$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9467/770B4F1A526F11ECBC50EB17C4F9AE02/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.mft File: Ur6d3pVo_krcoPNFs2F6Y8MHWEU.mft (raw, json) Hash identifier: gPnb7r0j7pFmWD+kYZ/eYjSXClsG6b3ZOzkPQOQetjw= Subject key identifier: 9D:E8:53:FA:97:90:A0:66:2A:0B:E1:D6:0B:FE:61:5F:0B:0B:54:4F Authority key identifier: 52:BE:9D:DE:95:68:FE:4A:DC:A0:F3:45:B3:61:7A:63:C3:07:58:45 Certificate issuer: /CN=A91E9467/serialNumber=52BE9DDE9568FE4ADCA0F345B3617A63C3075845 Certificate serial: 0483 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9467/770B4F1A526F11ECBC50EB17C4F9AE02/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.mft Manifest number: 046D Signing time: Sat 31 May 2025 00:23:40 +0000 Manifest this update: Sat 31 May 2025 00:23:40 +0000 Manifest next update: Sat 07 Jun 2025 00:23:40 +0000 Files and hashes: 1: Ur6d3pVo_krcoPNFs2F6Y8MHWEU.crl (hash: cT1EHMXu05f0zgTbuZHYANsypGOS3carwx9yRDc/csY=) 2: F63AA888900F11ED8B4CB41DC4F9AE02.roa (hash: SXmEoVAwCuv2S1VkQaBNQLi7h8OwZxPvKiz0YPbjYQg=) 3: 4BA245C01F3711F0BFC63D0BC4F9AE02.roa (hash: gBd3TD5jRUsWy0YPJTKEnjjS1ownDJ8N6YJxz3eedfo=) 4: 8120226CBEE111ECBFC4F882C4F9AE02.roa (hash: cKv5ZDuMTRB1GZ6qDVjyr/DKInN5ROhN7fMypCO2t9o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9467/770B4F1A526F11ECBC50EB17C4F9AE02/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.crl rsync://rpki.apnic.net/member_repository/A91E9467/770B4F1A526F11ECBC50EB17C4F9AE02/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 00:23:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1155 (0x483) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9467, serialNumber=52BE9DDE9568FE4ADCA0F345B3617A63C3075845 Validity Not Before: May 31 00:23:40 2025 GMT Not After : Jun 7 00:23:40 2025 GMT Subject: CN=683a4c0c-051c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:ae:e0:99:0e:06:05:b0:ad:17:82:03:5e:8d: 2f:aa:c5:b7:b6:d7:7f:09:7e:04:2d:43:f2:40:c5: c2:92:33:42:a4:fa:91:5f:32:80:09:c8:47:e9:fa: 81:a9:a8:63:6a:09:a3:84:30:e5:16:0b:13:95:7c: 6a:48:6c:88:23:2b:02:dc:59:80:f0:d9:26:f0:de: 5c:7a:2d:b5:98:a8:73:be:0e:df:7f:de:fc:2f:aa: d8:8e:53:91:e9:1e:07:af:2c:b5:ff:5b:ce:ba:fe: 08:cf:8f:7b:e9:33:22:bb:ea:a8:cc:90:79:32:16: 94:6c:7f:6d:b6:ec:71:0b:14:b1:04:f5:06:08:69: 08:df:a5:f5:b7:37:98:60:8d:64:c4:1e:9d:c2:9c: d1:ff:bf:41:f5:1d:8b:ab:3e:83:fd:cd:b5:51:aa: 0b:d3:a3:19:d2:65:9b:10:ee:35:5e:cd:8e:de:68: e0:7c:79:b8:8e:f6:2b:9f:ad:2d:33:cb:8f:ae:2b: e4:e1:2e:46:3f:66:dd:e5:f4:f9:d6:26:3e:ef:a7: f2:8e:ee:a8:18:cb:a2:26:a8:e1:64:94:0d:3a:f9: c1:bc:79:4e:a6:69:8f:0e:73:2c:0b:64:2b:ab:6f: 82:eb:6d:fe:29:76:4d:77:2b:05:0d:f2:ed:2c:4b: fa:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:E8:53:FA:97:90:A0:66:2A:0B:E1:D6:0B:FE:61:5F:0B:0B:54:4F