$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF554/EB1CBBE29E5B11EAB248FC51C4F9AE02/G5HVFg99VrcFqFFsahz0L0ln71Y.mft File: G5HVFg99VrcFqFFsahz0L0ln71Y.mft (raw, json) Hash identifier: n82GIRMmAy+xxHTr5w1VXz9pmkDcT7GttOMlGWhSVs0= Subject key identifier: DD:DB:F7:1B:FD:C0:19:37:82:75:0B:A5:0E:09:62:A9:0E:D8:D2:3A Authority key identifier: 1B:91:D5:16:0F:7D:56:B7:05:A8:51:6C:6A:1C:F4:2F:49:67:EF:56 Certificate issuer: /CN=A91EF554/serialNumber=1B91D5160F7D56B705A8516C6A1CF42F4967EF56 Certificate serial: 0940 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G5HVFg99VrcFqFFsahz0L0ln71Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF554/EB1CBBE29E5B11EAB248FC51C4F9AE02/G5HVFg99VrcFqFFsahz0L0ln71Y.mft Manifest number: 0938 Signing time: Fri 30 May 2025 21:02:55 +0000 Manifest this update: Fri 30 May 2025 21:02:55 +0000 Manifest next update: Fri 06 Jun 2025 21:02:55 +0000 Files and hashes: 1: G5HVFg99VrcFqFFsahz0L0ln71Y.crl (hash: 0arf8NFcGno6GME3HnEUoATs6BRpMCJRc7v1a+xlEU8=) 2: 156CEB62DC6011ECB2698C14C4F9AE02.roa (hash: reuaGLtn1xD8mIcBhpyoMRgE/LzBHNExqumLX0mZnsc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF554/EB1CBBE29E5B11EAB248FC51C4F9AE02/G5HVFg99VrcFqFFsahz0L0ln71Y.crl rsync://rpki.apnic.net/member_repository/A91EF554/EB1CBBE29E5B11EAB248FC51C4F9AE02/G5HVFg99VrcFqFFsahz0L0ln71Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G5HVFg99VrcFqFFsahz0L0ln71Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 21:02:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2368 (0x940) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF554, serialNumber=1B91D5160F7D56B705A8516C6A1CF42F4967EF56 Validity Not Before: May 30 21:02:55 2025 GMT Not After : Jun 6 21:02:55 2025 GMT Subject: CN=683a1cff-b5b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:3b:aa:54:0d:af:40:f4:2a:34:0b:c5:45:fc: 41:59:8d:9c:8d:5c:6c:96:db:69:4f:86:06:0e:37: d0:df:b9:fc:11:5e:58:0e:3a:8d:e8:11:8c:c5:d1: ed:83:fe:81:6b:94:ad:ef:72:2a:db:07:d4:9f:5e: f0:0a:3b:8c:7d:37:09:89:82:0b:dd:fa:5f:d9:48: a8:08:dc:6b:81:52:fc:5e:a9:d1:dc:bd:89:66:8d: 12:44:a1:22:97:f4:ae:21:31:8a:83:e7:94:a5:0e: 4b:dd:80:6c:c1:d4:df:23:5b:f3:f3:c7:95:be:bf: a4:0e:30:47:c5:81:68:d1:5a:fc:b2:88:0d:5b:ac: 89:32:3d:61:29:e9:95:b0:82:82:ad:89:0b:83:0c: 15:e2:d7:90:ed:70:9f:26:72:ea:46:e0:02:14:79: 00:18:62:d8:58:ee:18:bb:ff:82:39:22:cc:db:02: 15:76:fc:2f:1d:9c:79:9e:ff:f4:88:1c:17:35:38: 44:27:1e:32:35:6e:2d:65:ae:45:af:c9:97:05:2f: b0:f0:2b:42:45:b6:ca:ef:7f:f9:f2:18:72:72:ae: 49:7c:9a:a1:3e:30:3d:87:0c:94:22:23:af:7e:7f: bc:eb:fe:8a:d1:10:bd:52:83:f4:72:9c:2f:f0:c2: f8:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:DB:F7:1B:FD:C0:19:37:82:75:0B:A5:0E:09:62:A9:0E:D8:D2:3A X509v3 Authority Key Identifier: