$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC7F2/48EFD17CF1A711E8AA614F51C4F9AE02/g71HreMCJZx1jHTIMLKebzpXc9s.mft File: g71HreMCJZx1jHTIMLKebzpXc9s.mft (raw, json) Hash identifier: Y2qFn7m4sTlSfsHMO68MqN/lFQJLUMIzXm4FtqXCqhc= Subject key identifier: 17:73:70:28:53:C3:4A:A5:39:33:C1:73:55:98:21:3F:20:85:66:3C Authority key identifier: 83:BD:47:AD:E3:02:25:9C:75:8C:74:C8:30:B2:9E:6F:3A:57:73:DB Certificate issuer: /CN=A91EC7F2/serialNumber=83BD47ADE302259C758C74C830B29E6F3A5773DB Certificate serial: 11D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g71HreMCJZx1jHTIMLKebzpXc9s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EC7F2/48EFD17CF1A711E8AA614F51C4F9AE02/g71HreMCJZx1jHTIMLKebzpXc9s.mft Manifest number: 11C1 Signing time: Fri 30 May 2025 17:22:15 +0000 Manifest this update: Fri 30 May 2025 17:22:15 +0000 Manifest next update: Fri 06 Jun 2025 17:22:15 +0000 Files and hashes: 1: g71HreMCJZx1jHTIMLKebzpXc9s.crl (hash: Ng4UH41uuyDLbhzzEMkQ0wdbBlClnKrIcEyMn+zdJt4=) 2: 9D003F28621711E9B8C69E15C4F9AE02.roa (hash: Cinni1CQdvw9QZ/TfXqeTRH7AM3KM0M/pfCrSaEHDYM=) 3: 09F041C675FB11EAB470A130C4F9AE02.roa (hash: TVhSAgEvsJfuZaOVoxgSaRmJu5V64CD24chcx4Ly8ag=) 4: 9C7048DC621711E9B8C69E15C4F9AE02.roa (hash: ScKShaSanQZL0Fzy7Q3PEdRjE3XVz96AGuDEeuPLE9c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EC7F2/48EFD17CF1A711E8AA614F51C4F9AE02/g71HreMCJZx1jHTIMLKebzpXc9s.crl rsync://rpki.apnic.net/member_repository/A91EC7F2/48EFD17CF1A711E8AA614F51C4F9AE02/g71HreMCJZx1jHTIMLKebzpXc9s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g71HreMCJZx1jHTIMLKebzpXc9s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 17:22:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4569 (0x11d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EC7F2, serialNumber=83BD47ADE302259C758C74C830B29E6F3A5773DB Validity Not Before: May 30 17:22:15 2025 GMT Not After : Jun 6 17:22:15 2025 GMT Subject: CN=6839e947-598c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:84:33:b6:74:f4:a9:e1:b8:3a:b3:13:00:eb: 41:f8:68:85:6b:39:09:40:b6:4b:c8:51:60:e2:9b: 3f:51:6c:98:21:b6:71:5a:dc:7e:81:f7:46:f4:cc: 47:d8:dc:7d:6a:79:ec:74:25:d4:4c:d8:5e:40:38: 93:7e:dc:b7:fc:6c:94:76:49:05:ad:96:68:cf:3c: 09:00:be:08:e2:d5:13:88:7e:c1:8d:34:8a:c0:ec: 49:f8:a7:28:e7:a5:d4:e5:a8:d1:e2:f0:33:0b:f4: 4e:c4:a2:94:c8:51:6a:34:58:0f:4a:95:37:7f:95: ed:c9:24:6c:5a:5b:0f:3e:72:df:cd:bd:11:43:8c: 34:ca:05:af:43:bd:fe:dc:4c:88:dd:80:e2:e1:74: f6:0e:49:96:a6:b6:a3:6d:08:31:f0:79:6d:62:95: 58:98:d6:96:8f:93:32:7d:8f:c5:9a:7b:f3:c2:df: d6:9b:83:6d:46:73:0f:7a:ff:ff:67:10:d9:7b:bf: d7:73:7d:37:b7:33:5d:52:dd:4f:7e:e2:9b:fd:d4: 03:b2:39:0a:77:00:05:21:95:24:43:48:18:bf:9f: 66:6c:1d:6a:b1:9d:e8:a9:de:b1:ed:7d:60:03:35: e3:47:5e:41:94:da:26:f5:5d:7e:8a:ba:8b:53:bc: 04:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:73:70:28:53:C3:4A:A5:39:33:C1:73:55:98:21:3F:20:85:66:3C