X509v3 Authority Key Identifier: keyid:52:BE:9D:DE:95:68:FE:4A:DC:A0:F3:45:B3:61:7A:63:C3:07:58:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9467/770B4F1A526F11ECBC50EB17C4F9AE02/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9467/770B4F1A526F11ECBC50EB17C4F9AE02/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:15:3d:6b:43:ab:bd:83:04:0f:e8:3b:d9:6a:19:2f:7b:4a: 18:77:f1:e5:6a:98:fe:99:17:1f:27:da:55:19:ca:f7:21:dd: 10:b1:e1:d1:00:f4:c3:b9:0b:12:c2:f4:c5:9f:45:8a:71:16: 48:8d:13:fb:53:fe:28:e9:8e:a8:35:2d:d3:51:a7:ac:42:3c: 8d:2b:0b:6a:51:b3:fd:29:d7:eb:94:62:3b:6b:2a:a6:ee:dd: f4:ca:1c:37:d4:4c:11:e4:cc:d6:ec:fd:84:90:57:31:8a:09: 16:12:ce:42:83:a0:0d:8e:ea:9b:21:a4:28:56:3c:cf:41:7d: 96:b2:d4:ac:b3:1a:e7:b7:88:b3:ec:d9:fe:b0:e6:39:73:ec: d7:2b:e1:35:d8:2b:c0:5e:e4:d9:a7:25:70:c2:4e:f1:c8:f4: 61:fd:5c:60:7f:31:fe:fa:d4:4c:cf:18:d3:63:29:a4:72:c8: 5c:fc:5c:41:82:1a:96:1a:0b:eb:9e:79:22:24:6e:05:99:e9: d3:b0:e2:d4:f3:f2:b8:df:d9:c7:f9:31:18:f2:61:3c:d4:be: e2:b8:4e:2a:e6:74:48:2a:dc:85:c3:e4:14:4a:57:04:70:d0: 2f:ad:c9:ae:07:fb:c3:cb:d0:96:bd:74:10:42:f4:6f:b1:47: 93:53:90:4f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBIMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTk0NjcxMTAvBgNVBAUTKDUyQkU5RERFOTU2OEZFNEFEQ0EwRjM0NUIzNjE3QTYz QzMwNzU4NDUwHhcNMjUwNTMxMDAyMzQwWhcNMjUwNjA3MDAyMzQwWjAYMRYwFAYD VQQDEw02ODNhNGMwYy0wNTFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2K7gmQ4GBbCtF4IDXo0vqsW3ttd/CX4ELUPyQMXCkjNCpPqRXzKACchH6fqB qahjagmjhDDlFgsTlXxqSGyIIysC3FmA8Nkm8N5cei21mKhzvg7ff978L6rYjlOR 6R4Hryy1/1vOuv4Iz4976TMiu+qozJB5MhaUbH9ttuxxCxSxBPUGCGkI36X1tzeY YI1kxB6dwpzR/79B9R2Lqz6D/c21UaoL06MZ0mWbEO41Xs2O3mjgfHm4jvYrn60t M8uPrivk4S5GP2bd5fT51iY+76fyju6oGMuiJqjhZJQNOvnBvHlOpmmPDnMsC2Qr q2+C623+KXZNdysFDfLtLEv6SwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ3oU/qX kKBmKgvh1gv+YV8LC1RPMB8GA1UdIwQYMBaAFFK+nd6VaP5K3KDzRbNhemPDB1hF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTQ2Ny83NzBCNEYxQTUy NkYxMUVDQkM1MEVCMTdDNEY5QUUwMi9VcjZkM3BWb19rcmNvUE5GczJGNlk4TUhX RVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VyNmQzcFZvX2tyY29QTkZzMkY2WThNSFdFVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OTQ2Ny83NzBCNEYxQTUyNkYxMUVDQkM1MEVCMTdDNEY5QUUwMi9VcjZkM3BWb19r cmNvUE5GczJGNlk4TUhXRVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBdFT1rQ6u9gwQP6DvZahkve0oYd/Hlapj+mRcfJ9pVGcr3Id0QseHR APTDuQsSwvTFn0WKcRZIjRP7U/4o6Y6oNS3TUaesQjyNKwtqUbP9KdfrlGI7ayqm 7t30yhw31EwR5MzW7P2EkFcxigkWEs5Cg6ANjuqbIaQoVjzPQX2WstSssxrnt4iz 7Nn+sOY5c+zXK+E12CvAXuTZpyVwwk7xyPRh/VxgfzH++tRMzxjTYymkcshc/FxB ghqWGgvrnnkiJG4FmenTsOLU8/K439nH+TEY8mE81L7iuE4q5nRIKtyFw+QUSlcE cNAvrcmuB/vDy9CWvXQQQvRvsUeTU5BP -----END CERTIFICATE-----Generated at Sat May 31 17:24:52 2025 by rpki-client