$ rpki-client -vvf rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.mft File: bTjFtM9LrT2YSHGnMhqdFpYL4mg.mft (raw, json) Hash identifier: aP9RI41nd6DOXxr5O5jKCmhEhsZdIN/KEIVBjInv1r0= Subject key identifier: 8E:63:E6:20:21:9E:5A:09:CD:0D:C1:E2:02:84:39:35:D9:31:81:6A Authority key identifier: 6D:38:C5:B4:CF:4B:AD:3D:98:48:71:A7:32:1A:9D:16:96:0B:E2:68 Certificate issuer: /CN=A91E170B/serialNumber=6D38C5B4CF4BAD3D984871A7321A9D16960BE268 Certificate serial: 3611 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.mft Manifest number: 3566 Signing time: Sat 31 May 2025 14:17:48 +0000 Manifest this update: Sat 31 May 2025 14:17:47 +0000 Manifest next update: Sat 07 Jun 2025 14:17:47 +0000 Files and hashes: 1: bTjFtM9LrT2YSHGnMhqdFpYL4mg.crl (hash: OjWk05lKQMShN9SP3zzkYoiOfmC4xhLcPB0JAD+L45A=) 2: 119B023E80A111EFAC559545C4F9AE02.roa (hash: UcLab4fcVSxFTCKz9jwV2FcIwBHm9AwWLQOJArqJHjI=) 3: D06D852C0E8411EFB653657DC4F9AE02.roa (hash: SywI770ENl7TLzZPS+7Qd4FzLZZohYfrrDDPXPl1a7g=) 4: 4703352E2BC311EEA3EEFA66C4F9AE02.roa (hash: GhMpIsuZe6UWSXVhxx0gZ7LGDFuMOBfOpEr3szGlSIw=) 5: 5E05FB54A8FE11E990A7E27FC4F9AE02.roa (hash: mkS8yistQSPi7NMH1JehepWmWxUa6l17roNRXFEiwqI=) 6: FCBF1666677C11EBB2A3F00CC4F9AE02.roa (hash: MXTujm5bxVtwRR2qRhwfBiQo+U60HZqoc/46+Q9rCqg=) 7: 88978730772311EBB972032EC4F9AE02.roa (hash: nz3/6k7N3mPNzs0DFxh1VvDXVpDIjk6/7OQf5UZ/EgA=) 8: 331F345A383611E6B2282B5DC4F9AE02.roa (hash: WuXzJGatSIhxLLVFJYnAc7zb2/GN+pIVoHOaMyICWzI=) 9: 318FB51A383611E6B2282B5DC4F9AE02.roa (hash: 4Q3os1Mfu8xIUdVQK6hTBnRWzUONxabmo1fE2pyLLXE=) 10: 328EDB76383611E6B2282B5DC4F9AE02.roa (hash: ch1wPAb/c25q+6cdmEAHM5pjXCNPqiccski5eE5WXDs=) 11: 3204348A383611E6B2282B5DC4F9AE02.roa (hash: mPli45HHzDhlWzD7+vX8/tUBtrWHY58J4/XZrbS0zeo=) 12: 89A73D46772311EBB972032EC4F9AE02.roa (hash: 9hXnGMU3WUCKM3WK6+9iFLRQ6N17p8pM/kmtF91qcvQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.crl rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 14:17:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13841 (0x3611) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E170B, serialNumber=6D38C5B4CF4BAD3D984871A7321A9D16960BE268 Validity Not Before: May 31 14:17:47 2025 GMT Not After : Jun 7 14:17:47 2025 GMT Subject: CN=683b0f8b-cb42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:36:a1:e8:6c:b9:c2:a3:71:ea:bd:4a:27:19: de:af:53:8c:c3:dd:d0:15:66:28:16:3c:7b:bc:66: 1e:fb:a3:9a:ab:a9:b1:fd:50:59:84:26:97:8b:d0: 61:fb:44:64:e8:fd:a2:08:e1:21:5c:da:c6:20:8a: df:77:0b:74:c0:2f:9f:49:7e:d0:d9:0f:ab:a1:af: 0b:1d:60:13:5d:74:ef:af:82:55:86:c9:09:bf:33: d9:b7:b4:e4:37:73:69:32:5c:a6:8a:b7:72:89:ef: 89:8d:f8:55:a2:03:b0:a1:f2:0b:79:03:a9:b9:c6: d4:d6:cc:ae:6f:06:1c:79:87:67:93:d0:d2:73:2d: af:6d:1e:6e:95:dd:a1:75:26:c0:d7:6d:f9:e8:f0: c9:8d:83:4f:9c:21:24:f0:1f:b2:e3:c9:7f:16:1a: ea:1e:64:6f:63:d1:ca:f0:02:98:0d:4c:2c:02:b3: f1:d5:f2:0f:0b:6f:ec:a4:32:2b:26:eb:ba:5c:a4: 