$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF937/A447BFDC553011E6A3642745C4F9AE02/xJ5Rg-ovxJuKg8kgUrziqLZXbHA.mft File: xJ5Rg-ovxJuKg8kgUrziqLZXbHA.mft (raw, json) Hash identifier: +SXJ//3gufo3bKznAgIEZeQvJUlk+lP4TEyhP+CQk20= Subject key identifier: 3D:B9:CC:82:14:07:CB:09:2D:6B:7B:64:6F:A2:38:50:C8:CA:E9:F5 Authority key identifier: C4:9E:51:83:EA:2F:C4:9B:8A:83:C9:20:52:BC:E2:A8:B6:57:6C:70 Certificate issuer: /CN=A91DF937/serialNumber=C49E5183EA2FC49B8A83C92052BCE2A8B6576C70 Certificate serial: 1F1D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xJ5Rg-ovxJuKg8kgUrziqLZXbHA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF937/A447BFDC553011E6A3642745C4F9AE02/xJ5Rg-ovxJuKg8kgUrziqLZXbHA.mft Manifest number: 1F11 Signing time: Fri 30 May 2025 16:12:19 +0000 Manifest this update: Fri 30 May 2025 16:12:19 +0000 Manifest next update: Fri 06 Jun 2025 16:12:19 +0000 Files and hashes: 1: xJ5Rg-ovxJuKg8kgUrziqLZXbHA.crl (hash: jr4ODVwhn5ST3tY1A0JqPSpqhWMIGJfZR4AYGJihbrA=) 2: E723101E553D11E7B552CE31C4F9AE02.roa (hash: GAb6VP25Sih6kuMJl/07aQz0S9qS9uziUSigVGvFQjs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF937/A447BFDC553011E6A3642745C4F9AE02/xJ5Rg-ovxJuKg8kgUrziqLZXbHA.crl rsync://rpki.apnic.net/member_repository/A91DF937/A447BFDC553011E6A3642745C4F9AE02/xJ5Rg-ovxJuKg8kgUrziqLZXbHA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xJ5Rg-ovxJuKg8kgUrziqLZXbHA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 16:12:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7965 (0x1f1d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF937, serialNumber=C49E5183EA2FC49B8A83C92052BCE2A8B6576C70 Validity Not Before: May 30 16:12:19 2025 GMT Not After : Jun 6 16:12:19 2025 GMT Subject: CN=6839d8e3-3cf9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:d2:00:ef:0a:f1:57:52:17:5d:a1:fd:81:c4: 02:d9:3c:f2:53:31:0d:e0:c5:0b:9c:da:a9:65:cb: 66:17:fb:e6:37:37:2e:19:95:8e:96:d0:20:ce:16: a3:0c:a7:4d:b7:ae:32:75:28:23:c3:38:ea:ed:4f: 0a:85:c5:6d:5f:6e:55:38:37:d8:4c:bf:8e:d6:76: 0f:37:bb:60:fd:7a:7b:10:16:c0:b3:ab:17:65:7b: ef:a4:de:f3:15:45:2e:c4:0f:ae:8f:cf:96:9e:ec: 26:e0:3f:cd:e7:ba:b0:5f:53:02:40:ac:33:6b:e7: 7f:94:be:bd:a6:ea:ca:89:57:f5:f4:d3:c8:4d:dc: 6c:45:1d:2e:de:b8:ca:3d:5d:6b:54:26:c4:63:3e: 14:13:10:26:b7:a8:97:b2:4c:1b:23:8f:4e:37:ae: 99:80:b8:7d:f2:f5:21:bc:e0:a6:68:58:ae:1d:c6: c5:1a:c7:62:68:70:cd:84:3d:06:29:ca:c0:08:71: 85:7c:23:dd:ed:a3:9e:43:55:e3:c8:4b:99:0c:7a: bb:aa:1c:20:87:4b:04:65:d2:7a:65:10:6a:20:f6: 56:39:34:54:63:eb:92:a1:5e:92:43:c0:80:55:a9: 18:b0:33:fa:fa:18:2c:32:3f:89:91:c3:99:12:12: d6:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:B9:CC:82:14:07:CB:09:2D:6B:7B:64:6F:A2:38:50:C8:CA:E9:F5 X509v3 Authority Key Identifier: keyid:C4:9E:51:83:EA:2F:C4:9B:8A:83:C9:20:52:BC:E2:A8:B6:57:6C:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF937/A447BFDC553011E6A3642745C4F9AE02/xJ5Rg-ovxJuKg8kgUrziqLZXbHA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xJ5Rg-ovxJuKg8kgUrziqLZXbHA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF937/A447BFDC553011E6A3642745C4F9AE02/xJ5Rg-ovxJuKg8kgUrziqLZXbHA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:ed:df:5c:18:ee:47:84:10:7d:a5:02:a8:cc:17:77:83:77: a1:83:eb:c5:18:b5:6b:a0:20:98:ea:c3:08:62:6b:1f:8c:70: fd:c8:ec:f6:0f:c1:0d:90:2c:6e:3a:64:e1:f9:f4:98:01:f1: 27:79:e1:1d:76:91:33:a4:35:d4:90:63:48:1c:4d:86:ee:f0: 57:7f:09:62:ab:b7:3f:95:13:d2:31:3d:76:fe:34:e5:be:50: ed:c5:cf:a1:ea:e3:2a:de:d5:e7:4c:a5:82:ef:70:24:e3:4e: 9b:13:8b:ef:c5:34:84:3c:80:2b:d1:06:51:83:de:32:2c:a6: 16:36:d3:2f:17:68:c6:fc:8f:db:ec:f7:8e:47:66:09:c0:6a: 45:fe:12:81:5c:c7:e8:8b:c9:76:07:fe:13:77:b1:91:a8:4e: 7a:5f:9b:cb:ad:71:fa:70:dc:b4:6c:56:6a:67:c7:3f:78:c3: 13:6a:31:d0:79:02:c1:d2:3d:81:bf:f8:94:0e:10:78:b7:ad: ae:a3:3a:9a:ce:f1:c8:3b:ae:13:52:6a:1d:1f:5f:19:ef:f0: c2:34:f5:fb:a5:82:ae:74:ac:6d:c5:c6:a8:ab:a2:e9:c4:fb: f9:33:e5:2f:88:bd:a8:07:8f:d4:8b:87:91:19:54:d0:72:84: 1a:98:6c:47 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHx0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REY5MzcxMTAvBgNVBAUTKEM0OUU1MTgzRUEyRkM0OUI4QTgzQzkyMDUyQkNFMkE4 QjY1NzZDNzAwHhcNMjUwNTMwMTYxMjE5WhcNMjUwNjA2MTYxMjE5WjAYMRYwFAYD VQQDEw02ODM5ZDhlMy0zY2Y5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzNIA7wrxV1IXXaH9gcQC2TzyUzEN4MULnNqpZctmF/vmNzcuGZWOltAgzhaj DKdNt64ydSgjwzjq7U8KhcVtX25VODfYTL+O1nYPN7tg/Xp7EBbAs6sXZXvvpN7z FUUuxA+uj8+Wnuwm4D/N57qwX1MCQKwza+d/lL69purKiVf19NPITdxsRR0u3rjK PV1rVCbEYz4UExAmt6iXskwbI49ON66ZgLh98vUhvOCmaFiuHcbFGsdiaHDNhD0G KcrACHGFfCPd7aOeQ1XjyEuZDHq7qhwgh0sEZdJ6ZRBqIPZWOTRUY+uSoV6SQ8CA VakYsDP6+hgsMj+JkcOZEhLW1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD25zIIU B8sJLWt7ZG+iOFDIyun1MB8GA1UdIwQYMBaAFMSeUYPqL8SbioPJIFK84qi2V2xw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjkzNy9BNDQ3QkZEQzU1 MzAxMUU2QTM2NDI3NDVDNEY5QUUwMi94SjVSZy1vdnhKdUtnOGtnVXJ6aXFMWlhi SEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hKNVJnLW92eEp1S2c4a2dVcnppcUxaWGJIQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RjkzNy9BNDQ3QkZEQzU1MzAxMUU2QTM2NDI3NDVDNEY5QUUwMi94SjVSZy1vdnhK dUtnOGtnVXJ6aXFMWlhiSEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBz7d9cGO5HhBB9pQKozBd3g3ehg+vFGLVroCCY6sMIYmsfjHD9yOz2 D8ENkCxuOmTh+fSYAfEneeEddpEzpDXUkGNIHE2G7vBXfwliq7c/lRPSMT12/jTl vlDtxc+h6uMq3tXnTKWC73Ak406bE4vvxTSEPIAr0QZRg94yLKYWNtMvF2jG/I/b 7PeOR2YJwGpF/hKBXMfoi8l2B/4Td7GRqE56X5vLrXH6cNy0bFZqZ8c/eMMTajHQ eQLB0j2Bv/iUDhB4t62uozqazvHIO64TUmodH18Z7/DCNPX7pYKudKxtxcaoq6Lp xPv5M+UviL2oB4/Ui4eRGVTQcoQamGxH -----END CERTIFICATE-----Generated at Sat May 31 17:31:54 2025 by rpki-client