$ rpki-client -vvf rpki.apnic.net/member_repository/A91F05B5/475012062AB311EE8FAE7214C4F9AE02/CV9sa7OHxpMv2gHAv6Ym9qrHuwA.mft File: CV9sa7OHxpMv2gHAv6Ym9qrHuwA.mft (raw, json) Hash identifier: Aug2GxpNVaMoEAkU73A3gsFNgJKHc0EBiuVPwdypKow= Subject key identifier: AE:81:88:B6:E8:A4:07:CF:C4:29:A9:87:10:B0:57:4E:00:5D:23:E9 Authority key identifier: 09:5F:6C:6B:B3:87:C6:93:2F:DA:01:C0:BF:A6:26:F6:AA:C7:BB:00 Certificate issuer: /CN=A91F05B5/serialNumber=095F6C6BB387C6932FDA01C0BFA626F6AAC7BB00 Certificate serial: 0161 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CV9sa7OHxpMv2gHAv6Ym9qrHuwA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F05B5/475012062AB311EE8FAE7214C4F9AE02/CV9sa7OHxpMv2gHAv6Ym9qrHuwA.mft Manifest number: 015D Signing time: Sat 31 May 2025 03:41:38 +0000 Manifest this update: Sat 31 May 2025 03:41:38 +0000 Manifest next update: Sat 07 Jun 2025 03:41:38 +0000 Files and hashes: 1: CV9sa7OHxpMv2gHAv6Ym9qrHuwA.crl (hash: FTWhkkvlZZ/7AE+ZE0TCwqPz02P4iXqyWovhIHfgV4Y=) 2: E0A69DBC2AB311EE9CA5E515C4F9AE02.roa (hash: ZqsBefU5j7GUz5qH7o82aafqjpUX9O/Biz1HkkL6OG4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F05B5/475012062AB311EE8FAE7214C4F9AE02/CV9sa7OHxpMv2gHAv6Ym9qrHuwA.crl rsync://rpki.apnic.net/member_repository/A91F05B5/475012062AB311EE8FAE7214C4F9AE02/CV9sa7OHxpMv2gHAv6Ym9qrHuwA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CV9sa7OHxpMv2gHAv6Ym9qrHuwA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 03:41:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 353 (0x161) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F05B5, serialNumber=095F6C6BB387C6932FDA01C0BFA626F6AAC7BB00 Validity Not Before: May 31 03:41:38 2025 GMT Not After : Jun 7 03:41:38 2025 GMT Subject: CN=683a7a72-75bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:c0:e7:e8:8b:57:70:8c:7e:ce:f6:d4:df:a6: 07:b4:0a:cb:32:b5:f4:63:86:12:fd:4a:b1:69:4b: 7e:ce:8e:84:72:f0:78:52:25:1b:34:9a:0d:5c:a3: 2f:c2:2c:3a:3d:41:51:86:d3:82:87:e2:f2:07:88: c0:d4:ca:dc:5b:f2:73:15:f1:94:e6:c9:6e:86:d5: f7:07:7b:e1:db:21:9d:65:16:54:22:c6:4c:68:42: 85:a9:a5:35:e2:c7:c2:10:0f:d9:36:9a:76:b6:dd: 31:22:e3:93:c3:65:fb:fd:3b:a1:b0:85:22:46:f9: c0:7f:4c:9c:2e:53:1b:f9:2b:9e:8e:c6:1d:ce:7c: 2a:d5:52:9f:06:f8:6d:33:57:c9:9c:bc:e7:ea:c7: e5:57:71:21:eb:c4:c2:95:5b:9e:57:b7:34:eb:94: 12:c3:c3:37:fb:51:3e:4a:5e:15:dd:f0:0d:db:b1: a1:5f:fd:9d:82:1f:df:82:96:26:24:34:24:26:47: ff:92:d5:33:fa:c1:22:70:73:0d:4e:f4:5e:d1:46: 2a:a8:4a:46:c9:94:57:77:10:d4:17:70:69:23:12: d1:16:a9:32:54:5f:d8:a9:69:1b:62:6c:b6:49:b9: 40:e3:a6:4c:f0:b1:e3:bf:59:8b:c8:1f:47:00:3d: 70:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:81:88:B6:E8:A4:07:CF:C4:29:A9:87:10:B0:57:4E:00:5D:23:E9 X509v3 Authority Key Identifier: keyid:09:5F:6C:6B:B3:87:C6:93:2F:DA:01:C0:BF:A6:26:F6:AA:C7:BB:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F05B5/475012062AB311EE8FAE7214C4F9AE02/CV9sa7OHxpMv2gHAv6Ym9qrHuwA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CV9sa7OHxpMv2gHAv6Ym9qrHuwA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F05B5/475012062AB311EE8FAE7214C4F9AE02/CV9sa7OHxpMv2gHAv6Ym9qrHuwA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:76:f1:8d:aa:d7:84:97:30:1b:10:a6:09:12:a3:1a:97:97: 53:81:8b:f8:fa:8d:99:6e:6f:20:0b:6a:84:99:31:4c:26:7b: 65:cf:69:e0:ef:cd:12:3b:04:7d:8d:f0:6a:14:b1:70:09:80: b8:77:d4:2a:aa:ff:e6:d3:54:1b:b3:9a:e7:69:d1:59:f5:8a: 23:5b:fd:6a:a3:b0:b1:d7:6c:0e:2a:78:c9:06:69:fc:97:e1: c8:7a:99:b9:5c:af:1e:1f:11:25:b6:9e:44:3e:98:ad:fa:b8: f3:ca:1b:0a:31:b8:4b:d2:c3:cf:92:7d:8b:cc:42:54:02:46: 49:d7:26:af:51:21:f6:5c:85:fb:87:89:1d:e2:ad:48:90:3c: 9b:ac:84:9c:96:de:4e:4e:c2:c5:46:e8:76:06:af:e7:27:18: b8:e7:2b:0e:55:34:1b:e1:6c:64:05:04:6f:6c:dc:fe:78:1b: 84:ea:f0:23:9c:87:f3:9d:20:9e:83:07:62:93:b2:ea:bf:00: 90:2c:d1:9b:f8:86:fa:4b:56:fb:e0:79:b4:65:8a:5e:29:05: 27:87:f1:74:48:94:5c:ae:69:c2:11:68:e9:b1:04:58:eb:bd: 93:cd:72:09:ca:1d:bb:74:ba:6f:23:43:ec:d9:b1:49:5b:7f: ba:91:e2:16 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjA1QjUxMTAvBgNVBAUTKDA5NUY2QzZCQjM4N0M2OTMyRkRBMDFDMEJGQTYyNkY2 QUFDN0JCMDAwHhcNMjUwNTMxMDM0MTM4WhcNMjUwNjA3MDM0MTM4WjAYMRYwFAYD VQQDEw02ODNhN2E3Mi03NWJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAucDn6ItXcIx+zvbU36YHtArLMrX0Y4YS/UqxaUt+zo6EcvB4UiUbNJoNXKMv wiw6PUFRhtOCh+LyB4jA1MrcW/JzFfGU5sluhtX3B3vh2yGdZRZUIsZMaEKFqaU1 4sfCEA/ZNpp2tt0xIuOTw2X7/TuhsIUiRvnAf0ycLlMb+SuejsYdznwq1VKfBvht M1fJnLzn6sflV3Eh68TClVueV7c065QSw8M3+1E+Sl4V3fAN27GhX/2dgh/fgpYm JDQkJkf/ktUz+sEicHMNTvRe0UYqqEpGyZRXdxDUF3BpIxLRFqkyVF/YqWkbYmy2 SblA46ZM8LHjv1mLyB9HAD1w4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK6BiLbo pAfPxCmphxCwV04AXSPpMB8GA1UdIwQYMBaAFAlfbGuzh8aTL9oBwL+mJvaqx7sA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMDVCNS80NzUwMTIwNjJB QjMxMUVFOEZBRTcyMTRDNEY5QUUwMi9DVjlzYTdPSHhwTXYyZ0hBdjZZbTlxckh1 d0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NWOXNhN09IeHBNdjJnSEF2NlltOXFySHV3QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MDVCNS80NzUwMTIwNjJBQjMxMUVFOEZBRTcyMTRDNEY5QUUwMi9DVjlzYTdPSHhw TXYyZ0hBdjZZbTlxckh1d0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBrdvGNqteElzAbEKYJEqMal5dTgYv4+o2Zbm8gC2qEmTFMJntlz2ng 780SOwR9jfBqFLFwCYC4d9Qqqv/m01Qbs5rnadFZ9YojW/1qo7Cx12wOKnjJBmn8 l+HIepm5XK8eHxEltp5EPpit+rjzyhsKMbhL0sPPkn2LzEJUAkZJ1yavUSH2XIX7 h4kd4q1IkDybrISclt5OTsLFRuh2Bq/nJxi45ysOVTQb4WxkBQRvbNz+eBuE6vAj nIfznSCegwdik7LqvwCQLNGb+Ib6S1b74Hm0ZYpeKQUnh/F0SJRcrmnCEWjpsQRY 672TzXIJyh27dLpvI0Ps2bFJW3+6keIW -----END CERTIFICATE-----Generated at Sat May 31 17:23:38 2025 by rpki-client