$ rpki-client -vvf rpki.apnic.net/member_repository/A91E77A1/B5C27A8C169111EBAAB3041BC4F9AE02/sumTicSsA0jYrsh1t0aJ0E5wyDo.mft File: sumTicSsA0jYrsh1t0aJ0E5wyDo.mft (raw, json) Hash identifier: LLAbkIgpRQH3KjYCcE7Uu1tJ9l6REm7uuACz59OEPAc= Subject key identifier: FA:F4:04:7A:FA:55:E0:8C:01:E8:2A:56:FA:67:F9:EA:BA:1F:86:39 Authority key identifier: B2:E9:93:89:C4:AC:03:48:D8:AE:C8:75:B7:46:89:D0:4E:70:C8:3A Certificate issuer: /CN=A91E77A1/serialNumber=B2E99389C4AC0348D8AEC875B74689D04E70C83A Certificate serial: 0782 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sumTicSsA0jYrsh1t0aJ0E5wyDo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E77A1/B5C27A8C169111EBAAB3041BC4F9AE02/sumTicSsA0jYrsh1t0aJ0E5wyDo.mft Manifest number: 077A Signing time: Fri 30 May 2025 21:43:09 +0000 Manifest this update: Fri 30 May 2025 21:43:08 +0000 Manifest next update: Fri 06 Jun 2025 21:43:08 +0000 Files and hashes: 1: sumTicSsA0jYrsh1t0aJ0E5wyDo.crl (hash: 9SZ6l1ynLK/9TdKoOQe5sJoMKZvZqaG0C7l2U5rW6B8=) 2: 4F7AD592169311EB89C20F1DC4F9AE02.roa (hash: 1PaL5t22VHHOGdbUhH+qGnaUlXQ1MvnbAc80idZHNIM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E77A1/B5C27A8C169111EBAAB3041BC4F9AE02/sumTicSsA0jYrsh1t0aJ0E5wyDo.crl rsync://rpki.apnic.net/member_repository/A91E77A1/B5C27A8C169111EBAAB3041BC4F9AE02/sumTicSsA0jYrsh1t0aJ0E5wyDo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sumTicSsA0jYrsh1t0aJ0E5wyDo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 21:43:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1922 (0x782) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E77A1, serialNumber=B2E99389C4AC0348D8AEC875B74689D04E70C83A Validity Not Before: May 30 21:43:08 2025 GMT Not After : Jun 6 21:43:08 2025 GMT Subject: CN=683a266c-c580 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:5f:51:77:d8:d5:35:41:f1:f6:16:c7:f0:d2: 5b:92:e2:94:31:d6:42:ff:87:af:ae:a1:4d:04:c8: 2b:2b:83:21:a1:25:91:25:80:e4:8f:a7:f2:d3:b5: 78:7e:3d:c7:64:c2:75:06:83:37:f2:24:88:fd:e7: 15:ee:f4:59:2c:d4:ce:14:62:39:a7:cd:d8:f2:19: 49:73:27:fc:0f:7b:32:6b:55:e0:32:74:b5:43:a9: ec:cf:58:da:c8:a6:d9:b2:a0:90:f3:2d:90:f8:9f: b2:cd:b9:4e:bc:b7:c7:b8:59:07:f2:9e:6a:05:63: 3b:5c:ab:e8:99:f8:1c:21:ec:83:0b:99:08:6c:f8: 5b:00:64:0a:8a:9c:92:19:20:ac:e0:11:92:e0:c7: 2e:a7:78:5b:12:0c:91:9b:36:b1:20:ae:85:99:7a: 8a:68:9b:56:63:c0:e7:ad:29:fb:a6:b7:01:55:f5: ab:1a:b4:f9:2e:4e:9b:c7:59:85:17:17:dc:81:5e: 0f:c2:e9:f9:e2:17:7e:09:f4:14:14:dd:37:ce:48: c5:f1:68:1e:6d:49:ff:60:0a:1f:36:be:2d:e2:4d: a0:d2:36:11:c4:1a:66:1f:94:f5:f9:9c:77:5e:0e: 8a:3c:c7:71:9d:16:e0:a7:c7:c2:8f:af:1d:a1:d8: 04:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:F4:04:7A:FA:55:E0:8C:01:E8:2A:56:FA:67:F9:EA:BA:1F:86:39 X509v3 Authority Key Identifier: keyid:B2:E9:93:89:C4:AC:03:48:D8:AE:C8:75:B7:46:89:D0:4E:70:C8:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E77A1/B5C27A8C169111EBAAB3041BC4F9AE02/sumTicSsA0jYrsh1t0aJ0E5wyDo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sumTicSsA0jYrsh1t0aJ0E5wyDo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E77A1/B5C27A8C169111EBAAB3041BC4F9AE02/sumTicSsA0jYrsh1t0aJ0E5wyDo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:bb:9e:a1:6b:19:11:6d:a0:16:0f:63:58:d9:16:92:cb:bb: dd:30:14:d9:23:19:00:3c:eb:b6:e7:c0:a3:bb:8f:56:7a:5b: 43:85:63:79:d1:ec:96:17:43:39:bc:06:66:98:7e:bd:07:05: 66:be:91:0b:07:e1:26:09:e7:cb:7b:f2:5b:f8:c7:92:5d:f8: 19:2b:f3:7d:e3:1e:44:df:c3:3d:47:a7:4e:73:39:10:46:92: 64:96:31:a7:b2:f3:0d:2d:1c:ed:1b:ab:d6:a7:c8:34:e6:16: 0c:ab:d4:47:81:c2:00:e0:60:88:9a:fe:15:5e:7e:d0:fd:97: 2e:4f:5b:ba:5d:5b:e9:85:db:94:08:e5:40:2f:2d:8b:1b:20: e6:e6:84:eb:e8:ff:96:e9:ed:99:84:dc:6a:a1:ca:2b:98:aa: 18:e3:54:52:19:0e:c1:5a:e9:a6:9d:1d:41:f2:83:f6:42:60: 2e:08:ae:97:57:e5:e7:2a:4b:14:b1:df:6a:2e:55:99:b1:eb: 6e:c9:30:d0:bb:f3:2d:e2:07:7e:66:41:3b:f0:a9:d8:54:61: cc:49:79:88:1b:4e:3a:46:46:78:21:f3:a0:0e:f3:ee:8f:d7: 4a:ff:ff:3c:d5:ed:bf:24:0f:c7:89:4b:20:52:95:1a:3c:09: 4a:e3:b9:4e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB4IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTc3QTExMTAvBgNVBAUTKEIyRTk5Mzg5QzRBQzAzNDhEOEFFQzg3NUI3NDY4OUQw NEU3MEM4M0EwHhcNMjUwNTMwMjE0MzA4WhcNMjUwNjA2MjE0MzA4WjAYMRYwFAYD VQQDEw02ODNhMjY2Yy1jNTgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxV9Rd9jVNUHx9hbH8NJbkuKUMdZC/4evrqFNBMgrK4MhoSWRJYDkj6fy07V4 fj3HZMJ1BoM38iSI/ecV7vRZLNTOFGI5p83Y8hlJcyf8D3sya1XgMnS1Q6nsz1ja yKbZsqCQ8y2Q+J+yzblOvLfHuFkH8p5qBWM7XKvomfgcIeyDC5kIbPhbAGQKipyS GSCs4BGS4Mcup3hbEgyRmzaxIK6FmXqKaJtWY8DnrSn7prcBVfWrGrT5Lk6bx1mF FxfcgV4Pwun54hd+CfQUFN03zkjF8WgebUn/YAofNr4t4k2g0jYRxBpmH5T1+Zx3 Xg6KPMdxnRbgp8fCj68dodgEkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPr0BHr6 VeCMAegqVvpn+eq6H4Y5MB8GA1UdIwQYMBaAFLLpk4nErANI2K7IdbdGidBOcMg6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzdBMS9CNUMyN0E4QzE2 OTExMUVCQUFCMzA0MUJDNEY5QUUwMi9zdW1UaWNTc0Ewallyc2gxdDBhSjBFNXd5 RG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3N1bVRpY1NzQTBqWXJzaDF0MGFKMEU1d3lEby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NzdBMS9CNUMyN0E4QzE2OTExMUVCQUFCMzA0MUJDNEY5QUUwMi9zdW1UaWNTc0Ew allyc2gxdDBhSjBFNXd5RG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBiu56haxkRbaAWD2NY2RaSy7vdMBTZIxkAPOu258Cju49WeltDhWN5 0eyWF0M5vAZmmH69BwVmvpELB+EmCefLe/Jb+MeSXfgZK/N94x5E38M9R6dOczkQ RpJkljGnsvMNLRztG6vWp8g05hYMq9RHgcIA4GCImv4VXn7Q/ZcuT1u6XVvphduU COVALy2LGyDm5oTr6P+W6e2ZhNxqocormKoY41RSGQ7BWummnR1B8oP2QmAuCK6X V+XnKksUsd9qLlWZsetuyTDQu/Mt4gd+ZkE78KnYVGHMSXmIG046RkZ4IfOgDvPu j9dK//881e2/JA/HiUsgUpUaPAlK47lO -----END CERTIFICATE-----Generated at Sat May 31 16:39:48 2025 by rpki-client