$ rpki-client -vvf rpki.apnic.net/member_repository/A91F81AD/43A511AE2CBE11ED99824B4CC4F9AE02/O4dpDvQFVnODtvcv3TARYM6CHys.mft File: O4dpDvQFVnODtvcv3TARYM6CHys.mft (raw, json) Hash identifier: rH7WPk9gxoM7MMjzsnkqi/oSsTalCgrXLrvQdZNnzzM= Subject key identifier: 59:16:15:0D:32:53:79:BB:FC:F4:56:2F:53:0D:49:03:D1:16:54:0D Authority key identifier: 3B:87:69:0E:F4:05:56:73:83:B6:F7:2F:DD:30:11:60:CE:82:1F:2B Certificate issuer: /CN=A91F81AD/serialNumber=3B87690EF405567383B6F72FDD301160CE821F2B Certificate serial: 022F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/O4dpDvQFVnODtvcv3TARYM6CHys.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F81AD/43A511AE2CBE11ED99824B4CC4F9AE02/O4dpDvQFVnODtvcv3TARYM6CHys.mft Manifest number: 0229 Signing time: Tue 03 Jun 2025 02:11:33 +0000 Manifest this update: Tue 03 Jun 2025 02:11:32 +0000 Manifest next update: Tue 10 Jun 2025 02:11:32 +0000 Files and hashes: 1: O4dpDvQFVnODtvcv3TARYM6CHys.crl (hash: B1KpcVLh+j0opAxb+qEUdHQH2U5kcCtHhYJkDMyPLqY=) 2: F9424C6C80FA11ED9B35954DC4F9AE02.roa (hash: GNMO+8voOxNBOb5ixsUP/MtpdlZbS27Vb7o1TavyMdI=) 3: F86A2F7680FA11ED9B35954DC4F9AE02.roa (hash: vq0srwLbA5KHVy52W5biflCYsAzYNYb+3xV7SnajFW0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F81AD/43A511AE2CBE11ED99824B4CC4F9AE02/O4dpDvQFVnODtvcv3TARYM6CHys.crl rsync://rpki.apnic.net/member_repository/A91F81AD/43A511AE2CBE11ED99824B4CC4F9AE02/O4dpDvQFVnODtvcv3TARYM6CHys.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/O4dpDvQFVnODtvcv3TARYM6CHys.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 02:11:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 559 (0x22f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F81AD, serialNumber=3B87690EF405567383B6F72FDD301160CE821F2B Validity Not Before: Jun 3 02:11:32 2025 GMT Not After : Jun 10 02:11:32 2025 GMT Subject: CN=683e59d5-84f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:4c:23:96:35:c7:a7:e0:d2:40:f4:bf:3e:c0: df:d0:6d:7b:4b:10:91:c9:e1:9a:bf:e2:a1:c8:15: cb:26:5e:b5:10:39:7c:0b:10:ab:c7:4b:28:61:de: a4:ad:ec:db:83:b6:c2:1d:a8:0e:b9:55:87:b4:e6: 0d:db:8e:0f:01:22:c2:e8:5d:91:1c:84:38:5f:02: 83:41:5e:9f:d0:98:34:e5:44:8b:b5:7c:2e:4e:81: 21:66:af:cc:ae:6b:5d:0a:1f:6f:02:32:c4:d3:7d: ed:37:82:41:55:e7:cd:11:3a:18:ec:e5:cf:d7:86: 3b:e9:2b:7f:20:cc:9f:25:dc:a0:6a:65:7e:fd:a1: 1b:c2:a2:86:3a:47:cd:20:9b:10:13:27:65:41:db: 42:4d:0f:7c:fa:b1:6e:9d:0a:a1:cc:ea:2f:5e:2a: a7:01:57:97:2e:30:90:91:72:ce:ec:58:55:e4:f0: 5b:8e:7e:cd:79:88:77:79:fe:78:fd:a3:6a:1e:e0: 24:43:89:0e:11:b8:27:25:db:8b:62:e5:1c:16:ec: f8:1e:d6:ec:b8:98:cf:06:98:e0:4f:f4:c6:30:76: 46:81:93:59:44:98:ce:1e:2c:a8:8c:81:78:f3:4f: 4e:57:e1:42:36:ab:1c:a0:cb:2e:51:88:d5:09:6d: 78:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:16:15:0D:32:53:79:BB:FC:F4:56:2F:53:0D:49:03:D1:16:54:0D X509v3 Authority Key Identifier: keyid:3B:87:69:0E:F4:05:56:73:83:B6:F7:2F:DD:30:11:60:CE:82:1F:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F81AD/43A511AE2CBE11ED99824B4CC4F9AE02/O4dpDvQFVnODtvcv3TARYM6CHys.