$ rpki-client -vvf rpki.apnic.net/member_repository/A91E76B8/FF1508EE7E9A11E8B69FC02DC4F9AE02/MOfescUi55FZhZK2RTCIY8oADhg.mft File: MOfescUi55FZhZK2RTCIY8oADhg.mft (raw, json) Hash identifier: PXEs4q6e4NoQOydsQbY8tnOFHNbeRFsxUkIRmm9FN0I= Subject key identifier: 29:0A:67:D9:DD:9F:19:2E:45:15:8E:2D:C5:08:C1:95:EF:DD:3A:90 Authority key identifier: 30:E7:DE:B1:C5:22:E7:91:59:85:92:B6:45:30:88:63:CA:00:0E:18 Certificate issuer: /CN=A91E76B8/serialNumber=30E7DEB1C522E791598592B645308863CA000E18 Certificate serial: 1449 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOfescUi55FZhZK2RTCIY8oADhg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E76B8/FF1508EE7E9A11E8B69FC02DC4F9AE02/MOfescUi55FZhZK2RTCIY8oADhg.mft Manifest number: 142D Signing time: Fri 06 Jun 2025 16:57:50 +0000 Manifest this update: Fri 06 Jun 2025 16:57:49 +0000 Manifest next update: Fri 13 Jun 2025 16:57:49 +0000 Files and hashes: 1: MOfescUi55FZhZK2RTCIY8oADhg.crl (hash: 4IK/jiG5EAlV/q4zlVAMrBCkny9PMjrBKX+5Lmx2/w8=) 2: ECBAA694826F11ED963DD626C4F9AE02.roa (hash: dEUjWtTlj2rNYIxixfb1q7kgTimYlRGEihBrx/cv4cU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E76B8/FF1508EE7E9A11E8B69FC02DC4F9AE02/MOfescUi55FZhZK2RTCIY8oADhg.crl rsync://rpki.apnic.net/member_repository/A91E76B8/FF1508EE7E9A11E8B69FC02DC4F9AE02/MOfescUi55FZhZK2RTCIY8oADhg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOfescUi55FZhZK2RTCIY8oADhg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 13 Jun 2025 16:57:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5193 (0x1449) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E76B8, serialNumber=30E7DEB1C522E791598592B645308863CA000E18 Validity Not Before: Jun 6 16:57:49 2025 GMT Not After : Jun 13 16:57:49 2025 GMT Subject: CN=68431e0d-208d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:39:ab:c7:ef:e2:e2:1f:58:b6:05:4b:c1:19: 81:ad:a8:a5:ae:99:4d:13:ac:8b:79:88:29:8c:06: 85:25:8a:5c:35:e9:b4:64:30:3c:ca:80:a4:95:79: 0a:9e:64:c7:98:a5:e0:d8:91:7c:51:48:25:03:ee: 31:16:d0:9d:7f:55:b8:06:0d:3a:43:ff:ff:55:5a: 6d:a9:be:97:c0:d4:13:1f:3b:9e:6e:98:25:14:6e: 2b:e7:8d:aa:55:5e:35:32:63:c0:3a:7e:31:90:64: 7c:99:dd:35:c5:6b:da:fe:13:2f:a8:f4:5c:3e:4e: 95:d9:2d:07:4e:3e:61:79:7a:7d:09:c3:bb:00:a8: 88:e4:83:75:01:f6:29:48:17:50:2d:9f:4b:ee:bb: 5f:6d:7c:40:0e:90:4a:d3:1f:69:68:56:05:87:db: 56:a2:86:4b:fd:3e:74:a6:27:e2:bc:3c:91:a0:ac: 28:8c:84:c9:ec:a2:33:5a:76:8a:8c:fe:82:38:ae: 05:c1:3d:2e:c2:5c:fb:29:7a:36:e6:ba:ec:a1:b3: 61:3d:5a:6a:d0:b0:b3:49:bb:ec:9e:94:96:d1:60: e7:b6:b6:b2:4c:41:a5:24:18:86:f2:54:cf:3e:de: 29:10:57:c6:a4:ba:7c:91:82:3d:00:2f:78:79:48: ef:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:0A:67:D9:DD:9F:19:2E:45:15:8E:2D:C5:08:C1:95:EF:DD:3A:90 X509v3 Authority Key Identifier: