$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA5A2/4670EAAC98F611EEBBF1F417C4F9AE02/9bEXBUr1CcLDM2nalh9Ebdyrg0I.mft File: 9bEXBUr1CcLDM2nalh9Ebdyrg0I.mft (raw, json) Hash identifier: 2XOKGCTAZThDdeSdfllFKh0G4OzHyUUgYUYQjFKIkHQ= Subject key identifier: 85:58:18:D9:47:47:74:15:76:E1:CE:32:BE:D0:14:81:17:47:07:FD Authority key identifier: F5:B1:17:05:4A:F5:09:C2:C3:33:69:DA:96:1F:44:6D:DC:AB:83:42 Certificate issuer: /CN=A91FA5A2/serialNumber=F5B117054AF509C2C33369DA961F446DDCAB8342 Certificate serial: 012D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9bEXBUr1CcLDM2nalh9Ebdyrg0I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FA5A2/4670EAAC98F611EEBBF1F417C4F9AE02/9bEXBUr1CcLDM2nalh9Ebdyrg0I.mft Manifest number: 0124 Signing time: Sat 31 May 2025 04:32:37 +0000 Manifest this update: Sat 31 May 2025 04:32:36 +0000 Manifest next update: Sat 07 Jun 2025 04:32:36 +0000 Files and hashes: 1: 9bEXBUr1CcLDM2nalh9Ebdyrg0I.crl (hash: CB0HSpYKh2Ih0ZITRryv/mBDuom/CLYk3UYIXTmwqrc=) 2: 9FE80B2898F711EE87DF6E1FC4F9AE02.roa (hash: D3GA9GI+1ZpOYK34vPRNum86peu3I5thgqu5liFntgU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FA5A2/4670EAAC98F611EEBBF1F417C4F9AE02/9bEXBUr1CcLDM2nalh9Ebdyrg0I.crl rsync://rpki.apnic.net/member_repository/A91FA5A2/4670EAAC98F611EEBBF1F417C4F9AE02/9bEXBUr1CcLDM2nalh9Ebdyrg0I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9bEXBUr1CcLDM2nalh9Ebdyrg0I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 04:32:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 301 (0x12d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA5A2, serialNumber=F5B117054AF509C2C33369DA961F446DDCAB8342 Validity Not Before: May 31 04:32:36 2025 GMT Not After : Jun 7 04:32:36 2025 GMT Subject: CN=683a8664-9f25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:81:81:cf:80:d3:53:f3:04:d2:30:3a:77:9c: 4a:6b:26:c1:59:13:9b:06:2b:fc:ba:54:8f:11:fd: 2c:eb:fc:bf:e5:8c:86:fa:e8:ac:93:38:27:d6:8d: 63:ad:75:ff:22:66:d7:c1:35:1a:91:7d:35:b4:57: c6:48:18:42:f0:82:f7:8d:e7:01:79:61:12:0e:7a: b9:d2:a7:ac:c1:12:0a:0f:13:69:be:a5:a3:4c:42: 79:a2:76:a4:67:da:5c:85:95:8b:25:c3:d4:dc:ee: bc:63:c0:9c:1b:1e:5c:88:d7:9a:6d:41:e3:7e:a3: 76:47:90:34:a2:22:fe:1d:c6:f1:3b:55:b2:48:6f: 4a:05:1c:0b:bd:6c:5e:42:03:cb:92:e8:cf:1b:06: cf:55:d1:29:70:5e:11:a5:21:50:bb:98:85:b4:a0: 41:78:1e:84:59:b6:2b:e8:c6:9f:4a:7f:2c:f0:9e: b6:8f:e0:bb:72:f3:f0:e9:ba:d4:48:68:9f:e9:94: b2:d8:c7:77:54:a7:4e:4c:49:25:d8:6c:c7:6d:eb: 97:a3:78:6c:48:d5:40:bb:aa:df:56:8a:33:91:b4: c1:92:8d:dd:b7:5d:b6:48:98:62:bb:1f:cf:c6:5b: 67:23:85:8c:29:0d:f4:7e:25:24:43:41:e6:c3:c9: f7:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:58:18:D9:47:47:74:15:76:E1:CE:32:BE:D0:14:81:17:47:07:FD X509v3 Authority Key Identifier: