$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8336/37E1673EFD1D11E8B3E36E57C4F9AE02/1383l1I1q95fSYn78_6TjVJ8GUg.mft File: 1383l1I1q95fSYn78_6TjVJ8GUg.mft (raw, json) Hash identifier: RZlD5r98NXEQ0koqu5hCDIlJa+PwXw0UHiCaia92Z6M= Subject key identifier: 49:F3:C2:B1:C0:1B:42:EA:E0:17:F8:A4:E0:8D:91:DB:5D:43:91:C6 Authority key identifier: D7:7F:37:97:52:35:AB:DE:5F:49:89:FB:F3:FE:93:8D:52:7C:19:48 Certificate issuer: /CN=A91F8336/serialNumber=D77F37975235ABDE5F4989FBF3FE938D527C1948 Certificate serial: 11B5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1383l1I1q95fSYn78_6TjVJ8GUg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8336/37E1673EFD1D11E8B3E36E57C4F9AE02/1383l1I1q95fSYn78_6TjVJ8GUg.mft Manifest number: 119B Signing time: Fri 30 May 2025 17:23:44 +0000 Manifest this update: Fri 30 May 2025 17:23:44 +0000 Manifest next update: Fri 06 Jun 2025 17:23:44 +0000 Files and hashes: 1: 1383l1I1q95fSYn78_6TjVJ8GUg.crl (hash: 6bull1hfA4O6RAQOX2aeezAZPtcuwkoWzS4IeUZsY3U=) 2: 4AE6CFF8B25211EBA977EE09C4F9AE02.roa (hash: ZdFF8YkXhtC1AoahmW58AQqkSN0T37GBdkW2/eDce6s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8336/37E1673EFD1D11E8B3E36E57C4F9AE02/1383l1I1q95fSYn78_6TjVJ8GUg.crl rsync://rpki.apnic.net/member_repository/A91F8336/37E1673EFD1D11E8B3E36E57C4F9AE02/1383l1I1q95fSYn78_6TjVJ8GUg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1383l1I1q95fSYn78_6TjVJ8GUg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 17:23:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4533 (0x11b5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8336, serialNumber=D77F37975235ABDE5F4989FBF3FE938D527C1948 Validity Not Before: May 30 17:23:44 2025 GMT Not After : Jun 6 17:23:44 2025 GMT Subject: CN=6839e9a0-14ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:92:37:e0:cd:c1:b7:3f:f7:0d:b3:8d:98:1c: ed:34:59:48:5d:50:48:6c:6f:8b:7b:9e:c0:ab:de: a7:25:56:e6:36:8c:ab:62:c8:a6:32:59:c6:4e:fb: 34:44:81:d8:f0:a2:8c:6d:71:a9:07:d9:22:b8:86: 4f:cf:ba:51:3b:c0:61:5e:99:db:0e:52:2f:55:2d: 7e:79:29:d7:62:1d:60:40:c3:dd:3e:9d:7a:4d:7c: 32:b7:28:86:10:71:96:f5:9f:bb:79:64:6d:c3:e1: 92:f7:65:9b:b0:3f:9e:85:a7:7c:19:71:13:c5:e0: 14:a6:cf:98:59:80:e9:94:0d:57:91:fd:39:61:81: 3c:5b:56:f8:98:c4:4b:ec:b3:4f:4e:8a:ac:8a:59: ab:f1:8d:dd:b7:ce:3f:78:6e:15:76:70:39:30:9d: f4:47:64:93:1e:8d:2d:a2:c1:3d:07:d4:71:51:bc: 18:84:e2:1f:fe:ef:0f:0b:a4:c4:26:4b:59:16:9d: 86:6a:2f:46:81:39:44:10:e4:fa:05:39:c6:c3:d5: 7c:9a:1b:c3:44:3e:1b:64:5c:2d:08:40:f4:7c:43: c2:bb:5b:13:89:5e:8a:4c:02:72:7b:ec:54:24:58: 75:ed:21:38:13:65:65:5d:07:8f:54:39:71:8a:2c: d3:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:F3:C2:B1:C0:1B:42:EA:E0:17:F8:A4:E0:8D:91:DB:5D:43:91:C6 X509v3 Authority Key Identifier: