$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8928/4DA7BB200B5B11EAA3EBC650C4F9AE02/9cnTDp0Hcc0H5RsuSlK1IlOr0CY.mft File: 9cnTDp0Hcc0H5RsuSlK1IlOr0CY.mft (raw, json) Hash identifier: VPJ/nSaz7HYlk2uUl1tpTiiLY3bhteUZinp9elCv8Dw= Subject key identifier: A4:C6:9F:4C:92:A3:85:49:23:19:08:E2:05:2A:B4:16:80:0B:CA:AA Authority key identifier: F5:C9:D3:0E:9D:07:71:CD:07:E5:1B:2E:4A:52:B5:22:53:AB:D0:26 Certificate issuer: /CN=A91F8928/serialNumber=F5C9D30E9D0771CD07E51B2E4A52B52253ABD026 Certificate serial: 0C5F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9cnTDp0Hcc0H5RsuSlK1IlOr0CY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8928/4DA7BB200B5B11EAA3EBC650C4F9AE02/9cnTDp0Hcc0H5RsuSlK1IlOr0CY.mft Manifest number: 0C3F Signing time: Fri 30 May 2025 18:47:32 +0000 Manifest this update: Fri 30 May 2025 18:47:31 +0000 Manifest next update: Fri 06 Jun 2025 18:47:31 +0000 Files and hashes: 1: 9cnTDp0Hcc0H5RsuSlK1IlOr0CY.crl (hash: 248UiBCZQaz2JoK7bwUPIAfrdXScfnPgOheU5kM08nY=) 2: 93840DE204E611ED89D3B27BC4F9AE02.roa (hash: cegor5RnBc3HGGToc+6Lymvpp6wumcl5jw4jwYNABG8=) 3: E6C1F0003C7E11F08A874435C4F9AE02.roa (hash: gvU+qqa/2rO/E9CyKARNzA86Y3LagDLtRJRw3fbIF50=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8928/4DA7BB200B5B11EAA3EBC650C4F9AE02/9cnTDp0Hcc0H5RsuSlK1IlOr0CY.crl rsync://rpki.apnic.net/member_repository/A91F8928/4DA7BB200B5B11EAA3EBC650C4F9AE02/9cnTDp0Hcc0H5RsuSlK1IlOr0CY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9cnTDp0Hcc0H5RsuSlK1IlOr0CY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 18:47:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3167 (0xc5f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8928, serialNumber=F5C9D30E9D0771CD07E51B2E4A52B52253ABD026 Validity Not Before: May 30 18:47:31 2025 GMT Not After : Jun 6 18:47:31 2025 GMT Subject: CN=6839fd43-d892 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:37:4d:f4:4e:3e:88:06:d6:13:83:c1:5f:9a: 58:c8:5a:e6:f9:63:b1:8d:1a:bb:8d:04:7f:8f:f3: c9:7c:ce:e0:73:2d:41:20:05:30:96:be:6e:5c:9f: 29:0f:07:ed:06:fb:b2:8f:e0:19:4b:79:92:51:25: fc:9c:f0:23:d4:39:f0:2b:34:c1:ef:61:c4:65:47: c9:d4:8f:d5:48:ce:03:d5:d8:93:d4:c9:46:de:5f: fb:b1:1d:bc:e4:a8:ca:00:8c:e3:15:c5:be:de:73: d7:5c:d8:e3:e8:03:7c:b6:3c:a8:f9:6c:b7:47:d6: c0:b1:f7:8f:b5:71:26:22:54:c5:f5:01:d8:a1:54: 1f:b1:52:e8:73:67:36:67:24:53:4f:a0:92:fe:be: a9:9c:64:d6:17:46:5c:41:15:38:2b:4b:09:e2:97: 68:67:32:d4:fb:27:78:64:2a:e2:2f:e3:31:da:85: ad:36:a7:50:02:d7:bf:21:f8:d7:68:30:f3:f5:4d: 56:25:91:80:95:80:d7:5a:d9:8a:2c:c9:d1:63:e8: b6:41:7b:31:75:3c:5d:ef:f1:4a:d4:ca:b8:4a:02: e4:80:91:2d:82:be:1f:69:f3:ef:ab:ad:ba:43:7b: 51:c1:3d:aa:2b:67:67:ba:e0:50:ca:fa:8e:f9:1b: aa:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:C6:9F:4C:92:A3:85:49:23:19:08:E2:05:2A:B4:16:80:0B:CA:AA X509v3 Authority Key Identifier: