$ rpki-client -vvf rpki.apnic.net/member_repository/A91FC8B6/EC622B06F63F11ED97882C72C4F9AE02/1vK6rnpSD6pGgsrcNpNmC54f8QQ.mft File: 1vK6rnpSD6pGgsrcNpNmC54f8QQ.mft (raw, json) Hash identifier: lmdYvL9tDefZmWhrGIoD2bedAK2uU5DGkcxiTA9+2/0= Subject key identifier: 47:7B:45:BC:70:CB:5B:EF:F9:63:92:10:A0:AD:FE:51:D4:9A:69:8B Authority key identifier: D6:F2:BA:AE:7A:52:0F:AA:46:82:CA:DC:36:93:66:0B:9E:1F:F1:04 Certificate issuer: /CN=A91FC8B6/serialNumber=D6F2BAAE7A520FAA4682CADC3693660B9E1FF104 Certificate serial: 0180 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1vK6rnpSD6pGgsrcNpNmC54f8QQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FC8B6/EC622B06F63F11ED97882C72C4F9AE02/1vK6rnpSD6pGgsrcNpNmC54f8QQ.mft Manifest number: 017D Signing time: Sat 31 May 2025 03:22:01 +0000 Manifest this update: Sat 31 May 2025 03:22:01 +0000 Manifest next update: Sat 07 Jun 2025 03:22:01 +0000 Files and hashes: 1: 1vK6rnpSD6pGgsrcNpNmC54f8QQ.crl (hash: d0JAeoq6WIctMq/k+qTTVixKJw7jRYDIYhx56CCtSqE=) 2: 37B81F7AF64511ED8C736D76C4F9AE02.roa (hash: ElQvBJV6B10UNvlVIlGas46V55/K9saRpZMoFdDMc0c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FC8B6/EC622B06F63F11ED97882C72C4F9AE02/1vK6rnpSD6pGgsrcNpNmC54f8QQ.crl rsync://rpki.apnic.net/member_repository/A91FC8B6/EC622B06F63F11ED97882C72C4F9AE02/1vK6rnpSD6pGgsrcNpNmC54f8QQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1vK6rnpSD6pGgsrcNpNmC54f8QQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 03:22:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 384 (0x180) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FC8B6, serialNumber=D6F2BAAE7A520FAA4682CADC3693660B9E1FF104 Validity Not Before: May 31 03:22:01 2025 GMT Not After : Jun 7 03:22:01 2025 GMT Subject: CN=683a75d9-b184 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:a5:23:0e:89:ac:7f:fd:88:4a:73:63:b4:73: f1:4c:fa:3d:8d:af:2a:46:90:db:33:de:f9:25:d0: 8e:cc:ff:83:91:bd:c3:88:d8:8c:23:24:19:ef:f4: 3e:cf:aa:ff:65:4d:74:f2:09:da:ce:28:6d:92:7b: e5:45:6b:74:a5:ab:9e:5b:e3:94:88:6a:75:af:ae: e3:a6:57:60:d1:2f:1d:46:52:a2:c5:83:0c:89:75: 91:f4:fc:64:5f:04:fb:5e:e8:fd:22:16:9a:6c:a4: 82:28:f2:cd:a6:25:81:09:7c:44:b6:48:c8:54:c8: 58:f8:98:93:ee:8a:40:92:9d:6f:73:3d:f6:84:d6: 86:73:d2:92:bf:64:6b:bd:0e:64:5c:0c:f6:3d:84: ba:30:45:60:d8:ea:35:64:cf:1f:63:ab:10:13:c6: 85:80:53:f1:f2:c7:5e:2e:68:5c:d1:78:71:4d:d1: b8:63:f0:a3:1b:6b:cd:5f:5e:ce:68:28:4c:af:15: 2e:38:0b:21:b2:99:a4:5e:e1:62:b3:33:a2:5e:4b: 31:ee:d1:2c:61:a5:88:71:00:b3:6f:69:de:90:eb: 7f:ce:3e:6a:bf:ed:10:d4:cf:6f:b9:75:32:42:98: c7:e0:64:b5:7e:ca:c4:58:69:a1:4b:37:6c:8d:54: 0b:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:7B:45:BC:70:CB:5B:EF:F9:63:92:10:A0:AD:FE:51:D4:9A:69:8B X509v3 Authority Key Identifier: