$ rpki-client -vvf rpki.apnic.net/member_repository/A91F495C/5BC63EF4406511EF856C9E29C4F9AE02/1sgMXTiqPxDR6w4Tm55JTr9sZCE.mft File: 1sgMXTiqPxDR6w4Tm55JTr9sZCE.mft (raw, json) Hash identifier: zMNfdZrA7iZ0SYdAjqv2prWSeS2OTYoLzoIVXAgfs4w= Subject key identifier: 32:B6:2E:80:AF:64:7B:67:AF:B4:A7:C3:65:77:6C:39:44:C1:78:9D Authority key identifier: D6:C8:0C:5D:38:AA:3F:10:D1:EB:0E:13:9B:9E:49:4E:BF:6C:64:21 Certificate issuer: /CN=A91F495C/serialNumber=D6C80C5D38AA3F10D1EB0E139B9E494EBF6C6421 Certificate serial: AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1sgMXTiqPxDR6w4Tm55JTr9sZCE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F495C/5BC63EF4406511EF856C9E29C4F9AE02/1sgMXTiqPxDR6w4Tm55JTr9sZCE.mft Manifest number: A7 Signing time: Sat 31 May 2025 05:44:19 +0000 Manifest this update: Sat 31 May 2025 05:44:18 +0000 Manifest next update: Sat 07 Jun 2025 05:44:18 +0000 Files and hashes: 1: 1sgMXTiqPxDR6w4Tm55JTr9sZCE.crl (hash: gjQekSQt/HsXmPruh3cEK0s9UKZCBoU9Jnt0rWjy76c=) 2: 084D41C6407111EFB0944C40C4F9AE02.roa (hash: Jb/5el+254tvWTwmxgE5e2fworHZ6IC6eYTkaaOmWbo=) 3: 08FDDCFC407111EFB0944C40C4F9AE02.roa (hash: 5j1mJUsKsqLJqbWxCLNYcCoMJnOjUallWOckNeSTW7Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F495C/5BC63EF4406511EF856C9E29C4F9AE02/1sgMXTiqPxDR6w4Tm55JTr9sZCE.crl rsync://rpki.apnic.net/member_repository/A91F495C/5BC63EF4406511EF856C9E29C4F9AE02/1sgMXTiqPxDR6w4Tm55JTr9sZCE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1sgMXTiqPxDR6w4Tm55JTr9sZCE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 05:44:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 171 (0xab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F495C, serialNumber=D6C80C5D38AA3F10D1EB0E139B9E494EBF6C6421 Validity Not Before: May 31 05:44:18 2025 GMT Not After : Jun 7 05:44:18 2025 GMT Subject: CN=683a9733-304b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:81:8b:65:4a:5a:18:b6:0b:99:c4:e0:06:69: 23:9b:f0:70:35:1d:9f:11:56:12:67:ca:7f:1f:77: 80:7d:b8:0c:5f:d0:13:5e:76:fa:c5:70:28:bc:3e: 25:0b:d0:ab:fe:bd:d1:70:34:fb:51:91:6d:ca:a9: af:88:53:fb:10:aa:4a:55:44:99:d8:80:f1:cf:5c: 8a:f0:81:09:29:f2:ab:e8:32:9c:84:b8:9c:05:c3: 9a:c7:b2:27:24:27:af:94:34:2d:11:9e:12:6f:89: 6f:72:e3:11:81:53:a6:fb:7a:b7:0f:f7:82:6a:c6: 2b:a2:3e:f9:03:4f:fe:db:78:20:e8:36:f8:bb:96: f1:4a:e9:78:1c:cb:42:da:1f:7b:10:e4:ae:35:4b: 6d:b1:82:05:47:13:0e:f0:a0:b1:11:a6:bb:e0:b1: a9:bf:99:0e:42:ca:04:ae:9e:e3:63:8e:0b:12:2b: 9e:4e:68:3f:58:cd:44:fa:ba:b1:49:86:e5:c7:9d: e7:b2:c6:06:36:6d:cf:a9:d0:26:db:05:03:cc:75: 9c:00:fc:32:cb:35:f1:e8:5e:90:08:27:b4:99:b8: 51:08:a1:d9:f5:29:e1:be:6e:59:31:e0:ab:1d:2c: 88:fa:ae:26:12:58:0e:7e:38:8d:7a:7b:22:c9:c5: 30:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:B6:2E:80:AF:64:7B:67:AF:B4:A7:C3:65:77:6C:39:44:C1:78:9D X509v3 Authority Key