$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEF41/C75DA132F2FB11EE9FCF764CC4F9AE02/M23efsMoBJmWQ3HK7iYg-_ys3Jg.mft File: M23efsMoBJmWQ3HK7iYg-_ys3Jg.mft (raw, json) Hash identifier: YJ3ESRXi/ftQvWt8TR1jLMY1m8Cg7jpwoG7JP4HmJEQ= Subject key identifier: 27:D0:74:7A:84:38:DC:E4:EC:3F:45:70:BE:24:D3:FF:0C:DE:4E:27 Authority key identifier: 33:6D:DE:7E:C3:28:04:99:96:43:71:CA:EE:26:20:FB:FC:AC:DC:98 Certificate issuer: /CN=A91DEF41/serialNumber=336DDE7EC3280499964371CAEE2620FBFCACDC98 Certificate serial: E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M23efsMoBJmWQ3HK7iYg-_ys3Jg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DEF41/C75DA132F2FB11EE9FCF764CC4F9AE02/M23efsMoBJmWQ3HK7iYg-_ys3Jg.mft Manifest number: DA Signing time: Sat 31 May 2025 05:11:16 +0000 Manifest this update: Sat 31 May 2025 05:11:15 +0000 Manifest next update: Sat 07 Jun 2025 05:11:15 +0000 Files and hashes: 1: M23efsMoBJmWQ3HK7iYg-_ys3Jg.crl (hash: ylZF/ogD/uWtUA05BW4Be+7Sh4SIW1gM/yW1+ryDWQs=) 2: 1698D0A4F3C511EEA51BD730C4F9AE02.roa (hash: dK1RlQyJjeiwzuMRZD6/CsndMyibK0XoFCLqDbss32s=) 3: 069E7950F3C611EE807A6F3EC4F9AE02.roa (hash: GMXU4PxSO88RcbBqzb2gyEchtqA2OVDVG15sHhZwd7g=) 4: 07258E36F3C611EE807A6F3EC4F9AE02.roa (hash: UOVpPqyzylpvUS4PFJS4QPq1eALE7pHfj83Afvy+ymM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DEF41/C75DA132F2FB11EE9FCF764CC4F9AE02/M23efsMoBJmWQ3HK7iYg-_ys3Jg.crl rsync://rpki.apnic.net/member_repository/A91DEF41/C75DA132F2FB11EE9FCF764CC4F9AE02/M23efsMoBJmWQ3HK7iYg-_ys3Jg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M23efsMoBJmWQ3HK7iYg-_ys3Jg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 05:11:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 228 (0xe4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DEF41, serialNumber=336DDE7EC3280499964371CAEE2620FBFCACDC98 Validity Not Before: May 31 05:11:15 2025 GMT Not After : Jun 7 05:11:15 2025 GMT Subject: CN=683a8f73-643f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:6e:c3:67:c1:da:03:c3:54:2f:f3:29:93:be: 43:95:5d:2b:0e:71:40:80:40:83:bf:6b:b2:ac:60: 88:01:cb:f8:6f:bf:a7:c3:d0:91:5f:bb:61:80:db: be:9e:14:16:7b:e1:2c:59:89:47:da:9e:c4:da:c7: 2d:38:fa:12:44:bf:21:40:2b:31:77:3c:f1:03:d6: b1:30:0c:62:5c:3d:d2:7a:77:2c:24:4b:95:f8:3f: 52:6e:c8:5c:52:89:40:af:42:6b:2c:76:31:70:ea: cf:e4:28:13:28:f8:c6:1a:2b:ed:2b:f1:35:30:51: 03:df:89:51:62:ec:38:9e:90:bc:34:a3:f4:91:b0: 51:db:34:82:74:cc:4d:7e:9d:02:a4:3c:81:07:08: c1:7a:de:83:18:52:c4:d5:9b:a9:99:1d:18:2f:56: c4:1f:05:8c:db:72:9f:4a:43:c6:cb:cd:e5:fa:70: ec:34:7b:70:bf:85:96:c2:27:e3:4a:10:ec:45:2a: 93:0c:6d:22:90:30:d9:f9:42:d3:75:b2:e4:b5:47: 3b:3b:fa:f7:a9:a0:28:7a:b8:67:d7:9d:38:a3:d6: d3:de:7a:18:2b:16:e7:a7:fd:33:67:57:89:37:30: d4:c8:58:f0:ad:70:7e:e3:30:c6:b1:fb:00:2f:e1: 3f:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:D0:74:7A:84:38:DC:E4:EC:3F:45:70:BE:24:D3:FF:0C:DE:4E:27 