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/O4dpDvQFVnODtvcv3TARYM6CHys.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F81AD/43A511AE2CBE11ED99824B4CC4F9AE02/O4dpDvQFVnODtvcv3TARYM6CHys.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:cc:2e:44:96:29:89:46:b6:4d:47:a5:5f:e9:35:6f:e2:9d: 0b:df:3f:f4:64:49:35:4b:fe:8c:ad:cb:1c:a1:fd:cc:26:a9: 75:a2:c0:ba:71:45:4c:69:1a:43:db:f7:09:7a:87:46:13:c3: 3c:95:36:b5:b5:8d:91:c2:7f:85:68:3e:3e:d2:10:b8:8c:a4: 50:ea:19:db:c5:44:6f:3b:85:fb:c1:ab:43:e0:73:95:c1:0c: ba:83:60:e0:a7:d5:91:f6:f2:4f:d7:2c:7a:a8:0c:32:26:99: 03:13:4a:98:f5:e7:9f:4d:15:36:48:27:27:63:28:c0:04:87: 28:2a:98:fc:17:bb:d6:d2:a4:47:ba:a8:7d:8d:27:a0:ee:78: 67:f3:c9:2d:de:ce:2b:1b:09:5b:a7:44:e6:da:d2:0b:40:ef: 86:10:a0:a8:cd:f0:3e:dc:84:15:c9:be:8b:c8:d6:46:39:23: 6b:8c:38:92:2f:67:74:b2:81:57:3c:c8:96:73:e2:7d:cf:b2: 4a:90:e9:0d:61:a0:ff:a9:fa:60:7e:32:84:57:42:ab:61:31: df:b6:11:0f:7f:33:bf:0e:9f:1c:cc:0b:7b:ea:80:a1:45:bc: 77:70:81:c2:43:f0:ae:fc:96:09:28:58:52:0c:ee:17:74:90: e4:35:fd:e8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAi8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjgxQUQxMTAvBgNVBAUTKDNCODc2OTBFRjQwNTU2NzM4M0I2RjcyRkREMzAxMTYw Q0U4MjFGMkIwHhcNMjUwNjAzMDIxMTMyWhcNMjUwNjEwMDIxMTMyWjAYMRYwFAYD VQQDEw02ODNlNTlkNS04NGYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5EwjljXHp+DSQPS/PsDf0G17SxCRyeGav+KhyBXLJl61EDl8CxCrx0soYd6k rezbg7bCHagOuVWHtOYN244PASLC6F2RHIQ4XwKDQV6f0Jg05USLtXwuToEhZq/M rmtdCh9vAjLE033tN4JBVefNEToY7OXP14Y76St/IMyfJdygamV+/aEbwqKGOkfN IJsQEydlQdtCTQ98+rFunQqhzOovXiqnAVeXLjCQkXLO7FhV5PBbjn7NeYh3ef54 /aNqHuAkQ4kOEbgnJduLYuUcFuz4HtbsuJjPBpjgT/TGMHZGgZNZRJjOHiyojIF4 809OV+FCNqscoMsuUYjVCW14qQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFkWFQ0y U3m7/PRWL1MNSQPRFlQNMB8GA1UdIwQYMBaAFDuHaQ70BVZzg7b3L90wEWDOgh8r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODFBRC80M0E1MTFBRTJD QkUxMUVEOTk4MjRCNENDNEY5QUUwMi9PNGRwRHZRRlZuT0R0dmN2M1RBUllNNkNI eXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL080ZHBEdlFGVm5PRHR2Y3YzVEFSWU02Q0h5cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODFBRC80M0E1MTFBRTJDQkUxMUVEOTk4MjRCNENDNEY5QUUwMi9PNGRwRHZRRlZu T0R0dmN2M1RBUllNNkNIeXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCVzC5ElimJRrZNR6Vf6TVv4p0L3z/0ZEk1S/6Mrcscof3MJql1osC6 cUVMaRpD2/cJeodGE8M8lTa1tY2Rwn+FaD4+0hC4jKRQ6hnbxURvO4X7watD4HOV wQy6g2Dgp9WR9vJP1yx6qAwyJpkDE0qY9eefTRU2SCcnYyjABIcoKpj8F7vW0qRH uqh9jSeg7nhn88kt3s4rGwlbp0Tm2tILQO+GEKCozfA+3IQVyb6LyNZGOSNrjDiS L2d0soFXPMiWc+J9z7JKkOkNYaD/qfpgfjKEV0KrYTHfthEPfzO/Dp8czAt76oCh Rbx3cIHCQ/Cu/JYJKFhSDO4XdJDkNf3o -----END CERTIFICATE-----Generated at Tue Jun 3 23:53:18 2025 by rpki-client