Identifier: keyid:D6:C8:0C:5D:38:AA:3F:10:D1:EB:0E:13:9B:9E:49:4E:BF:6C:64:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F495C/5BC63EF4406511EF856C9E29C4F9AE02/1sgMXTiqPxDR6w4Tm55JTr9sZCE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1sgMXTiqPxDR6w4Tm55JTr9sZCE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F495C/5BC63EF4406511EF856C9E29C4F9AE02/1sgMXTiqPxDR6w4Tm55JTr9sZCE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:b2:f6:57:99:0d:43:1d:b6:2f:48:df:2b:59:84:d8:cd:ba: 24:28:f8:6e:d0:06:ce:b8:fe:c3:86:d6:19:26:74:68:53:80: 78:4c:62:4b:f9:00:12:f3:6c:49:50:ec:a1:79:64:a8:f8:e8: 65:24:16:aa:48:13:53:da:86:8d:8f:19:89:27:ca:39:49:ea: bd:01:3d:de:90:5c:e6:6d:79:ed:09:7e:75:78:03:16:8e:a6: 22:14:7d:85:e3:7b:3c:81:fb:cf:a4:18:6d:e0:f2:64:93:18: c8:05:48:00:1a:bf:c5:99:d0:16:81:ba:f8:91:c8:69:ff:c6: b1:77:ea:0b:f3:89:97:b7:b2:a4:5b:27:5e:0a:e6:47:48:30: 44:ad:cd:02:22:53:0c:fb:63:4b:e6:87:68:59:42:e2:04:24: 74:d4:e9:a0:bb:ce:9e:f2:f5:1d:6c:4b:ad:2d:f5:02:d2:33: eb:31:e8:3e:d0:06:40:37:62:bc:bc:0b:e4:c4:40:f6:84:af: 53:dc:df:3d:fd:d2:98:9e:fb:e8:bc:6c:a9:66:1b:c0:e3:88: 73:1b:73:b0:95:0a:ff:bc:87:f8:a8:bf:fe:5d:43:a9:08:0e: 8b:94:6b:d6:78:30:46:3c:35:66:19:10:c8:b0:6a:93:11:f5: bb:11:0a:48 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjQ5NUMxMTAvBgNVBAUTKEQ2QzgwQzVEMzhBQTNGMTBEMUVCMEUxMzlCOUU0OTRF QkY2QzY0MjEwHhcNMjUwNTMxMDU0NDE4WhcNMjUwNjA3MDU0NDE4WjAYMRYwFAYD VQQDEw02ODNhOTczMy0zMDRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvoGLZUpaGLYLmcTgBmkjm/BwNR2fEVYSZ8p/H3eAfbgMX9ATXnb6xXAovD4l C9Cr/r3RcDT7UZFtyqmviFP7EKpKVUSZ2IDxz1yK8IEJKfKr6DKchLicBcOax7In JCevlDQtEZ4Sb4lvcuMRgVOm+3q3D/eCasYroj75A0/+23gg6Db4u5bxSul4HMtC 2h97EOSuNUttsYIFRxMO8KCxEaa74LGpv5kOQsoErp7jY44LEiueTmg/WM1E+rqx SYblx53nssYGNm3PqdAm2wUDzHWcAPwyyzXx6F6QCCe0mbhRCKHZ9Snhvm5ZMeCr HSyI+q4mElgOfjiNensiycUwvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDK2LoCv ZHtnr7Snw2V3bDlEwXidMB8GA1UdIwQYMBaAFNbIDF04qj8Q0esOE5ueSU6/bGQh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDk1Qy81QkM2M0VGNDQw NjUxMUVGODU2QzlFMjlDNEY5QUUwMi8xc2dNWFRpcVB4RFI2dzRUbTU1SlRyOXNa Q0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFzZ01YVGlxUHhEUjZ3NFRtNTVKVHI5c1pDRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NDk1Qy81QkM2M0VGNDQwNjUxMUVGODU2QzlFMjlDNEY5QUUwMi8xc2dNWFRpcVB4 RFI2dzRUbTU1SlRyOXNaQ0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA0svZXmQ1DHbYvSN8rWYTYzbokKPhu0AbOuP7DhtYZJnRoU4B4TGJL +QAS82xJUOyheWSo+OhlJBaqSBNT2oaNjxmJJ8o5Seq9AT3ekFzmbXntCX51eAMW jqYiFH2F43s8gfvPpBht4PJkkxjIBUgAGr/FmdAWgbr4kchp/8axd+oL84mXt7Kk WydeCuZHSDBErc0CIlMM+2NL5odoWULiBCR01Omgu86e8vUdbEutLfUC0jPrMeg+ 0AZAN2K8vAvkxED2hK9T3N89/dKYnvvovGypZhvA44hzG3OwlQr/vIf4qL/+XUOp CA6LlGvWeDBGPDVmGRDIsGqTEfW7EQpI -----END CERTIFICATE-----Generated at Sat May 31 17:18:47 2025 by rpki-client