$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6D91/E517F2B69AE511EB837F135EC4F9AE02/9nGKXl5C0I4lOi-zAP8Jw_U1HTI.mft File: 9nGKXl5C0I4lOi-zAP8Jw_U1HTI.mft (raw, json) Hash identifier: PXyiF2h13qlG0cmXEpqPvx3kCgKsWyu+LcmYXLitp30= Subject key identifier: FA:AA:BA:71:C2:84:4C:52:9E:78:D6:69:98:BF:7E:26:38:05:B4:57 Authority key identifier: F6:71:8A:5E:5E:42:D0:8E:25:3A:2F:B3:00:FF:09:C3:F5:35:1D:32 Certificate issuer: /CN=A91F6D91/serialNumber=F6718A5E5E42D08E253A2FB300FF09C3F5351D32 Certificate serial: 064A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9nGKXl5C0I4lOi-zAP8Jw_U1HTI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F6D91/E517F2B69AE511EB837F135EC4F9AE02/9nGKXl5C0I4lOi-zAP8Jw_U1HTI.mft Manifest number: 0632 Signing time: Fri 30 May 2025 22:57:43 +0000 Manifest this update: Fri 30 May 2025 22:57:42 +0000 Manifest next update: Fri 06 Jun 2025 22:57:42 +0000 Files and hashes: 1: 9nGKXl5C0I4lOi-zAP8Jw_U1HTI.crl (hash: H8EVXLqxraFv/wThy9HUS/b/IQked4iegOnVNhw4ZvE=) 2: 105CB01A830711ECB472CA0AC4F9AE02.roa (hash: P0BhZPNBq4fF0iWoLAGwiGCR4fuUazibBS/DViNXhlI=) 3: 0E2711E6830711ECB472CA0AC4F9AE02.roa (hash: 6bWPYL9HlnXbgKm1pf8hjZDzf0KdOhZ+kEEuV8xvMnc=) 4: 0F6980C0830711ECB472CA0AC4F9AE02.roa (hash: GSq2aTh4Ighs8Kd5WfNm9bR33IhLvfkn/9rz4nvZ37o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F6D91/E517F2B69AE511EB837F135EC4F9AE02/9nGKXl5C0I4lOi-zAP8Jw_U1HTI.crl rsync://rpki.apnic.net/member_repository/A91F6D91/E517F2B69AE511EB837F135EC4F9AE02/9nGKXl5C0I4lOi-zAP8Jw_U1HTI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9nGKXl5C0I4lOi-zAP8Jw_U1HTI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 22:57:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1610 (0x64a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F6D91, serialNumber=F6718A5E5E42D08E253A2FB300FF09C3F5351D32 Validity Not Before: May 30 22:57:42 2025 GMT Not After : Jun 6 22:57:42 2025 GMT Subject: CN=683a37e6-22c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:19:6c:37:38:41:ad:d2:78:d9:7a:d6:a4:d8: 14:62:a5:ee:6d:ea:80:79:a8:b1:c0:43:f8:af:dd: fd:ad:60:e5:1b:5b:34:cc:73:a1:d2:19:76:b4:82: 6c:b5:8d:08:6a:3d:23:19:a2:71:36:32:62:b1:cb: 01:fa:cc:20:e1:3c:e4:50:a8:f7:eb:77:21:b2:eb: ce:20:94:18:17:76:04:2c:60:69:78:6b:83:9f:45: 0b:86:0e:ca:c4:8f:bf:6b:82:1b:1a:c3:13:7d:f3: db:d9:d3:d0:99:5d:09:02:02:61:fd:57:ab:3e:1a: df:6a:ee:47:18:aa:b5:fa:2b:7a:ce:09:38:ff:db: 57:77:7c:fb:00:d7:36:00:92:a5:fa:d8:41:65:dc: c2:a3:41:41:56:64:e1:41:d4:39:6b:88:57:0e:3c: 72:22:1f:5d:a0:a6:08:39:2f:b5:a2:87:03:75:71: 3d:d5:9d:40:5e:4f:46:2e:c9:b3:0b:39:13:f1:d8: 26:a2:f5:6d:85:08:c0:d9:97:87:61:44:e3:ba:78: 49:0a:d6:9e:d6:0e:b3:8c:de:16:a1:ea:cb:88:36: 22:62:a9:c4:12:30:cd:d4:a9:d9:78:88:e2:b0:08: 19:6d:f1:dd:77:ff:f7:23:64:11:15:f6:2d:13:7b: 77:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:AA:BA:71:C2:84:4C:52:9E:78:D6:69:98:BF:7E:26:38:05:B4:57 