$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0F53/A22352C24A9611ED9891DC18C4F9AE02/-WS28tsd8I3d2tR5U1OdnFk9CmY.mft File: -WS28tsd8I3d2tR5U1OdnFk9CmY.mft (raw, json) Hash identifier: GbzuQ1g0WELVADmFd/nNc85e1HQ+1XTYWayhRmOD9fs= Subject key identifier: 1E:76:4E:9B:EE:0A:0D:6E:06:01:CD:6D:38:CF:01:CD:F3:E1:B7:50 Authority key identifier: F9:64:B6:F2:DB:1D:F0:8D:DD:DA:D4:79:53:53:9D:9C:59:3D:0A:66 Certificate issuer: /CN=A91F0F53/serialNumber=F964B6F2DB1DF08DDDDAD47953539D9C593D0A66 Certificate serial: 0206 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-WS28tsd8I3d2tR5U1OdnFk9CmY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F0F53/A22352C24A9611ED9891DC18C4F9AE02/-WS28tsd8I3d2tR5U1OdnFk9CmY.mft Manifest number: 01F8 Signing time: Sat 31 May 2025 02:17:21 +0000 Manifest this update: Sat 31 May 2025 02:17:21 +0000 Manifest next update: Sat 07 Jun 2025 02:17:21 +0000 Files and hashes: 1: -WS28tsd8I3d2tR5U1OdnFk9CmY.crl (hash: Ey1NfQq2gmlf0kpSwk8u5ojPKEvp81fL2C5N6LfOQEg=) 2: 50AC0FBE329011EEB46D367FC4F9AE02.roa (hash: MniMCaT7GS5dM8liFRmMS+V0grGgkVjsR8fvxiwRJoU=) 3: 051D87824A9A11ED9B9F6E25C4F9AE02.roa (hash: yFTXv2eFumW58i8EpayoiAuuDpkxivQ9zhERap37PtU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F0F53/A22352C24A9611ED9891DC18C4F9AE02/-WS28tsd8I3d2tR5U1OdnFk9CmY.crl rsync://rpki.apnic.net/member_repository/A91F0F53/A22352C24A9611ED9891DC18C4F9AE02/-WS28tsd8I3d2tR5U1OdnFk9CmY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-WS28tsd8I3d2tR5U1OdnFk9CmY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 02:17:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 518 (0x206) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F0F53, serialNumber=F964B6F2DB1DF08DDDDAD47953539D9C593D0A66 Validity Not Before: May 31 02:17:21 2025 GMT Not After : Jun 7 02:17:21 2025 GMT Subject: CN=683a66b1-969f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:45:90:ab:75:b1:c3:b0:6c:65:f5:da:d2:31: fd:eb:10:ad:ef:e8:b9:40:fd:92:aa:f3:af:69:4d: 87:8f:82:81:67:93:10:b4:8a:d7:7d:b0:69:02:35: 4e:4a:cf:76:92:e2:73:62:ec:fc:c3:32:2c:40:7f: f9:76:22:dc:49:3b:07:58:89:8a:5d:1f:2f:f7:65: a3:d5:c1:a7:7a:41:b9:75:a2:3f:2e:0a:9d:e8:b6: c3:65:d4:8a:e1:93:c3:6c:8f:19:90:a8:85:ca:dc: 70:5a:a4:b0:2b:83:fb:5b:21:19:66:f9:cb:34:a5: e5:f8:8d:4e:40:0a:81:bc:0e:dc:b5:8f:0d:39:b8: 35:d3:24:69:24:00:22:5d:08:f2:26:65:ac:a3:48: 85:a2:02:c9:2b:54:f8:21:e7:2e:99:52:fa:a1:46: 76:8c:fe:4d:bb:30:f1:64:c1:65:1c:4f:f9:e9:3a: 7e:fc:0a:15:16:6e:ae:7d:37:d7:ff:b3:c1:f8:c5: be:81:d5:b5:3a:b3:bf:66:a8:8f:19:ee:87:8e:b7: b5:42:f8:fb:4b:e7:9a:cd:61:9c:01:23:a3:48:a7: 92:06:8b:23:33:18:29:93:9f:42:72:27:99:4d:97: 66:3c:92:c6:81:8b:aa:11:77:af:54:d2:80:3b:1f: c6:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:76:4E:9B:EE:0A:0D:6E:06:01:CD:6D:38:CF:01:CD:F3:E1:B7:50 X509v3 Authority