keyid:30:E7:DE:B1:C5:22:E7:91:59:85:92:B6:45:30:88:63:CA:00:0E:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E76B8/FF1508EE7E9A11E8B69FC02DC4F9AE02/MOfescUi55FZhZK2RTCIY8oADhg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOfescUi55FZhZK2RTCIY8oADhg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E76B8/FF1508EE7E9A11E8B69FC02DC4F9AE02/MOfescUi55FZhZK2RTCIY8oADhg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:94:a8:03:25:ad:97:bf:2f:cc:b5:25:94:75:7e:74:8f:dc: 76:1f:f3:d9:42:ba:06:9b:9c:e7:1c:c0:a2:5a:44:36:ed:fa: c3:0b:eb:f6:cf:fe:5b:03:74:46:eb:dc:b5:e7:d5:c9:dc:eb: 91:d7:54:e6:bc:4b:e2:9f:27:02:b1:bf:4d:58:c7:9d:42:ce: 11:09:7b:ff:33:47:0a:d5:47:27:a5:9c:d2:bf:4e:d1:49:95: 73:ee:ad:62:f2:32:a1:8a:52:9b:6d:e7:f2:77:91:bd:34:dc: 00:e6:89:54:ba:a6:d9:46:d6:3f:c2:fb:2e:c3:b3:9c:85:65: c9:07:73:e4:8e:e5:86:5a:c9:c9:e7:0e:26:9a:98:b5:2d:d6: 71:fa:d5:90:24:d2:95:f5:a4:4b:5b:21:a1:7b:8c:4a:92:72: 5c:1c:da:f4:cf:91:72:ab:9d:37:d0:f9:c0:51:55:b6:34:b0: 01:24:6e:1c:92:01:94:fa:b5:5d:85:ac:8d:e7:44:31:15:08: ac:93:61:05:0c:65:16:56:0f:b2:8f:d9:f4:cd:b4:f7:98:08: 05:35:04:76:e5:03:08:df:b1:8b:2b:f0:c6:48:0b:a7:b2:6d: f1:24:3b:0a:98:3f:7d:41:12:ef:49:0a:75:e3:e6:61:18:95: ad:91:09:be -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFEkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTc2QjgxMTAvBgNVBAUTKDMwRTdERUIxQzUyMkU3OTE1OTg1OTJCNjQ1MzA4ODYz Q0EwMDBFMTgwHhcNMjUwNjA2MTY1NzQ5WhcNMjUwNjEzMTY1NzQ5WjAYMRYwFAYD VQQDEw02ODQzMWUwZC0yMDhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyDmrx+/i4h9YtgVLwRmBrailrplNE6yLeYgpjAaFJYpcNem0ZDA8yoCklXkK nmTHmKXg2JF8UUglA+4xFtCdf1W4Bg06Q///VVptqb6XwNQTHzuebpglFG4r542q VV41MmPAOn4xkGR8md01xWva/hMvqPRcPk6V2S0HTj5heXp9CcO7AKiI5IN1AfYp SBdQLZ9L7rtfbXxADpBK0x9paFYFh9tWooZL/T50pifivDyRoKwojITJ7KIzWnaK jP6COK4FwT0uwlz7KXo25rrsobNhPVpq0LCzSbvsnpSW0WDntrayTEGlJBiG8lTP Pt4pEFfGpLp8kYI9AC94eUjvSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCkKZ9nd nxkuRRWOLcUIwZXv3TqQMB8GA1UdIwQYMBaAFDDn3rHFIueRWYWStkUwiGPKAA4Y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzZCOC9GRjE1MDhFRTdF OUExMUU4QjY5RkMwMkRDNEY5QUUwMi9NT2Zlc2NVaTU1RlpoWksyUlRDSVk4b0FE aGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01PZmVzY1VpNTVGWmhaSzJSVENJWThvQURoZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NzZCOC9GRjE1MDhFRTdFOUExMUU4QjY5RkMwMkRDNEY5QUUwMi9NT2Zlc2NVaTU1 RlpoWksyUlRDSVk4b0FEaGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCVlKgDJa2Xvy/MtSWUdX50j9x2H/PZQroGm5znHMCiWkQ27frDC+v2 z/5bA3RG69y159XJ3OuR11TmvEvinycCsb9NWMedQs4RCXv/M0cK1UcnpZzSv07R SZVz7q1i8jKhilKbbefyd5G9NNwA5olUuqbZRtY/wvsuw7OchWXJB3PkjuWGWsnJ 5w4mmpi1LdZx+tWQJNKV9aRLWyGhe4xKknJcHNr0z5Fyq5030PnAUVW2NLABJG4c kgGU+rVdhayN50QxFQisk2EFDGUWVg+yj9n0zbT3mAgFNQR25QMI37GLK/DGSAun sm3xJDsKmD99QRLvSQp14+ZhGJWtkQm+ -----END CERTIFICATE-----Generated at Sat Jun 7 04:00:04 2025 by rpki-client