X509v3 Authority Key Identifier: keyid:F6:71:8A:5E:5E:42:D0:8E:25:3A:2F:B3:00:FF:09:C3:F5:35:1D:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F6D91/E517F2B69AE511EB837F135EC4F9AE02/9nGKXl5C0I4lOi-zAP8Jw_U1HTI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9nGKXl5C0I4lOi-zAP8Jw_U1HTI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6D91/E517F2B69AE511EB837F135EC4F9AE02/9nGKXl5C0I4lOi-zAP8Jw_U1HTI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:9f:d0:aa:fa:d2:3f:59:29:d8:16:0c:26:ab:ad:d2:5d:e0: c7:c3:1a:5d:79:39:68:67:7b:ff:c0:87:fb:c3:77:cb:53:aa: 53:39:cf:a0:ea:00:d6:25:cc:22:be:76:05:09:70:29:6a:70: 5e:6a:55:a2:be:70:0a:c7:e3:9a:ec:ba:79:3e:cf:5c:e4:04: df:06:04:2d:6a:16:93:c8:e5:a3:ae:57:71:da:68:32:0d:8d: da:b6:19:84:d2:a6:71:09:7e:c9:dd:6d:d4:c1:2f:0c:17:c2: fb:92:a5:7f:dc:5f:35:21:9a:ba:c2:78:2a:fd:08:8d:56:b6: ed:ad:f1:03:82:b4:43:e2:2c:be:a0:08:bf:be:d3:42:0c:95: 8a:ec:70:cd:39:a1:8b:a4:a1:60:4d:47:6f:a3:eb:16:2e:20: 2e:ee:30:f9:54:65:38:a6:9d:cc:c6:e4:97:c0:4f:a8:e9:93: 0a:fc:27:c3:03:ac:2c:7f:94:f9:1c:c8:a7:94:42:01:a6:11: 6c:e3:e2:50:fb:3b:6b:2d:d0:12:33:53:92:57:ae:0a:ce:69: 55:93:b8:63:8d:12:1e:bd:0a:0b:cd:62:5d:ef:c9:5e:76:12: ff:ac:87:32:e5:ce:bd:ef:8d:0e:1b:23:d4:4e:bf:4f:31:eb: ee:f6:6b:73 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBkowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjZEOTExMTAvBgNVBAUTKEY2NzE4QTVFNUU0MkQwOEUyNTNBMkZCMzAwRkYwOUMz RjUzNTFEMzIwHhcNMjUwNTMwMjI1NzQyWhcNMjUwNjA2MjI1NzQyWjAYMRYwFAYD VQQDEw02ODNhMzdlNi0yMmMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6BlsNzhBrdJ42XrWpNgUYqXubeqAeaixwEP4r939rWDlG1s0zHOh0hl2tIJs tY0Iaj0jGaJxNjJiscsB+swg4TzkUKj363chsuvOIJQYF3YELGBpeGuDn0ULhg7K xI+/a4IbGsMTffPb2dPQmV0JAgJh/VerPhrfau5HGKq1+it6zgk4/9tXd3z7ANc2 AJKl+thBZdzCo0FBVmThQdQ5a4hXDjxyIh9doKYIOS+1oocDdXE91Z1AXk9GLsmz CzkT8dgmovVthQjA2ZeHYUTjunhJCtae1g6zjN4WoerLiDYiYqnEEjDN1KnZeIji sAgZbfHdd//3I2QRFfYtE3t3vwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPqqunHC hExSnnjWaZi/fiY4BbRXMB8GA1UdIwQYMBaAFPZxil5eQtCOJTovswD/CcP1NR0y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNkQ5MS9FNTE3RjJCNjlB RTUxMUVCODM3RjEzNUVDNEY5QUUwMi85bkdLWGw1QzBJNGxPaS16QVA4SndfVTFI VEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzluR0tYbDVDMEk0bE9pLXpBUDhKd19VMUhUSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NkQ5MS9FNTE3RjJCNjlBRTUxMUVCODM3RjEzNUVDNEY5QUUwMi85bkdLWGw1QzBJ NGxPaS16QVA4SndfVTFIVEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCrn9Cq+tI/WSnYFgwmq63SXeDHwxpdeTloZ3v/wIf7w3fLU6pTOc+g 6gDWJcwivnYFCXApanBealWivnAKx+Oa7Lp5Ps9c5ATfBgQtahaTyOWjrldx2mgy DY3athmE0qZxCX7J3W3UwS8MF8L7kqV/3F81IZq6wngq/QiNVrbtrfEDgrRD4iy+ oAi/vtNCDJWK7HDNOaGLpKFgTUdvo+sWLiAu7jD5VGU4pp3MxuSXwE+o6ZMK/CfD A6wsf5T5HMinlEIBphFs4+JQ+ztrLdASM1OSV64KzmlVk7hjjRIevQoLzWJd78le dhL/rIcy5c69740OGyPUTr9PMevu9mtz -----END CERTIFICATE-----Generated at Sat May 31 16:28:47 2025 by rpki-client