$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5FCF/B84C603A1E5F11F09E6A6B4FC4F9AE02/mK6VbUJuFgLO2LtyWI9io9oSqVU.mft File: mK6VbUJuFgLO2LtyWI9io9oSqVU.mft (raw, json) Hash identifier: U30c2RIIVwpji700oqT9EWkCJl9pHAiwSeRmxlEOC6E= Subject key identifier: 2F:90:D8:31:90:9F:DE:2F:67:30:13:73:D8:B4:62:F3:A8:E9:3D:25 Authority key identifier: 98:AE:95:6D:42:6E:16:02:CE:D8:BB:72:58:8F:62:A3:DA:12:A9:55 Certificate issuer: /CN=A91A5FCF/serialNumber=98AE956D426E1602CED8BB72588F62A3DA12A955 Certificate serial: 0D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mK6VbUJuFgLO2LtyWI9io9oSqVU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5FCF/B84C603A1E5F11F09E6A6B4FC4F9AE02/mK6VbUJuFgLO2LtyWI9io9oSqVU.mft Manifest number: 0C Signing time: Sun 11 May 2025 06:49:36 +0000 Manifest this update: Sun 11 May 2025 06:49:36 +0000 Manifest next update: Sun 18 May 2025 06:49:36 +0000 Files and hashes: 1: mK6VbUJuFgLO2LtyWI9io9oSqVU.crl (hash: VEyFLA55St1N7aaDKLGOdmu4ZlBGbh9tDYPR2EV8TxI=) 2: 943B92961E6011F0B81D3A54C4F9AE02.roa (hash: OpKLsw9gUBvgDq3xLq9YboZIcPYYkBwvYdkkqKU3FB4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5FCF/B84C603A1E5F11F09E6A6B4FC4F9AE02/mK6VbUJuFgLO2LtyWI9io9oSqVU.crl rsync://rpki.apnic.net/member_repository/A91A5FCF/B84C603A1E5F11F09E6A6B4FC4F9AE02/mK6VbUJuFgLO2LtyWI9io9oSqVU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mK6VbUJuFgLO2LtyWI9io9oSqVU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 06:49:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13 (0xd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5FCF, serialNumber=98AE956D426E1602CED8BB72588F62A3DA12A955 Validity Not Before: May 11 06:49:36 2025 GMT Not After : May 18 06:49:36 2025 GMT Subject: CN=68204880-db69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:5e:13:ba:1d:e3:9f:16:d1:31:cc:20:ae:45: c8:7a:61:21:2d:e0:9c:6a:47:46:e0:ff:6a:50:1d: c4:e8:b4:73:e6:01:ac:57:a9:f3:fe:1d:36:b2:89: 8a:01:84:1f:7a:b2:9f:bf:84:14:49:f4:38:aa:0f: f0:48:4c:a6:8f:2b:75:c5:f8:34:45:dc:4a:4a:62: a1:ca:f4:56:29:a8:c8:04:45:34:91:cb:06:5d:b0: 81:3e:da:40:a1:46:ec:a5:0f:37:d7:57:eb:07:33: b6:b6:6c:ba:9e:84:f2:0f:b2:a5:f4:31:67:b4:96: 17:57:56:bb:48:86:04:9b:b8:cf:32:4c:11:76:aa: 8d:f8:c7:bd:29:b0:06:28:48:9c:44:50:c8:fd:84: 6e:26:28:00:c4:5a:a0:1b:0a:2b:04:25:99:ca:18: 1b:4e:3a:b4:ca:2a:17:d8:a1:d7:3d:e1:78:c0:51: 00:83:75:84:e3:a0:7a:c9:35:c8:c0:52:34:82:fe: aa:db:4b:a8:3a:4b:dc:b2:14:1c:ef:08:7a:dc:5f: 89:c8:98:75:f1:0b:d0:1c:5f:ce:94:58:bf:4c:fe: bb:a6:48:42:74:5b:39:c4:b9:69:a2:f2:b4:b3:f9: ee:c1:2c:1a:de:70:3c:8f:f5:2e:9f:07:c1:5c:b3: 71:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:90:D8:31:90:9F:DE:2F:67:30:13:73:D8:B4:62:F3:A8:E9:3D:25 X509v3 Authority Key Identifier: keyid:98:AE:95:6D:42:6E:16:02:CE:D8:BB:72:58:8F:62:A3:DA:12:A9:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5FCF/B84C603A1E5F11F09E6A6B4FC4F9AE02/mK6VbUJuFgLO2LtyWI9io9oSqVU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mK6VbUJuFgLO2LtyWI9io9oSqVU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5FCF/B84C603A1E5F11F09E6A6B4FC4F9AE02/mK6VbUJuFgLO2LtyWI9io9oSqVU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:c6:6b:87:58:dd:bb:a2:3b:51:55:68:52:bb:52:cd:fa:3b: 81:ad:ea:8e:8e:cd:44:69:8d:23:51:52:2f:ab:84:77:d2:de: 2d:15:00:17:5e:0e:c0:54:72:8b:93:c7:c5:09:e9:2a:b8:0f: 17:e5:e1:bb:49:82:40:4d:44:7c:69:d0:a2:be:a2:42:43:ed: cf:81:dd:96:cb:f5:a8:87:29:41:93:cc:00:64:c0:bd:0e:57: 32:6f:15:17:dc:07:dd:ae:a0:6a:11:62:1e:b1:24:be:1f:0a: 35:5a:a4:57:d0:dd:c5:8e:b1:64:78:af:ae:f6:71:25:f4:bf: 6e:6d:a8:83:a0:4a:90:16:ed:c3:85:93:05:b6:60:3f:dc:91: 65:91:b8:0d:67:f4:fa:f3:ea:00:c2:76:e0:4e:ed:01:9f:56: c3:c3:6f:e2:3d:e0:e7:d2:b4:a7:52:cd:d2:19:df:72:20:6b: e0:00:d6:69:e6:13:91:a0:32:d1:ef:d8:54:ed:86:a2:c2:60: cb:35:1c:71:57:eb:ef:fa:4f:9e:ec:fe:a0:f1:45:03:08:53: 77:7a:29:fd:89:fe:4b:8d:20:fb:61:f2:41:cc:43:0e:6a:4a: 45:a7:43:1f:ce:ab:44:e0:6c:79:61:3c:23:4d:00:71:83:ab: 60:4d:e0:9d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB NUZDRjExMC8GA1UEBRMoOThBRTk1NkQ0MjZFMTYwMkNFRDhCQjcyNTg4RjYyQTNE QTEyQTk1NTAeFw0yNTA1MTEwNjQ5MzZaFw0yNTA1MTgwNjQ5MzZaMBgxFjAUBgNV BAMTDTY4MjA0ODgwLWRiNjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCkXhO6HeOfFtExzCCuRch6YSEt4JxqR0bg/2pQHcTotHPmAaxXqfP+HTayiYoB hB96sp+/hBRJ9DiqD/BITKaPK3XF+DRF3EpKYqHK9FYpqMgERTSRywZdsIE+2kCh RuylDzfXV+sHM7a2bLqehPIPsqX0MWe0lhdXVrtIhgSbuM8yTBF2qo34x70psAYo SJxEUMj9hG4mKADEWqAbCisEJZnKGBtOOrTKKhfYodc94XjAUQCDdYTjoHrJNcjA UjSC/qrbS6g6S9yyFBzvCHrcX4nImHXxC9AcX86UWL9M/rumSEJ0WznEuWmi8rSz +e7BLBrecDyP9S6fB8Fcs3EPAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUL5DYMZCf 3i9nMBNz2LRi86jpPSUwHwYDVR0jBBgwFoAUmK6VbUJuFgLO2LtyWI9io9oSqVUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE1RkNGL0I4NEM2MDNBMUU1 RjExRjA5RTZBNkI0RkM0RjlBRTAyL21LNlZiVUp1RmdMTzJMdHlXSTlpbzlvU3FW VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbUs2VmJVSnVGZ0xPMkx0eVdJOWlvOW9TcVZVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE1 RkNGL0I4NEM2MDNBMUU1RjExRjA5RTZBNkI0RkM0RjlBRTAyL21LNlZiVUp1RmdM TzJMdHlXSTlpbzlvU3FWVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHHGa4dY3buiO1FVaFK7Us36O4Gt6o6OzURpjSNRUi+rhHfS3i0VABde DsBUcouTx8UJ6Sq4Dxfl4btJgkBNRHxp0KK+okJD7c+B3ZbL9aiHKUGTzABkwL0O VzJvFRfcB92uoGoRYh6xJL4fCjVapFfQ3cWOsWR4r672cSX0v25tqIOgSpAW7cOF kwW2YD/ckWWRuA1n9Prz6gDCduBO7QGfVsPDb+I94OfStKdSzdIZ33Iga+AA1mnm E5GgMtHv2FTthqLCYMs1HHFX6+/6T57s/qDxRQMIU3d6Kf2J/kuNIPth8kHMQw5q SkWnQx/Oq0TgbHlhPCNNAHGDq2BN4J0= -----END CERTIFICATE-----Generated at Mon May 12 18:21:09 2025 by rpki-client