$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8CAA/DCD02A20E1EA11EE999C702AC4F9AE02/N3hUTiRpVIvwm1Td2APX19kPfmI.mft File: N3hUTiRpVIvwm1Td2APX19kPfmI.mft (raw, json) Hash identifier: bO3nOQbqzDO6W0RoaePviY7Jpioy2uQrWtgIP1uX6is= Subject key identifier: 7E:D6:A0:19:0D:02:D9:54:4B:7D:2B:61:37:1F:B8:7D:BD:CD:79:8A Authority key identifier: 37:78:54:4E:24:69:54:8B:F0:9B:54:DD:D8:03:D7:D7:D9:0F:7E:62 Certificate issuer: /CN=A91F8CAA/serialNumber=3778544E2469548BF09B54DDD803D7D7D90F7E62 Certificate serial: E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N3hUTiRpVIvwm1Td2APX19kPfmI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8CAA/DCD02A20E1EA11EE999C702AC4F9AE02/N3hUTiRpVIvwm1Td2APX19kPfmI.mft Manifest number: E1 Signing time: Sat 31 May 2025 05:03:20 +0000 Manifest this update: Sat 31 May 2025 05:03:19 +0000 Manifest next update: Sat 07 Jun 2025 05:03:19 +0000 Files and hashes: 1: N3hUTiRpVIvwm1Td2APX19kPfmI.crl (hash: jVX+YGBjSiy/FmhJ6oPr3humszwKHdW+Of7guD8n3wY=) 2: 1EC90968E1F211EEA360BE22C4F9AE02.roa (hash: XRFVx29hjFc5pKNr7AkvLob3HQjLTaD9Ns3C1RRvN4w=) 3: 1E4548E4E1F211EEA360BE22C4F9AE02.roa (hash: elMINW9VmQY5nycCbQ/QKtRjE+I0nxMVlzRRTvQng4k=) 4: 1DDBD99AE1F211EEA360BE22C4F9AE02.roa (hash: E3gtntzxmL6luEWEYnHzIxmyJjY7WSBf3VBE5/D496g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8CAA/DCD02A20E1EA11EE999C702AC4F9AE02/N3hUTiRpVIvwm1Td2APX19kPfmI.crl rsync://rpki.apnic.net/member_repository/A91F8CAA/DCD02A20E1EA11EE999C702AC4F9AE02/N3hUTiRpVIvwm1Td2APX19kPfmI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N3hUTiRpVIvwm1Td2APX19kPfmI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 05:03:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 233 (0xe9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8CAA, serialNumber=3778544E2469548BF09B54DDD803D7D7D90F7E62 Validity Not Before: May 31 05:03:19 2025 GMT Not After : Jun 7 05:03:19 2025 GMT Subject: CN=683a8d97-efd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:5c:fc:7a:c6:c0:aa:e7:e8:59:df:cf:68:3e: 0e:c0:17:f6:b4:73:68:f5:9e:f0:8a:b5:41:de:9b: 5c:97:3c:fa:c4:d3:bd:ab:2b:7c:48:bc:09:4e:26: d8:00:02:4e:eb:05:23:39:b3:79:49:45:eb:cf:b5: 71:df:1f:d9:7c:e5:a9:50:86:fb:3a:19:11:db:98: 8d:02:51:67:88:21:e9:c6:5a:fa:33:c8:2d:8d:3d: 9b:6f:8d:3a:8e:70:de:41:0b:c9:02:30:6c:b4:7d: 44:70:3c:13:3d:6c:55:e1:f4:e6:fd:79:84:68:ed: 37:f6:56:ed:6d:a3:9e:f5:76:32:fb:1d:47:23:52: 8c:46:46:bb:f9:5c:dc:70:b2:3f:e8:12:d9:46:ed: 8d:77:e6:4b:7b:01:14:ff:a1:f3:5b:40:47:db:4e: c4:23:78:4c:d3:7e:12:13:4c:56:ab:cc:5c:2c:c4: 19:90:9f:20:31:dc:85:43:b9:a7:33:aa:f7:ae:79: 89:9f:06:39:49:1b:80:79:e4:cb:6e:3a:43:87:fd: 7a:66:90:b6:6a:9f:18:57:de:e4:1b:15:bd:de:f9: 00:b7:46:71:2d:15:b2:eb:ab:64:dd:8b:e9:d7:f9: e6:ca:de:f0:6a:0d:a3:2a:c2:76:ed:c2:c2:7e:1d: bf:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:D6:A0:19:0D:02:D9:54:4B:7D:2B:61:37:1F:B8:7D:BD:CD:79:8A