$ rpki-client -vvf rpki.apnic.net/member_repository/A91F81AD/4CCB00902CBE11ED99824B4CC4F9AE02/pM0-Z9GyJPMlBH6fXkhKzcT2Y-w.mft File: pM0-Z9GyJPMlBH6fXkhKzcT2Y-w.mft (raw, json) Hash identifier: LpftKLOUqiiCqWN5HDXGRb+8iCeyO/4ZhW2tkitu2Hw= Subject key identifier: 7D:9F:D3:A3:C6:09:16:71:71:FB:F7:5F:52:FC:0D:15:93:D6:EC:EE Authority key identifier: A4:CD:3E:67:D1:B2:24:F3:25:04:7E:9F:5E:48:4A:CD:C4:F6:63:EC Certificate issuer: /CN=A91F81AD/serialNumber=A4CD3E67D1B224F325047E9F5E484ACDC4F663EC Certificate serial: 0230 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pM0-Z9GyJPMlBH6fXkhKzcT2Y-w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F81AD/4CCB00902CBE11ED99824B4CC4F9AE02/pM0-Z9GyJPMlBH6fXkhKzcT2Y-w.mft Manifest number: 022A Signing time: Thu 05 Jun 2025 01:46:03 +0000 Manifest this update: Thu 05 Jun 2025 01:46:03 +0000 Manifest next update: Thu 12 Jun 2025 01:46:03 +0000 Files and hashes: 1: pM0-Z9GyJPMlBH6fXkhKzcT2Y-w.crl (hash: xbwvGhnzniEg+MQQs/GWZyfERYg1p49VFBLlyLEKrbs=) 2: FA957D0A80FA11ED9B35954DC4F9AE02.roa (hash: cB+yZz7NXLEFl+NAyUDxFvEYEWhBfd/lLd6SEh+qscM=) 3: F9F81E3480FA11ED9B35954DC4F9AE02.roa (hash: uF//tcko2WVqVVcNN8K7d2s/1bV6GiNlBkTpEaTcZJA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F81AD/4CCB00902CBE11ED99824B4CC4F9AE02/pM0-Z9GyJPMlBH6fXkhKzcT2Y-w.crl rsync://rpki.apnic.net/member_repository/A91F81AD/4CCB00902CBE11ED99824B4CC4F9AE02/pM0-Z9GyJPMlBH6fXkhKzcT2Y-w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pM0-Z9GyJPMlBH6fXkhKzcT2Y-w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 12 Jun 2025 01:46:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 560 (0x230) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F81AD, serialNumber=A4CD3E67D1B224F325047E9F5E484ACDC4F663EC Validity Not Before: Jun 5 01:46:03 2025 GMT Not After : Jun 12 01:46:03 2025 GMT Subject: CN=6840f6db-715d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:61:18:0c:c8:32:06:df:fb:3f:c6:50:06:04: d1:95:5b:d0:f9:da:be:a2:9d:fa:a5:a9:d3:be:31: e9:aa:27:14:8e:b5:3d:86:76:a4:dd:1e:cf:1f:cb: 13:e4:fc:21:46:f1:fe:bc:6c:64:73:e6:a8:f7:33: aa:47:58:a7:8e:24:73:88:0d:ba:1c:c1:c5:1b:a7: 01:19:a0:40:69:d1:6c:4b:71:a1:5c:67:85:fc:2e: 43:7b:91:81:d6:4c:78:fe:37:af:ab:ab:8e:cc:6b: 2b:bc:82:1b:cb:a3:1f:72:28:cb:91:58:32:7a:09: a1:37:21:8e:a9:40:a9:db:bc:47:d2:1b:a7:1c:1e: 6e:1f:4f:7a:5f:8c:75:02:18:54:99:b6:3a:14:9a: 2b:47:42:19:96:ac:a4:f8:1f:d9:37:57:08:90:2d: 56:08:e8:90:63:1c:1e:96:f0:e0:24:00:43:a4:28: 93:c6:52:90:7a:e4:e1:95:e0:d7:6a:1f:39:9e:f3: e7:71:dd:9d:e9:ce:d4:78:e6:5e:f7:1a:99:ae:8b: 3c:40:f6:c4:6c:4c:b1:fc:19:53:be:26:d8:93:65: 2f:7f:ce:33:e3:6f:77:5b:26:93:e5:13:46:8a:a0: b5:9d:93:60:7b:4a:72:e3:33:cb:d1:77:c7:76:04: 72:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:9F:D3:A3:C6:09:16:71:71:FB:F7:5F:52:FC:0D:15:93:D6:EC:EE X509v3 Authority Key Identifier: keyid:A4:CD:3E:67:D1:B2:24:F3:25:04:7E:9F:5E:48:4A:CD:C4:F6:63:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F81AD/4CCB00902CBE11ED99824B4CC4F9AE02/pM0-Z9GyJPMlBH6fXkhKzcT2Y-w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pM0-Z9GyJPMlBH6fXkhKzcT2Y-w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F81AD/4CCB00902CBE11ED99824B4CC4F9AE02/pM0-Z9GyJPMlBH6fXkhKzcT2Y-w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:ae:e1:47:20:2a:0a:48:ac:bd:6a:9d:87:e1:b1:be:bf:d6: f5:ff:5b:07:9a:26:28:2c:3a:3a:04:61:c9:33:95:85:c2:34: ac:da:ad:54:8b:0e:7e:e0:0f:69:b8:5b:b4:ad:2e:54:95:85: 3e:b0:db:02:55:c5:ce:b5:50:af:d9:c9:91:53:f0:f6:72:d7: 06:cf:36:04:d2:74:1f:de:10:89:1b:68:4f:3d:a1:e4:01:ec: 70:79:71:27:b7:b3:b5:3b:b4:65:4c:8c:a0:83:d1:eb:2e:55: 42:df:e4:58:19:ad:cf:80:06:5b:04:f0:30:d1:32:b6:fd:cc: be:1a:e4:8e:44:5b:13:d8:dc:2a:89:70:f5:b3:e5:56:be:33: ea:0d:f2:01:a5:2c:77:4e:ee:39:d5:50:25:25:af:9f:de:f1: cb:0b:f7:42:bb:41:43:26:02:6c:bc:9e:3a:b4:c4:af:b2:aa: ff:86:2f:2f:02:3a:b8:ab:ac:1e:f7:21:df:1d:88:63:00:5a: fb:45:20:88:da:8b:53:be:e6:12:05:e4:ea:2e:c9:34:cb:34: b6:d6:37:24:e9:f3:e8:3f:3a:c2:46:22:a9:e3:4b:a0:c3:12: 20:8b:7e:86:5f:0f:20:4f:08:85:74:54:03:66:0e:46:24:d3: 96:7b:71:fd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAjAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjgxQUQxMTAvBgNVBAUTKEE0Q0QzRTY3RDFCMjI0RjMyNTA0N0U5RjVFNDg0QUNE QzRGNjYzRUMwHhcNMjUwNjA1MDE0NjAzWhcNMjUwNjEyMDE0NjAzWjAYMRYwFAYD VQQDEw02ODQwZjZkYi03MTVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxmEYDMgyBt/7P8ZQBgTRlVvQ+dq+op36panTvjHpqicUjrU9hnak3R7PH8sT 5PwhRvH+vGxkc+ao9zOqR1injiRziA26HMHFG6cBGaBAadFsS3GhXGeF/C5De5GB 1kx4/jevq6uOzGsrvIIby6MfcijLkVgyegmhNyGOqUCp27xH0hunHB5uH096X4x1 AhhUmbY6FJorR0IZlqyk+B/ZN1cIkC1WCOiQYxwelvDgJABDpCiTxlKQeuThleDX ah85nvPncd2d6c7UeOZe9xqZros8QPbEbEyx/BlTvibYk2Uvf84z4293WyaT5RNG iqC1nZNge0py4zPL0XfHdgRyawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH2f06PG CRZxcfv3X1L8DRWT1uzuMB8GA1UdIwQYMBaAFKTNPmfRsiTzJQR+n15ISs3E9mPs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODFBRC80Q0NCMDA5MDJD QkUxMUVEOTk4MjRCNENDNEY5QUUwMi9wTTAtWjlHeUpQTWxCSDZmWGtoS3pjVDJZ LXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BNMC1aOUd5SlBNbEJINmZYa2hLemNUMlktdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODFBRC80Q0NCMDA5MDJDQkUxMUVEOTk4MjRCNENDNEY5QUUwMi9wTTAtWjlHeUpQ TWxCSDZmWGtoS3pjVDJZLXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCvruFHICoKSKy9ap2H4bG+v9b1/1sHmiYoLDo6BGHJM5WFwjSs2q1U iw5+4A9puFu0rS5UlYU+sNsCVcXOtVCv2cmRU/D2ctcGzzYE0nQf3hCJG2hPPaHk AexweXEnt7O1O7RlTIygg9HrLlVC3+RYGa3PgAZbBPAw0TK2/cy+GuSORFsT2Nwq iXD1s+VWvjPqDfIBpSx3Tu451VAlJa+f3vHLC/dCu0FDJgJsvJ46tMSvsqr/hi8v Ajq4q6we9yHfHYhjAFr7RSCI2otTvuYSBeTqLsk0yzS21jck6fPoPzrCRiKp40ug wxIgi36GXw8gTwiFdFQDZg5GJNOWe3H9 -----END CERTIFICATE-----Generated at Thu Jun 5 19:09:46 2025 by rpki-client