$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.mft File: 9FMh2HhbiJfVqDS5DquRDFWQnYU.mft (raw, json) Hash identifier: MEpjqXgh8sQ7w449xbPW3BO0N42IQMC9oD1nhP3sC9k= Subject key identifier: A7:21:62:6A:66:72:19:70:78:2E:86:66:1D:88:DF:F8:BB:EA:47:FB Authority key identifier: F4:53:21:D8:78:5B:88:97:D5:A8:34:B9:0E:AB:91:0C:55:90:9D:85 Certificate issuer: /CN=A91DEDFD/serialNumber=F45321D8785B8897D5A834B90EAB910C55909D85 Certificate serial: 08CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FMh2HhbiJfVqDS5DquRDFWQnYU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.mft Manifest number: 08A2 Signing time: Fri 30 May 2025 20:47:25 +0000 Manifest this update: Fri 30 May 2025 20:47:25 +0000 Manifest next update: Fri 06 Jun 2025 20:47:25 +0000 Files and hashes: 1: 9FMh2HhbiJfVqDS5DquRDFWQnYU.crl (hash: wzj3j9JYTSr77EPPDqSKUEc1LIf27r3KcjcgiNFb0iU=) 2: 7E4270063AF011EC9E421056C4F9AE02.roa (hash: FNdfZCcbxe3V2OAQFLZGqdKXBJ6o0UkfGqCv1XFBIe4=) 3: 8F6A0892437611EC9E067020C4F9AE02.roa (hash: xykraSV8kLGomChcl9m8aUsM7WTxk2kDX+8/BfVDf4g=) 4: 1A7632424DA111ECA1180F87C4F9AE02.roa (hash: emHp7Xzsh3MvD05QY3vvsc/JIauIxxqNW7MxPaZ5E+I=) 5: 7AE3D13C62A111ED80F96E47C4F9AE02.roa (hash: Dx71OVIwLra0qJzFPwaosr95WYYv+7Bg/7InXVNYyaM=) 6: 7DE1B508BC8A11EABAFA684CC4F9AE02.roa (hash: xSH87kbILGHWEWNfAJ7BQelcc3h9X/JlnMHEz3L2hKI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.crl rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FMh2HhbiJfVqDS5DquRDFWQnYU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 20:47:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2253 (0x8cd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DEDFD, serialNumber=F45321D8785B8897D5A834B90EAB910C55909D85 Validity Not Before: May 30 20:47:25 2025 GMT Not After : Jun 6 20:47:25 2025 GMT Subject: CN=683a195d-be4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:bc:ef:b2:25:15:cc:60:84:e4:f1:f8:8e:96: 5a:bb:2a:b8:4c:ed:90:84:5b:e7:66:23:7e:50:6f: cd:6c:f3:b5:59:87:a4:15:81:5d:fd:6b:b9:06:16: ce:3b:90:01:10:49:db:e1:98:c4:ee:a3:0c:e1:7c: 3d:26:9e:8c:75:3c:d5:ea:5b:07:3d:3b:13:66:7d: d2:47:39:66:08:9b:c3:a8:25:d5:3f:f0:78:42:da: 81:67:3d:7a:21:0c:32:f3:58:b5:45:e0:3e:05:1a: df:6e:e9:0b:2f:6e:4c:ef:c9:3b:65:fc:fb:db:f7: b0:1e:dd:37:d5:d1:3d:e7:c6:d5:e9:d6:60:81:4d: 0e:d3:b3:65:f4:42:7e:f8:77:f7:2e:96:af:2b:86: 44:7f:5c:8f:25:bc:12:9e:0a:2c:77:01:6d:1b:5c: ee:8c:d3:21:4a:d1:0b:17:00:28:ce:9d:01:a9:02: 94:57:c9:1e:9e:6a:09:e7:c4:d4:b5:6b:64:20:5d: 32:f2:fd:c8:5e:73:4f:28:f8:fa:ea:a2:65:12:e5: 78:32:02:f6:5b:5c:7d:4d:a5:3c:c1:c7:e5:ac:99: 8e:7c:f2:6d:31:73:6d:26:64:41:11:2f:b9:ef:cc: 50:a6:83:23:0d:b1:c0:10:c0:92:27:ba:38:15:10: 4b:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:21:62:6A:66:72:19:70:78:2E:86:66:1D:88:DF:F8:BB:EA:47:FB