$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF73D/D27230DECE1F11EEAC62617CC4F9AE02/MOiW54nUQ2A0bqTLtO1FkU6tAn0.mft File: MOiW54nUQ2A0bqTLtO1FkU6tAn0.mft (raw, json) Hash identifier: cmGXejQHDJ/lhTBCimyoI6/ccxRkEf2hNJcEYm7MYho= Subject key identifier: 40:54:37:A8:A8:B5:F6:D6:88:4A:E9:D3:E1:37:E4:AB:58:8C:4A:97 Authority key identifier: 30:E8:96:E7:89:D4:43:60:34:6E:A4:CB:B4:ED:45:91:4E:AD:02:7D Certificate issuer: /CN=A91EF73D/serialNumber=30E896E789D44360346EA4CBB4ED45914EAD027D Certificate serial: EE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOiW54nUQ2A0bqTLtO1FkU6tAn0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF73D/D27230DECE1F11EEAC62617CC4F9AE02/MOiW54nUQ2A0bqTLtO1FkU6tAn0.mft Manifest number: EE Signing time: Sat 31 May 2025 04:54:50 +0000 Manifest this update: Sat 31 May 2025 04:54:49 +0000 Manifest next update: Sat 07 Jun 2025 04:54:49 +0000 Files and hashes: 1: MOiW54nUQ2A0bqTLtO1FkU6tAn0.crl (hash: dzirH7Avf0bXTutUL72J9bddyejQcSpZQgfK36VD+aY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF73D/D27230DECE1F11EEAC62617CC4F9AE02/MOiW54nUQ2A0bqTLtO1FkU6tAn0.crl rsync://rpki.apnic.net/member_repository/A91EF73D/D27230DECE1F11EEAC62617CC4F9AE02/MOiW54nUQ2A0bqTLtO1FkU6tAn0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOiW54nUQ2A0bqTLtO1FkU6tAn0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 04:54:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 238 (0xee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF73D, serialNumber=30E896E789D44360346EA4CBB4ED45914EAD027D Validity Not Before: May 31 04:54:49 2025 GMT Not After : Jun 7 04:54:49 2025 GMT Subject: CN=683a8b9a-7f0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:eb:be:50:ef:a7:db:43:9c:22:4d:56:a8:42: f7:42:0a:12:86:16:da:77:b0:5d:a5:d3:62:29:17: 38:96:57:04:c0:04:50:03:4b:35:8a:cd:28:da:99: ba:e9:f9:2f:8c:31:68:30:40:3e:9a:14:ed:5f:4a: 31:63:d5:83:95:a0:d5:ec:45:eb:b7:88:f5:56:7a: 4d:9d:c6:52:7b:a5:a6:d1:31:81:80:d0:77:80:1a: ff:95:b5:3a:43:e0:39:e6:4a:c2:ca:d9:7d:23:89: cc:42:4d:63:0f:a6:e2:68:9f:03:0e:96:38:1b:71: bb:2f:76:a0:f9:c6:24:e5:e8:5c:02:a8:6e:ea:db: 0b:0d:bf:b5:8f:30:e1:39:21:cc:f2:db:db:7c:ef: f1:68:17:f5:8e:01:b9:30:ae:31:87:4b:ce:d6:2a: f1:56:ee:af:07:1f:cf:0d:f3:e9:e9:3d:e6:91:33: 65:6d:fa:7e:bf:2f:17:1d:24:e7:c5:ee:41:6b:b6: 52:a7:7f:56:e6:78:16:dc:6e:f7:65:23:29:a1:d9: 43:cb:46:80:be:90:94:48:df:af:71:e5:b7:7f:63: 1f:37:3a:4c:14:a5:f5:a0:87:82:de:12:6c:7c:6c: c8:19:72:4d:0e:74:0c:52:f2:0d:86:4e:f8:20:e9: 28:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:54:37:A8:A8:B5:F6:D6:88:4A:E9:D3:E1:37:E4:AB:58:8C:4A:97 X509v3 Authority Key Identifier: keyid:30:E8:96:E7:89:D4:43:60:34:6E:A4:CB:B4:ED:45:91:4E:AD:02:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF73D/D27230DECE1F11EEAC62617CC4F9AE02/MOiW54nUQ2A0bqTLtO1FkU6tAn0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOiW54nUQ2A0bqTLtO1FkU6tAn0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF73D/D27230DECE1F11EEAC62617CC4F9AE02/MOiW54nUQ2A0bqTLtO1FkU6tAn0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:05:71:b2:5a:21:31:df:4d:b2:e9:4b:c3:48:3c:0f:0b:b5: 55:a3:de:7d:35:a0:c5:c4:2c:b8:f3:89:7b:29:95:7e:5d:dc: 16:67:42:3c:c3:04:21:fe:22:ca:ad:94:94:50:35:08:a0:81: 67:c9:2a:97:d1:b2:08:db:1c:3c:0e:a0:df:20:22:d8:29:d9: d2:36:ef:0a:fe:60:e8:f5:98:a6:b5:67:f0:f2:ba:80:b3:84: 54:e6:64:3d:fc:2b:ff:bb:03:8c:17:41:0e:31:e1:85:e6:9c: bf:a2:9d:3d:63:a7:50:6e:dd:e9:41:83:84:20:7a:de:f7:2b: 59:a6:6f:63:bb:c0:19:74:e9:6e:39:76:58:ad:0a:a7:57:24: 3d:4c:23:fa:95:ad:4e:d3:7a:bd:95:1b:c5:2e:4a:c0:64:41: a6:2f:9c:df:4d:48:48:99:31:58:c8:c7:cf:ca:14:80:33:d0: 23:84:f8:8f:6c:37:cc:e0:69:5e:07:66:aa:80:5b:99:ed:25: dc:5b:2d:03:6e:b9:18:5e:b4:d6:89:e3:6b:b1:c0:fd:eb:7d: e0:ad:b5:6c:40:a5:44:12:8c:99:a7:4e:a4:7b:2f:ca:be:47: 9f:8f:70:da:4d:80:93:92:1b:c3:ff:4a:3b:f1:a2:69:5e:a2: 70:e6:04:9e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAO4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUY3M0QxMTAvBgNVBAUTKDMwRTg5NkU3ODlENDQzNjAzNDZFQTRDQkI0RUQ0NTkx NEVBRDAyN0QwHhcNMjUwNTMxMDQ1NDQ5WhcNMjUwNjA3MDQ1NDQ5WjAYMRYwFAYD VQQDEw02ODNhOGI5YS03ZjBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyuu+UO+n20OcIk1WqEL3QgoShhbad7BdpdNiKRc4llcEwARQA0s1is0o2pm6 6fkvjDFoMEA+mhTtX0oxY9WDlaDV7EXrt4j1VnpNncZSe6Wm0TGBgNB3gBr/lbU6 Q+A55krCytl9I4nMQk1jD6biaJ8DDpY4G3G7L3ag+cYk5ehcAqhu6tsLDb+1jzDh OSHM8tvbfO/xaBf1jgG5MK4xh0vO1irxVu6vBx/PDfPp6T3mkTNlbfp+vy8XHSTn xe5Ba7ZSp39W5ngW3G73ZSMpodlDy0aAvpCUSN+vceW3f2MfNzpMFKX1oIeC3hJs fGzIGXJNDnQMUvINhk74IOkotwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEBUN6io tfbWiErp0+E35KtYjEqXMB8GA1UdIwQYMBaAFDDolueJ1ENgNG6ky7TtRZFOrQJ9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjczRC9EMjcyMzBERUNF MUYxMUVFQUM2MjYxN0NDNEY5QUUwMi9NT2lXNTRuVVEyQTBicVRMdE8xRmtVNnRB bjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01PaVc1NG5VUTJBMGJxVEx0TzFGa1U2dEFuMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RjczRC9EMjcyMzBERUNFMUYxMUVFQUM2MjYxN0NDNEY5QUUwMi9NT2lXNTRuVVEy QTBicVRMdE8xRmtVNnRBbjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAyBXGyWiEx302y6UvDSDwPC7VVo959NaDFxCy484l7KZV+XdwWZ0I8 wwQh/iLKrZSUUDUIoIFnySqX0bII2xw8DqDfICLYKdnSNu8K/mDo9ZimtWfw8rqA s4RU5mQ9/Cv/uwOMF0EOMeGF5py/op09Y6dQbt3pQYOEIHre9ytZpm9ju8AZdOlu OXZYrQqnVyQ9TCP6la1O03q9lRvFLkrAZEGmL5zfTUhImTFYyMfPyhSAM9AjhPiP bDfM4GleB2aqgFuZ7SXcWy0DbrkYXrTWieNrscD9633grbVsQKVEEoyZp06key/K vkefj3DaTYCTkhvD/0o78aJpXqJw5gSe -----END CERTIFICATE-----Generated at Sat May 31 16:56:18 2025 by rpki-client