$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC33B/B4C9FE9206F511E89618F42FC4F9AE02/S0Nd1JrBEcPde6D08IaF8hZRWFk.mft File: S0Nd1JrBEcPde6D08IaF8hZRWFk.mft (raw, json) Hash identifier: zOVHppAWhcNMdDY4J7Ou+q0CluOWeurvZsLsYrV6TDs= Subject key identifier: 79:AE:DC:82:A7:03:D9:19:C9:E3:1F:FE:DA:EE:7C:16:05:FC:B1:66 Authority key identifier: 4B:43:5D:D4:9A:C1:11:C3:DD:7B:A0:F4:F0:86:85:F2:16:51:58:59 Certificate issuer: /CN=A91DC33B/serialNumber=4B435DD49AC111C3DD7BA0F4F08685F216515859 Certificate serial: 166E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S0Nd1JrBEcPde6D08IaF8hZRWFk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC33B/B4C9FE9206F511E89618F42FC4F9AE02/S0Nd1JrBEcPde6D08IaF8hZRWFk.mft Manifest number: 1667 Signing time: Fri 30 May 2025 16:53:14 +0000 Manifest this update: Fri 30 May 2025 16:53:14 +0000 Manifest next update: Fri 06 Jun 2025 16:53:14 +0000 Files and hashes: 1: S0Nd1JrBEcPde6D08IaF8hZRWFk.crl (hash: S5kv5/jTidbTYwsRNgZKMAwUNdaqycC0c4FpDwGmuN0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC33B/B4C9FE9206F511E89618F42FC4F9AE02/S0Nd1JrBEcPde6D08IaF8hZRWFk.crl rsync://rpki.apnic.net/member_repository/A91DC33B/B4C9FE9206F511E89618F42FC4F9AE02/S0Nd1JrBEcPde6D08IaF8hZRWFk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S0Nd1JrBEcPde6D08IaF8hZRWFk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 16:53:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5742 (0x166e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC33B, serialNumber=4B435DD49AC111C3DD7BA0F4F08685F216515859 Validity Not Before: May 30 16:53:14 2025 GMT Not After : Jun 6 16:53:14 2025 GMT Subject: CN=6839e27a-8cde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:e6:83:2f:39:5b:52:1d:47:94:4e:46:b4:f6: 6b:43:21:f1:01:d9:7d:5b:21:53:7c:db:c4:94:86: 03:5a:26:da:8f:a6:79:ef:5e:b1:49:bf:3b:6f:2e: 2b:cf:02:9e:cb:23:88:54:68:45:0c:06:15:5d:45: e4:af:fd:9b:56:9a:fa:cf:5e:8f:1f:89:84:17:33: ad:f1:95:23:19:a8:58:6f:9a:d8:e3:f7:9f:da:ce: db:0b:52:21:cd:02:c9:24:f6:6d:6c:6b:54:47:df: 6a:d8:98:bc:52:e9:c3:bf:08:88:31:8b:75:d1:f7: c9:fb:9f:81:79:0c:6d:93:79:8c:64:e8:53:8c:16: 5e:eb:42:79:cf:7e:28:2b:3f:c2:a4:06:c9:e1:a1: 8d:fd:72:a3:19:ec:39:5e:2e:e8:36:70:84:0a:d8: 96:5a:de:a1:b7:cb:c3:f0:29:37:44:96:d7:b3:3b: e2:85:c7:a3:69:c0:b5:7c:c5:e4:c3:12:1c:66:8f: 99:01:b8:54:e8:4a:c8:5b:04:94:78:5f:d6:d9:44: 5c:19:a4:6d:19:49:19:72:8b:06:a7:e6:22:7c:07: 0f:1e:98:72:09:84:6b:34:72:87:f5:c3:16:f3:92: 0c:31:79:e0:7e:cb:62:74:29:36:4c:0c:75:4a:aa: f3:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:AE:DC:82:A7:03:D9:19:C9:E3:1F:FE:DA:EE:7C:16:05:FC:B1:66 X509v3 Authority Key Identifier: