$ rpki-client -vvf rpki.apnic.net/member_repository/A91E15AD/B8B91C467E1211EE9CB11F3EC4F9AE02/fzUqdpVtdwL8d69g_MEp5h_b6jI.mft File: fzUqdpVtdwL8d69g_MEp5h_b6jI.mft (raw, json) Hash identifier: mXZ/LhOsox2LV8Y34eFsjTIerxh4p2Ba1HtLf3d41kI= Subject key identifier: 85:AF:44:E9:7D:5A:2B:F0:F2:71:11:49:7C:A3:21:03:03:2D:7E:11 Authority key identifier: 7F:35:2A:76:95:6D:77:02:FC:77:AF:60:FC:C1:29:E6:1F:DB:EA:32 Certificate issuer: /CN=A91E15AD/serialNumber=7F352A76956D7702FC77AF60FCC129E61FDBEA32 Certificate serial: 0132 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fzUqdpVtdwL8d69g_MEp5h_b6jI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E15AD/B8B91C467E1211EE9CB11F3EC4F9AE02/fzUqdpVtdwL8d69g_MEp5h_b6jI.mft Manifest number: 012A Signing time: Sat 31 May 2025 04:19:12 +0000 Manifest this update: Sat 31 May 2025 04:19:11 +0000 Manifest next update: Sat 07 Jun 2025 04:19:11 +0000 Files and hashes: 1: fzUqdpVtdwL8d69g_MEp5h_b6jI.crl (hash: h4Hu0xR5xCBNvH1eJYELNCnBJ/WF/cMb0qMYWMOov6I=) 2: 3C2B0A98259911EFB9393E2EC4F9AE02.roa (hash: GUAKLioCiwQM0sEveusi3ixaoMT6G47CkUGC3S4J4Kc=) 3: 2A26D2607E1311EEAF8FD93EC4F9AE02.roa (hash: kLwQ9PBIqCKII7G0saaqu2rGr7qnQzEy5QYjy0dvRGs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E15AD/B8B91C467E1211EE9CB11F3EC4F9AE02/fzUqdpVtdwL8d69g_MEp5h_b6jI.crl rsync://rpki.apnic.net/member_repository/A91E15AD/B8B91C467E1211EE9CB11F3EC4F9AE02/fzUqdpVtdwL8d69g_MEp5h_b6jI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fzUqdpVtdwL8d69g_MEp5h_b6jI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 04:19:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 306 (0x132) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E15AD, serialNumber=7F352A76956D7702FC77AF60FCC129E61FDBEA32 Validity Not Before: May 31 04:19:11 2025 GMT Not After : Jun 7 04:19:11 2025 GMT Subject: CN=683a8340-2bf4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:16:1a:4e:94:4a:40:4f:2b:ea:53:7f:1e:77: 2b:29:d6:f3:8f:b1:98:3c:d8:fa:43:cb:3d:74:dd: f9:91:81:b0:4c:53:1c:0e:c7:f0:da:4b:ba:f2:ac: 8b:d7:35:06:1d:da:d7:b1:27:28:23:ee:8b:2b:4c: 55:b3:72:b2:1f:1f:7c:40:29:14:f1:5d:bc:e4:c4: 5a:3e:59:b9:a6:bd:29:66:e2:7c:d1:a6:f8:94:25: d6:13:5b:ea:c0:82:20:36:aa:28:00:87:83:04:74: b2:da:4e:5d:23:61:82:62:52:91:a3:77:11:ca:7a: 5f:97:7d:70:27:14:75:be:30:7a:fc:35:86:1f:69: 53:4a:2c:36:be:77:6d:e1:70:76:2c:e0:0d:0c:c1: 61:dd:11:02:c7:56:8d:72:4c:4d:ce:6f:71:6c:16: cd:cc:55:f7:b6:5a:4a:67:8e:83:8d:b3:40:7d:aa: 02:77:ea:ef:f8:2a:e2:ad:6f:74:ef:be:0e:c1:29: d4:f3:8f:e4:20:5a:65:31:60:65:4e:38:5a:0b:0e: a7:9a:04:d0:cc:00:4d:42:03:f2:c6:fa:80:fe:c2: 34:82:f3:d7:2b:b6:3f:47:e5:56:c7:6a:01:3d:45: 57:fa:4f:7f:55:df:79:da:3c:c5:c0:f1:2f:7b:2f: 2d:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:AF:44:E9:7D:5A:2B:F0:F2:71:11:49:7C:A3:21:03:03:2D:7E:11 X509v3 Authority