwODM5WjAYMRYwFAYD VQQDEw02ODNhODBjNy0wMzE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmbzqmDIoKfi4fsXiQfIxkrE+jkRUWoSThkvAYPHhL2DLJLVgdaIxgKbVtLTV QFok6tvCw9yBBe9hDf4mdU59IWa09KZaefLbzGY6Z1L27OxCv5+OEl6qIKi8apfo AFYyFMjF5LjcYw861SJf533RVbBdDoy0z5saL1Gm6QhGfpk/Y3YBqN9fSontWU+J uztnMdnehFR5Cn/WUkp9k/7ZSFh2ixBBnDxiwfF0CFQID5ZPGeClMHrKCpcdvZyD HV1Ni+mjH4ZEeMnf3HfIb49ZIwu/Ytamg8bQzYfj3ohr5C5ZOdhWorBA54CR9ild 9qtTnJ21+bwA6jJ9mYU04z/n9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDNc/Iv3 R2iPomsxkQzdeZuHn3ZgMB8GA1UdIwQYMBaAFNJuIjBiGNqWwwL76qyUNydbHsbt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzI0Ri8zQzEzMDU3NjY3 MTAxMUVFOUVDOUExMjdDNEY5QUUwMi8wbTRpTUdJWTJwYkRBdnZxckpRM0oxc2V4 dTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBtNGlNR0lZMnBiREF2dnFySlEzSjFzZXh1MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QzI0Ri8zQzEzMDU3NjY3MTAxMUVFOUVDOUExMjdDNEY5QUUwMi8wbTRpTUdJWTJw YkRBdnZxckpRM0oxc2V4dTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAaC6YJUxJ0lRW3xLr6WdO7oS7TU28Pggg4BQC9rcN53pypnJMlWcWE Sw6ShOUxWVYB9E0Vu8BjwGks4eMAFL6wUOX6vZxNgEDg811qSnkHROijx1Y3pnzZ 3BsyM0MbaLdzbKl6JkDzCR8o4k+qT+NORfR6l8xGb7VxsdVV+7b852KYDNFAHaqP 5LsndCDk0opysiDu9bow7f22ACYHH3S7D9ace0rB2EK3dgzCLx4pSoU6pN6f3mUb HOLrdzpZPXSwoKyQ1KjffRlnw4PW5wGgZi6h7/dtaTudXN7nkIao2Wg24B/fzjue 1DhX5yj21477VmcW6KrMA63rUbN4q1I7 -----END CERTIFICATE-----Generated at Sat May 31 17:46:26 2025 by rpki-client