$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB9C0/D364F0CCD21A11E983F9E524C4F9AE02/788FLZiSks6xBQkSnI3iA9SfaAQ.mft File: 788FLZiSks6xBQkSnI3iA9SfaAQ.mft (raw, json) Hash identifier: OyiTRh7VyYUOtQYog+Srey+lu+EnKAEvEnygWeOb3as= Subject key identifier: 0B:6F:23:DA:A1:76:9B:69:61:01:83:A0:C0:E4:6F:69:29:F7:30:F2 Authority key identifier: EF:CF:05:2D:98:92:92:CE:B1:05:09:12:9C:8D:E2:03:D4:9F:68:04 Certificate issuer: /CN=A91EB9C0/serialNumber=EFCF052D989292CEB10509129C8DE203D49F6804 Certificate serial: 0D55 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/788FLZiSks6xBQkSnI3iA9SfaAQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EB9C0/D364F0CCD21A11E983F9E524C4F9AE02/788FLZiSks6xBQkSnI3iA9SfaAQ.mft Manifest number: 0D4D Signing time: Mon 02 Jun 2025 18:08:58 +0000 Manifest this update: Mon 02 Jun 2025 18:08:58 +0000 Manifest next update: Mon 09 Jun 2025 18:08:58 +0000 Files and hashes: 1: 788FLZiSks6xBQkSnI3iA9SfaAQ.crl (hash: cT3FML/n6t6k4jdP4aKNpXY64K/Dpc5cntfsRL0PUQI=) 2: 1004D41ED21D11E992825429C4F9AE02.roa (hash: FAN1R0kTPo6CVZLPRUbNgZ570C6pJVmhGPN5h/j558A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EB9C0/D364F0CCD21A11E983F9E524C4F9AE02/788FLZiSks6xBQkSnI3iA9SfaAQ.crl rsync://rpki.apnic.net/member_repository/A91EB9C0/D364F0CCD21A11E983F9E524C4F9AE02/788FLZiSks6xBQkSnI3iA9SfaAQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/788FLZiSks6xBQkSnI3iA9SfaAQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 18:08:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3413 (0xd55) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EB9C0, serialNumber=EFCF052D989292CEB10509129C8DE203D49F6804 Validity Not Before: Jun 2 18:08:58 2025 GMT Not After : Jun 9 18:08:58 2025 GMT Subject: CN=683de8ba-daf1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:be:e6:24:f4:d1:5a:61:24:8a:fa:9d:0c:57: bd:1f:4c:e0:b9:2d:e8:9b:c6:4d:62:0f:96:71:7c: 13:6f:b9:f2:03:ad:0b:be:2d:ca:ca:21:b5:13:8d: 4d:d1:72:31:c7:ea:d6:74:f4:73:fd:99:b1:74:80: 73:1a:50:8d:33:0c:e8:1e:72:e9:f0:2c:39:f8:25: a7:5c:e9:ee:d7:89:53:ba:02:75:30:8a:8e:23:5f: b0:f8:84:61:90:48:61:46:4c:82:ee:fc:21:f2:dc: 53:66:54:95:68:35:92:47:5b:08:8c:eb:45:fa:f8: 0b:8b:47:bd:f7:65:b4:f4:ac:57:21:ab:e6:a6:2c: aa:b0:d1:53:52:d2:b8:a1:3e:4f:b4:6e:85:8c:df: 81:8e:f7:d6:45:61:22:44:df:3c:87:f2:c2:19:c5: 51:d2:d8:9c:cd:56:55:b6:0e:6b:2a:e5:c3:32:04: b1:ac:a2:67:10:f6:91:58:d6:90:0f:ad:06:bb:19: 67:a3:ee:e7:79:e8:35:77:22:9c:60:a7:c5:5c:af: 73:a0:78:69:27:e5:29:f4:b8:47:d0:5f:af:01:12: b6:70:93:5e:dd:59:76:4e:2f:08:c2:68:8f:10:57: 37:cb:4f:80:ab:30:2d:0b:b4:a7:ea:0b:67:50:58: 07:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:6F:23:DA:A1:76:9B:69:61:01:83:A0:C0:E4:6F:69:29:F7:30:F2 X509v3 Authority Key Identifier: keyid:EF:CF:05:2D:98:92:92:CE:B1:05:09:12:9C:8D:E2:03:D4:9F:68:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EB9C0/D364F0CCD21A11E983F9E524C4F9AE02/788FLZiSks6xBQkSnI3iA9SfaAQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/788FLZiSks6xBQkSnI3iA9SfaAQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB9C0/D364F0CCD21A11E983F9E524C4F9AE02/788FLZiSks6xBQkSnI3iA9SfaAQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:6d:f1:38:9f:14:39:78:54:fd:7f:20:27:56:91:3b:a4:44: d6:be:92:b7:0c:64:01:e9:c4:54:a2:51:6d:29:4b:0d:d1:6b: f0:d8:6e:51:aa:72:d4:05:77:b4:b5:f6:e5:8c:0e:53:44:60: 4a:cd:6b:21:16:3f:9d:c6:24:9a:dc:64:ec:b1:bc:68:7e:0d: a9:8c:de:f2:00:18:3f:97:dc:34:90:2d:1a:b9:6c:7b:47:45: 4e:0f:43:39:73:07:89:87:76:ca:63:0c:20:83:5e:9b:32:1f: ac:b0:42:2e:33:6a:8f:57:56:ca:f6:cd:58:aa:a7:f4:c3:a5: af:75:17:a7:02:75:6e:61:66:92:93:37:0f:ed:78:6b:5c:78: 22:04:fc:52:6f:51:a4:c4:90:62:b2:f7:d6:99:a0:d6:17:4a: 08:41:37:77:e7:00:cf:bf:5a:76:4b:8f:08:d6:df:68:4b:ae: 91:81:0c:3e:06:7a:28:b0:55:64:f7:32:3b:3d:70:24:68:56: 93:b1:4f:9a:ba:e4:99:9a:9d:80:07:0d:c9:5c:1c:7f:73:f9: 61:a8:4d:f6:9e:c3:c4:c4:63:85:68:5b:e9:a5:b1:d4:84:93: be:d1:25:b1:3d:87:2f:e4:a5:d3:5e:24:66:51:5c:95:56:76: 29:32:b8:cb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDVUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUI5QzAxMTAvBgNVBAUTKEVGQ0YwNTJEOTg5MjkyQ0VCMTA1MDkxMjlDOERFMjAz RDQ5RjY4MDQwHhcNMjUwNjAyMTgwODU4WhcNMjUwNjA5MTgwODU4WjAYMRYwFAYD VQQDEw02ODNkZThiYS1kYWYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0L7mJPTRWmEkivqdDFe9H0zguS3om8ZNYg+WcXwTb7nyA60Lvi3KyiG1E41N 0XIxx+rWdPRz/ZmxdIBzGlCNMwzoHnLp8Cw5+CWnXOnu14lTugJ1MIqOI1+w+IRh kEhhRkyC7vwh8txTZlSVaDWSR1sIjOtF+vgLi0e992W09KxXIavmpiyqsNFTUtK4 oT5PtG6FjN+BjvfWRWEiRN88h/LCGcVR0ticzVZVtg5rKuXDMgSxrKJnEPaRWNaQ D60Guxlno+7neeg1dyKcYKfFXK9zoHhpJ+Up9LhH0F+vARK2cJNe3Vl2Ti8IwmiP EFc3y0+AqzAtC7Sn6gtnUFgHFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAtvI9qh dptpYQGDoMDkb2kp9zDyMB8GA1UdIwQYMBaAFO/PBS2YkpLOsQUJEpyN4gPUn2gE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQjlDMC9EMzY0RjBDQ0Qy MUExMUU5ODNGOUU1MjRDNEY5QUUwMi83ODhGTFppU2tzNnhCUWtTbkkzaUE5U2Zh QVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzc4OEZMWmlTa3M2eEJRa1NuSTNpQTlTZmFBUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QjlDMC9EMzY0RjBDQ0QyMUExMUU5ODNGOUU1MjRDNEY5QUUwMi83ODhGTFppU2tz NnhCUWtTbkkzaUE5U2ZhQVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCDbfE4nxQ5eFT9fyAnVpE7pETWvpK3DGQB6cRUolFtKUsN0Wvw2G5R qnLUBXe0tfbljA5TRGBKzWshFj+dxiSa3GTssbxofg2pjN7yABg/l9w0kC0auWx7 R0VOD0M5cweJh3bKYwwgg16bMh+ssEIuM2qPV1bK9s1Yqqf0w6WvdRenAnVuYWaS kzcP7XhrXHgiBPxSb1GkxJBisvfWmaDWF0oIQTd35wDPv1p2S48I1t9oS66RgQw+ BnoosFVk9zI7PXAkaFaTsU+auuSZmp2ABw3JXBx/c/lhqE32nsPExGOFaFvppbHU hJO+0SWxPYcv5KXTXiRmUVyVVnYpMrjL -----END CERTIFICATE-----Generated at Wed Jun 4 00:01:56 2025 by rpki-client