$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD378/632FA8CE51EA11EAB6A5CD86C4F9AE02/mb4IXRxpbLwhtnj5GI7M5dvN1Mo.mft File: mb4IXRxpbLwhtnj5GI7M5dvN1Mo.mft (raw, json) Hash identifier: VrLPgXLSipVoJtCl3VWSIjy740LEDQ0NP6tG6s9C9Mk= Subject key identifier: 81:D0:42:56:F3:93:D0:C0:13:4E:C8:20:1F:6A:A2:07:F2:C9:C6:6C Authority key identifier: 99:BE:08:5D:1C:69:6C:BC:21:B6:78:F9:18:8E:CC:E5:DB:CD:D4:CA Certificate issuer: /CN=A91FD378/serialNumber=99BE085D1C696CBC21B678F9188ECCE5DBCDD4CA Certificate serial: 0AC7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mb4IXRxpbLwhtnj5GI7M5dvN1Mo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FD378/632FA8CE51EA11EAB6A5CD86C4F9AE02/mb4IXRxpbLwhtnj5GI7M5dvN1Mo.mft Manifest number: 0ABC Signing time: Fri 30 May 2025 19:40:51 +0000 Manifest this update: Fri 30 May 2025 19:40:51 +0000 Manifest next update: Fri 06 Jun 2025 19:40:51 +0000 Files and hashes: 1: mb4IXRxpbLwhtnj5GI7M5dvN1Mo.crl (hash: AQaUaI6STuxw2MQwdblYIe8F4jlzwD0ieYSjYiuu/Mg=) 2: EF44A44E51EB11EABC11800DC4F9AE02.roa (hash: wVjOHBRTAFBzywxmlgqw2C8A1H3crVXb96hs+TBB5RU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FD378/632FA8CE51EA11EAB6A5CD86C4F9AE02/mb4IXRxpbLwhtnj5GI7M5dvN1Mo.crl rsync://rpki.apnic.net/member_repository/A91FD378/632FA8CE51EA11EAB6A5CD86C4F9AE02/mb4IXRxpbLwhtnj5GI7M5dvN1Mo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mb4IXRxpbLwhtnj5GI7M5dvN1Mo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 19:40:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2759 (0xac7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FD378, serialNumber=99BE085D1C696CBC21B678F9188ECCE5DBCDD4CA Validity Not Before: May 30 19:40:51 2025 GMT Not After : Jun 6 19:40:51 2025 GMT Subject: CN=683a09c3-0fb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:39:f5:89:99:a2:6c:15:ac:50:f0:b5:0f:10: c4:0d:67:3a:0e:c5:da:3e:97:2e:3f:a5:9d:57:2a: 0f:40:29:d0:de:43:38:b4:e2:31:e9:61:25:1f:2f: c2:2a:e1:26:f7:9d:5f:ff:61:93:bd:d9:d0:ba:0a: 2f:a9:37:d6:b2:23:15:3e:ad:ad:a2:f7:4c:48:5b: 85:12:00:42:02:3e:16:da:9d:67:d5:a7:f0:00:ca: 6d:e9:97:c0:26:9b:cd:b6:40:9f:99:7f:84:3b:00: d0:2f:35:6c:ad:7f:ec:dd:43:ca:60:10:6d:49:fe: 05:aa:ef:8e:de:00:45:85:97:29:c2:5a:f6:d6:e0: 92:15:0e:58:47:67:ad:0e:b6:92:29:80:9f:5d:85: de:76:bf:0e:b2:37:d7:29:3f:95:15:7a:ef:0f:7f: fc:30:4e:6f:5c:41:4b:4d:80:b7:04:6a:50:ba:05: 3e:74:bf:ef:74:47:d0:5d:75:33:15:6c:33:c5:69: 16:d1:28:c2:f7:ad:71:a6:c7:eb:0d:ab:bb:23:13: ef:77:b0:aa:87:90:19:a1:2e:9b:32:17:ce:49:73: bd:d0:64:c3:8c:e4:56:83:19:7d:9a:12:d3:d4:23: 48:11:3a:1e:d6:8c:10:8c:1f:55:f1:e8:c5:3f:7b: eb:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:D0:42:56:F3:93:D0:C0:13:4E:C8:20:1F:6A:A2:07:F2:C9:C6:6C X509v3 Authority Key Identifier: