$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0329/45D6EFFCD39D11EDBBCB280FC4F9AE02/906Wyp7pNgdFZCkpYPvB-c80hU0.mft File: 906Wyp7pNgdFZCkpYPvB-c80hU0.mft (raw, json) Hash identifier: fxhf+bTpnPJtOSd29ceRoWd0pNmZg3Z+NjzAJD8N+Kk= Subject key identifier: DF:B5:96:5C:EA:84:7B:DD:7F:83:1B:E7:9A:C4:19:B7:D7:04:7B:9C Authority key identifier: F7:4E:96:CA:9E:E9:36:07:45:64:29:29:60:FB:C1:F9:CF:34:85:4D Certificate issuer: /CN=A91E0329/serialNumber=F74E96CA9EE936074564292960FBC1F9CF34854D Certificate serial: 019C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/906Wyp7pNgdFZCkpYPvB-c80hU0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E0329/45D6EFFCD39D11EDBBCB280FC4F9AE02/906Wyp7pNgdFZCkpYPvB-c80hU0.mft Manifest number: 0194 Signing time: Sat 31 May 2025 03:10:16 +0000 Manifest this update: Sat 31 May 2025 03:10:15 +0000 Manifest next update: Sat 07 Jun 2025 03:10:15 +0000 Files and hashes: 1: 906Wyp7pNgdFZCkpYPvB-c80hU0.crl (hash: NvcgfeGXjnyn1SDReeEx03j9LYMQEUV3IQLCDMXGwto=) 2: F26B14C4EE8B11ED95BCBB13C4F9AE02.roa (hash: XedbY/PZhCWJ5tz0Q2lxrhZqMoRjpB9GmAPtufUsPlI=) 3: 1DA961ACEE8911EDBFAE4177C4F9AE02.roa (hash: TNSpjF6OeReM48TkuI+F5DR9ql/RdBa28TlUz4BMXXY=) 4: 1C99BCBCEE8911EDBFAE4177C4F9AE02.roa (hash: 91n8h6HxMc8aXrtFypfNv9JuSWJvh1SjeTFNOYTZOlg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E0329/45D6EFFCD39D11EDBBCB280FC4F9AE02/906Wyp7pNgdFZCkpYPvB-c80hU0.crl rsync://rpki.apnic.net/member_repository/A91E0329/45D6EFFCD39D11EDBBCB280FC4F9AE02/906Wyp7pNgdFZCkpYPvB-c80hU0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/906Wyp7pNgdFZCkpYPvB-c80hU0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 03:10:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 412 (0x19c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E0329, serialNumber=F74E96CA9EE936074564292960FBC1F9CF34854D Validity Not Before: May 31 03:10:15 2025 GMT Not After : Jun 7 03:10:15 2025 GMT Subject: CN=683a7317-c4ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:3a:1c:66:86:28:7f:cf:34:70:a8:bd:8a:0f: ad:64:b9:fe:63:f5:af:cd:eb:45:00:86:d0:30:52: fd:f3:e8:88:7d:c8:9a:97:97:52:88:b6:b1:16:fd: ac:cd:0c:3b:0f:3a:45:6a:ef:03:08:24:8b:f0:dd: d7:11:ba:f8:8c:47:06:d4:6a:bc:96:fe:32:f5:96: 1c:a5:22:3e:9b:85:3b:ba:22:ed:a0:cc:cc:8b:31: d8:f9:e3:65:80:a1:7f:3e:16:e6:cd:81:8c:f7:4d: 81:06:d9:5c:94:4a:f7:f9:0c:a4:14:17:bf:35:7e: e4:b4:d1:3d:e1:fe:fe:df:5d:8c:b0:e3:df:5f:b1: cb:a8:2f:45:35:68:7d:d5:98:c0:a0:d9:d4:6c:28: 3d:cf:55:74:5d:e4:0f:09:88:b7:f8:6f:54:4c:a3: 5e:79:1d:03:60:d7:8a:39:1b:e1:d2:bd:28:28:59: 6f:85:d2:ce:75:1e:20:c3:90:76:54:da:f8:6b:c3: 92:06:cd:a2:fa:fb:54:3b:dd:c8:c5:8f:e0:13:fc: a5:fa:84:f8:d9:eb:61:3e:4d:01:a8:7c:0d:7c:f3: b6:30:31:b3:c6:9a:77:a4:ea:e3:47:14:97:84:21: 3b:e2:e1:15:ff:27:31:1b:4b:c2:a8:17:9d:28:24: 6c:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:B5:96:5C:EA:84:7B:DD:7F:83:1B:E7:9A:C4:19:B7:D7:04:7B:9C