Key Identifier: keyid:7F:35:2A:76:95:6D:77:02:FC:77:AF:60:FC:C1:29:E6:1F:DB:EA:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E15AD/B8B91C467E1211EE9CB11F3EC4F9AE02/fzUqdpVtdwL8d69g_MEp5h_b6jI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fzUqdpVtdwL8d69g_MEp5h_b6jI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E15AD/B8B91C467E1211EE9CB11F3EC4F9AE02/fzUqdpVtdwL8d69g_MEp5h_b6jI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:8e:f0:cc:1c:c6:91:cc:2a:df:bc:e4:5a:90:83:a4:b3:19: aa:07:84:09:6e:dd:7f:3a:ac:c6:a8:f4:71:c2:29:94:14:d1: d7:ec:b6:fa:9c:27:8a:24:83:1b:29:0c:e0:28:89:ff:cd:17: d8:a9:af:0d:a7:e7:45:e0:39:8f:d2:c9:0d:4f:c3:3c:99:7d: fd:3f:f6:a6:1b:a8:98:5a:bc:a9:93:4c:c4:67:b7:7d:fc:1e: ea:1c:fb:5a:26:5a:b7:94:47:ba:8d:32:5c:c9:37:18:7f:f9: 80:f8:f5:86:bf:d7:e7:de:f6:e5:e5:86:63:76:6d:0d:7a:0a: e7:4b:6e:24:e9:72:40:86:64:5a:07:4b:e6:5e:87:fc:cb:4d: 6b:59:ce:ce:d2:49:3f:2e:b7:6c:bc:df:4b:78:21:57:45:77: 82:75:a0:70:f4:db:7f:c8:cb:4d:68:2c:66:57:23:b0:41:09: 64:e7:d8:42:78:6d:f1:bd:5b:fc:df:8b:b0:5e:c1:ee:ba:bd: 88:34:08:2d:fa:b8:e4:2d:9d:a8:63:8a:a1:f8:75:e1:1b:cb: 22:b1:c7:ca:7b:14:da:18:8b:d3:7f:65:ae:d4:96:be:19:44: 93:f4:92:c7:48:73:f8:04:ad:1a:eb:9c:07:52:b7:b4:a7:4e: 8b:2e:c7:69 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTE1QUQxMTAvBgNVBAUTKDdGMzUyQTc2OTU2RDc3MDJGQzc3QUY2MEZDQzEyOUU2 MUZEQkVBMzIwHhcNMjUwNTMxMDQxOTExWhcNMjUwNjA3MDQxOTExWjAYMRYwFAYD VQQDEw02ODNhODM0MC0yYmY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5BYaTpRKQE8r6lN/HncrKdbzj7GYPNj6Q8s9dN35kYGwTFMcDsfw2ku68qyL 1zUGHdrXsScoI+6LK0xVs3KyHx98QCkU8V285MRaPlm5pr0pZuJ80ab4lCXWE1vq wIIgNqooAIeDBHSy2k5dI2GCYlKRo3cRynpfl31wJxR1vjB6/DWGH2lTSiw2vndt 4XB2LOANDMFh3RECx1aNckxNzm9xbBbNzFX3tlpKZ46DjbNAfaoCd+rv+CrirW90 774OwSnU84/kIFplMWBlTjhaCw6nmgTQzABNQgPyxvqA/sI0gvPXK7Y/R+VWx2oB PUVX+k9/Vd952jzFwPEvey8tUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIWvROl9 Wivw8nERSXyjIQMDLX4RMB8GA1UdIwQYMBaAFH81KnaVbXcC/HevYPzBKeYf2+oy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTVBRC9COEI5MUM0NjdF MTIxMUVFOUNCMTFGM0VDNEY5QUUwMi9melVxZHBWdGR3TDhkNjlnX01FcDVoX2I2 akkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Z6VXFkcFZ0ZHdMOGQ2OWdfTUVwNWhfYjZqSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MTVBRC9COEI5MUM0NjdFMTIxMUVFOUNCMTFGM0VDNEY5QUUwMi9melVxZHBWdGR3 TDhkNjlnX01FcDVoX2I2akkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAqjvDMHMaRzCrfvORakIOksxmqB4QJbt1/OqzGqPRxwimUFNHX7Lb6 nCeKJIMbKQzgKIn/zRfYqa8Np+dF4DmP0skNT8M8mX39P/amG6iYWrypk0zEZ7d9 /B7qHPtaJlq3lEe6jTJcyTcYf/mA+PWGv9fn3vbl5YZjdm0NegrnS24k6XJAhmRa B0vmXof8y01rWc7O0kk/LrdsvN9LeCFXRXeCdaBw9Nt/yMtNaCxmVyOwQQlk59hC eG3xvVv834uwXsHuur2INAgt+rjkLZ2oY4qh+HXhG8siscfKexTaGIvTf2Wu1Ja+ GUST9JLHSHP4BK0a65wHUre0p06LLsdp -----END CERTIFICATE-----Generated at Sat May 31 16:53:44 2025 by rpki-client