$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9580/C7CE2E107F8D11EAAD8CD51EC4F9AE02/_k_aOWcBbBE6yAe4STQKxlIPCAI.mft File: _k_aOWcBbBE6yAe4STQKxlIPCAI.mft (raw, json) Hash identifier: m1JJcXgQle7BGjgQ4iS723kZ7XAFzfUSl2zjUoB5dgM= Subject key identifier: D4:65:DB:B2:AA:CB:43:14:38:2D:A5:4D:01:38:A7:98:D7:79:3B:2E Authority key identifier: FE:4F:DA:39:67:01:6C:11:3A:C8:07:B8:49:34:0A:C6:52:0F:08:02 Certificate issuer: /CN=A91E9580/serialNumber=FE4FDA3967016C113AC807B849340AC6520F0802 Certificate serial: 09FB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_k_aOWcBbBE6yAe4STQKxlIPCAI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9580/C7CE2E107F8D11EAAD8CD51EC4F9AE02/_k_aOWcBbBE6yAe4STQKxlIPCAI.mft Manifest number: 09D8 Signing time: Fri 30 May 2025 20:08:09 +0000 Manifest this update: Fri 30 May 2025 20:08:08 +0000 Manifest next update: Fri 06 Jun 2025 20:08:08 +0000 Files and hashes: 1: _k_aOWcBbBE6yAe4STQKxlIPCAI.crl (hash: UcdLXrarXyiFgysrLgkIgUQ40f6SifixOJuGEaBhZOk=) 2: 699CD772C2B911EBBB4C8928C4F9AE02.roa (hash: yfdf5Mv/GJ9tUDZNlDnmM6hHiINUq2OvlkNbS0rVles=) 3: DE76B04EC2BA11EB99E5E36FC4F9AE02.roa (hash: qU5SgxuYfj9EbloGsgp5NlU+LGZow7QsAYGZSye/EIM=) 4: 91F5867070B811EDB6E1F81BC4F9AE02.roa (hash: PgZPVHxtNUmnyrhnnwVcg3kijll4dZA2GpurrS7x078=) 5: 1E9514207F9311EA8177A82DC4F9AE02.roa (hash: mCrr4AsBoN0UqBzrLZ/+kB+0BpCUxnU7wJAUdq4LZdc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9580/C7CE2E107F8D11EAAD8CD51EC4F9AE02/_k_aOWcBbBE6yAe4STQKxlIPCAI.crl rsync://rpki.apnic.net/member_repository/A91E9580/C7CE2E107F8D11EAAD8CD51EC4F9AE02/_k_aOWcBbBE6yAe4STQKxlIPCAI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_k_aOWcBbBE6yAe4STQKxlIPCAI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 20:08:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2555 (0x9fb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9580, serialNumber=FE4FDA3967016C113AC807B849340AC6520F0802 Validity Not Before: May 30 20:08:08 2025 GMT Not After : Jun 6 20:08:08 2025 GMT Subject: CN=683a1028-fb94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:2c:18:27:09:de:8a:94:4d:f2:7e:8e:a2:bb: ab:56:b8:ac:6e:89:aa:79:82:b0:92:e9:19:85:ba: d2:2e:55:f5:1c:e8:89:a9:6a:e5:5b:c8:bd:d4:88: 68:a3:db:de:57:80:00:c8:29:e3:d1:27:0a:9c:a8: b2:dd:f2:b0:18:9b:4d:cc:f1:a5:5d:f5:8d:0b:19: fe:e0:18:78:6d:a3:16:93:2b:d8:52:09:b5:b6:f3: e0:59:47:3e:96:33:7a:4b:92:9f:e7:66:78:db:ea: 7a:c7:10:a4:aa:73:93:db:15:96:0d:18:cc:bf:71: 6a:fa:d6:68:1f:e8:78:1d:7f:94:e4:f3:12:1a:88: 0d:0c:e0:17:6c:bf:f4:fa:2a:ac:33:a2:c1:0d:2d: 53:6a:d9:e1:e1:84:a7:2e:63:4a:98:95:b6:a6:10: 9b:25:f1:5b:e4:c4:97:c8:bd:2f:0c:35:d2:5e:a5: b3:89:9f:78:5e:88:82:73:09:34:03:54:60:a4:15: 6e:b5:b9:67:e9:72:2b:3e:9d:0d:8b:5f:2d:91:3c: 66:5d:3f:42:80:42:08:aa:a6:c4:3d:a2:1b:d6:75: 64:5d:38:75:16:d0:14:9a:73:08:67:b5:d2:ec:88: d9:70:bc:c1:80:3e:23:aa:fc:46:2a:a6:49:48:12: 02:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:65:DB:B2:AA:CB:43:14:38:2D:A5:4D:01:38:A7:98:D7:79:3B:2E