keyid:99:BE:08:5D:1C:69:6C:BC:21:B6:78:F9:18:8E:CC:E5:DB:CD:D4:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FD378/632FA8CE51EA11EAB6A5CD86C4F9AE02/mb4IXRxpbLwhtnj5GI7M5dvN1Mo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mb4IXRxpbLwhtnj5GI7M5dvN1Mo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD378/632FA8CE51EA11EAB6A5CD86C4F9AE02/mb4IXRxpbLwhtnj5GI7M5dvN1Mo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:ac:ba:ae:52:14:83:05:9f:97:3b:6b:8e:99:c4:00:2b:e0: 78:59:3f:c4:11:9d:94:bd:10:d0:98:1d:31:de:8b:76:2b:4b: fc:5b:8c:76:81:ee:a6:78:34:18:af:94:e4:14:d0:2d:29:1d: 93:2d:25:39:ff:be:4c:ea:42:63:65:ec:b1:d9:77:2c:23:82: b4:bf:23:b0:12:74:e4:b8:69:9c:9a:c9:e6:da:4a:9d:44:d5: 4a:81:72:b6:59:ad:76:8a:b0:b6:f3:1f:2a:9c:0e:0d:8d:39: 2f:2b:8f:bc:ce:7a:ed:4e:82:05:7a:22:0f:39:e8:7d:c6:b8: e4:48:22:1c:10:42:b4:a4:bf:19:cf:88:f9:1c:02:c1:b3:a3: cb:f5:51:87:82:4f:6e:94:75:19:63:9d:43:df:46:2f:0f:99: a0:28:d7:a5:a6:30:93:eb:73:f9:b4:25:37:60:fd:77:56:6f: fc:13:07:6b:14:97:67:2a:fb:86:87:99:e0:31:2b:72:6f:a1: 13:41:40:aa:ca:28:9c:e9:de:73:bd:65:7c:60:46:39:a4:bf: 3e:dd:ff:dc:a9:08:e1:58:7e:2f:42:2a:9d:6c:19:2b:3e:3a: 0a:c8:f1:f8:0f:04:42:0f:4a:7b:30:cb:01:39:df:d4:2c:d9: d8:c2:e4:5d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCscwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkQzNzgxMTAvBgNVBAUTKDk5QkUwODVEMUM2OTZDQkMyMUI2NzhGOTE4OEVDQ0U1 REJDREQ0Q0EwHhcNMjUwNTMwMTk0MDUxWhcNMjUwNjA2MTk0MDUxWjAYMRYwFAYD VQQDEw02ODNhMDljMy0wZmI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4zn1iZmibBWsUPC1DxDEDWc6DsXaPpcuP6WdVyoPQCnQ3kM4tOIx6WElHy/C KuEm951f/2GTvdnQugovqTfWsiMVPq2tovdMSFuFEgBCAj4W2p1n1afwAMpt6ZfA JpvNtkCfmX+EOwDQLzVsrX/s3UPKYBBtSf4Fqu+O3gBFhZcpwlr21uCSFQ5YR2et DraSKYCfXYXedr8OsjfXKT+VFXrvD3/8ME5vXEFLTYC3BGpQugU+dL/vdEfQXXUz FWwzxWkW0SjC961xpsfrDau7IxPvd7Cqh5AZoS6bMhfOSXO90GTDjORWgxl9mhLT 1CNIEToe1owQjB9V8ejFP3vrTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIHQQlbz k9DAE07IIB9qogfyycZsMB8GA1UdIwQYMBaAFJm+CF0caWy8IbZ4+RiOzOXbzdTK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRDM3OC82MzJGQThDRTUx RUExMUVBQjZBNUNEODZDNEY5QUUwMi9tYjRJWFJ4cGJMd2h0bmo1R0k3TTVkdk4x TW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21iNElYUnhwYkx3aHRuajVHSTdNNWR2TjFNby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RDM3OC82MzJGQThDRTUxRUExMUVBQjZBNUNEODZDNEY5QUUwMi9tYjRJWFJ4cGJM d2h0bmo1R0k3TTVkdk4xTW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCorLquUhSDBZ+XO2uOmcQAK+B4WT/EEZ2UvRDQmB0x3ot2K0v8W4x2 ge6meDQYr5TkFNAtKR2TLSU5/75M6kJjZeyx2XcsI4K0vyOwEnTkuGmcmsnm2kqd RNVKgXK2Wa12irC28x8qnA4NjTkvK4+8znrtToIFeiIPOeh9xrjkSCIcEEK0pL8Z z4j5HALBs6PL9VGHgk9ulHUZY51D30YvD5mgKNelpjCT63P5tCU3YP13Vm/8Ewdr FJdnKvuGh5ngMStyb6ETQUCqyiic6d5zvWV8YEY5pL8+3f/cqQjhWH4vQiqdbBkr PjoKyPH4DwRCD0p7MMsBOd/ULNnYwuRd -----END CERTIFICATE-----Generated at Sat May 31 16:45:51 2025 by rpki-client