$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0875/6D91AABC593111EAAA31B40AC4F9AE02/-XNJLtZGko7R8Q3oRmLlUj9VzI0.mft File: -XNJLtZGko7R8Q3oRmLlUj9VzI0.mft (raw, json) Hash identifier: Vnzd18TR5yxCzdiehGjiWlPORgM/JenRhFnPos0mFDQ= Subject key identifier: 9A:A8:AD:D7:7E:64:A2:6A:A7:28:5D:CC:55:06:36:FA:51:C9:42:D6 Authority key identifier: F9:73:49:2E:D6:46:92:8E:D1:F1:0D:E8:46:62:E5:52:3F:55:CC:8D Certificate issuer: /CN=A91E0875/serialNumber=F973492ED646928ED1F10DE84662E5523F55CC8D Certificate serial: 0AD7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XNJLtZGko7R8Q3oRmLlUj9VzI0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E0875/6D91AABC593111EAAA31B40AC4F9AE02/-XNJLtZGko7R8Q3oRmLlUj9VzI0.mft Manifest number: 0AB1 Signing time: Fri 30 May 2025 19:46:25 +0000 Manifest this update: Fri 30 May 2025 19:46:25 +0000 Manifest next update: Fri 06 Jun 2025 19:46:25 +0000 Files and hashes: 1: -XNJLtZGko7R8Q3oRmLlUj9VzI0.crl (hash: sT/uT2L3RoLcfXulPdBC6BBcKIWcGs2mZT8w8WGK+yE=) 2: F1FC74DE7DE111EEB1BFD61AC4F9AE02.roa (hash: 9vhYDzl42dspDXwVKnxh739DiVyQvgiliwEtZbzC2G8=) 3: 33CFE442C07511EE980AEC0CC4F9AE02.roa (hash: 66vEtVsOZgkHbfKKZep1to2E133VnAUxFeLa9d7Wa3k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E0875/6D91AABC593111EAAA31B40AC4F9AE02/-XNJLtZGko7R8Q3oRmLlUj9VzI0.crl rsync://rpki.apnic.net/member_repository/A91E0875/6D91AABC593111EAAA31B40AC4F9AE02/-XNJLtZGko7R8Q3oRmLlUj9VzI0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XNJLtZGko7R8Q3oRmLlUj9VzI0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 19:46:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2775 (0xad7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E0875, serialNumber=F973492ED646928ED1F10DE84662E5523F55CC8D Validity Not Before: May 30 19:46:25 2025 GMT Not After : Jun 6 19:46:25 2025 GMT Subject: CN=683a0b11-9825 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:57:f5:a0:c1:09:67:bf:46:3b:d7:41:89:82: 86:b1:58:34:3b:46:fd:ea:b3:8a:c1:72:8f:2e:ad: e0:ff:da:d2:ed:2a:65:c6:f9:af:bf:17:50:93:8b: 0f:42:64:9d:98:88:9d:1a:ab:20:be:15:71:4c:2a: d1:a8:c9:e2:43:5d:8d:61:ae:f5:72:e1:6e:07:39: 00:74:66:b1:ae:9c:3c:b0:18:bf:41:28:ea:1d:51: 64:49:cd:ca:b4:c8:8b:ac:cd:13:d9:95:cc:a2:e8: bb:e7:df:ef:ef:0b:d0:49:e1:73:fb:1f:e4:da:6a: b1:56:2b:ca:06:8a:88:5b:11:5c:43:9c:5f:55:79: 0b:5d:89:96:09:28:f4:3c:69:7a:4b:93:c2:cf:60: b9:f5:93:f0:c4:a2:8c:a4:01:9f:91:89:60:ed:a5: d2:3e:0d:c2:b6:58:9a:31:61:19:c5:3f:e1:a4:07: ce:58:cf:ed:06:94:94:1e:79:52:ad:d9:a9:d0:ae: ea:fe:f6:e8:80:9f:e4:6b:76:f6:ca:ab:36:41:7e: 0f:8e:52:40:b8:a2:d7:d7:29:2e:28:3e:93:33:ee: 84:f9:31:dd:81:2d:bf:f8:fe:b2:b6:85:09:98:79: 8b:93:b3:55:0b:0a:61:a5:00:dd:3c:c9:8b:36:1f: 89:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:A8:AD:D7:7E:64:A2:6A:A7:28:5D:CC:55:06:36:FA:51:C9:42:D6 X509v3 Authority Key Identifier: keyid:F9:73:49:2E:D6:46:92:8E:D1:F1:0D:E8:46:62:E5:52:3F:55:CC:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E0875/6D91AABC593111EAAA31B40AC4F9AE02/-XNJLtZGko7R8Q3oRmLlUj9VzI0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XNJLtZGko7R8Q3oRmLlUj9VzI0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0875/6D91AABC593111EAAA31B40AC4F9AE02/-XNJLtZGko7R8Q3oRmLlUj9VzI0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:db:7d:f0:97:86:21:81:12:29:6d:a5:f3:72:bd:64:be:8d: 66:05:9b:9a:86:7c:eb:6a:73:84:51:85:41:d9:2e:65:cd:df: 32:fa:4c:1b:ba:a6:db:dd:e9:cf:67:e2:b6:cd:e9:16:30:a5: 0c:4b:13:df:b9:ef:d7:61:cd:f0:c1:07:75:85:33:46:6e:5e: df:cc:cb:2c:13:0c:51:12:18:40:97:a2:55:0b:1a:ce:84:5b: 18:3d:07:ca:60:4e:78:b6:75:c5:c3:6e:5f:82:3d:a1:a6:b8: 50:07:cb:78:ea:46:03:fa:e8:cd:10:e1:8f:f2:23:81:05:77: 3e:ec:ec:2b:5c:ef:13:1c:25:52:6d:fa:c9:33:7d:81:f2:0b: 82:e1:a6:5f:95:11:bf:f1:6f:56:77:7f:13:8e:42:95:c4:cb: 97:0f:5a:7c:48:55:5f:5e:16:04:85:32:2f:46:fe:69:5e:d9: fe:53:6f:29:73:b4:b3:15:d5:6a:58:23:00:3d:8a:1b:3c:d7: d7:cd:ff:79:b1:16:a6:25:fc:47:67:e1:c7:09:72:f3:4c:6f: 2a:2b:3c:1d:cd:eb:5f:1a:d5:52:01:2b:93:36:d8:b4:71:75: 9b:66:19:0e:03:58:85:1b:42:c1:56:3b:5c:85:c8:6b:c5:b6: eb:61:38:8e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCtcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTA4NzUxMTAvBgNVBAUTKEY5NzM0OTJFRDY0NjkyOEVEMUYxMERFODQ2NjJFNTUy M0Y1NUNDOEQwHhcNMjUwNTMwMTk0NjI1WhcNMjUwNjA2MTk0NjI1WjAYMRYwFAYD VQQDEw02ODNhMGIxMS05ODI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApVf1oMEJZ79GO9dBiYKGsVg0O0b96rOKwXKPLq3g/9rS7SplxvmvvxdQk4sP QmSdmIidGqsgvhVxTCrRqMniQ12NYa71cuFuBzkAdGaxrpw8sBi/QSjqHVFkSc3K tMiLrM0T2ZXMoui759/v7wvQSeFz+x/k2mqxVivKBoqIWxFcQ5xfVXkLXYmWCSj0 PGl6S5PCz2C59ZPwxKKMpAGfkYlg7aXSPg3CtliaMWEZxT/hpAfOWM/tBpSUHnlS rdmp0K7q/vbogJ/ka3b2yqs2QX4PjlJAuKLX1ykuKD6TM+6E+THdgS2/+P6ytoUJ mHmLk7NVCwphpQDdPMmLNh+JpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJqordd+ ZKJqpyhdzFUGNvpRyULWMB8GA1UdIwQYMBaAFPlzSS7WRpKO0fEN6EZi5VI/VcyN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMDg3NS82RDkxQUFCQzU5 MzExMUVBQUEzMUI0MEFDNEY5QUUwMi8tWE5KTHRaR2tvN1I4UTNvUm1MbFVqOVZ6 STAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1YTkpMdFpHa283UjhRM29SbUxsVWo5VnpJMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MDg3NS82RDkxQUFCQzU5MzExMUVBQUEzMUI0MEFDNEY5QUUwMi8tWE5KTHRaR2tv N1I4UTNvUm1MbFVqOVZ6STAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCv233wl4YhgRIpbaXzcr1kvo1mBZuahnzranOEUYVB2S5lzd8y+kwb uqbb3enPZ+K2zekWMKUMSxPfue/XYc3wwQd1hTNGbl7fzMssEwxREhhAl6JVCxrO hFsYPQfKYE54tnXFw25fgj2hprhQB8t46kYD+ujNEOGP8iOBBXc+7OwrXO8THCVS bfrJM32B8guC4aZflRG/8W9Wd38TjkKVxMuXD1p8SFVfXhYEhTIvRv5pXtn+U28p c7SzFdVqWCMAPYobPNfXzf95sRamJfxHZ+HHCXLzTG8qKzwdzetfGtVSASuTNti0 cXWbZhkOA1iFG0LBVjtchchrxbbrYTiO -----END CERTIFICATE-----Generated at Sat May 31 17:26:18 2025 by rpki-client