$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9BB7/8737F76EBE8711ED8E0AAB78C4F9AE02/mWY2odRf01oWXBULxfYjk0u7tnk.mft File: mWY2odRf01oWXBULxfYjk0u7tnk.mft (raw, json) Hash identifier: hZ4Go0cyVhqgokqK939TfCe3N1IpgOHMNKiXewN1OYA= Subject key identifier: 97:9E:5A:B7:29:E6:57:B0:2A:7A:26:6C:AE:C8:ED:4A:99:59:4C:BC Authority key identifier: 99:66:36:A1:D4:5F:D3:5A:16:5C:15:0B:C5:F6:23:93:4B:BB:B6:79 Certificate issuer: /CN=A91F9BB7/serialNumber=996636A1D45FD35A165C150BC5F623934BBBB679 Certificate serial: 01A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mWY2odRf01oWXBULxfYjk0u7tnk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F9BB7/8737F76EBE8711ED8E0AAB78C4F9AE02/mWY2odRf01oWXBULxfYjk0u7tnk.mft Manifest number: 01A2 Signing time: Sat 31 May 2025 03:01:08 +0000 Manifest this update: Sat 31 May 2025 03:01:08 +0000 Manifest next update: Sat 07 Jun 2025 03:01:08 +0000 Files and hashes: 1: mWY2odRf01oWXBULxfYjk0u7tnk.crl (hash: lhQl3q2iEU1LNubt6EltF3wZRh/vtXiFrEDXYd2VHmo=) 2: A1EB38DEF23D11EDAF983380C4F9AE02.roa (hash: EOJzDZ8f4vw5nVv7l4gc1hYpXyFTJy9AdVnHra07iu8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F9BB7/8737F76EBE8711ED8E0AAB78C4F9AE02/mWY2odRf01oWXBULxfYjk0u7tnk.crl rsync://rpki.apnic.net/member_repository/A91F9BB7/8737F76EBE8711ED8E0AAB78C4F9AE02/mWY2odRf01oWXBULxfYjk0u7tnk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mWY2odRf01oWXBULxfYjk0u7tnk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 03:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 421 (0x1a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F9BB7, serialNumber=996636A1D45FD35A165C150BC5F623934BBBB679 Validity Not Before: May 31 03:01:08 2025 GMT Not After : Jun 7 03:01:08 2025 GMT Subject: CN=683a70f4-0821 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:ef:ec:f1:a6:f0:e7:a2:d4:a5:b5:63:c8:dc: 9a:5c:59:24:2f:dd:10:40:c2:53:c9:6a:c6:79:5f: d5:b6:ae:3c:89:33:e2:8c:87:43:ca:e0:52:db:2c: a3:57:ac:ca:ae:93:98:03:c6:29:95:22:d1:c6:36: e5:f8:ba:8b:38:c4:e7:d2:a4:61:cd:63:f4:d0:50: b3:e7:5c:6e:0a:ee:f7:da:d5:be:ec:12:ab:6c:80: 00:94:15:9e:0f:89:16:81:32:b6:5b:f7:c0:a6:58: d5:01:0b:bd:cf:c1:e7:44:b4:50:39:82:7a:64:b6: 5e:db:50:6b:89:ff:a5:a8:86:6d:ec:65:f9:63:e1: 96:52:fa:12:87:5c:c4:07:5b:4a:ce:de:d8:c9:6f: c8:97:44:c5:18:03:f7:fb:65:7a:07:9e:2a:8e:f0: 95:3f:7f:cd:6e:c3:1a:eb:7b:2f:72:a7:3e:99:4a: 89:41:41:e9:3c:36:5c:4a:9b:50:36:b1:3b:6c:77: ab:42:58:e7:c8:b0:86:6c:41:93:d4:37:75:00:e6: 65:9d:80:46:e4:98:cd:36:2c:51:6a:cb:83:87:5f: 2f:fc:9d:4f:15:ed:44:c4:44:af:36:ae:36:27:6e: f4:66:f8:14:84:c1:ab:06:7f:5a:f4:72:0c:e2:93: 95:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:9E:5A:B7:29:E6:57:B0:2A:7A:26:6C:AE:C8:ED:4A:99:59:4C:BC X509v3 Authority Key Identifier: keyid:99:66:36:A1:D4:5F:D3:5A:16:5C:15:0B:C5:F6:23:93:4B:BB:B6:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F9BB7/8737F76EBE8711ED8E0AAB78C4F9AE02/mWY2odRf01oWXBULxfYjk0u7tnk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mWY2odRf01oWXBULxfYjk0u7tnk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9BB7/8737F76EBE8711ED8E0AAB78C4F9AE02/mWY2odRf01oWXBULxfYjk0u7tnk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:d1:75:21:f1:5b:0e:c3:b1:b2:5e:5f:2e:0c:47:92:c7:d4: ec:6d:17:d5:d3:16:3c:0d:37:ae:c7:4c:49:3a:1f:12:a7:7b: 4b:de:89:59:a5:f6:6a:c2:fd:c3:30:8b:fb:81:bc:04:c7:40: 52:f3:32:39:0b:ef:21:c1:67:04:fb:47:c7:76:2d:36:e5:92: dd:6c:17:e4:d3:5b:59:03:44:e3:d8:76:e8:07:2b:be:de:9b: f6:69:25:46:08:83:1d:c1:45:53:03:5a:78:8a:1e:2c:5f:83: 3b:e4:da:6f:cc:c6:94:0e:a3:02:ef:ff:07:7f:ab:b5:c0:26: 34:df:cb:12:82:89:e3:e5:a2:63:f3:b2:9b:70:56:4b:24:d1: d9:ff:e9:94:0b:f8:fa:bf:cf:d5:ec:50:99:fd:fe:58:1b:a7: e3:4d:39:85:5f:3a:23:7e:24:a0:04:8a:d4:23:e4:d7:d5:9e: b8:aa:77:56:b5:ec:48:03:cc:d2:da:08:5e:50:15:53:a3:8e: f1:cd:4c:eb:5d:19:d9:64:2e:56:2e:1f:ca:b6:af:cd:d7:28: 2f:c7:8c:e5:4b:ad:84:36:7d:dc:96:ba:c8:7f:22:a0:d7:c1: 97:a9:5d:da:e0:ac:e6:90:54:32:ba:65:ae:49:33:62:d9:f1: 2a:82:13:fb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjlCQjcxMTAvBgNVBAUTKDk5NjYzNkExRDQ1RkQzNUExNjVDMTUwQkM1RjYyMzkz NEJCQkI2NzkwHhcNMjUwNTMxMDMwMTA4WhcNMjUwNjA3MDMwMTA4WjAYMRYwFAYD VQQDEw02ODNhNzBmNC0wODIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1e/s8abw56LUpbVjyNyaXFkkL90QQMJTyWrGeV/Vtq48iTPijIdDyuBS2yyj V6zKrpOYA8YplSLRxjbl+LqLOMTn0qRhzWP00FCz51xuCu732tW+7BKrbIAAlBWe D4kWgTK2W/fApljVAQu9z8HnRLRQOYJ6ZLZe21Brif+lqIZt7GX5Y+GWUvoSh1zE B1tKzt7YyW/Il0TFGAP3+2V6B54qjvCVP3/NbsMa63svcqc+mUqJQUHpPDZcSptQ NrE7bHerQljnyLCGbEGT1Dd1AOZlnYBG5JjNNixRasuDh18v/J1PFe1ExESvNq42 J270ZvgUhMGrBn9a9HIM4pOV7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJeeWrcp 5lewKnombK7I7UqZWUy8MB8GA1UdIwQYMBaAFJlmNqHUX9NaFlwVC8X2I5NLu7Z5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOUJCNy84NzM3Rjc2RUJF ODcxMUVEOEUwQUFCNzhDNEY5QUUwMi9tV1kyb2RSZjAxb1dYQlVMeGZZamswdTd0 bmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21XWTJvZFJmMDFvV1hCVUx4ZllqazB1N3Ruay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OUJCNy84NzM3Rjc2RUJFODcxMUVEOEUwQUFCNzhDNEY5QUUwMi9tV1kyb2RSZjAx b1dYQlVMeGZZamswdTd0bmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB00XUh8VsOw7GyXl8uDEeSx9TsbRfV0xY8DTeux0xJOh8Sp3tL3olZ pfZqwv3DMIv7gbwEx0BS8zI5C+8hwWcE+0fHdi025ZLdbBfk01tZA0Tj2HboByu+ 3pv2aSVGCIMdwUVTA1p4ih4sX4M75NpvzMaUDqMC7/8Hf6u1wCY038sSgonj5aJj 87KbcFZLJNHZ/+mUC/j6v8/V7FCZ/f5YG6fjTTmFXzojfiSgBIrUI+TX1Z64qndW texIA8zS2gheUBVTo47xzUzrXRnZZC5WLh/Ktq/N1ygvx4zlS62ENn3clrrIfyKg 18GXqV3a4KzmkFQyumWuSTNi2fEqghP7 -----END CERTIFICATE-----Generated at Sat May 31 17:56:24 2025 by rpki-client