$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1C8C/23E5D5DEDF9911EA9F85D982C4F9AE02/E72mTG8bWiwzOUc2NU6ejmvK4lY.mft File: E72mTG8bWiwzOUc2NU6ejmvK4lY.mft (raw, json) Hash identifier: j1sMz7DLDl1DnF1k5DMA+CHO2OCQEAxSdBN49SfhQZg= Subject key identifier: 76:F6:BE:3D:81:7B:59:A8:D2:B8:2A:DE:F2:01:55:05:32:24:53:86 Authority key identifier: 13:BD:A6:4C:6F:1B:5A:2C:33:39:47:36:35:4E:9E:8E:6B:CA:E2:56 Certificate issuer: /CN=A91F1C8C/serialNumber=13BDA64C6F1B5A2C33394736354E9E8E6BCAE256 Certificate serial: 080A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E72mTG8bWiwzOUc2NU6ejmvK4lY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F1C8C/23E5D5DEDF9911EA9F85D982C4F9AE02/E72mTG8bWiwzOUc2NU6ejmvK4lY.mft Manifest number: 0801 Signing time: Fri 30 May 2025 21:08:45 +0000 Manifest this update: Fri 30 May 2025 21:08:45 +0000 Manifest next update: Fri 06 Jun 2025 21:08:45 +0000 Files and hashes: 1: E72mTG8bWiwzOUc2NU6ejmvK4lY.crl (hash: Me2tUi98OemVYJbxBAemlpwgc1uFf5DIQwcPp2yqd2U=) 2: FA870AFA94E011EDB701A974C4F9AE02.roa (hash: GfKJIrjmB/IQqGBbWvEsxSHUiEi5qreV/8BX3Exlv6E=) 3: F8C3E4EA94E011EDB701A974C4F9AE02.roa (hash: ppcWvH2kJjQ1xzMFc9qaEdUMAFHB7kgGpZFW1BmvQFI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F1C8C/23E5D5DEDF9911EA9F85D982C4F9AE02/E72mTG8bWiwzOUc2NU6ejmvK4lY.crl rsync://rpki.apnic.net/member_repository/A91F1C8C/23E5D5DEDF9911EA9F85D982C4F9AE02/E72mTG8bWiwzOUc2NU6ejmvK4lY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E72mTG8bWiwzOUc2NU6ejmvK4lY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 21:08:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2058 (0x80a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F1C8C, serialNumber=13BDA64C6F1B5A2C33394736354E9E8E6BCAE256 Validity Not Before: May 30 21:08:45 2025 GMT Not After : Jun 6 21:08:45 2025 GMT Subject: CN=683a1e5d-0de5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:3a:cc:78:81:c3:8b:f5:ca:9c:14:d2:d4:21: 55:9c:d2:d3:ee:91:bb:3f:eb:49:b6:b4:31:80:61: cb:4d:0b:c6:a3:d8:0e:08:bd:35:7c:4e:0b:09:87: 78:e4:60:73:77:56:fa:6d:c3:52:e2:66:e5:30:34: 4d:d8:90:98:09:c6:32:e8:12:2e:a6:14:06:0d:7b: 25:d9:55:ec:b4:a6:6c:13:f7:6e:1d:60:61:c2:3e: bb:23:ce:86:79:b2:98:75:c8:84:2b:75:c3:b8:e0: d5:13:e9:8b:63:f8:de:fe:0c:42:ae:eb:1c:aa:56: 3d:5a:db:db:c7:c5:e3:7f:42:13:9f:48:75:9c:20: 40:fb:c9:28:1e:d4:66:ac:ec:64:f8:43:86:07:92: bb:af:7a:1f:93:44:75:b2:38:96:fc:c7:3f:ad:19: 79:2f:07:15:cf:58:3b:2a:42:c1:0a:61:ec:b4:1f: a8:69:82:48:26:36:90:fc:73:f3:fe:8c:ae:33:6f: 70:a0:75:d1:30:43:8d:52:2e:dd:a3:02:9d:03:24: f9:82:72:f8:8d:b4:e7:fd:6f:71:7f:6e:88:0c:3a: 61:ee:50:64:87:a3:40:28:ac:a6:b7:96:79:5f:7a: 1d:b8:3f:89:94:c3:cb:09:32:13:e0:5e:a9:70:4a: 57:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:F6:BE:3D:81:7B:59:A8:D2:B8:2A:DE:F2:01:55:05:32:24:53:86 X509v3 Authority Key Identifier: keyid:13:BD:A6:4C:6F:1B:5A:2C:33:39:47:36:35:4E:9E:8E:6B:CA:E2:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F1C8C/23E5D5DEDF9911EA9F85D982C4F9AE02/E72mTG8bWiwzOUc2NU6ejmvK4lY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E72mTG8bWiwzOUc2NU6ejmvK4lY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1C8C/23E5D5DEDF9911EA9F85D982C4F9AE02/E72mTG8bWiwzOUc2NU6ejmvK4lY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:f1:1e:17:45:63:b3:c3:72:45:2d:36:a5:74:6b:96:56:8a: b2:82:df:4b:03:35:25:19:fe:45:86:a2:ca:19:08:f2:64:1f: 59:a7:aa:23:15:8a:c1:72:0b:d6:d3:ba:7a:9d:3c:4c:b3:d4: cf:f2:d1:de:37:b3:ed:6c:30:5b:d7:0e:60:3a:22:95:02:44: 00:e5:1e:0b:95:ad:a0:ba:4b:ae:38:6a:4a:58:f5:24:d7:ce: 6f:8c:83:34:7a:c4:02:16:f4:54:4f:12:5f:b8:dc:6c:74:00: e1:dc:93:fb:74:1f:f7:e2:7e:e4:77:ca:77:73:d6:02:19:a0: db:07:ad:f3:ba:7a:6a:78:9c:8b:c0:3e:ab:6d:f8:b9:97:d5: c4:67:01:23:13:76:72:b0:a0:fb:04:54:0a:80:24:1c:1d:22: 74:4b:bc:5f:54:8a:36:88:20:80:83:97:90:f7:3c:44:e6:dc: 1b:f1:4d:6f:ba:54:42:c6:90:c5:c3:0d:12:4d:f3:52:be:6c: 5d:a5:1a:39:3d:c3:e8:c9:a9:a4:aa:c4:dd:77:7a:e4:7f:c5: f7:62:a7:26:fa:9f:97:ba:3d:34:0f:de:87:71:51:20:71:44: bd:c3:fd:e2:74:2a:66:a9:e9:25:8f:1e:e9:48:5f:f2:c2:a9: 9e:a9:03:18 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCAowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjFDOEMxMTAvBgNVBAUTKDEzQkRBNjRDNkYxQjVBMkMzMzM5NDczNjM1NEU5RThF NkJDQUUyNTYwHhcNMjUwNTMwMjEwODQ1WhcNMjUwNjA2MjEwODQ1WjAYMRYwFAYD VQQDEw02ODNhMWU1ZC0wZGU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwTrMeIHDi/XKnBTS1CFVnNLT7pG7P+tJtrQxgGHLTQvGo9gOCL01fE4LCYd4 5GBzd1b6bcNS4mblMDRN2JCYCcYy6BIuphQGDXsl2VXstKZsE/duHWBhwj67I86G ebKYdciEK3XDuODVE+mLY/je/gxCruscqlY9Wtvbx8Xjf0ITn0h1nCBA+8koHtRm rOxk+EOGB5K7r3ofk0R1sjiW/Mc/rRl5LwcVz1g7KkLBCmHstB+oaYJIJjaQ/HPz /oyuM29woHXRMEONUi7dowKdAyT5gnL4jbTn/W9xf26IDDph7lBkh6NAKKymt5Z5 X3oduD+JlMPLCTIT4F6pcEpXKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHb2vj2B e1mo0rgq3vIBVQUyJFOGMB8GA1UdIwQYMBaAFBO9pkxvG1osMzlHNjVOno5ryuJW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMUM4Qy8yM0U1RDVERURG OTkxMUVBOUY4NUQ5ODJDNEY5QUUwMi9FNzJtVEc4Yldpd3pPVWMyTlU2ZWptdks0 bFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0U3Mm1URzhiV2l3ek9VYzJOVTZlam12SzRsWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MUM4Qy8yM0U1RDVERURGOTkxMUVBOUY4NUQ5ODJDNEY5QUUwMi9FNzJtVEc4Yldp d3pPVWMyTlU2ZWptdks0bFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBp8R4XRWOzw3JFLTaldGuWVoqygt9LAzUlGf5FhqLKGQjyZB9Zp6oj FYrBcgvW07p6nTxMs9TP8tHeN7PtbDBb1w5gOiKVAkQA5R4Lla2gukuuOGpKWPUk 185vjIM0esQCFvRUTxJfuNxsdADh3JP7dB/34n7kd8p3c9YCGaDbB63zunpqeJyL wD6rbfi5l9XEZwEjE3ZysKD7BFQKgCQcHSJ0S7xfVIo2iCCAg5eQ9zxE5twb8U1v ulRCxpDFww0STfNSvmxdpRo5PcPoyamkqsTdd3rkf8X3Yqcm+p+Xuj00D96HcVEg cUS9w/3idCpmqekljx7pSF/ywqmeqQMY -----END CERTIFICATE-----Generated at Sat May 31 16:25:57 2025 by rpki-client