X509v3 Authority Key Identifier: keyid:FE:4F:DA:39:67:01:6C:11:3A:C8:07:B8:49:34:0A:C6:52:0F:08:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9580/C7CE2E107F8D11EAAD8CD51EC4F9AE02/_k_aOWcBbBE6yAe4STQKxlIPCAI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_k_aOWcBbBE6yAe4STQKxlIPCAI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9580/C7CE2E107F8D11EAAD8CD51EC4F9AE02/_k_aOWcBbBE6yAe4STQKxlIPCAI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:ca:80:36:01:16:bc:63:ef:c9:0a:da:41:f0:d1:79:e9:4c: 6e:eb:b6:9f:21:d4:31:a5:b8:05:d3:a6:86:f9:c1:b9:18:a1: 7c:c5:a9:4e:ea:ae:b9:1a:00:a9:14:21:8d:a2:2e:35:cb:e1: 00:42:49:ae:9c:c7:ba:88:e9:e6:99:31:87:15:e9:c1:1a:1b: a3:bd:f8:ec:aa:a0:e5:c0:20:82:e9:17:f3:48:c0:0d:39:1a: f6:36:48:45:80:00:94:24:19:84:70:fb:10:ca:6f:11:b4:27: e9:30:a9:5c:2d:24:e3:89:f1:59:b3:bc:4c:52:10:a4:35:d3: f4:ef:30:5c:e3:5b:e8:f5:76:0d:fc:33:f0:90:b6:b9:d2:d8: c0:33:2c:e2:cc:b3:74:3f:dc:da:d6:2a:23:ae:db:27:ae:49: d4:16:96:56:da:30:ac:b5:92:a3:ca:9f:5e:5c:f1:bd:41:5c: 73:92:79:d4:82:a4:3a:a2:33:56:0e:69:f7:ae:83:ab:46:f8: 8b:cd:0e:a6:5d:4e:18:fc:82:d2:fc:08:2d:4e:37:82:92:e7: 91:ea:04:bf:ab:28:9f:53:35:7f:0f:64:a6:20:e2:f1:db:b0: 10:28:d8:bb:c0:01:df:f9:2b:45:3c:35:b5:57:a3:a7:89:19: a4:94:d9:0b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCfswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTk1ODAxMTAvBgNVBAUTKEZFNEZEQTM5NjcwMTZDMTEzQUM4MDdCODQ5MzQwQUM2 NTIwRjA4MDIwHhcNMjUwNTMwMjAwODA4WhcNMjUwNjA2MjAwODA4WjAYMRYwFAYD VQQDEw02ODNhMTAyOC1mYjk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuiwYJwneipRN8n6OorurVrisbomqeYKwkukZhbrSLlX1HOiJqWrlW8i91Iho o9veV4AAyCnj0ScKnKiy3fKwGJtNzPGlXfWNCxn+4Bh4baMWkyvYUgm1tvPgWUc+ ljN6S5Kf52Z42+p6xxCkqnOT2xWWDRjMv3Fq+tZoH+h4HX+U5PMSGogNDOAXbL/0 +iqsM6LBDS1Tatnh4YSnLmNKmJW2phCbJfFb5MSXyL0vDDXSXqWziZ94XoiCcwk0 A1RgpBVutbln6XIrPp0Ni18tkTxmXT9CgEIIqqbEPaIb1nVkXTh1FtAUmnMIZ7XS 7IjZcLzBgD4jqvxGKqZJSBICYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNRl27Kq y0MUOC2lTQE4p5jXeTsuMB8GA1UdIwQYMBaAFP5P2jlnAWwROsgHuEk0CsZSDwgC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTU4MC9DN0NFMkUxMDdG OEQxMUVBQUQ4Q0Q1MUVDNEY5QUUwMi9fa19hT1djQmJCRTZ5QWU0U1RRS3hsSVBD QUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19rX2FPV2NCYkJFNnlBZTRTVFFLeGxJUENBSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OTU4MC9DN0NFMkUxMDdGOEQxMUVBQUQ4Q0Q1MUVDNEY5QUUwMi9fa19hT1djQmJC RTZ5QWU0U1RRS3hsSVBDQUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA9yoA2ARa8Y+/JCtpB8NF56Uxu67afIdQxpbgF06aG+cG5GKF8xalO 6q65GgCpFCGNoi41y+EAQkmunMe6iOnmmTGHFenBGhujvfjsqqDlwCCC6RfzSMAN ORr2NkhFgACUJBmEcPsQym8RtCfpMKlcLSTjifFZs7xMUhCkNdP07zBc41vo9XYN /DPwkLa50tjAMyzizLN0P9za1iojrtsnrknUFpZW2jCstZKjyp9eXPG9QVxzknnU gqQ6ojNWDmn3roOrRviLzQ6mXU4Y/ILS/AgtTjeCkueR6gS/qyifUzV/D2SmIOLx 27AQKNi7wAHf+StFPDW1V6OniRmklNkL -----END CERTIFICATE-----Generated at Sat May 31 16:25:53 2025 by rpki-client