X509v3 Authority Key Identifier: keyid:83:BD:47:AD:E3:02:25:9C:75:8C:74:C8:30:B2:9E:6F:3A:57:73:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EC7F2/48EFD17CF1A711E8AA614F51C4F9AE02/g71HreMCJZx1jHTIMLKebzpXc9s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g71HreMCJZx1jHTIMLKebzpXc9s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC7F2/48EFD17CF1A711E8AA614F51C4F9AE02/g71HreMCJZx1jHTIMLKebzpXc9s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:72:c2:bc:8f:d3:e8:da:47:95:d2:fa:dd:06:0d:e4:19:ef: 00:5e:ec:01:69:a8:7d:1a:d0:89:4a:48:3a:e2:ac:9e:83:0f: ac:77:c8:91:99:0a:34:ec:62:07:94:5f:ce:18:0f:e5:07:85: 4d:fd:d8:50:9e:90:1e:46:9b:b8:16:d3:4d:61:7e:4c:45:bb: f8:5e:f3:bd:e3:3e:e3:b5:08:07:e1:98:7f:25:b7:50:6c:6b: 7b:37:60:84:ed:ea:14:4c:1e:96:33:00:99:9f:5b:a6:24:50: 7e:a0:0d:4b:57:f8:ec:d1:fb:ae:b5:27:8a:9a:59:86:5c:79: 6b:e5:d5:ce:d4:8b:43:cc:05:4f:b1:47:3e:e6:49:22:d2:71: 2e:bd:22:0b:e9:ee:15:0e:6a:f6:9b:0e:33:80:52:9d:ae:81: 57:00:f4:00:b4:d7:0f:50:06:d5:a7:97:07:61:b4:1d:f1:94: 5b:c7:4a:8d:c3:7a:8d:c1:08:bd:3d:a9:a6:09:3b:3d:8a:42: ea:f6:91:7d:6a:4a:be:34:99:fc:eb:9d:62:34:31:a8:ed:cb: bf:1f:19:5f:b1:c5:6c:a9:78:5c:2f:7f:f8:5a:c4:5e:0e:0b: bb:65:ed:48:8b:d7:27:83:b5:97:7e:0d:d7:b3:04:5b:5c:32: cb:65:3a:5e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEdkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUM3RjIxMTAvBgNVBAUTKDgzQkQ0N0FERTMwMjI1OUM3NThDNzRDODMwQjI5RTZG M0E1NzczREIwHhcNMjUwNTMwMTcyMjE1WhcNMjUwNjA2MTcyMjE1WjAYMRYwFAYD VQQDEw02ODM5ZTk0Ny01OThjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2oQztnT0qeG4OrMTAOtB+GiFazkJQLZLyFFg4ps/UWyYIbZxWtx+gfdG9MxH 2Nx9annsdCXUTNheQDiTfty3/GyUdkkFrZZozzwJAL4I4tUTiH7BjTSKwOxJ+Kco 56XU5ajR4vAzC/ROxKKUyFFqNFgPSpU3f5XtySRsWlsPPnLfzb0RQ4w0ygWvQ73+ 3EyI3YDi4XT2DkmWprajbQgx8HltYpVYmNaWj5MyfY/Fmnvzwt/Wm4NtRnMPev// ZxDZe7/Xc303tzNdUt1PfuKb/dQDsjkKdwAFIZUkQ0gYv59mbB1qsZ3oqd6x7X1g AzXjR15BlNom9V1+irqLU7wEvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBdzcChT w0qlOTPBc1WYIT8ghWY8MB8GA1UdIwQYMBaAFIO9R63jAiWcdYx0yDCynm86V3Pb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQzdGMi80OEVGRDE3Q0Yx QTcxMUU4QUE2MTRGNTFDNEY5QUUwMi9nNzFIcmVNQ0paeDFqSFRJTUxLZWJ6cFhj OXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2c3MUhyZU1DSlp4MWpIVElNTEtlYnpwWGM5cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QzdGMi80OEVGRDE3Q0YxQTcxMUU4QUE2MTRGNTFDNEY5QUUwMi9nNzFIcmVNQ0pa eDFqSFRJTUxLZWJ6cFhjOXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA8csK8j9Po2keV0vrdBg3kGe8AXuwBaah9GtCJSkg64qyegw+sd8iR mQo07GIHlF/OGA/lB4VN/dhQnpAeRpu4FtNNYX5MRbv4XvO94z7jtQgH4Zh/JbdQ bGt7N2CE7eoUTB6WMwCZn1umJFB+oA1LV/js0fuutSeKmlmGXHlr5dXO1ItDzAVP sUc+5kki0nEuvSIL6e4VDmr2mw4zgFKdroFXAPQAtNcPUAbVp5cHYbQd8ZRbx0qN w3qNwQi9PammCTs9ikLq9pF9akq+NJn8651iNDGo7cu/HxlfscVsqXhcL3/4WsRe Dgu7Ze1Ii9cng7WXfg3XswRbXDLLZTpe -----END CERTIFICATE-----Generated at Sat May 31 17:04:58 2025 by rpki-client