keyid:1B:91:D5:16:0F:7D:56:B7:05:A8:51:6C:6A:1C:F4:2F:49:67:EF:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF554/EB1CBBE29E5B11EAB248FC51C4F9AE02/G5HVFg99VrcFqFFsahz0L0ln71Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G5HVFg99VrcFqFFsahz0L0ln71Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF554/EB1CBBE29E5B11EAB248FC51C4F9AE02/G5HVFg99VrcFqFFsahz0L0ln71Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:65:fd:a5:08:c9:13:77:42:03:ae:ce:b1:9e:51:dd:b1:c2: 31:fe:bc:ed:d8:e8:3a:cf:15:88:e8:34:e3:bb:c6:d9:ef:6c: 9d:d9:78:a2:90:94:0a:70:1d:d9:a0:6c:00:37:1f:d3:0c:94: 85:d0:81:d6:17:a8:e3:40:40:53:b1:69:24:b7:52:0e:d7:bd: 90:6a:48:c8:8d:4c:20:7c:d5:a5:fc:63:71:33:65:4d:10:4d: cd:5e:fa:f2:3d:3d:83:6c:8f:46:0b:b4:91:98:b3:a0:c5:e3: 78:0a:72:87:a4:24:0f:79:b3:5f:da:6b:d6:8f:b0:5b:54:be: 92:d3:a0:60:2d:96:e3:f6:a2:23:39:f6:62:1b:d1:76:64:a2: 65:79:ba:d9:26:c2:37:86:e0:ee:d9:41:28:7a:89:52:05:26: 1d:5c:cf:11:6f:cd:3e:7c:9e:39:67:d8:b9:53:68:c3:c1:6d: 2d:c0:55:1b:16:d8:31:65:da:f6:e4:ef:46:c3:38:31:d0:54: 3a:f5:81:8b:e5:47:f9:23:b6:8a:98:72:ef:32:95:f8:b4:f1: 6e:5a:77:d6:6e:03:1e:2c:95:8b:17:55:87:dc:0b:b0:3e:2c: 8f:41:02:09:fb:58:e9:3c:cc:ca:0b:3b:7d:a7:eb:59:2a:1e: 49:49:12:a7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCUAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUY1NTQxMTAvBgNVBAUTKDFCOTFENTE2MEY3RDU2QjcwNUE4NTE2QzZBMUNGNDJG NDk2N0VGNTYwHhcNMjUwNTMwMjEwMjU1WhcNMjUwNjA2MjEwMjU1WjAYMRYwFAYD VQQDEw02ODNhMWNmZi1iNWIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApzuqVA2vQPQqNAvFRfxBWY2cjVxslttpT4YGDjfQ37n8EV5YDjqN6BGMxdHt g/6Ba5St73Iq2wfUn17wCjuMfTcJiYIL3fpf2UioCNxrgVL8XqnR3L2JZo0SRKEi l/SuITGKg+eUpQ5L3YBswdTfI1vz88eVvr+kDjBHxYFo0Vr8sogNW6yJMj1hKemV sIKCrYkLgwwV4teQ7XCfJnLqRuACFHkAGGLYWO4Yu/+COSLM2wIVdvwvHZx5nv/0 iBwXNThEJx4yNW4tZa5Fr8mXBS+w8CtCRbbK73/58hhycq5JfJqhPjA9hwyUIiOv fn+86/6K0RC9UoP0cpwv8ML4wQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN3b9xv9 wBk3gnULpQ4JYqkO2NI6MB8GA1UdIwQYMBaAFBuR1RYPfVa3BahRbGoc9C9JZ+9W MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjU1NC9FQjFDQkJFMjlF NUIxMUVBQjI0OEZDNTFDNEY5QUUwMi9HNUhWRmc5OVZyY0ZxRkZzYWh6MEwwbG43 MVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0c1SFZGZzk5VnJjRnFGRnNhaHowTDBsbjcxWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RjU1NC9FQjFDQkJFMjlFNUIxMUVBQjI0OEZDNTFDNEY5QUUwMi9HNUhWRmc5OVZy Y0ZxRkZzYWh6MEwwbG43MVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA4Zf2lCMkTd0IDrs6xnlHdscIx/rzt2Og6zxWI6DTju8bZ72yd2Xii kJQKcB3ZoGwANx/TDJSF0IHWF6jjQEBTsWkkt1IO172QakjIjUwgfNWl/GNxM2VN EE3NXvryPT2DbI9GC7SRmLOgxeN4CnKHpCQPebNf2mvWj7BbVL6S06BgLZbj9qIj OfZiG9F2ZKJlebrZJsI3huDu2UEoeolSBSYdXM8Rb80+fJ45Z9i5U2jDwW0twFUb FtgxZdr25O9Gwzgx0FQ69YGL5Uf5I7aKmHLvMpX4tPFuWnfWbgMeLJWLF1WH3Auw PiyPQQIJ+1jpPMzKCzt9p+tZKh5JSRKn -----END CERTIFICATE-----Generated at Sat May 31 17:30:17 2025 by rpki-client