$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/k3MvP8MTWbu_izeWJL-RNRzK2Fc.mft File: k3MvP8MTWbu_izeWJL-RNRzK2Fc.mft (raw, json) Hash identifier: bd1Sn5ZevQ0rzYCJ09WGyh5X+pQkTcFjFy3lOkoFpNc= Subject key identifier: FF:99:A3:F7:89:49:BB:96:2B:28:A3:12:B1:67:72:C6:9A:D1:8C:DA Authority key identifier: 93:73:2F:3F:C3:13:59:BB:BF:8B:37:96:24:BF:91:35:1C:CA:D8:57 Certificate issuer: /CN=A91F4268/serialNumber=93732F3FC31359BBBF8B379624BF91351CCAD857 Certificate serial: 0551 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k3MvP8MTWbu_izeWJL-RNRzK2Fc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/k3MvP8MTWbu_izeWJL-RNRzK2Fc.mft Manifest number: 0507 Signing time: Tue 03 Jun 2025 00:01:11 +0000 Manifest this update: Tue 03 Jun 2025 00:01:11 +0000 Manifest next update: Tue 10 Jun 2025 00:01:11 +0000 Files and hashes: 1: k3MvP8MTWbu_izeWJL-RNRzK2Fc.crl (hash: IA2FBHoJgv91g3srQfKeYcE1ZxQlFfDpjR6UacvF+UM=) 2: 7934717A3BA611EC8737B534C4F9AE02.roa (hash: w2mL/fsYRB6MmS8ED2TzYNgHT6YJdEKc1P9Mt7Z0I6E=) 3: BEDF72A076B911EF95DBF27CC4F9AE02.roa (hash: pFXUfU8J6+rawQvdZ0DzHycI68DJinKh4UA+nChrzC8=) 4: 39D8CF1893EB11EEB45D3A32C4F9AE02.roa (hash: ofRtHX/MKl5XIFnHo+xiQV/BMYeRiUmwlrnI4KBBFTU=) 5: 7879B24A3BA611EC8737B534C4F9AE02.roa (hash: HkMdZ/7Zyl8/WVPS96RNyLCvOlQjm91vFX9iVmHYTgY=) 6: B5960F8CB03111EEA45DE91DC4F9AE02.roa (hash: tO89KC6SX/YI4kYIo5r9IqXP4sUugJ5kj9ybH7Ev/Ck=) 7: 905F258E24F211EEA0863328C4F9AE02.roa (hash: JFZr5fqj2WXrU9XCj8pCx90LDWf5PYcEkCopcpVaJPw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/k3MvP8MTWbu_izeWJL-RNRzK2Fc.crl rsync://rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/k3MvP8MTWbu_izeWJL-RNRzK2Fc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k3MvP8MTWbu_izeWJL-RNRzK2Fc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 00:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1361 (0x551) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4268, serialNumber=93732F3FC31359BBBF8B379624BF91351CCAD857 Validity Not Before: Jun 3 00:01:11 2025 GMT Not After : Jun 10 00:01:11 2025 GMT Subject: CN=683e3b47-5e6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ac:ee:06:5c:d6:1b:03:b1:3b:7f:32:12:bd: 5c:08:91:06:4a:43:8d:a4:42:06:f7:16:0d:13:92: 41:88:e1:c9:f0:94:a3:8d:72:db:c2:02:f7:4f:88: 26:99:6a:28:b4:92:2d:1f:44:5a:50:aa:2d:2f:3e: a7:c2:15:ed:3a:0d:d8:d4:31:81:52:1b:cd:33:83: 12:c0:80:42:c9:b1:06:43:93:69:d7:50:9f:41:40: 53:e2:bf:2c:c1:c9:cd:b1:ac:5e:9f:3c:c2:e8:26: f6:d6:ac:8d:b7:c5:05:76:8c:de:ad:25:de:0a:38: cb:d4:83:17:4d:18:20:3c:4c:50:c0:e9:97:a2:88: b8:6a:5b:91:06:d7:b1:b2:4e:13:27:b9:30:d9:62: 37:07:82:7c:29:fc:71:f8:41:ef:e8:bf:73:19:b3: 16:bf:8c:df:79:78:ca:18:ed:3e:ff:d7:86:6c:5f: 36:9d:b5:ca:ce:23:73:a3:bb:e7:b3:d5:14:e8:bb: 14:a3:26:5c:d7:8f:a1:9a:c4:8b:55:71:d3:f3:22: 79:d6:34:34:aa:66:57:92:0f:74:9f:45:c0:99:0d: 9c:40:94:38:13:ef:de:53:fa:c3:13:49:04:fb:d6: 56:86:57:13:d3:6c:b0:ac:c2:fe:0a:fc:1a:6d:3b: 88:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:99:A3:F7:89:49:BB:96:2B:28:A3:12:B1:67:72:C6:9A:D1:8C:DA X509v3 Authority Key Identifier: keyid:93:73:2F:3F:C3:13:59:BB:BF:8B:37:96:24:BF:91:35:1C:CA:D8:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/k3MvP8MTWbu_izeWJL-RNRzK2Fc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k3MvP8MTWbu_izeWJL-RNRzK2Fc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/k3MvP8MTWbu_izeWJL-RNRzK2Fc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c6:e2:ce:3b:c2:0f:59:84:38:4b:1c:5d:d3:1a:79:43:2b:b3: 72:28:07:34:08:b1:b3:8c:bf:14:0a:9a:a7:08:be:f5:73:c5: 36:dd:12:98:fa:86:2d:40:24:c7:38:1d:51:43:06:63:9c:54: 39:89:91:59:cd:02:5f:53:eb:de:c6:b1:bb:2a:bc:bb:7a:a5: cc:39:3d:67:73:9b:f9:9e:ac:a0:09:7b:af:e6:98:80:e2:71: 00:f6:fa:10:34:d7:2b:f8:6d:e6:f1:d2:79:cf:3f:4c:57:14: 27:7b:2e:4f:58:9e:c1:52:7a:e1:9e:d8:c1:46:03:1e:2d:d8: 94:90:0c:23:11:2b:13:67:22:f6:0a:10:42:fb:36:25:28:3d: c0:7f:e9:87:73:ee:9e:bc:a1:d8:47:bf:97:9a:31:c7:a7:ef: 86:02:09:c4:12:cf:af:8d:ea:12:63:72:91:ac:46:66:e4:65: 34:84:e9:5e:9a:92:20:63:54:c0:38:e1:90:5c:53:22:34:01: 3f:57:50:02:8e:23:1c:50:7d:1c:5d:db:7d:de:e7:8a:6f:8d: 58:f2:21:aa:28:e6:e5:4d:cf:8d:79:ea:15:3f:4b:9f:7d:d2: aa:c0:47:2a:2a:b3:53:ca:71:c1:85:d9:5c:fb:56:d4:02:41: 24:e8:ad:c2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBVEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjQyNjgxMTAvBgNVBAUTKDkzNzMyRjNGQzMxMzU5QkJCRjhCMzc5NjI0QkY5MTM1 MUNDQUQ4NTcwHhcNMjUwNjAzMDAwMTExWhcNMjUwNjEwMDAwMTExWjAYMRYwFAYD VQQDEw02ODNlM2I0Ny01ZTZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtazuBlzWGwOxO38yEr1cCJEGSkONpEIG9xYNE5JBiOHJ8JSjjXLbwgL3T4gm mWootJItH0RaUKotLz6nwhXtOg3Y1DGBUhvNM4MSwIBCybEGQ5Np11CfQUBT4r8s wcnNsaxenzzC6Cb21qyNt8UFdozerSXeCjjL1IMXTRggPExQwOmXooi4aluRBtex sk4TJ7kw2WI3B4J8Kfxx+EHv6L9zGbMWv4zfeXjKGO0+/9eGbF82nbXKziNzo7vn s9UU6LsUoyZc14+hmsSLVXHT8yJ51jQ0qmZXkg90n0XAmQ2cQJQ4E+/eU/rDE0kE +9ZWhlcT02ywrML+CvwabTuI1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP+Zo/eJ SbuWKyijErFncsaa0YzaMB8GA1UdIwQYMBaAFJNzLz/DE1m7v4s3liS/kTUcythX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDI2OC9DNzhFQkNFQTIx OTMxMUVDOTAwQzU2NTNDNEY5QUUwMi9rM012UDhNVFdidV9pemVXSkwtUk5Seksy RmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2szTXZQOE1UV2J1X2l6ZVdKTC1STlJ6SzJGYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NDI2OC9DNzhFQkNFQTIxOTMxMUVDOTAwQzU2NTNDNEY5QUUwMi9rM012UDhNVFdi dV9pemVXSkwtUk5SeksyRmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDG4s47wg9ZhDhLHF3TGnlDK7NyKAc0CLGzjL8UCpqnCL71c8U23RKY +oYtQCTHOB1RQwZjnFQ5iZFZzQJfU+vexrG7Kry7eqXMOT1nc5v5nqygCXuv5piA 4nEA9voQNNcr+G3m8dJ5zz9MVxQney5PWJ7BUnrhntjBRgMeLdiUkAwjESsTZyL2 ChBC+zYlKD3Af+mHc+6evKHYR7+XmjHHp++GAgnEEs+vjeoSY3KRrEZm5GU0hOle mpIgY1TAOOGQXFMiNAE/V1ACjiMcUH0cXdt93ueKb41Y8iGqKOblTc+NeeoVP0uf fdKqwEcqKrNTynHBhdlc+1bUAkEk6K3C -----END CERTIFICATE-----Generated at Tue Jun 3 23:53:54 2025 by rpki-client