$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8EAD/3C24DAD28FAD11EA92D1F642C4F9AE02/83YJDdec9qJZrioXAgNy6eYWC7Y.mft File: 83YJDdec9qJZrioXAgNy6eYWC7Y.mft (raw, json) Hash identifier: OuDBdy0Cia6jZSbxoE7LLt6f0Pj1vcFEfwxfuS/n+oc= Subject key identifier: D9:93:12:FB:D2:8A:45:6A:B3:EC:BF:5B:F8:C8:0B:23:BD:5D:1B:BD Authority key identifier: F3:76:09:0D:D7:9C:F6:A2:59:AE:2A:17:02:03:72:E9:E6:16:0B:B6 Certificate issuer: /CN=A91E8EAD/serialNumber=F376090DD79CF6A259AE2A17020372E9E6160BB6 Certificate serial: 0982 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/83YJDdec9qJZrioXAgNy6eYWC7Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8EAD/3C24DAD28FAD11EA92D1F642C4F9AE02/83YJDdec9qJZrioXAgNy6eYWC7Y.mft Manifest number: 097A Signing time: Fri 30 May 2025 20:20:42 +0000 Manifest this update: Fri 30 May 2025 20:20:41 +0000 Manifest next update: Fri 06 Jun 2025 20:20:41 +0000 Files and hashes: 1: 83YJDdec9qJZrioXAgNy6eYWC7Y.crl (hash: R/8bstzS3W/p1TQ2yDQ5MCQ6Q9l7V95MmKkNGrjMzIw=) 2: 16F7FB3E8FAF11EA96738C46C4F9AE02.roa (hash: FDVevWofhV4OBWCY3mCV+bPsuc2xoyahcfyBo3UC3vE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8EAD/3C24DAD28FAD11EA92D1F642C4F9AE02/83YJDdec9qJZrioXAgNy6eYWC7Y.crl rsync://rpki.apnic.net/member_repository/A91E8EAD/3C24DAD28FAD11EA92D1F642C4F9AE02/83YJDdec9qJZrioXAgNy6eYWC7Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/83YJDdec9qJZrioXAgNy6eYWC7Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 20:20:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2434 (0x982) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8EAD, serialNumber=F376090DD79CF6A259AE2A17020372E9E6160BB6 Validity Not Before: May 30 20:20:41 2025 GMT Not After : Jun 6 20:20:41 2025 GMT Subject: CN=683a131a-b95c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:da:f5:c7:09:81:aa:6e:84:cc:60:5e:6f:e9: 43:96:e3:90:60:32:2c:5a:7c:56:db:d0:09:e7:1c: 6f:7e:31:d6:5b:93:2f:62:b4:59:12:c2:90:c9:8f: b1:60:ed:55:20:e4:d6:e5:57:10:b5:a9:e6:f0:fb: a1:28:a8:e2:57:f4:66:ec:de:5d:29:a8:08:1d:34: 69:00:fb:05:13:69:cf:d4:4c:b3:2b:fc:5c:08:4f: 30:cf:f8:3e:1c:e7:19:5f:1b:46:c7:43:17:16:46: e9:c1:39:15:35:00:52:94:dc:19:4d:68:07:3b:ab: 53:9a:80:a8:e9:e0:03:18:e2:4d:55:2d:25:b0:36: 93:7d:d4:72:d6:43:81:7d:ce:41:b0:aa:0b:77:b5: 24:a1:db:e3:12:1e:f2:7e:cf:2c:aa:21:aa:b6:ef: ac:49:05:13:02:94:b3:16:f3:5e:4c:2e:6f:18:b0: 18:50:cb:ed:36:72:a2:91:a6:ab:04:d6:fd:e8:fa: 0e:dc:0d:7c:70:f8:18:41:e7:f8:de:58:ac:ac:20: c7:06:ae:ee:32:f4:25:a0:11:36:2a:61:84:fa:d4: 3c:c3:54:20:36:70:72:b5:32:53:30:12:18:b7:13: af:34:84:47:37:50:3a:34:45:36:99:0e:fe:5f:66: c1:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:93:12:FB:D2:8A:45:6A:B3:EC:BF:5B:F8:C8:0B:23:BD:5D:1B:BD X509v3 Authority Key Identifier: keyid:F3:76:09:0D:D7:9C:F6:A2:59:AE:2A:17:02:03:72:E9:E6:16:0B:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8EAD/3C24DAD28FAD11EA92D1F642C4F9AE02/83YJDdec9qJZrioXAgNy6eYWC7Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/83YJDdec9qJZrioXAgNy6eYWC7Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8EAD/3C24DAD28FAD11EA92D1F642C4F9AE02/83YJDdec9qJZrioXAgNy6eYWC7Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:3e:0d:dd:f3:f7:62:c9:8c:8a:a7:6d:76:6d:e7:fd:4e:f4: 83:aa:e4:6a:50:c2:b7:c0:a7:21:65:f6:1e:a8:84:62:9a:8f: 4d:91:d5:cb:ce:94:21:44:0e:1d:9a:d6:f0:54:4c:2e:c2:1c: 5b:f8:71:c7:90:c0:c5:12:56:2c:84:65:26:b5:89:89:60:6e: 10:b6:61:52:8c:c0:12:68:a9:85:ec:a6:16:2f:79:b9:67:89: 30:cb:33:82:f1:6b:ce:d6:19:e0:26:09:39:4d:01:87:80:74: 7b:7b:2d:de:97:fa:30:c4:b9:64:fd:e8:00:fa:a5:94:d9:02: 1c:5d:4e:81:a3:9b:4b:72:d3:29:57:53:f3:dd:7c:d8:8c:65: 02:87:16:00:63:7d:41:07:88:9a:fd:a9:27:01:cc:05:a4:6f: db:0a:73:3e:b5:31:76:4c:36:e1:c6:89:fa:e7:ca:a3:14:37: 32:96:57:98:2d:53:13:2f:ca:6e:06:05:73:18:f7:2e:a5:b8: 6e:1b:ba:6f:7b:8c:e7:53:48:bd:e2:6b:4a:ff:81:ad:8a:24: ac:3c:b5:22:2a:a5:ae:00:76:de:5c:b5:85:ae:4b:f2:d0:b5: 01:b5:26:17:df:68:3e:e5:bc:25:8a:08:c9:de:a3:e6:1b:f7: 95:29:2d:1e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCYIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RThFQUQxMTAvBgNVBAUTKEYzNzYwOTBERDc5Q0Y2QTI1OUFFMkExNzAyMDM3MkU5 RTYxNjBCQjYwHhcNMjUwNTMwMjAyMDQxWhcNMjUwNjA2MjAyMDQxWjAYMRYwFAYD VQQDEw02ODNhMTMxYS1iOTVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxdr1xwmBqm6EzGBeb+lDluOQYDIsWnxW29AJ5xxvfjHWW5MvYrRZEsKQyY+x YO1VIOTW5VcQtanm8PuhKKjiV/Rm7N5dKagIHTRpAPsFE2nP1EyzK/xcCE8wz/g+ HOcZXxtGx0MXFkbpwTkVNQBSlNwZTWgHO6tTmoCo6eADGOJNVS0lsDaTfdRy1kOB fc5BsKoLd7UkodvjEh7yfs8sqiGqtu+sSQUTApSzFvNeTC5vGLAYUMvtNnKikaar BNb96PoO3A18cPgYQef43lisrCDHBq7uMvQloBE2KmGE+tQ8w1QgNnBytTJTMBIY txOvNIRHN1A6NEU2mQ7+X2bByQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNmTEvvS ikVqs+y/W/jICyO9XRu9MB8GA1UdIwQYMBaAFPN2CQ3XnPaiWa4qFwIDcunmFgu2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOEVBRC8zQzI0REFEMjhG QUQxMUVBOTJEMUY2NDJDNEY5QUUwMi84M1lKRGRlYzlxSlpyaW9YQWdOeTZlWVdD N1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzgzWUpEZGVjOXFKWnJpb1hBZ055NmVZV0M3WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OEVBRC8zQzI0REFEMjhGQUQxMUVBOTJEMUY2NDJDNEY5QUUwMi84M1lKRGRlYzlx SlpyaW9YQWdOeTZlWVdDN1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAKPg3d8/diyYyKp212bef9TvSDquRqUMK3wKchZfYeqIRimo9NkdXL zpQhRA4dmtbwVEwuwhxb+HHHkMDFElYshGUmtYmJYG4QtmFSjMASaKmF7KYWL3m5 Z4kwyzOC8WvO1hngJgk5TQGHgHR7ey3el/owxLlk/egA+qWU2QIcXU6Bo5tLctMp V1Pz3XzYjGUChxYAY31BB4ia/aknAcwFpG/bCnM+tTF2TDbhxon658qjFDcylleY LVMTL8puBgVzGPcupbhuG7pve4znU0i94mtK/4GtiiSsPLUiKqWuAHbeXLWFrkvy 0LUBtSYX32g+5bwligjJ3qPmG/eVKS0e -----END CERTIFICATE-----Generated at Sat May 31 17:00:23 2025 by rpki-client