keyid:F5:C9:D3:0E:9D:07:71:CD:07:E5:1B:2E:4A:52:B5:22:53:AB:D0:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8928/4DA7BB200B5B11EAA3EBC650C4F9AE02/9cnTDp0Hcc0H5RsuSlK1IlOr0CY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9cnTDp0Hcc0H5RsuSlK1IlOr0CY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8928/4DA7BB200B5B11EAA3EBC650C4F9AE02/9cnTDp0Hcc0H5RsuSlK1IlOr0CY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:10:ea:17:a2:ce:01:80:2e:42:4e:b1:fa:4e:0e:b8:3c:2d: f1:84:61:37:62:46:ac:5f:cb:6d:6b:28:d0:1a:58:b8:5e:43: 52:5f:fb:32:c7:b7:83:54:a8:5a:35:43:e1:55:9d:e1:29:56: 8d:df:c9:17:a5:a4:f5:ee:26:37:07:fd:6f:e4:a9:38:e6:4f: 97:cd:84:9f:62:b7:a7:e6:7d:9d:b4:16:3a:a6:41:a3:7a:7c: f3:61:39:f8:f6:2b:4b:c2:31:71:84:61:d1:b6:49:43:a4:7f: 5e:3d:0c:30:5f:be:5d:28:d5:0f:b0:a8:31:e8:88:61:1b:61: 1d:46:b7:c5:0e:a0:3b:e1:1a:2e:d3:8e:3c:44:02:e1:e0:36: f7:da:ae:46:22:4a:0f:37:97:71:26:90:13:56:d5:44:88:8a: 79:1e:d4:f1:78:b0:3f:8c:50:aa:1b:21:56:eb:00:76:82:8f: 0b:9e:2f:ab:25:62:d0:2a:ce:8c:d1:0e:b2:01:49:80:b0:d1: 46:b8:e1:57:af:70:54:81:57:36:54:b0:83:6a:48:3f:85:a5: b5:88:67:2f:8c:6f:c6:d9:b1:b0:80:70:f6:f0:e3:93:ca:79: 2e:1e:71:1e:a6:ba:b7:f3:20:da:0f:b7:1d:92:09:2b:d0:b8: 83:d1:a7:ef -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDF8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjg5MjgxMTAvBgNVBAUTKEY1QzlEMzBFOUQwNzcxQ0QwN0U1MUIyRTRBNTJCNTIy NTNBQkQwMjYwHhcNMjUwNTMwMTg0NzMxWhcNMjUwNjA2MTg0NzMxWjAYMRYwFAYD VQQDEw02ODM5ZmQ0My1kODkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsjdN9E4+iAbWE4PBX5pYyFrm+WOxjRq7jQR/j/PJfM7gcy1BIAUwlr5uXJ8p DwftBvuyj+AZS3mSUSX8nPAj1DnwKzTB72HEZUfJ1I/VSM4D1diT1MlG3l/7sR28 5KjKAIzjFcW+3nPXXNjj6AN8tjyo+Wy3R9bAsfePtXEmIlTF9QHYoVQfsVLoc2c2 ZyRTT6CS/r6pnGTWF0ZcQRU4K0sJ4pdoZzLU+yd4ZCriL+Mx2oWtNqdQAte/IfjX aDDz9U1WJZGAlYDXWtmKLMnRY+i2QXsxdTxd7/FK1Mq4SgLkgJEtgr4fafPvq626 Q3tRwT2qK2dnuuBQyvqO+RuquwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKTGn0yS o4VJIxkI4gUqtBaAC8qqMB8GA1UdIwQYMBaAFPXJ0w6dB3HNB+UbLkpStSJTq9Am MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODkyOC80REE3QkIyMDBC NUIxMUVBQTNFQkM2NTBDNEY5QUUwMi85Y25URHAwSGNjMEg1UnN1U2xLMUlsT3Iw Q1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzljblREcDBIY2MwSDVSc3VTbEsxSWxPcjBDWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODkyOC80REE3QkIyMDBCNUIxMUVBQTNFQkM2NTBDNEY5QUUwMi85Y25URHAwSGNj MEg1UnN1U2xLMUlsT3IwQ1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBeEOoXos4BgC5CTrH6Tg64PC3xhGE3YkasX8ttayjQGli4XkNSX/sy x7eDVKhaNUPhVZ3hKVaN38kXpaT17iY3B/1v5Kk45k+XzYSfYren5n2dtBY6pkGj enzzYTn49itLwjFxhGHRtklDpH9ePQwwX75dKNUPsKgx6IhhG2EdRrfFDqA74Rou 0448RALh4Db32q5GIkoPN5dxJpATVtVEiIp5HtTxeLA/jFCqGyFW6wB2go8Lni+r JWLQKs6M0Q6yAUmAsNFGuOFXr3BUgVc2VLCDakg/haW1iGcvjG/G2bGwgHD28OOT ynkuHnEeprq38yDaD7cdkgkr0LiD0afv -----END CERTIFICATE-----Generated at Sat May 31 17:17:30 2025 by rpki-client