$ rpki-client -vvf rpki.apnic.net/member_repository/A91FCB3B/8629C43231D811EE8BE9C440C4F9AE02/_I1R2lNSEj3a5jdlZPjVaB2ksxw.mft File: _I1R2lNSEj3a5jdlZPjVaB2ksxw.mft (raw, json) Hash identifier: l5HnpR7dYMDf68/6YGDsvhWCKOhsaPXoAY5uR5AXm/I= Subject key identifier: 29:74:15:A4:25:22:9C:EF:3D:F3:BF:98:CD:6F:13:7C:EC:B5:82:34 Authority key identifier: FC:8D:51:DA:53:52:12:3D:DA:E6:37:65:64:F8:D5:68:1D:A4:B3:1C Certificate issuer: /CN=A91FCB3B/serialNumber=FC8D51DA5352123DDAE6376564F8D5681DA4B31C Certificate serial: 0159 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_I1R2lNSEj3a5jdlZPjVaB2ksxw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FCB3B/8629C43231D811EE8BE9C440C4F9AE02/_I1R2lNSEj3a5jdlZPjVaB2ksxw.mft Manifest number: 0156 Signing time: Sat 31 May 2025 03:46:11 +0000 Manifest this update: Sat 31 May 2025 03:46:10 +0000 Manifest next update: Sat 07 Jun 2025 03:46:10 +0000 Files and hashes: 1: _I1R2lNSEj3a5jdlZPjVaB2ksxw.crl (hash: ZN+HD86ZaU3DBVOtUqQCK8IY6xvuYl3icWR2Dle+/FE=) 2: C9763EB431D811EE89285A41C4F9AE02.roa (hash: +03LMs4GrIEKMr4AUS8THT/+aKHBZJZQJL5qDyXGi38=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FCB3B/8629C43231D811EE8BE9C440C4F9AE02/_I1R2lNSEj3a5jdlZPjVaB2ksxw.crl rsync://rpki.apnic.net/member_repository/A91FCB3B/8629C43231D811EE8BE9C440C4F9AE02/_I1R2lNSEj3a5jdlZPjVaB2ksxw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_I1R2lNSEj3a5jdlZPjVaB2ksxw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 03:46:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 345 (0x159) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FCB3B, serialNumber=FC8D51DA5352123DDAE6376564F8D5681DA4B31C Validity Not Before: May 31 03:46:10 2025 GMT Not After : Jun 7 03:46:10 2025 GMT Subject: CN=683a7b83-105a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:9c:6f:b3:ef:af:4e:08:22:92:b4:e5:71:de: dd:56:4e:0f:e5:f1:37:32:b4:a0:ab:4a:be:af:23: 17:d9:00:3b:93:65:0a:16:59:a5:d8:6e:68:f0:6e: a1:00:b7:76:d0:88:0f:38:5a:9a:6a:35:b7:49:e4: 9f:07:e9:b0:52:cb:32:3f:30:5a:97:dd:bb:9e:a3: 62:6a:a1:61:42:56:14:08:58:7c:de:5c:8a:61:4b: aa:61:b6:e0:8f:34:84:ab:26:6c:a1:02:e8:39:1b: 21:4e:15:24:5f:a1:90:34:47:47:f7:2d:8f:14:8f: 04:f7:50:0c:ba:e9:a5:44:ab:8b:88:e7:c9:4a:75: cb:01:87:36:3b:e6:ae:9f:43:46:39:29:0f:8a:11: a4:4d:13:c0:aa:ba:29:db:ba:36:8a:33:3c:54:cd: 97:f6:16:1a:3b:40:1f:7e:63:68:54:d9:25:6c:39: 8e:f3:63:f3:38:77:4f:3c:53:a1:d8:30:63:06:5e: 0b:71:4b:01:18:dc:0a:c6:09:a6:a5:e9:9a:49:0b: 76:97:b6:07:b6:65:08:1c:c5:fd:9b:f1:16:d8:2d: 75:c3:c7:ff:90:46:c1:2f:19:e9:77:c5:29:d3:ea: f4:a0:19:30:9f:a2:17:aa:83:21:94:14:83:29:b0: af:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:74:15:A4:25:22:9C:EF:3D:F3:BF:98:CD:6F:13:7C:EC:B5:82:34 X509v3 Authority Key Identifier: keyid:FC:8D:51:DA:53:52:12:3D:DA:E6:37:65:64:F8:D5:68:1D:A4:B3:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FCB3B/8629C43231D811EE8BE9C440C4F9AE02/_I1R2lNSEj3a5jdlZPjVaB2ksxw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_I1R2lNSEj3a5jdlZPjVaB2ksxw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCB3B/8629C43231D811EE8BE9C440C4F9AE02/_I1R2lNSEj3a5jdlZPjVaB2ksxw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:ae:d9:2b:7a:b2:e2:67:13:3a:16:f7:01:9b:c2:f5:47:87: d9:38:6c:93:f0:25:29:b4:42:3e:95:b3:72:e1:01:72:ca:cd: 95:61:92:8e:f3:a0:73:db:23:b5:ca:cb:0b:96:28:fc:80:db: 9e:62:75:b4:e8:37:58:0e:c2:ac:19:1f:69:a4:3d:0d:26:48: 80:6f:1c:03:5d:cf:9e:68:0d:bc:92:43:1b:3d:be:d1:cc:3c: 12:f3:63:76:bf:8a:24:54:af:1e:a5:a6:1b:96:4e:0f:49:80: 88:75:6f:ac:61:c6:cb:78:d5:31:9b:0c:f4:15:bc:14:b6:40: 41:a6:c9:88:38:b1:66:bb:a5:f8:f0:bb:74:db:69:30:d6:aa: 8b:50:36:ef:1f:61:f9:d2:3d:15:70:6e:09:4e:8f:4c:6f:21: a6:04:a2:14:8c:cf:e6:c8:d9:ad:5d:c6:87:d0:4b:fb:12:67: 69:bf:ee:ce:c4:cc:6f:ba:54:ff:7c:4e:ec:fe:eb:52:3b:99: 40:50:dc:55:ae:88:ff:b9:79:31:cd:d8:f4:f1:23:c4:3c:4a: a1:90:e5:0b:b0:13:28:84:3c:b9:7a:06:3d:32:a5:4f:3d:fb: af:aa:62:0c:3a:92:9b:3b:b9:0e:e1:69:fa:1f:2d:f5:a2:c2: 7a:d9:b3:e8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkNCM0IxMTAvBgNVBAUTKEZDOEQ1MURBNTM1MjEyM0REQUU2Mzc2NTY0RjhENTY4 MURBNEIzMUMwHhcNMjUwNTMxMDM0NjEwWhcNMjUwNjA3MDM0NjEwWjAYMRYwFAYD VQQDEw02ODNhN2I4My0xMDVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzpxvs++vTggikrTlcd7dVk4P5fE3MrSgq0q+ryMX2QA7k2UKFlml2G5o8G6h ALd20IgPOFqaajW3SeSfB+mwUssyPzBal927nqNiaqFhQlYUCFh83lyKYUuqYbbg jzSEqyZsoQLoORshThUkX6GQNEdH9y2PFI8E91AMuumlRKuLiOfJSnXLAYc2O+au n0NGOSkPihGkTRPAqrop27o2ijM8VM2X9hYaO0AffmNoVNklbDmO82PzOHdPPFOh 2DBjBl4LcUsBGNwKxgmmpemaSQt2l7YHtmUIHMX9m/EW2C11w8f/kEbBLxnpd8Up 0+r0oBkwn6IXqoMhlBSDKbCvQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCl0FaQl IpzvPfO/mM1vE3zstYI0MB8GA1UdIwQYMBaAFPyNUdpTUhI92uY3ZWT41WgdpLMc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQ0IzQi84NjI5QzQzMjMx RDgxMUVFOEJFOUM0NDBDNEY5QUUwMi9fSTFSMmxOU0VqM2E1amRsWlBqVmFCMmtz eHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19JMVIybE5TRWozYTVqZGxaUGpWYUIya3N4dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG Q0IzQi84NjI5QzQzMjMxRDgxMUVFOEJFOUM0NDBDNEY5QUUwMi9fSTFSMmxOU0Vq M2E1amRsWlBqVmFCMmtzeHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBVrtkrerLiZxM6FvcBm8L1R4fZOGyT8CUptEI+lbNy4QFyys2VYZKO 86Bz2yO1yssLlij8gNueYnW06DdYDsKsGR9ppD0NJkiAbxwDXc+eaA28kkMbPb7R zDwS82N2v4okVK8epaYblk4PSYCIdW+sYcbLeNUxmwz0FbwUtkBBpsmIOLFmu6X4 8Lt022kw1qqLUDbvH2H50j0VcG4JTo9MbyGmBKIUjM/myNmtXcaH0Ev7Emdpv+7O xMxvulT/fE7s/utSO5lAUNxVroj/uXkxzdj08SPEPEqhkOULsBMohDy5egY9MqVP PfuvqmIMOpKbO7kO4Wn6Hy31osJ62bPo -----END CERTIFICATE-----Generated at Sat May 31 17:46:27 2025 by rpki-client