X509v3 Authority Key Identifier: keyid:33:6D:DE:7E:C3:28:04:99:96:43:71:CA:EE:26:20:FB:FC:AC:DC:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DEF41/C75DA132F2FB11EE9FCF764CC4F9AE02/M23efsMoBJmWQ3HK7iYg-_ys3Jg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M23efsMoBJmWQ3HK7iYg-_ys3Jg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEF41/C75DA132F2FB11EE9FCF764CC4F9AE02/M23efsMoBJmWQ3HK7iYg-_ys3Jg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:03:18:5b:26:73:86:42:0b:7f:85:85:e2:6f:65:88:07:cc: 44:d8:3e:52:02:e9:61:d4:e0:bf:c3:4f:4a:f6:f8:75:6d:7d: 3f:a9:2f:19:ee:8c:c5:6f:c3:02:e0:ed:02:ec:08:90:67:f4: f3:d1:9d:9c:61:01:0d:d3:64:b5:19:f6:a9:0b:5d:7a:16:5c: af:c5:63:fc:4c:b4:da:ef:36:81:0f:cd:f7:4c:c3:10:45:e2: 4a:27:fe:5f:a4:54:f3:c6:64:f3:d8:01:4d:df:9b:e1:36:99: 4b:43:be:14:64:e6:e9:24:bc:c5:52:20:9d:ac:31:e7:ca:97: 63:ed:71:ef:8f:51:e8:25:d5:17:2a:c4:13:b4:74:67:de:13: b8:45:2a:78:68:1a:3f:39:22:11:3c:5a:32:ba:a5:1a:57:44: 69:5f:a8:8c:09:32:00:f1:a5:78:1b:3a:6b:00:4b:28:23:cf: a4:17:ac:36:55:7d:0e:73:31:58:e6:0e:5d:0b:35:2c:e9:6f: 64:13:d7:76:5f:74:2d:00:f8:a7:01:93:14:2e:22:32:3a:5e: 0b:f9:24:eb:37:a1:47:91:f4:eb:c6:55:20:0d:3a:3a:1a:50: 0a:6a:80:c8:55:b9:6a:78:ad:42:e4:e5:ac:68:47:6e:50:8d: 37:4f:ee:87 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REVGNDExMTAvBgNVBAUTKDMzNkRERTdFQzMyODA0OTk5NjQzNzFDQUVFMjYyMEZC RkNBQ0RDOTgwHhcNMjUwNTMxMDUxMTE1WhcNMjUwNjA3MDUxMTE1WjAYMRYwFAYD VQQDEw02ODNhOGY3My02NDNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1W7DZ8HaA8NUL/Mpk75DlV0rDnFAgECDv2uyrGCIAcv4b7+nw9CRX7thgNu+ nhQWe+EsWYlH2p7E2sctOPoSRL8hQCsxdzzxA9axMAxiXD3SencsJEuV+D9Sbshc UolAr0JrLHYxcOrP5CgTKPjGGivtK/E1MFED34lRYuw4npC8NKP0kbBR2zSCdMxN fp0CpDyBBwjBet6DGFLE1ZupmR0YL1bEHwWM23KfSkPGy83l+nDsNHtwv4WWwifj ShDsRSqTDG0ikDDZ+ULTdbLktUc7O/r3qaAoerhn1504o9bT3noYKxbnp/0zZ1eJ NzDUyFjwrXB+4zDGsfsAL+E/aQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCfQdHqE ONzk7D9FcL4k0/8M3k4nMB8GA1UdIwQYMBaAFDNt3n7DKASZlkNxyu4mIPv8rNyY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERUY0MS9DNzVEQTEzMkYy RkIxMUVFOUZDRjc2NENDNEY5QUUwMi9NMjNlZnNNb0JKbVdRM0hLN2lZZy1feXMz SmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL00yM2Vmc01vQkptV1EzSEs3aVlnLV95czNKZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RUY0MS9DNzVEQTEzMkYyRkIxMUVFOUZDRjc2NENDNEY5QUUwMi9NMjNlZnNNb0JK bVdRM0hLN2lZZy1feXMzSmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBYAxhbJnOGQgt/hYXib2WIB8xE2D5SAulh1OC/w09K9vh1bX0/qS8Z 7ozFb8MC4O0C7AiQZ/Tz0Z2cYQEN02S1GfapC116FlyvxWP8TLTa7zaBD833TMMQ ReJKJ/5fpFTzxmTz2AFN35vhNplLQ74UZObpJLzFUiCdrDHnypdj7XHvj1HoJdUX KsQTtHRn3hO4RSp4aBo/OSIRPFoyuqUaV0RpX6iMCTIA8aV4GzprAEsoI8+kF6w2 VX0OczFY5g5dCzUs6W9kE9d2X3QtAPinAZMULiIyOl4L+STrN6FHkfTrxlUgDTo6 GlAKaoDIVblqeK1C5OWsaEduUI03T+6H -----END CERTIFICATE-----Generated at Sat May 31 16:38:49 2025 by rpki-client