X509v3 Authority Key Identifier: keyid:F7:4E:96:CA:9E:E9:36:07:45:64:29:29:60:FB:C1:F9:CF:34:85:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E0329/45D6EFFCD39D11EDBBCB280FC4F9AE02/906Wyp7pNgdFZCkpYPvB-c80hU0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/906Wyp7pNgdFZCkpYPvB-c80hU0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0329/45D6EFFCD39D11EDBBCB280FC4F9AE02/906Wyp7pNgdFZCkpYPvB-c80hU0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:70:ac:00:95:c1:51:05:32:19:1c:84:8d:dc:1d:d2:ac:cb: 39:5c:d6:7b:3c:f5:4a:56:bc:35:b7:95:40:4d:7f:26:d2:3d: 73:0a:e9:c2:a6:36:a2:95:5d:5a:10:e6:97:e5:f2:ed:5a:d7: 8d:0b:01:52:0c:d8:52:9d:d3:90:fc:73:35:3f:f2:c2:40:89: e7:0e:4d:e7:7a:0b:a4:09:a0:cf:14:c7:8c:3e:57:c7:c7:b7: fa:de:c4:db:9a:7f:0b:5a:20:ff:b5:60:0f:74:9d:a9:2b:04: fa:96:9c:39:1a:0a:b4:36:1c:27:98:2b:a3:f9:a5:1b:1c:e1: d2:92:3b:aa:96:09:e2:d4:96:2c:c6:04:d6:67:20:fe:b6:84: 3e:82:4b:0c:ee:3a:f5:03:be:5c:61:ff:0e:1d:94:6a:59:bc: d0:c0:3d:9e:6e:79:02:da:18:53:a2:dc:90:85:e5:09:59:06: a5:57:24:29:7a:16:be:47:e9:e9:35:e4:4e:c6:40:a0:3d:53: d3:a3:23:0f:22:ca:32:8b:0e:ba:d6:2e:6f:32:80:29:ac:1b: ac:07:f3:6d:e9:c5:03:e8:e0:d5:63:5d:f4:62:01:f5:f3:2b: 6c:0f:4a:2b:e3:65:e2:2b:94:ab:0f:94:90:30:44:e5:5f:3e: 36:69:b9:e6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTAzMjkxMTAvBgNVBAUTKEY3NEU5NkNBOUVFOTM2MDc0NTY0MjkyOTYwRkJDMUY5 Q0YzNDg1NEQwHhcNMjUwNTMxMDMxMDE1WhcNMjUwNjA3MDMxMDE1WjAYMRYwFAYD VQQDEw02ODNhNzMxNy1jNGVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnjocZoYof880cKi9ig+tZLn+Y/WvzetFAIbQMFL98+iIfcial5dSiLaxFv2s zQw7DzpFau8DCCSL8N3XEbr4jEcG1Gq8lv4y9ZYcpSI+m4U7uiLtoMzMizHY+eNl gKF/PhbmzYGM902BBtlclEr3+QykFBe/NX7ktNE94f7+312MsOPfX7HLqC9FNWh9 1ZjAoNnUbCg9z1V0XeQPCYi3+G9UTKNeeR0DYNeKORvh0r0oKFlvhdLOdR4gw5B2 VNr4a8OSBs2i+vtUO93IxY/gE/yl+oT42ethPk0BqHwNfPO2MDGzxpp3pOrjRxSX hCE74uEV/ycxG0vCqBedKCRs3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN+1llzq hHvdf4Mb55rEGbfXBHucMB8GA1UdIwQYMBaAFPdOlsqe6TYHRWQpKWD7wfnPNIVN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMDMyOS80NUQ2RUZGQ0Qz OUQxMUVEQkJDQjI4MEZDNEY5QUUwMi85MDZXeXA3cE5nZEZaQ2twWVB2Qi1jODBo VTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzkwNld5cDdwTmdkRlpDa3BZUHZCLWM4MGhVMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MDMyOS80NUQ2RUZGQ0QzOUQxMUVEQkJDQjI4MEZDNEY5QUUwMi85MDZXeXA3cE5n ZEZaQ2twWVB2Qi1jODBoVTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB5cKwAlcFRBTIZHISN3B3SrMs5XNZ7PPVKVrw1t5VATX8m0j1zCunC pjailV1aEOaX5fLtWteNCwFSDNhSndOQ/HM1P/LCQInnDk3negukCaDPFMeMPlfH x7f63sTbmn8LWiD/tWAPdJ2pKwT6lpw5Ggq0NhwnmCuj+aUbHOHSkjuqlgni1JYs xgTWZyD+toQ+gksM7jr1A75cYf8OHZRqWbzQwD2ebnkC2hhTotyQheUJWQalVyQp eha+R+npNeROxkCgPVPToyMPIsoyiw661i5vMoAprBusB/Nt6cUD6ODVY130YgH1 8ytsD0or42XiK5SrD5SQMETlXz42abnm -----END CERTIFICATE-----Generated at Sat May 31 16:34:59 2025 by rpki-client