42:f5:a6:37:85:59:8e:25:a2:65:53:64:b5:ec:2a: c7:32:82:f1:2a:21:93:e9:15:a7:04:67:fb:ba:4f: 9a:72:87:86:c1:7d:21:5a:a9:72:20:2c:2a:2f:62: d0:2f:fb:2a:6c:ad:85:fa:a3:54:34:10:df:1a:b1: 92:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:63:E6:20:21:9E:5A:09:CD:0D:C1:E2:02:84:39:35:D9:31:81:6A X509v3 Authority Key Identifier: keyid:6D:38:C5:B4:CF:4B:AD:3D:98:48:71:A7:32:1A:9D:16:96:0B:E2:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:71:b0:7e:7c:66:23:ee:be:da:e9:95:0e:dd:27:a4:e1:de: 65:6c:74:a8:96:66:ef:d6:b5:a6:4e:74:23:75:14:ca:e8:8f: f0:9c:88:c1:67:41:d5:e8:5c:29:9a:1c:82:2d:d2:1a:ed:72: 91:e5:e0:53:9e:e0:b0:48:47:1d:fd:41:32:66:be:55:0b:6e: 1b:f9:85:df:96:fc:ef:e6:cf:08:0d:21:20:42:93:0d:49:48: 02:74:cb:29:4b:4e:4c:37:6e:89:f6:ed:65:04:b5:19:8e:c9: 26:1b:ad:cf:03:33:56:a6:46:80:d7:a7:46:1b:bf:cc:42:50: 4c:8a:54:b3:3f:f7:d2:15:a9:cd:31:05:05:b3:7c:ee:4c:af: 31:c7:8d:1a:a4:46:b9:db:37:6d:b5:93:6f:d6:9d:a2:99:98: 21:85:09:78:e3:c9:a6:31:32:56:65:14:7b:5d:2b:47:7d:4a: 36:07:5f:d4:c3:56:4b:a6:15:3c:7b:d4:29:56:e0:cd:33:4a: ed:0d:a8:d0:3f:93:ba:d7:de:8d:a2:36:5c:a8:72:74:83:bd: 13:ef:87:25:88:bb:aa:85:99:a7:20:31:19:2a:f4:b3:7e:34: af:12:85:5b:dc:8a:c0:48:ec:8f:dc:ee:e1:52:b5:6d:55:17: 15:6c:20:95 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNhEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTE3MEIxMTAvBgNVBAUTKDZEMzhDNUI0Q0Y0QkFEM0Q5ODQ4NzFBNzMyMUE5RDE2 OTYwQkUyNjgwHhcNMjUwNTMxMTQxNzQ3WhcNMjUwNjA3MTQxNzQ3WjAYMRYwFAYD VQQDEw02ODNiMGY4Yi1jYjQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoDah6Gy5wqNx6r1KJxner1OMw93QFWYoFjx7vGYe+6Oaq6mx/VBZhCaXi9Bh +0Rk6P2iCOEhXNrGIIrfdwt0wC+fSX7Q2Q+roa8LHWATXXTvr4JVhskJvzPZt7Tk N3NpMlymirdyie+JjfhVogOwofILeQOpucbU1syubwYceYdnk9DScy2vbR5uld2h dSbA12356PDJjYNPnCEk8B+y48l/FhrqHmRvY9HK8AKYDUwsArPx1fIPC2/spDIr Juu6XKRC9aY3hVmOJaJlU2S17CrHMoLxKiGT6RWnBGf7uk+acoeGwX0hWqlyICwq L2LQL/sqbK2F+qNUNBDfGrGS4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI5j5iAh nloJzQ3B4gKEOTXZMYFqMB8GA1UdIwQYMBaAFG04xbTPS609mEhxpzIanRaWC+Jo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTcwQi85N0FGNkRGMDFE NkQxMUUyQTEyRDlFQUUwOEIwMkNEMi9iVGpGdE05THJUMllTSEduTWhxZEZwWUw0 bWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JUakZ0TTlMclQyWVNIR25NaHFkRnBZTDRtZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MTcwQi85N0FGNkRGMDFENkQxMUUyQTEyRDlFQUUwOEIwMkNEMi9iVGpGdE05THJU MllTSEduTWhxZEZwWUw0bWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCmcbB+fGYj7r7a6ZUO3Sek4d5lbHSolmbv1rWmTnQjdRTK6I/wnIjB Z0HV6FwpmhyCLdIa7XKR5eBTnuCwSEcd/UEyZr5VC24b+YXflvzv5s8IDSEgQpMN SUgCdMspS05MN26J9u1lBLUZjskmG63PAzNWpkaA16dGG7/MQlBMilSzP/fSFanN MQUFs3zuTK8xx40apEa52zdttZNv1p2imZghhQl448mmMTJWZRR7XStHfUo2B1/U w1ZLphU8e9QpVuDNM0rtDajQP5O6196NojZcqHJ0g70T74cliLuqhZmnIDEZKvSz fjSvEoVb3IrASOyP3O7hUrVtVRcVbCCV -----END CERTIFICATE-----Generated at Sat May 31 16:57:47 2025 by rpki-client