keyid:4B:43:5D:D4:9A:C1:11:C3:DD:7B:A0:F4:F0:86:85:F2:16:51:58:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC33B/B4C9FE9206F511E89618F42FC4F9AE02/S0Nd1JrBEcPde6D08IaF8hZRWFk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S0Nd1JrBEcPde6D08IaF8hZRWFk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC33B/B4C9FE9206F511E89618F42FC4F9AE02/S0Nd1JrBEcPde6D08IaF8hZRWFk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:a2:d6:b1:12:34:f3:1c:4b:db:6f:82:6e:b8:d3:83:64:2c: ef:29:d7:f9:06:88:28:91:72:61:f2:8e:72:76:e4:da:12:b7: b3:c8:6f:12:2b:0f:55:8b:1e:cd:6c:50:35:4e:42:f9:b1:60: c3:34:ea:2e:13:a8:c8:39:3e:f6:da:1c:56:8a:2f:33:40:1f: 28:45:0f:a4:47:3e:c5:aa:94:4b:1f:7e:c0:a0:dc:6c:1c:e6: f9:89:cd:e2:3e:75:84:a4:9c:eb:bb:d5:78:60:b9:23:cf:85: 01:f5:3a:49:bc:f4:ca:2f:c5:f9:4d:40:ee:f7:4b:a3:43:3e: e9:28:79:41:f5:e4:a6:fc:7a:13:58:22:56:f3:33:8a:4d:23: 22:c1:d4:02:d4:4b:3a:ad:95:09:3c:08:25:fa:1e:f4:7d:b7: 52:08:eb:d6:07:ac:c5:fb:d4:75:7c:1c:f2:31:dd:27:c4:b7: e9:e6:a2:76:1b:37:a6:98:db:4c:d5:8c:42:c3:8d:60:68:35: 3f:6c:78:a0:09:59:38:0f:d1:98:16:7f:1a:8d:bd:82:f5:25: 75:43:7c:d3:0f:ff:38:4b:cb:b5:b7:45:71:cf:1a:62:60:ae: d0:92:f9:09:1e:7a:bc:39:97:9b:e7:a3:ff:42:7b:ac:cb:8a: 2b:ce:05:5d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFm4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REMzM0IxMTAvBgNVBAUTKDRCNDM1REQ0OUFDMTExQzNERDdCQTBGNEYwODY4NUYy MTY1MTU4NTkwHhcNMjUwNTMwMTY1MzE0WhcNMjUwNjA2MTY1MzE0WjAYMRYwFAYD VQQDEw02ODM5ZTI3YS04Y2RlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmOaDLzlbUh1HlE5GtPZrQyHxAdl9WyFTfNvElIYDWibaj6Z5716xSb87by4r zwKeyyOIVGhFDAYVXUXkr/2bVpr6z16PH4mEFzOt8ZUjGahYb5rY4/ef2s7bC1Ih zQLJJPZtbGtUR99q2Ji8UunDvwiIMYt10ffJ+5+BeQxtk3mMZOhTjBZe60J5z34o Kz/CpAbJ4aGN/XKjGew5Xi7oNnCECtiWWt6ht8vD8Ck3RJbXszvihcejacC1fMXk wxIcZo+ZAbhU6ErIWwSUeF/W2URcGaRtGUkZcosGp+YifAcPHphyCYRrNHKH9cMW 85IMMXngfstidCk2TAx1SqrzKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHmu3IKn A9kZyeMf/trufBYF/LFmMB8GA1UdIwQYMBaAFEtDXdSawRHD3Xug9PCGhfIWUVhZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzMzQi9CNEM5RkU5MjA2 RjUxMUU4OTYxOEY0MkZDNEY5QUUwMi9TME5kMUpyQkVjUGRlNkQwOElhRjhoWlJX RmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1MwTmQxSnJCRWNQZGU2RDA4SWFGOGhaUldGay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QzMzQi9CNEM5RkU5MjA2RjUxMUU4OTYxOEY0MkZDNEY5QUUwMi9TME5kMUpyQkVj UGRlNkQwOElhRjhoWlJXRmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBFotaxEjTzHEvbb4JuuNODZCzvKdf5BogokXJh8o5yduTaErezyG8S Kw9Vix7NbFA1TkL5sWDDNOouE6jIOT722hxWii8zQB8oRQ+kRz7FqpRLH37AoNxs HOb5ic3iPnWEpJzru9V4YLkjz4UB9TpJvPTKL8X5TUDu90ujQz7pKHlB9eSm/HoT WCJW8zOKTSMiwdQC1Es6rZUJPAgl+h70fbdSCOvWB6zF+9R1fBzyMd0nxLfp5qJ2 GzemmNtM1YxCw41gaDU/bHigCVk4D9GYFn8ajb2C9SV1Q3zTD/84S8u1t0Vxzxpi YK7QkvkJHnq8OZeb56P/Qnusy4orzgVd -----END CERTIFICATE-----Generated at Sat May 31 16:25:53 2025 by rpki-client