$ rpki-client -vvf rpki.apnic.net/member_repository/A91E01A9/83C31108335C11E6A8000F4DC4F9AE02/SldfK_MxJGL4VkYa6d3Qo4RKvS8.mft File: SldfK_MxJGL4VkYa6d3Qo4RKvS8.mft (raw, json) Hash identifier: u2saWtKGoMrKRhpa8ko8kLL1N3VD7PUWEloo8hLgV+o= Subject key identifier: 1E:56:F6:26:F4:40:57:7B:1B:7B:0B:7C:AF:55:1D:77:8E:E6:89:70 Authority key identifier: 4A:57:5F:2B:F3:31:24:62:F8:56:46:1A:E9:DD:D0:A3:84:4A:BD:2F Certificate issuer: /CN=A91E01A9/serialNumber=4A575F2BF3312462F856461AE9DDD0A3844ABD2F Certificate serial: 1FCB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SldfK_MxJGL4VkYa6d3Qo4RKvS8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E01A9/83C31108335C11E6A8000F4DC4F9AE02/SldfK_MxJGL4VkYa6d3Qo4RKvS8.mft Manifest number: 1FBF Signing time: Sat 31 May 2025 15:57:08 +0000 Manifest this update: Sat 31 May 2025 15:57:07 +0000 Manifest next update: Sat 07 Jun 2025 15:57:07 +0000 Files and hashes: 1: SldfK_MxJGL4VkYa6d3Qo4RKvS8.crl (hash: 2W5aS4lZjeq9glo7XALEdMx+qez9hRIeU/IMJl57sjE=) 2: A212A64854F611E79DF7E643C4F9AE02.roa (hash: Tkmf4L8GEt+Ymff0VMzuLeDCbIi7tjYtfIPQH26ZWWs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E01A9/83C31108335C11E6A8000F4DC4F9AE02/SldfK_MxJGL4VkYa6d3Qo4RKvS8.crl rsync://rpki.apnic.net/member_repository/A91E01A9/83C31108335C11E6A8000F4DC4F9AE02/SldfK_MxJGL4VkYa6d3Qo4RKvS8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SldfK_MxJGL4VkYa6d3Qo4RKvS8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 15:57:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8139 (0x1fcb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E01A9, serialNumber=4A575F2BF3312462F856461AE9DDD0A3844ABD2F Validity Not Before: May 31 15:57:07 2025 GMT Not After : Jun 7 15:57:07 2025 GMT Subject: CN=683b26d4-1e87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:15:a2:39:ed:60:a1:ea:56:b1:23:f9:5c:0a: 4d:49:28:35:b7:a7:be:5d:01:91:05:11:49:cd:bd: 7a:e0:16:8c:4c:33:83:f0:b4:57:7e:f0:94:75:74: 17:5e:56:8b:e5:f0:79:56:65:b0:b1:a1:a1:1d:f5: 20:b2:ff:2f:c2:2f:a2:44:04:4d:ff:f6:fe:b1:49: 15:c8:a1:ce:50:c3:3f:a5:03:3e:d1:29:4f:f8:86: 61:be:71:06:64:b8:3b:dc:32:b2:33:3c:26:cc:01: c7:28:e4:5a:5d:13:d4:77:3b:a4:55:4c:ab:52:b9: d3:30:3f:ad:69:c3:6e:d3:02:fa:73:91:93:4a:4b: d3:8d:63:21:45:99:49:ad:63:3e:65:95:60:24:67: 48:86:dd:5e:57:c8:df:56:1e:f0:7a:82:20:7a:6e: d5:c3:7e:12:a5:40:fb:95:99:8c:14:cc:42:63:68: 45:ee:6c:4f:3f:3e:fa:d4:e9:2a:d7:d3:75:0c:87: b5:1e:36:6c:8d:3c:d5:04:13:59:2b:62:48:a9:d2: 32:85:a4:a7:84:37:e0:62:a3:31:fd:19:47:3e:ad: fb:7f:4c:b7:78:56:a7:4b:d7:05:61:47:af:17:8d: 19:80:30:31:33:85:26:9f:2d:7c:20:ec:84:81:5e: 84:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:56:F6:26:F4:40:57:7B:1B:7B:0B:7C:AF:55:1D:77:8E:E6:89:70 X509v3 Authority Key Identifier: keyid:4A:57:5F:2B:F3:31:24:62:F8:56:46:1A:E9:DD:D0:A3:84:4A:BD:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E01A9/83C31108335C11E6A8000F4DC4F9AE02/SldfK_MxJGL4VkYa6d3Qo4RKvS8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SldfK_MxJGL4VkYa6d3Qo4RKvS8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E01A9/83C31108335C11E6A8000F4DC4F9AE02/SldfK_MxJGL4VkYa6d3Qo4RKvS8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:3d:47:74:22:24:c4:e1:b7:be:59:51:9e:b7:f1:b7:d4:ad: 72:f1:05:62:8f:04:91:de:c3:b3:5c:57:95:19:12:99:e2:2e: 08:c3:2d:78:e5:05:27:db:6b:7e:d1:df:fc:d7:59:7e:71:d2: 3e:7e:8d:18:40:cd:4c:04:cd:71:2c:01:0a:6d:a0:7f:78:f7: dd:a4:cf:61:a2:d9:74:cf:30:34:37:21:89:21:54:f1:08:c0: 0c:eb:de:73:02:41:67:83:cd:49:4d:43:ce:c0:70:44:5a:79: d7:ec:e8:be:5f:4d:eb:b2:61:30:9f:08:17:b2:f8:9d:0b:98: 1b:d8:2f:91:2b:c2:36:13:47:d1:c6:25:af:c7:84:4f:04:4d: 4d:6b:66:b8:27:8f:80:6a:80:e8:81:28:3a:10:3b:ca:1c:9f: 6a:25:90:4a:f1:6a:ac:fd:a1:3a:7c:fa:d4:11:95:38:16:68: 28:38:b1:3e:f3:3e:2b:74:08:8a:39:39:7a:33:6b:81:d7:78: aa:36:b5:cf:8f:b3:56:1a:b3:0e:34:5e:0c:0c:0f:0c:7b:03: 22:59:e9:ba:9f:02:94:fd:a6:3c:08:24:44:23:af:8c:96:12: 8f:8f:f5:ba:f9:3d:d3:a1:40:3c:d2:e3:90:3c:d1:e4:cc:f7: d0:ac:4d:4a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICH8swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTAxQTkxMTAvBgNVBAUTKDRBNTc1RjJCRjMzMTI0NjJGODU2NDYxQUU5REREMEEz ODQ0QUJEMkYwHhcNMjUwNTMxMTU1NzA3WhcNMjUwNjA3MTU1NzA3WjAYMRYwFAYD VQQDEw02ODNiMjZkNC0xZTg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmxWiOe1goepWsSP5XApNSSg1t6e+XQGRBRFJzb164BaMTDOD8LRXfvCUdXQX XlaL5fB5VmWwsaGhHfUgsv8vwi+iRARN//b+sUkVyKHOUMM/pQM+0SlP+IZhvnEG ZLg73DKyMzwmzAHHKORaXRPUdzukVUyrUrnTMD+tacNu0wL6c5GTSkvTjWMhRZlJ rWM+ZZVgJGdIht1eV8jfVh7weoIgem7Vw34SpUD7lZmMFMxCY2hF7mxPPz761Okq 19N1DIe1HjZsjTzVBBNZK2JIqdIyhaSnhDfgYqMx/RlHPq37f0y3eFanS9cFYUev F40ZgDAxM4Umny18IOyEgV6E8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB5W9ib0 QFd7G3sLfK9VHXeO5olwMB8GA1UdIwQYMBaAFEpXXyvzMSRi+FZGGund0KOESr0v MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMDFBOS84M0MzMTEwODMz NUMxMUU2QTgwMDBGNERDNEY5QUUwMi9TbGRmS19NeEpHTDRWa1lhNmQzUW80Ukt2 UzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NsZGZLX014SkdMNFZrWWE2ZDNRbzRSS3ZTOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MDFBOS84M0MzMTEwODMzNUMxMUU2QTgwMDBGNERDNEY5QUUwMi9TbGRmS19NeEpH TDRWa1lhNmQzUW80Ukt2UzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAsPUd0IiTE4be+WVGet/G31K1y8QVijwSR3sOzXFeVGRKZ4i4Iwy14 5QUn22t+0d/811l+cdI+fo0YQM1MBM1xLAEKbaB/ePfdpM9hotl0zzA0NyGJIVTx CMAM695zAkFng81JTUPOwHBEWnnX7Oi+X03rsmEwnwgXsvidC5gb2C+RK8I2E0fR xiWvx4RPBE1Na2a4J4+AaoDogSg6EDvKHJ9qJZBK8Wqs/aE6fPrUEZU4FmgoOLE+ 8z4rdAiKOTl6M2uB13iqNrXPj7NWGrMONF4MDA8MewMiWem6nwKU/aY8CCREI6+M lhKPj/W6+T3ToUA80uOQPNHkzPfQrE1K -----END CERTIFICATE-----Generated at Sat May 31 17:44:01 2025 by rpki-client