$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDDED/79CC01669DF211ED95949F57C4F9AE02/90n3b5KhbSqHFDf3LIbQ0F3imtU.mft File: 90n3b5KhbSqHFDf3LIbQ0F3imtU.mft (raw, json) Hash identifier: lTXSUmXc1OikL3c/Vaeb5e8eW+GNZSLgLanxwt1LwCU= Subject key identifier: 8F:D0:8E:C5:35:E2:66:D9:E9:AD:65:B6:2D:C5:50:E6:BC:7B:18:1D Authority key identifier: F7:49:F7:6F:92:A1:6D:2A:87:14:37:F7:2C:86:D0:D0:5D:E2:9A:D5 Certificate issuer: /CN=A91DDDED/serialNumber=F749F76F92A16D2A871437F72C86D0D05DE29AD5 Certificate serial: 01B8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/90n3b5KhbSqHFDf3LIbQ0F3imtU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DDDED/79CC01669DF211ED95949F57C4F9AE02/90n3b5KhbSqHFDf3LIbQ0F3imtU.mft Manifest number: 01B5 Signing time: Sat 31 May 2025 02:50:29 +0000 Manifest this update: Sat 31 May 2025 02:50:28 +0000 Manifest next update: Sat 07 Jun 2025 02:50:28 +0000 Files and hashes: 1: 90n3b5KhbSqHFDf3LIbQ0F3imtU.crl (hash: SCHmegyUtgxdXp9+4lFScxz1L6917ls7d7T9Z791WxE=) 2: 69B6C14A9DF611ED8D51D272C4F9AE02.roa (hash: 54OZtiC3lpeukDDzmCUDt697LQ+SuKtxGSa0nhIWHEA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DDDED/79CC01669DF211ED95949F57C4F9AE02/90n3b5KhbSqHFDf3LIbQ0F3imtU.crl rsync://rpki.apnic.net/member_repository/A91DDDED/79CC01669DF211ED95949F57C4F9AE02/90n3b5KhbSqHFDf3LIbQ0F3imtU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/90n3b5KhbSqHFDf3LIbQ0F3imtU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 02:50:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 440 (0x1b8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DDDED, serialNumber=F749F76F92A16D2A871437F72C86D0D05DE29AD5 Validity Not Before: May 31 02:50:28 2025 GMT Not After : Jun 7 02:50:28 2025 GMT Subject: CN=683a6e74-de5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:50:67:31:f2:45:a9:b9:59:77:48:8f:96:c8: 5a:80:a9:c1:09:de:b1:1e:50:61:16:8a:c7:de:35: f3:83:f2:54:6e:ac:fe:cc:38:33:12:6b:1d:20:74: 08:05:64:5f:c4:20:c2:7a:77:c9:86:22:25:83:3f: 35:a1:16:cb:ac:8d:7c:5a:89:a2:ef:51:f2:5f:4e: 5a:96:a5:d3:a2:04:18:50:2d:a0:4c:67:e2:aa:9f: c6:8b:45:8b:40:4b:42:4a:cc:9b:c3:60:26:17:58: 5a:ce:fa:9f:1a:12:fb:d6:47:25:34:41:3c:aa:4a: ba:48:1f:5f:ca:38:22:76:61:b5:1e:f5:08:34:5b: 43:37:9f:5f:ca:8e:67:55:86:13:4d:f6:a4:4f:94: 4d:b0:e2:0c:f0:b2:cc:12:43:9e:18:a5:43:95:43: e6:32:f7:b0:b6:e3:5b:08:97:3c:30:ff:a9:16:42: 0f:0b:29:da:5f:30:63:a6:dd:ae:a0:a6:3a:0a:c9: d8:76:51:39:18:67:99:60:e7:f7:93:bf:50:a9:d7: fb:a7:73:8b:39:69:15:da:3c:8e:af:22:59:c7:cf: 19:9a:a2:42:be:f4:77:e7:44:0d:dc:0d:61:19:e5: 23:20:6d:97:e2:65:78:79:ec:ea:05:77:63:d5:91: 9e:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:D0:8E:C5:35:E2:66:D9:E9:AD:65:B6:2D:C5:50:E6:BC:7B:18:1D X509v3 Authority Key Identifier: keyid:F7:49:F7:6F:92:A1:6D:2A:87:14:37:F7:2C:86:D0:D0:5D:E2:9A:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DDDED/79CC01669DF211ED95949F57C4F9AE02/90n3b5KhbSqHFDf3LIbQ0F3imtU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/90n3b5KhbSqHFDf3LIbQ0F3imtU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDDED/79CC01669DF211ED95949F57C4F9AE02/90n3b5KhbSqHFDf3LIbQ0F3imtU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:64:f0:f2:7c:21:3c:21:62:8c:b9:03:6f:19:35:25:4d:29: a0:10:d8:26:bd:a8:a0:cd:2f:43:36:45:94:ec:30:f9:94:5b: 00:ed:c1:20:79:70:d4:40:9a:ff:a1:4f:c0:8e:15:de:e3:e8: 4f:0f:2e:6f:c6:d8:bd:47:e3:b6:f9:59:da:26:7c:4f:18:ef: 15:79:ab:c6:74:b4:1b:4c:73:62:88:c3:a5:72:de:d4:40:47: 8d:50:56:04:40:04:97:7d:5f:0a:58:3d:37:f4:63:7c:ed:04: 96:88:6a:fb:83:4c:63:1c:73:7e:a8:ab:51:8a:25:2d:79:01: 57:58:07:9e:af:f5:80:9e:47:63:be:9a:27:98:25:af:0a:7f: dc:d8:68:52:6a:c5:96:a9:35:ce:24:53:f5:29:87:30:e3:32: 78:55:a1:1b:91:c4:9e:11:cc:16:41:05:b2:50:3a:a7:69:2b: 95:5d:ce:30:1e:99:1b:98:b5:6e:f7:78:2b:57:5d:f5:ad:4b: 73:08:81:7d:30:b7:ce:d4:cd:6c:96:ee:b8:f6:8a:c0:6b:48: c1:f4:aa:84:79:32:87:dd:d8:dc:ef:6f:17:b1:50:af:18:10: 52:e4:55:2c:c1:08:a6:c0:93:b4:4b:bf:d2:4f:8f:c9:95:5e: 09:95:2c:5f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RERERUQxMTAvBgNVBAUTKEY3NDlGNzZGOTJBMTZEMkE4NzE0MzdGNzJDODZEMEQw NURFMjlBRDUwHhcNMjUwNTMxMDI1MDI4WhcNMjUwNjA3MDI1MDI4WjAYMRYwFAYD VQQDEw02ODNhNmU3NC1kZTVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1FBnMfJFqblZd0iPlshagKnBCd6xHlBhForH3jXzg/JUbqz+zDgzEmsdIHQI BWRfxCDCenfJhiIlgz81oRbLrI18Womi71HyX05alqXTogQYUC2gTGfiqp/Gi0WL QEtCSsybw2AmF1hazvqfGhL71kclNEE8qkq6SB9fyjgidmG1HvUINFtDN59fyo5n VYYTTfakT5RNsOIM8LLMEkOeGKVDlUPmMvewtuNbCJc8MP+pFkIPCynaXzBjpt2u oKY6CsnYdlE5GGeZYOf3k79Qqdf7p3OLOWkV2jyOryJZx88ZmqJCvvR350QN3A1h GeUjIG2X4mV4eezqBXdj1ZGexQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI/QjsU1 4mbZ6a1lti3FUOa8exgdMB8GA1UdIwQYMBaAFPdJ92+SoW0qhxQ39yyG0NBd4prV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERERFRC83OUNDMDE2NjlE RjIxMUVEOTU5NDlGNTdDNEY5QUUwMi85MG4zYjVLaGJTcUhGRGYzTEliUTBGM2lt dFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzkwbjNiNUtoYlNxSEZEZjNMSWJRMEYzaW10VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RERFRC83OUNDMDE2NjlERjIxMUVEOTU5NDlGNTdDNEY5QUUwMi85MG4zYjVLaGJT cUhGRGYzTEliUTBGM2ltdFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAoZPDyfCE8IWKMuQNvGTUlTSmgENgmvaigzS9DNkWU7DD5lFsA7cEg eXDUQJr/oU/AjhXe4+hPDy5vxti9R+O2+VnaJnxPGO8VeavGdLQbTHNiiMOlct7U QEeNUFYEQASXfV8KWD039GN87QSWiGr7g0xjHHN+qKtRiiUteQFXWAeer/WAnkdj vponmCWvCn/c2GhSasWWqTXOJFP1KYcw4zJ4VaEbkcSeEcwWQQWyUDqnaSuVXc4w HpkbmLVu93grV131rUtzCIF9MLfO1M1slu649orAa0jB9KqEeTKH3djc728XsVCv GBBS5FUswQimwJO0S7/ST4/JlV4JlSxf -----END CERTIFICATE-----Generated at Sat May 31 16:39:49 2025 by rpki-client