$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2D93/818FDB78D44D11EFB1600B28C4F9AE02/-65NuTksgZMhr1EdxrK1qomYGfo.mft File: -65NuTksgZMhr1EdxrK1qomYGfo.mft (raw, json) Hash identifier: NIdBvWkTYukxmOkqgMlZPgONZf1akWYn4vW3ayOFXxg= Subject key identifier: BA:17:50:29:C9:07:C3:7C:02:98:6C:9F:77:DE:83:B9:2B:E9:78:87 Authority key identifier: FB:AE:4D:B9:39:2C:81:93:21:AF:51:1D:C6:B2:B5:AA:89:98:19:FA Certificate issuer: /CN=A91F2D93/serialNumber=FBAE4DB9392C819321AF511DC6B2B5AA899819FA Certificate serial: 4A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-65NuTksgZMhr1EdxrK1qomYGfo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F2D93/818FDB78D44D11EFB1600B28C4F9AE02/-65NuTksgZMhr1EdxrK1qomYGfo.mft Manifest number: 48 Signing time: Sat 31 May 2025 06:58:43 +0000 Manifest this update: Sat 31 May 2025 06:58:42 +0000 Manifest next update: Sat 07 Jun 2025 06:58:42 +0000 Files and hashes: 1: -65NuTksgZMhr1EdxrK1qomYGfo.crl (hash: rDKy+HGb4Zu3Z1IdC3ga+Q7ua8dhh8rtsBSM2RUBl1Y=) 2: 93D86AAED76611EF9C982924C4F9AE02.roa (hash: LnJzBzEfTxjLgTZtBUJIJtCnRzaftx7eCk4WGWWItX4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F2D93/818FDB78D44D11EFB1600B28C4F9AE02/-65NuTksgZMhr1EdxrK1qomYGfo.crl rsync://rpki.apnic.net/member_repository/A91F2D93/818FDB78D44D11EFB1600B28C4F9AE02/-65NuTksgZMhr1EdxrK1qomYGfo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-65NuTksgZMhr1EdxrK1qomYGfo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 06:58:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74 (0x4a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F2D93, serialNumber=FBAE4DB9392C819321AF511DC6B2B5AA899819FA Validity Not Before: May 31 06:58:42 2025 GMT Not After : Jun 7 06:58:42 2025 GMT Subject: CN=683aa8a3-a65f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:bc:5b:68:e0:d0:4c:fb:c3:b5:c1:5c:78:fa: d2:eb:04:10:66:83:ea:9d:09:b2:d3:01:5e:5a:35: 9b:df:9c:6f:41:dc:4c:1c:c1:e7:90:d4:0c:dc:a4: e4:91:4b:95:13:e8:2d:1e:66:3a:64:48:e9:6b:b0: 61:51:c6:58:98:e2:a6:66:46:cd:66:26:a1:12:cb: e3:b9:2f:6f:9f:4d:a1:90:b0:e2:47:ff:06:b2:49: f4:5f:b2:53:8d:a2:b5:0f:12:27:af:5a:09:28:96: f7:dc:f8:7b:96:32:bb:29:98:0b:7f:73:ce:1d:49: 29:26:a2:8d:7b:6b:e0:95:09:d3:06:3c:b6:fc:93: e9:57:14:39:bf:85:3b:ce:dc:8e:32:51:2f:e7:22: 79:62:28:ac:8a:b5:e5:3c:8b:43:20:8c:05:ee:9c: 47:09:e1:45:2b:a2:a7:fa:1b:66:5e:49:6d:7b:55: 3c:b7:f6:60:8b:3e:7b:c5:b4:6a:96:50:ff:37:bb: 69:48:e7:80:b2:91:bf:10:92:77:2b:8e:e8:f8:19: 5a:67:58:da:7c:6a:47:b2:62:1c:ad:bc:f3:48:d4: 0a:1d:74:30:53:43:21:57:a8:62:69:66:b0:4a:09: 8d:fd:97:37:b0:38:6f:fd:fd:3a:da:81:6f:04:58: 08:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:17:50:29:C9:07:C3:7C:02:98:6C:9F:77:DE:83:B9:2B:E9:78:87 X509v3 Authority Key Identifier: keyid:FB:AE:4D:B9:39:2C:81:93:21:AF:51:1D:C6:B2:B5:AA:89:98:19:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F2D93/818FDB78D44D11EFB1600B28C4F9AE02/-65NuTksgZMhr1EdxrK1qomYGfo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-65NuTksgZMhr1EdxrK1qomYGfo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2D93/818FDB78D44D11EFB1600B28C4F9AE02/-65NuTksgZMhr1EdxrK1qomYGfo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:22:16:4d:91:c9:e9:7a:2a:e5:59:21:12:96:ba:58:9a:c9: 2c:27:f8:c2:23:1e:96:f8:e3:fb:22:ae:de:62:70:0a:46:0f: f9:fb:c0:36:d5:7b:ef:6a:ef:7e:df:c7:06:77:e2:14:ba:02: 40:e3:bd:4d:cc:f6:02:30:e4:e2:c3:31:20:21:bc:5d:82:78: 02:d2:66:da:79:f8:dc:9d:82:43:89:43:03:2d:03:9e:20:52: 79:d6:a1:fc:29:ca:8d:44:aa:c1:b5:6d:dd:fd:87:2a:58:09: df:95:7e:a9:52:d2:00:19:83:76:47:93:e5:d5:bf:ce:3f:10: 18:92:4f:ea:4c:64:cc:3d:f0:47:6a:28:67:0a:cd:81:55:df: 62:0e:0e:c6:ec:f7:92:91:aa:57:5d:21:b1:13:3c:3a:f3:87: b0:ab:58:fb:67:0a:f0:9a:4e:78:62:ea:a1:66:70:c5:6f:c8: 17:2c:1d:17:88:a7:4e:fa:27:6d:a3:fe:94:f3:0a:e6:ec:38: 15:b2:af:7d:2a:f2:8b:e3:e9:09:88:61:c7:d7:d4:57:83:a0: 1c:4b:eb:c7:22:97:e9:fd:6f:93:b8:70:25:81:9a:86:16:a1: d9:68:ab:02:25:34:dc:06:42:fe:db:45:8d:d9:90:49:8a:9e: 01:44:6c:99 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBSjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MkQ5MzExMC8GA1UEBRMoRkJBRTREQjkzOTJDODE5MzIxQUY1MTFEQzZCMkI1QUE4 OTk4MTlGQTAeFw0yNTA1MzEwNjU4NDJaFw0yNTA2MDcwNjU4NDJaMBgxFjAUBgNV BAMTDTY4M2FhOGEzLWE2NWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC/vFto4NBM+8O1wVx4+tLrBBBmg+qdCbLTAV5aNZvfnG9B3EwcweeQ1AzcpOSR S5UT6C0eZjpkSOlrsGFRxliY4qZmRs1mJqESy+O5L2+fTaGQsOJH/waySfRfslON orUPEievWgkolvfc+HuWMrspmAt/c84dSSkmoo17a+CVCdMGPLb8k+lXFDm/hTvO 3I4yUS/nInliKKyKteU8i0MgjAXunEcJ4UUroqf6G2ZeSW17VTy39mCLPnvFtGqW UP83u2lI54Cykb8Qkncrjuj4GVpnWNp8akeyYhytvPNI1AoddDBTQyFXqGJpZrBK CY39lzewOG/9/TragW8EWAhDAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUuhdQKckH w3wCmGyfd96DuSvpeIcwHwYDVR0jBBgwFoAU+65NuTksgZMhr1EdxrK1qomYGfow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYyRDkzLzgxOEZEQjc4RDQ0 RDExRUZCMTYwMEIyOEM0RjlBRTAyLy02NU51VGtzZ1pNaHIxRWR4cksxcW9tWUdm by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvLTY1TnVUa3NnWk1ocjFFZHhySzFxb21ZR2ZvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYy RDkzLzgxOEZEQjc4RDQ0RDExRUZCMTYwMEIyOEM0RjlBRTAyLy02NU51VGtzZ1pN aHIxRWR4cksxcW9tWUdmby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJUiFk2Ryel6KuVZIRKWuliaySwn+MIjHpb44/sirt5icApGD/n7wDbV e+9q737fxwZ34hS6AkDjvU3M9gIw5OLDMSAhvF2CeALSZtp5+NydgkOJQwMtA54g UnnWofwpyo1EqsG1bd39hypYCd+VfqlS0gAZg3ZHk+XVv84/EBiST+pMZMw98Edq KGcKzYFV32IODsbs95KRqlddIbETPDrzh7CrWPtnCvCaTnhi6qFmcMVvyBcsHReI p076J22j/pTzCubsOBWyr30q8ovj6QmIYcfX1FeDoBxL68cil+n9b5O4cCWBmoYW odloqwIlNNwGQv7bRY3ZkEmKngFEbJk= -----END CERTIFICATE-----Generated at Sat May 31 17:02:23 2025 by rpki-client