$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6B9A/1A106CD0615011EFAE7A8C73C4F9AE02/MnuOg9VLpp18NcajREfRsbAR2WY.mft File: MnuOg9VLpp18NcajREfRsbAR2WY.mft (raw, json) Hash identifier: jqJttjOCHjCzlJ3LXByQt5/KfX6trGd/Su+xUnx9V6M= Subject key identifier: 23:A7:89:31:4D:F2:5A:33:4C:3D:B3:85:12:67:25:71:CA:71:7C:8B Authority key identifier: 32:7B:8E:83:D5:4B:A6:9D:7C:35:C6:A3:44:47:D1:B1:B0:11:D9:66 Certificate issuer: /CN=A91E6B9A/serialNumber=327B8E83D54BA69D7C35C6A34447D1B1B011D966 Certificate serial: 90 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MnuOg9VLpp18NcajREfRsbAR2WY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6B9A/1A106CD0615011EFAE7A8C73C4F9AE02/MnuOg9VLpp18NcajREfRsbAR2WY.mft Manifest number: 90 Signing time: Sat 31 May 2025 06:01:16 +0000 Manifest this update: Sat 31 May 2025 06:01:16 +0000 Manifest next update: Sat 07 Jun 2025 06:01:16 +0000 Files and hashes: 1: MnuOg9VLpp18NcajREfRsbAR2WY.crl (hash: 51pQcAChtnKmOUw2gSg3A5VnexlZGiFGnYARBRkK3ZI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6B9A/1A106CD0615011EFAE7A8C73C4F9AE02/MnuOg9VLpp18NcajREfRsbAR2WY.crl rsync://rpki.apnic.net/member_repository/A91E6B9A/1A106CD0615011EFAE7A8C73C4F9AE02/MnuOg9VLpp18NcajREfRsbAR2WY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MnuOg9VLpp18NcajREfRsbAR2WY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 06:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 144 (0x90) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6B9A, serialNumber=327B8E83D54BA69D7C35C6A34447D1B1B011D966 Validity Not Before: May 31 06:01:16 2025 GMT Not After : Jun 7 06:01:16 2025 GMT Subject: CN=683a9b2c-439c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:c4:7a:b4:a5:f5:22:82:7d:a1:01:04:4f:e9: 98:7c:61:fe:f9:b1:d2:62:56:be:19:c4:8d:9a:b4: b6:09:c4:78:d4:67:76:aa:ba:af:2c:b6:f9:1e:ec: 2d:63:3a:74:b8:a7:2b:34:88:84:44:32:02:0c:44: b2:77:8f:a3:3a:1a:3e:42:6a:aa:26:b1:17:01:f0: 86:2e:6b:f9:6f:56:3d:45:50:6c:63:ac:94:47:73: 40:55:d1:87:54:20:be:ed:fd:a5:63:d4:7d:9a:00: 2c:44:0a:3d:44:3d:69:34:bb:d9:59:b5:ab:3d:4a: 38:70:ac:8e:cd:c7:a4:80:43:86:ad:42:46:0b:10: 37:f4:6e:a5:ad:cf:16:f1:e1:9d:4d:df:ba:97:a0: 5d:59:b8:b6:d8:91:a5:36:c2:a4:45:c0:3b:13:b8: d1:59:c0:71:eb:59:09:19:4e:23:d6:bf:c4:71:ee: 7d:c6:ff:85:23:75:f2:09:6d:85:64:e4:9e:23:d4: a1:e9:a2:85:66:c0:0e:ae:8b:12:ba:ae:57:96:3a: 93:28:64:0f:e6:ed:c3:15:98:90:93:82:90:d1:c4: 78:07:11:ce:58:4b:6e:31:9d:51:3e:63:75:53:16: 59:8c:bf:d9:13:7d:1c:a9:bb:f1:c6:3f:3d:5b:27: f6:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:A7:89:31:4D:F2:5A:33:4C:3D:B3:85:12:67:25:71:CA:71:7C:8B X509v3 Authority Key Identifier: keyid:32:7B:8E:83:D5:4B:A6:9D:7C:35:C6:A3:44:47:D1:B1:B0:11:D9:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6B9A/1A106CD0615011EFAE7A8C73C4F9AE02/MnuOg9VLpp18NcajREfRsbAR2WY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MnuOg9VLpp18NcajREfRsbAR2WY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6B9A/1A106CD0615011EFAE7A8C73C4F9AE02/MnuOg9VLpp18NcajREfRsbAR2WY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:f1:b8:23:e2:3a:84:53:e1:07:a9:29:a8:e9:1b:5e:32:3e: b9:f0:28:4c:db:fb:09:eb:f2:81:1a:76:5a:4e:ca:87:2b:bf: 89:1d:22:c6:fb:a2:dd:1c:cd:e8:15:e1:82:80:aa:a4:e5:91: 45:31:b6:af:19:0c:99:e9:46:40:46:6c:db:22:0c:60:f4:e4: e6:ce:a9:63:81:bd:c9:cd:de:c1:b4:cb:8a:16:03:d9:20:a6: 4f:67:4b:fb:89:a1:d1:99:f3:41:4a:26:86:b1:0e:13:42:6e: c4:5d:a7:1a:e3:91:be:9f:69:c8:7e:27:ab:f4:ed:4a:ea:a2: 47:d0:19:11:e8:74:bb:08:2d:1b:92:8b:5f:55:33:51:b3:74: e1:9b:06:0b:c8:b2:91:ea:e9:dc:1c:c8:a3:bd:e1:53:1b:3c: 44:3d:b7:f5:a1:ac:82:5e:bb:8f:23:41:b8:6f:80:ab:e3:e1: a0:24:fc:b7:0f:a5:67:b1:35:d5:bd:13:4a:7f:2d:27:4f:f4: 88:25:8f:52:90:b4:71:0b:e8:b4:ff:2b:b4:22:40:c8:1f:58: b4:d1:89:32:28:d8:d9:ea:05:92:e8:d0:8d:55:b1:82:fc:4c: fc:90:1a:92:f5:65:bb:5f:3e:a2:a8:a9:72:19:95:71:e5:43: 86:cc:91:2c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTZCOUExMTAvBgNVBAUTKDMyN0I4RTgzRDU0QkE2OUQ3QzM1QzZBMzQ0NDdEMUIx QjAxMUQ5NjYwHhcNMjUwNTMxMDYwMTE2WhcNMjUwNjA3MDYwMTE2WjAYMRYwFAYD VQQDEw02ODNhOWIyYy00MzljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArMR6tKX1IoJ9oQEET+mYfGH++bHSYla+GcSNmrS2CcR41Gd2qrqvLLb5Huwt Yzp0uKcrNIiERDICDESyd4+jOho+QmqqJrEXAfCGLmv5b1Y9RVBsY6yUR3NAVdGH VCC+7f2lY9R9mgAsRAo9RD1pNLvZWbWrPUo4cKyOzcekgEOGrUJGCxA39G6lrc8W 8eGdTd+6l6BdWbi22JGlNsKkRcA7E7jRWcBx61kJGU4j1r/Ece59xv+FI3XyCW2F ZOSeI9Sh6aKFZsAOrosSuq5XljqTKGQP5u3DFZiQk4KQ0cR4BxHOWEtuMZ1RPmN1 UxZZjL/ZE30cqbvxxj89Wyf2bwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCOniTFN 8lozTD2zhRJnJXHKcXyLMB8GA1UdIwQYMBaAFDJ7joPVS6adfDXGo0RH0bGwEdlm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNkI5QS8xQTEwNkNEMDYx NTAxMUVGQUU3QThDNzNDNEY5QUUwMi9NbnVPZzlWTHBwMThOY2FqUkVmUnNiQVIy V1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01udU9nOVZMcHAxOE5jYWpSRWZSc2JBUjJXWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NkI5QS8xQTEwNkNEMDYxNTAxMUVGQUU3QThDNzNDNEY5QUUwMi9NbnVPZzlWTHBw MThOY2FqUkVmUnNiQVIyV1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCB8bgj4jqEU+EHqSmo6RteMj658ChM2/sJ6/KBGnZaTsqHK7+JHSLG +6LdHM3oFeGCgKqk5ZFFMbavGQyZ6UZARmzbIgxg9OTmzqljgb3Jzd7BtMuKFgPZ IKZPZ0v7iaHRmfNBSiaGsQ4TQm7EXaca45G+n2nIfier9O1K6qJH0BkR6HS7CC0b kotfVTNRs3ThmwYLyLKR6uncHMijveFTGzxEPbf1oayCXruPI0G4b4Cr4+GgJPy3 D6VnsTXVvRNKfy0nT/SIJY9SkLRxC+i0/yu0IkDIH1i00YkyKNjZ6gWS6NCNVbGC /Ez8kBqS9WW7Xz6iqKlyGZVx5UOGzJEs -----END CERTIFICATE-----Generated at Sat May 31 16:38:08 2025 by rpki-client