keyid:D6:F2:BA:AE:7A:52:0F:AA:46:82:CA:DC:36:93:66:0B:9E:1F:F1:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FC8B6/EC622B06F63F11ED97882C72C4F9AE02/1vK6rnpSD6pGgsrcNpNmC54f8QQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1vK6rnpSD6pGgsrcNpNmC54f8QQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC8B6/EC622B06F63F11ED97882C72C4F9AE02/1vK6rnpSD6pGgsrcNpNmC54f8QQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:b8:3d:be:2d:98:0d:fd:d3:76:76:fc:10:26:04:b5:8e:c9: fd:82:82:0c:94:c5:c7:24:2d:fa:f7:c4:ac:d8:be:3f:02:17: 19:be:08:8f:bd:8f:02:29:20:4f:c1:d2:ff:01:63:9e:df:dd: 60:c6:a1:d3:ff:8c:1a:ca:5f:b6:a8:82:e5:6f:db:87:6a:1e: 0d:41:e6:a4:05:b3:55:05:30:f0:eb:f8:cc:1d:8a:e8:3d:d1: f8:1c:81:eb:89:3f:99:c9:bc:36:65:d8:ff:46:3b:cc:ae:6f: a2:9f:01:01:e1:c5:d1:dd:86:6e:ce:37:48:7c:ab:3b:8f:22: 03:95:64:cc:ec:bb:be:83:45:16:96:25:15:08:ab:e2:49:5f: cd:fd:d9:d9:49:5e:b4:94:97:6d:0e:a8:63:c8:54:58:56:9d: 2b:bb:e5:00:87:c2:9c:6f:2c:25:19:c4:93:17:69:fd:39:2a: f6:ec:30:75:ef:31:90:43:6e:01:99:9c:38:1f:d6:7d:9c:82: c5:cd:55:c0:22:b9:66:49:a6:b1:a7:b4:37:d5:b1:c5:85:28: 72:ec:a3:0a:16:8d:af:77:bf:15:a4:81:ef:6e:c8:4b:6f:f8: d9:e4:dc:c1:e7:fa:a2:26:28:4b:f1:8e:38:af:21:af:04:0f: de:8c:47:51 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkM4QjYxMTAvBgNVBAUTKEQ2RjJCQUFFN0E1MjBGQUE0NjgyQ0FEQzM2OTM2NjBC OUUxRkYxMDQwHhcNMjUwNTMxMDMyMjAxWhcNMjUwNjA3MDMyMjAxWjAYMRYwFAYD VQQDEw02ODNhNzVkOS1iMTg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwKUjDomsf/2ISnNjtHPxTPo9ja8qRpDbM975JdCOzP+Dkb3DiNiMIyQZ7/Q+ z6r/ZU108gnazihtknvlRWt0paueW+OUiGp1r67jpldg0S8dRlKixYMMiXWR9Pxk XwT7Xuj9IhaabKSCKPLNpiWBCXxEtkjIVMhY+JiT7opAkp1vcz32hNaGc9KSv2Rr vQ5kXAz2PYS6MEVg2Oo1ZM8fY6sQE8aFgFPx8sdeLmhc0XhxTdG4Y/CjG2vNX17O aChMrxUuOAshspmkXuFiszOiXksx7tEsYaWIcQCzb2nekOt/zj5qv+0Q1M9vuXUy QpjH4GS1fsrEWGmhSzdsjVQLgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEd7Rbxw y1vv+WOSEKCt/lHUmmmLMB8GA1UdIwQYMBaAFNbyuq56Ug+qRoLK3DaTZgueH/EE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQzhCNi9FQzYyMkIwNkY2 M0YxMUVEOTc4ODJDNzJDNEY5QUUwMi8xdks2cm5wU0Q2cEdnc3JjTnBObUM1NGY4 UVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzF2SzZybnBTRDZwR2dzcmNOcE5tQzU0ZjhRUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QzhCNi9FQzYyMkIwNkY2M0YxMUVEOTc4ODJDNzJDNEY5QUUwMi8xdks2cm5wU0Q2 cEdnc3JjTnBObUM1NGY4UVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCMuD2+LZgN/dN2dvwQJgS1jsn9goIMlMXHJC3698Ss2L4/AhcZvgiP vY8CKSBPwdL/AWOe391gxqHT/4wayl+2qILlb9uHah4NQeakBbNVBTDw6/jMHYro PdH4HIHriT+Zybw2Zdj/RjvMrm+inwEB4cXR3YZuzjdIfKs7jyIDlWTM7Lu+g0UW liUVCKviSV/N/dnZSV60lJdtDqhjyFRYVp0ru+UAh8KcbywlGcSTF2n9OSr27DB1 7zGQQ24BmZw4H9Z9nILFzVXAIrlmSaaxp7Q31bHFhShy7KMKFo2vd78VpIHvbshL b/jZ5NzB5/qiJihL8Y44ryGvBA/ejEdR -----END CERTIFICATE-----Generated at Sat May 31 16:25:52 2025 by rpki-client