keyid:D7:7F:37:97:52:35:AB:DE:5F:49:89:FB:F3:FE:93:8D:52:7C:19:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8336/37E1673EFD1D11E8B3E36E57C4F9AE02/1383l1I1q95fSYn78_6TjVJ8GUg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1383l1I1q95fSYn78_6TjVJ8GUg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8336/37E1673EFD1D11E8B3E36E57C4F9AE02/1383l1I1q95fSYn78_6TjVJ8GUg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:49:a3:2b:f1:e5:d5:d8:06:a6:33:cc:e5:76:4b:42:fe:fa: e6:d5:7f:88:06:9c:4c:e0:44:14:f4:7d:8b:00:7f:d8:2f:ef: 5e:84:18:de:e3:2e:52:2a:96:b1:37:0f:65:30:28:5e:91:d9: 0e:c6:f2:00:2e:86:97:d3:67:af:4e:62:6d:2e:ea:33:1a:0a: 2b:e5:7a:04:44:13:d9:ea:07:ca:48:d5:e9:a1:21:4a:a6:45: ac:00:4b:ea:ba:24:91:6e:4d:b2:32:17:cf:1b:41:da:4c:92: 19:7c:f0:a6:fb:86:19:4c:5d:e2:e7:c8:b9:98:2b:ad:e3:7d: b0:db:79:ab:24:f5:73:a2:40:89:7c:23:bb:67:89:87:47:d5: 15:a5:a9:ec:f3:c3:53:09:f7:ca:af:28:39:ec:17:c7:50:55: 2c:f8:eb:a7:d6:36:62:02:88:16:c0:64:f2:86:8a:3b:a8:4a: 75:90:6b:ee:68:77:a8:29:b6:a8:82:88:7c:12:b3:71:fa:59: 2b:8b:d6:ec:2e:23:ca:6c:de:43:71:2e:66:b4:4e:17:f3:43: 99:83:b0:3c:bf:bc:db:a8:75:70:6c:9c:00:1f:a1:63:8d:92: 82:e2:a1:57:9c:dd:95:5e:f6:d1:a9:c3:db:16:a4:35:10:c1: ab:45:96:e6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEbUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjgzMzYxMTAvBgNVBAUTKEQ3N0YzNzk3NTIzNUFCREU1RjQ5ODlGQkYzRkU5MzhE NTI3QzE5NDgwHhcNMjUwNTMwMTcyMzQ0WhcNMjUwNjA2MTcyMzQ0WjAYMRYwFAYD VQQDEw02ODM5ZTlhMC0xNGZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmpI34M3Btz/3DbONmBztNFlIXVBIbG+Le57Aq96nJVbmNoyrYsimMlnGTvs0 RIHY8KKMbXGpB9kiuIZPz7pRO8BhXpnbDlIvVS1+eSnXYh1gQMPdPp16TXwytyiG EHGW9Z+7eWRtw+GS92WbsD+ehad8GXETxeAUps+YWYDplA1Xkf05YYE8W1b4mMRL 7LNPToqsilmr8Y3dt84/eG4VdnA5MJ30R2STHo0tosE9B9RxUbwYhOIf/u8PC6TE JktZFp2Gai9GgTlEEOT6BTnGw9V8mhvDRD4bZFwtCED0fEPCu1sTiV6KTAJye+xU JFh17SE4E2VlXQePVDlxiizTBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEnzwrHA G0Lq4Bf4pOCNkdtdQ5HGMB8GA1UdIwQYMBaAFNd/N5dSNaveX0mJ+/P+k41SfBlI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODMzNi8zN0UxNjczRUZE MUQxMUU4QjNFMzZFNTdDNEY5QUUwMi8xMzgzbDFJMXE5NWZTWW43OF82VGpWSjhH VWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzEzODNsMUkxcTk1ZlNZbjc4XzZUalZKOEdVZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODMzNi8zN0UxNjczRUZEMUQxMUU4QjNFMzZFNTdDNEY5QUUwMi8xMzgzbDFJMXE5 NWZTWW43OF82VGpWSjhHVWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA2SaMr8eXV2AamM8zldktC/vrm1X+IBpxM4EQU9H2LAH/YL+9ehBje 4y5SKpaxNw9lMChekdkOxvIALoaX02evTmJtLuozGgor5XoERBPZ6gfKSNXpoSFK pkWsAEvquiSRbk2yMhfPG0HaTJIZfPCm+4YZTF3i58i5mCut432w23mrJPVzokCJ fCO7Z4mHR9UVpans88NTCffKryg57BfHUFUs+Oun1jZiAogWwGTyhoo7qEp1kGvu aHeoKbaogoh8ErNx+lkri9bsLiPKbN5DcS5mtE4X80OZg7A8v7zbqHVwbJwAH6Fj jZKC4qFXnN2VXvbRqcPbFqQ1EMGrRZbm -----END CERTIFICATE-----Generated at Sat May 31 17:34:25 2025 by rpki-client