Key Identifier: keyid:F9:64:B6:F2:DB:1D:F0:8D:DD:DA:D4:79:53:53:9D:9C:59:3D:0A:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F0F53/A22352C24A9611ED9891DC18C4F9AE02/-WS28tsd8I3d2tR5U1OdnFk9CmY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-WS28tsd8I3d2tR5U1OdnFk9CmY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0F53/A22352C24A9611ED9891DC18C4F9AE02/-WS28tsd8I3d2tR5U1OdnFk9CmY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:0a:83:de:a3:95:ee:33:67:f8:ad:fc:31:bc:8b:14:6d:e3: fb:71:34:e2:9d:91:09:89:ba:05:4b:12:00:78:f1:f1:53:ef: c5:22:bf:81:5f:58:75:61:30:12:96:53:ff:72:9f:5c:ce:f1: 68:51:6a:2b:b5:36:4d:5a:31:e5:b6:da:35:c9:64:41:21:1f: 80:a9:71:38:07:5e:fe:62:f9:02:eb:11:56:c0:b0:4a:5a:50: cc:c6:47:39:9d:51:34:f1:49:f2:7e:20:bf:01:1a:2e:17:15: 9e:f9:65:d8:c7:d5:97:e5:8a:22:89:18:89:d1:0e:ad:70:a8: 1d:41:56:88:86:49:f6:30:17:ed:d7:e7:ce:29:64:3b:24:f9: 76:e6:2e:ab:ca:14:54:30:d8:1a:32:9c:b7:fb:c8:20:6b:3a: 57:09:4c:be:d2:9a:a0:bb:60:b1:96:65:51:d9:7a:2f:41:f5: 79:82:d2:cf:ee:f5:87:e4:0f:a2:d1:d8:3a:da:b5:2a:e3:8a: a3:83:ed:ce:29:db:66:4b:b2:03:8b:64:32:ac:f5:18:96:86: 32:52:26:8c:6f:15:5e:93:dc:9f:a4:6b:09:20:5d:ec:35:56: 01:6c:18:59:e0:c7:3a:90:7a:dc:ce:32:9c:2a:12:6b:a7:cf: 62:39:ba:67 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjBGNTMxMTAvBgNVBAUTKEY5NjRCNkYyREIxREYwOERERERBRDQ3OTUzNTM5RDlD NTkzRDBBNjYwHhcNMjUwNTMxMDIxNzIxWhcNMjUwNjA3MDIxNzIxWjAYMRYwFAYD VQQDEw02ODNhNjZiMS05NjlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnUWQq3Wxw7BsZfXa0jH96xCt7+i5QP2SqvOvaU2Hj4KBZ5MQtIrXfbBpAjVO Ss92kuJzYuz8wzIsQH/5diLcSTsHWImKXR8v92Wj1cGnekG5daI/Lgqd6LbDZdSK 4ZPDbI8ZkKiFytxwWqSwK4P7WyEZZvnLNKXl+I1OQAqBvA7ctY8NObg10yRpJAAi XQjyJmWso0iFogLJK1T4IecumVL6oUZ2jP5NuzDxZMFlHE/56Tp+/AoVFm6ufTfX /7PB+MW+gdW1OrO/ZqiPGe6Hjre1Qvj7S+eazWGcASOjSKeSBosjMxgpk59CcieZ TZdmPJLGgYuqEXevVNKAOx/GXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB52Tpvu Cg1uBgHNbTjPAc3z4bdQMB8GA1UdIwQYMBaAFPlktvLbHfCN3drUeVNTnZxZPQpm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMEY1My9BMjIzNTJDMjRB OTYxMUVEOTg5MURDMThDNEY5QUUwMi8tV1MyOHRzZDhJM2QydFI1VTFPZG5GazlD bVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1XUzI4dHNkOEkzZDJ0UjVVMU9kbkZrOUNtWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MEY1My9BMjIzNTJDMjRBOTYxMUVEOTg5MURDMThDNEY5QUUwMi8tV1MyOHRzZDhJ M2QydFI1VTFPZG5GazlDbVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/CoPeo5XuM2f4rfwxvIsUbeP7cTTinZEJiboFSxIAePHxU+/FIr+B X1h1YTASllP/cp9czvFoUWortTZNWjHltto1yWRBIR+AqXE4B17+YvkC6xFWwLBK WlDMxkc5nVE08UnyfiC/ARouFxWe+WXYx9WX5YoiiRiJ0Q6tcKgdQVaIhkn2MBft 1+fOKWQ7JPl25i6ryhRUMNgaMpy3+8ggazpXCUy+0pqgu2CxlmVR2XovQfV5gtLP 7vWH5A+i0dg62rUq44qjg+3OKdtmS7IDi2QyrPUYloYyUiaMbxVek9yfpGsJIF3s NVYBbBhZ4Mc6kHrczjKcKhJrp89iObpn -----END CERTIFICATE-----Generated at Sat May 31 17:24:48 2025 by rpki-client