$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3099/EB4EFBC6315C11ECA9B73D15C4F9AE02/sPR6aWrNd8dKNHPEzRcdo3Ic7NA.mft File: sPR6aWrNd8dKNHPEzRcdo3Ic7NA.mft (raw, json) Hash identifier: BIIFo5lt2d4MAGC+Qj+lzmoyOGIBJnUJ0ka9WLob5A4= Subject key identifier: 94:01:21:2B:9B:D9:67:02:6F:F8:AF:F0:DF:DB:46:D4:ED:AF:75:E1 Authority key identifier: B0:F4:7A:69:6A:CD:77:C7:4A:34:73:C4:CD:17:1D:A3:72:1C:EC:D0 Certificate issuer: /CN=A91F3099/serialNumber=B0F47A696ACD77C74A3473C4CD171DA3721CECD0 Certificate serial: 04BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sPR6aWrNd8dKNHPEzRcdo3Ic7NA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F3099/EB4EFBC6315C11ECA9B73D15C4F9AE02/sPR6aWrNd8dKNHPEzRcdo3Ic7NA.mft Manifest number: 04B4 Signing time: Sat 31 May 2025 00:08:48 +0000 Manifest this update: Sat 31 May 2025 00:08:47 +0000 Manifest next update: Sat 07 Jun 2025 00:08:47 +0000 Files and hashes: 1: sPR6aWrNd8dKNHPEzRcdo3Ic7NA.crl (hash: mlMLyEmnJ7W/zMY4y926ZR2K9K+EKdIdsbmDQVojmXc=) 2: 99961F74315E11EC953A8215C4F9AE02.roa (hash: OEZzXzknZfZ5+s266LCfZPiCa3g7F7GJ2hmeU6hbgO0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F3099/EB4EFBC6315C11ECA9B73D15C4F9AE02/sPR6aWrNd8dKNHPEzRcdo3Ic7NA.crl rsync://rpki.apnic.net/member_repository/A91F3099/EB4EFBC6315C11ECA9B73D15C4F9AE02/sPR6aWrNd8dKNHPEzRcdo3Ic7NA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sPR6aWrNd8dKNHPEzRcdo3Ic7NA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 00:08:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1213 (0x4bd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F3099, serialNumber=B0F47A696ACD77C74A3473C4CD171DA3721CECD0 Validity Not Before: May 31 00:08:47 2025 GMT Not After : Jun 7 00:08:47 2025 GMT Subject: CN=683a488f-01e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:62:63:2a:bc:97:86:d1:04:13:13:b8:ba:1e: bb:91:e7:0c:68:5d:39:55:d8:43:d0:e9:d3:da:7f: ea:20:7d:9f:a8:5b:e8:61:8d:7f:8c:76:c1:50:08: a2:91:37:b9:df:dd:85:69:21:c7:30:1d:77:a6:81: e4:0f:e0:4d:56:38:03:d4:a0:2e:0c:18:f4:b1:49: 04:23:2e:bc:6f:0f:c1:56:87:ae:b1:d5:ac:47:f2: 34:7e:9d:78:0c:6c:d3:0a:d7:88:1a:36:b4:49:5e: 55:fe:bb:59:ae:f5:c5:f1:be:64:de:25:c7:8e:86: fc:20:65:f9:5c:d3:67:59:86:75:a5:62:36:8d:4f: aa:91:06:e7:e2:d6:be:19:6c:1b:bc:75:51:38:af: 31:2e:d2:a8:70:0c:c7:49:80:cd:f6:b5:54:7d:1e: 49:04:ba:64:59:25:1d:91:09:95:07:33:80:ad:73: f2:1a:5d:6f:bd:b8:df:da:85:6b:da:d0:03:b6:4f: 30:78:db:b8:58:59:27:a9:a2:f4:29:fc:ee:12:d8: 70:66:12:f3:4c:d4:40:26:c9:9e:b2:48:d4:52:99: d2:e9:b3:b9:44:e7:cb:3c:d1:bc:97:a9:3a:3a:8f: 16:fb:b9:79:01:b6:6e:eb:ca:f2:0c:30:aa:35:05: 4e:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:01:21:2B:9B:D9:67:02:6F:F8:AF:F0:DF:DB:46:D4:ED:AF:75:E1 X509v3 Authority Key Identifier: keyid:B0:F4:7A:69:6A:CD:77:C7:4A:34:73:C4:CD:17:1D:A3:72:1C:EC:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F3099/EB4EFBC6315C11ECA9B73D15C4F9AE02/sPR6aWrNd8dKNHPEzRcdo3Ic7NA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sPR6aWrNd8dKNHPEzRcdo3Ic7NA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3099/EB4EFBC6315C11ECA9B73D15C4F9AE02/sPR6aWrNd8dKNHPEzRcdo3Ic7NA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption be:3c:a5:ca:41:da:b3:e6:eb:01:13:8a:87:cf:a9:dd:b8:61: a1:58:51:6b:e1:aa:85:81:c8:f7:55:68:f3:42:44:4e:2b:f8: a8:0b:dd:24:c6:c7:50:8f:7a:ca:d2:fd:80:9c:d2:35:30:90: 19:53:64:2f:cb:99:c4:ae:e1:47:74:8a:75:72:fa:07:fa:94: 9c:02:95:7e:42:a3:18:76:36:b4:b3:b8:df:cc:69:6e:a5:cb: 21:9c:fe:a1:08:0b:b9:cf:92:42:8b:89:22:ed:a1:5c:4c:5d: 6e:31:f4:6a:7f:c1:74:96:26:bb:19:ad:25:68:a9:d9:78:1f: cd:1b:68:32:92:d6:74:fe:58:46:f3:a4:ef:0d:6e:14:22:de: fb:c6:01:ec:8b:04:59:04:ab:36:e5:13:a7:3f:a6:6b:e5:fb: c1:49:29:43:2e:78:d7:2d:8c:1f:6b:6d:09:8c:6f:a9:5a:b6: b1:41:ba:9c:d0:01:de:59:51:90:d7:0e:3c:79:5f:fd:42:2b: 3b:c8:24:b4:b8:8b:2e:e0:51:09:5a:1d:22:7c:4f:78:ab:3f: 40:8b:15:6d:97:0f:e1:d1:2c:f2:2d:69:d8:83:c2:07:23:cd: 88:1e:2f:cd:ab:db:69:4b:b5:99:2f:ac:ae:71:54:bf:8a:9c: 7a:86:b2:9e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBL0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjMwOTkxMTAvBgNVBAUTKEIwRjQ3QTY5NkFDRDc3Qzc0QTM0NzNDNENEMTcxREEz NzIxQ0VDRDAwHhcNMjUwNTMxMDAwODQ3WhcNMjUwNjA3MDAwODQ3WjAYMRYwFAYD VQQDEw02ODNhNDg4Zi0wMWUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs2JjKryXhtEEExO4uh67kecMaF05VdhD0OnT2n/qIH2fqFvoYY1/jHbBUAii kTe5392FaSHHMB13poHkD+BNVjgD1KAuDBj0sUkEIy68bw/BVoeusdWsR/I0fp14 DGzTCteIGja0SV5V/rtZrvXF8b5k3iXHjob8IGX5XNNnWYZ1pWI2jU+qkQbn4ta+ GWwbvHVROK8xLtKocAzHSYDN9rVUfR5JBLpkWSUdkQmVBzOArXPyGl1vvbjf2oVr 2tADtk8weNu4WFknqaL0KfzuEthwZhLzTNRAJsmeskjUUpnS6bO5ROfLPNG8l6k6 Oo8W+7l5AbZu68ryDDCqNQVOgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJQBISub 2WcCb/iv8N/bRtTtr3XhMB8GA1UdIwQYMBaAFLD0emlqzXfHSjRzxM0XHaNyHOzQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzA5OS9FQjRFRkJDNjMx NUMxMUVDQTlCNzNEMTVDNEY5QUUwMi9zUFI2YVdyTmQ4ZEtOSFBFelJjZG8zSWM3 TkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NQUjZhV3JOZDhkS05IUEV6UmNkbzNJYzdOQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzA5OS9FQjRFRkJDNjMxNUMxMUVDQTlCNzNEMTVDNEY5QUUwMi9zUFI2YVdyTmQ4 ZEtOSFBFelJjZG8zSWM3TkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC+PKXKQdqz5usBE4qHz6nduGGhWFFr4aqFgcj3VWjzQkROK/ioC90k xsdQj3rK0v2AnNI1MJAZU2Qvy5nEruFHdIp1cvoH+pScApV+QqMYdja0s7jfzGlu pcshnP6hCAu5z5JCi4ki7aFcTF1uMfRqf8F0lia7Ga0laKnZeB/NG2gyktZ0/lhG 86TvDW4UIt77xgHsiwRZBKs25ROnP6Zr5fvBSSlDLnjXLYwfa20JjG+pWraxQbqc 0AHeWVGQ1w48eV/9Qis7yCS0uIsu4FEJWh0ifE94qz9AixVtlw/h0SzyLWnYg8IH I82IHi/Nq9tpS7WZL6yucVS/ipx6hrKe -----END CERTIFICATE-----Generated at Sat May 31 15:29:58 2025 by rpki-client