X509v3 Authority Key Identifier: keyid:37:78:54:4E:24:69:54:8B:F0:9B:54:DD:D8:03:D7:D7:D9:0F:7E:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8CAA/DCD02A20E1EA11EE999C702AC4F9AE02/N3hUTiRpVIvwm1Td2APX19kPfmI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N3hUTiRpVIvwm1Td2APX19kPfmI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8CAA/DCD02A20E1EA11EE999C702AC4F9AE02/N3hUTiRpVIvwm1Td2APX19kPfmI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:d4:15:fa:6d:06:ab:3b:80:99:ff:a3:44:e9:6f:60:1f:fb: 9d:b8:1f:0a:4b:01:45:68:eb:41:7c:5b:cc:77:ac:de:1d:ae: 33:e1:13:4c:b1:33:c6:bc:ca:75:10:28:16:1a:dd:c1:60:5c: cc:af:e4:6a:59:ac:cb:e9:71:cd:81:19:48:08:28:5d:e1:84: 4b:ca:10:63:7d:f2:8a:ca:00:d5:65:70:72:d9:f4:d9:aa:84: ff:bc:5e:6c:b2:09:55:54:06:92:ca:bb:2e:3e:f1:e2:94:95: 87:1e:90:31:61:fd:38:14:5d:95:e1:17:ce:8e:41:8c:23:a6: 03:69:c6:40:c7:75:66:7b:a3:10:79:e7:72:d4:4e:5f:a8:8c: 76:c7:51:fb:54:5c:ce:9a:92:47:62:77:d7:de:aa:82:41:f0: f8:82:f5:b7:18:4e:66:51:4c:88:f0:34:09:57:6c:e2:20:0f: 38:84:f7:d8:01:05:a6:76:65:cc:2b:be:50:cd:95:d5:ef:e2: 73:ad:50:5e:b0:c2:79:a2:e0:6e:82:fc:e5:49:99:56:e8:bd: b1:7f:12:1b:9c:5c:e3:7d:7d:cd:3d:e5:89:f0:1b:cd:99:63: 39:aa:48:9e:3a:53:fd:c7:aa:f0:a2:5d:09:a8:1d:2b:7f:05: 4c:c0:59:c6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjhDQUExMTAvBgNVBAUTKDM3Nzg1NDRFMjQ2OTU0OEJGMDlCNTREREQ4MDNEN0Q3 RDkwRjdFNjIwHhcNMjUwNTMxMDUwMzE5WhcNMjUwNjA3MDUwMzE5WjAYMRYwFAYD VQQDEw02ODNhOGQ5Ny1lZmQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArVz8esbAqufoWd/PaD4OwBf2tHNo9Z7wirVB3ptclzz6xNO9qyt8SLwJTibY AAJO6wUjObN5SUXrz7Vx3x/ZfOWpUIb7OhkR25iNAlFniCHpxlr6M8gtjT2bb406 jnDeQQvJAjBstH1EcDwTPWxV4fTm/XmEaO039lbtbaOe9XYy+x1HI1KMRka7+Vzc cLI/6BLZRu2Nd+ZLewEU/6HzW0BH207EI3hM034SE0xWq8xcLMQZkJ8gMdyFQ7mn M6r3rnmJnwY5SRuAeeTLbjpDh/16ZpC2ap8YV97kGxW93vkAt0ZxLRWy66tk3Yvp 1/nmyt7wag2jKsJ27cLCfh2/uwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH7WoBkN AtlUS30rYTcfuH29zXmKMB8GA1UdIwQYMBaAFDd4VE4kaVSL8JtU3dgD19fZD35i MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOENBQS9EQ0QwMkEyMEUx RUExMUVFOTk5QzcwMkFDNEY5QUUwMi9OM2hVVGlScFZJdndtMVRkMkFQWDE5a1Bm bUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL04zaFVUaVJwVkl2d20xVGQyQVBYMTlrUGZtSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OENBQS9EQ0QwMkEyMEUxRUExMUVFOTk5QzcwMkFDNEY5QUUwMi9OM2hVVGlScFZJ dndtMVRkMkFQWDE5a1BmbUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCG1BX6bQarO4CZ/6NE6W9gH/uduB8KSwFFaOtBfFvMd6zeHa4z4RNM sTPGvMp1ECgWGt3BYFzMr+RqWazL6XHNgRlICChd4YRLyhBjffKKygDVZXBy2fTZ qoT/vF5ssglVVAaSyrsuPvHilJWHHpAxYf04FF2V4RfOjkGMI6YDacZAx3Vme6MQ eedy1E5fqIx2x1H7VFzOmpJHYnfX3qqCQfD4gvW3GE5mUUyI8DQJV2ziIA84hPfY AQWmdmXMK75QzZXV7+JzrVBesMJ5ouBugvzlSZlW6L2xfxIbnFzjfX3NPeWJ8BvN mWM5qkieOlP9x6rwol0JqB0rfwVMwFnG -----END CERTIFICATE-----Generated at Sat May 31 16:38:01 2025 by rpki-client