X509v3 Authority Key Identifier: keyid:F4:53:21:D8:78:5B:88:97:D5:A8:34:B9:0E:AB:91:0C:55:90:9D:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FMh2HhbiJfVqDS5DquRDFWQnYU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:60:27:2c:51:c2:c5:ff:4a:28:be:5c:77:ef:c6:33:43:17: 63:f5:87:e0:43:28:b8:68:f7:45:68:3b:6a:3b:3e:07:f4:d7: ae:94:48:c2:a8:fc:0c:9f:cb:c7:21:81:83:10:3b:2c:1a:39: 23:74:a9:d1:15:8a:97:e6:6a:45:fd:f2:c7:3c:1c:cc:dc:2f: 16:1b:45:18:80:17:35:b0:2c:9e:70:e6:a2:dd:9a:d4:03:43: 06:ee:55:88:e6:f4:db:2a:f2:1f:e2:59:9a:c0:34:25:d1:d0: 77:b4:ef:a6:81:7b:c0:22:2f:d2:84:a3:9a:c3:92:fa:4e:59: e9:3d:71:bb:07:cd:31:3f:52:be:0a:dd:1f:af:8f:b9:e7:30: 47:30:9a:6a:dd:35:64:55:16:bf:d4:7d:d0:75:42:ff:0e:6d: dd:8b:fe:a5:38:27:b0:0a:d2:1b:ff:6e:f7:c7:23:d4:a1:51: 6f:a1:94:ea:6e:53:54:ca:15:b1:2a:42:2c:b5:c1:9b:38:18: 03:99:77:94:4b:ad:54:0a:ae:9c:39:ab:8e:da:bb:cf:6b:9f: 57:c9:89:6b:c4:4f:6e:23:14:1d:9e:3f:87:f7:5f:07:fc:65: 0f:8c:34:bc:c3:1a:00:ae:03:18:91:fd:9c:04:7a:20:99:c4: dc:b0:36:b4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCM0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REVERkQxMTAvBgNVBAUTKEY0NTMyMUQ4Nzg1Qjg4OTdENUE4MzRCOTBFQUI5MTBD NTU5MDlEODUwHhcNMjUwNTMwMjA0NzI1WhcNMjUwNjA2MjA0NzI1WjAYMRYwFAYD VQQDEw02ODNhMTk1ZC1iZTRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsLzvsiUVzGCE5PH4jpZauyq4TO2QhFvnZiN+UG/NbPO1WYekFYFd/Wu5BhbO O5ABEEnb4ZjE7qMM4Xw9Jp6MdTzV6lsHPTsTZn3SRzlmCJvDqCXVP/B4QtqBZz16 IQwy81i1ReA+BRrfbukLL25M78k7Zfz72/ewHt031dE958bV6dZggU0O07Nl9EJ+ +Hf3LpavK4ZEf1yPJbwSngosdwFtG1zujNMhStELFwAozp0BqQKUV8kenmoJ58TU tWtkIF0y8v3IXnNPKPj66qJlEuV4MgL2W1x9TaU8wcflrJmOfPJtMXNtJmRBES+5 78xQpoMjDbHAEMCSJ7o4FRBLMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKchYmpm chlweC6GZh2I3/i76kf7MB8GA1UdIwQYMBaAFPRTIdh4W4iX1ag0uQ6rkQxVkJ2F MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERURGRC81NDUzNkIzRUJD ODgxMUVBODhFRjNENDlDNEY5QUUwMi85Rk1oMkhoYmlKZlZxRFM1RHF1UkRGV1Fu WVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlGTWgySGhiaUpmVnFEUzVEcXVSREZXUW5ZVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RURGRC81NDUzNkIzRUJDODgxMUVBODhFRjNENDlDNEY5QUUwMi85Rk1oMkhoYmlK ZlZxRFM1RHF1UkRGV1FuWVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCoYCcsUcLF/0oovlx378YzQxdj9YfgQyi4aPdFaDtqOz4H9NeulEjC qPwMn8vHIYGDEDssGjkjdKnRFYqX5mpF/fLHPBzM3C8WG0UYgBc1sCyecOai3ZrU A0MG7lWI5vTbKvIf4lmawDQl0dB3tO+mgXvAIi/ShKOaw5L6TlnpPXG7B80xP1K+ Ct0fr4+55zBHMJpq3TVkVRa/1H3QdUL/Dm3di/6lOCewCtIb/273xyPUoVFvoZTq blNUyhWxKkIstcGbOBgDmXeUS61UCq6cOauO2rvPa59XyYlrxE9uIxQdnj+H918H /GUPjDS8wxoArgMYkf2cBHogmcTcsDa0 -----END CERTIFICATE-----Generated at Sat May 31 17:06:30 2025 by rpki-client