keyid:F5:B1:17:05:4A:F5:09:C2:C3:33:69:DA:96:1F:44:6D:DC:AB:83:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FA5A2/4670EAAC98F611EEBBF1F417C4F9AE02/9bEXBUr1CcLDM2nalh9Ebdyrg0I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9bEXBUr1CcLDM2nalh9Ebdyrg0I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA5A2/4670EAAC98F611EEBBF1F417C4F9AE02/9bEXBUr1CcLDM2nalh9Ebdyrg0I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:ed:f3:f9:c3:90:78:42:dc:cd:3f:98:0b:87:c1:36:51:db: 21:45:2b:df:8f:f7:6b:35:83:65:1e:47:52:a4:98:54:37:6e: ff:fc:71:eb:f2:4c:17:b8:28:fe:ac:6a:52:47:75:f2:cf:79: cc:04:a1:1c:c8:ce:90:47:27:df:b9:2e:e7:6d:c4:65:04:4c: 51:12:a1:86:f6:b1:a2:50:fa:57:96:29:21:1f:6d:a6:c1:f8: 35:d0:d9:12:68:84:80:5b:ba:b3:57:53:8c:a6:28:43:1f:13: d7:9a:2a:c6:4f:09:7e:3a:42:66:73:28:0e:b1:ec:06:00:a0: 4d:bf:b4:17:b4:e7:a8:35:17:2d:69:9c:60:da:c8:10:47:93: 05:c2:29:e9:ee:b4:a3:0d:20:44:21:e0:9e:8c:61:c1:2f:bf: 5c:47:69:01:ca:42:b2:a3:8d:da:be:55:60:ed:6d:18:68:5f: 8b:9e:33:b6:77:3f:75:4c:36:e6:11:6e:fe:9f:14:f0:19:22: 2f:ea:2d:cd:5e:1c:64:66:8a:8f:05:08:62:09:66:47:b7:b8: 05:2d:5e:4d:f7:5c:8b:bc:86:7c:e3:a4:eb:68:e3:66:13:1d: 54:ae:48:0a:22:c3:69:46:cf:c2:ae:fc:11:61:a5:ff:44:c1: 32:bf:71:19 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAS0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkE1QTIxMTAvBgNVBAUTKEY1QjExNzA1NEFGNTA5QzJDMzMzNjlEQTk2MUY0NDZE RENBQjgzNDIwHhcNMjUwNTMxMDQzMjM2WhcNMjUwNjA3MDQzMjM2WjAYMRYwFAYD VQQDEw02ODNhODY2NC05ZjI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz4GBz4DTU/ME0jA6d5xKaybBWRObBiv8ulSPEf0s6/y/5YyG+uiskzgn1o1j rXX/ImbXwTUakX01tFfGSBhC8IL3jecBeWESDnq50qeswRIKDxNpvqWjTEJ5onak Z9pchZWLJcPU3O68Y8CcGx5ciNeabUHjfqN2R5A0oiL+HcbxO1WySG9KBRwLvWxe QgPLkujPGwbPVdEpcF4RpSFQu5iFtKBBeB6EWbYr6MafSn8s8J62j+C7cvPw6brU SGif6ZSy2Md3VKdOTEkl2GzHbeuXo3hsSNVAu6rfVoozkbTBko3dt122SJhiux/P xltnI4WMKQ30fiUkQ0Hmw8n3tQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIVYGNlH R3QVduHOMr7QFIEXRwf9MB8GA1UdIwQYMBaAFPWxFwVK9QnCwzNp2pYfRG3cq4NC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQTVBMi80NjcwRUFBQzk4 RjYxMUVFQkJGMUY0MTdDNEY5QUUwMi85YkVYQlVyMUNjTERNMm5hbGg5RWJkeXJn MEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzliRVhCVXIxQ2NMRE0ybmFsaDlFYmR5cmcwSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QTVBMi80NjcwRUFBQzk4RjYxMUVFQkJGMUY0MTdDNEY5QUUwMi85YkVYQlVyMUNj TERNMm5hbGg5RWJkeXJnMEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAW7fP5w5B4QtzNP5gLh8E2UdshRSvfj/drNYNlHkdSpJhUN27//HHr 8kwXuCj+rGpSR3Xyz3nMBKEcyM6QRyffuS7nbcRlBExREqGG9rGiUPpXlikhH22m wfg10NkSaISAW7qzV1OMpihDHxPXmirGTwl+OkJmcygOsewGAKBNv7QXtOeoNRct aZxg2sgQR5MFwinp7rSjDSBEIeCejGHBL79cR2kBykKyo43avlVg7W0YaF+LnjO2 dz91TDbmEW7+nxTwGSIv6i3NXhxkZoqPBQhiCWZHt7gFLV5N91yLvIZ846TraONm Ex1UrkgKIsNpRs/CrvwRYaX/RMEyv3EZ -----END CERTIFICATE-----Generated at Sat May 31 16:34:55 2025 by rpki-client