$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1F4F/0FDB974C74D711E8BC82D42CC4F9AE02/MB6kG5ONf0s895PQEveN06U5cCQ.mft File: MB6kG5ONf0s895PQEveN06U5cCQ.mft (raw, json) Hash identifier: ifRlzrcM2ukIGS4TRtkC1zOWWL+HLeZK+rbhLLTz3co= Subject key identifier: 00:C9:00:17:B8:4D:30:23:15:A2:6E:C6:12:03:2D:F3:2E:77:F2:79 Authority key identifier: 30:1E:A4:1B:93:8D:7F:4B:3C:F7:93:D0:12:F7:8D:D3:A5:39:70:24 Certificate issuer: /CN=A91B1F4F/serialNumber=301EA41B938D7F4B3CF793D012F78DD3A5397024 Certificate serial: 143C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MB6kG5ONf0s895PQEveN06U5cCQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B1F4F/0FDB974C74D711E8BC82D42CC4F9AE02/MB6kG5ONf0s895PQEveN06U5cCQ.mft Manifest number: 1432 Signing time: Mon 12 May 2025 16:51:07 +0000 Manifest this update: Mon 12 May 2025 16:51:07 +0000 Manifest next update: Mon 19 May 2025 16:51:07 +0000 Files and hashes: 1: MB6kG5ONf0s895PQEveN06U5cCQ.crl (hash: QqEB570RUmAOPxXG8BuwakJIDxUv/ImB+D9VX+7vayo=) 2: 61574192E37A11EB8AF29A5BC4F9AE02.roa (hash: W5cx07cNyMaDMA4R0/MWrV4hAi09Yk83hfS7ozdwiBc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B1F4F/0FDB974C74D711E8BC82D42CC4F9AE02/MB6kG5ONf0s895PQEveN06U5cCQ.crl rsync://rpki.apnic.net/member_repository/A91B1F4F/0FDB974C74D711E8BC82D42CC4F9AE02/MB6kG5ONf0s895PQEveN06U5cCQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MB6kG5ONf0s895PQEveN06U5cCQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 16:51:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5180 (0x143c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B1F4F, serialNumber=301EA41B938D7F4B3CF793D012F78DD3A5397024 Validity Not Before: May 12 16:51:07 2025 GMT Not After : May 19 16:51:07 2025 GMT Subject: CN=682226fb-64f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:24:cb:67:42:29:ed:7f:f4:3c:63:ec:86:46: 0a:33:c6:c9:ba:cc:27:d7:71:0d:d2:6b:d4:aa:03: c5:51:a3:37:29:43:20:8c:bb:4d:07:06:76:ff:40: c8:d3:7e:ef:da:2f:41:ca:16:e8:92:18:4f:87:2c: 20:c5:f3:4b:f9:1a:ee:47:56:ad:80:a4:01:40:63: 67:6a:ae:e7:81:e0:65:8e:5d:e5:b3:16:c1:55:b5: d6:da:24:c3:b1:49:28:e5:fe:96:7a:ee:c8:a3:72: d9:4a:95:54:90:ca:02:36:f3:88:af:36:89:46:ca: 82:f3:47:49:4a:51:a4:7b:bf:51:00:37:a2:1f:a9: 55:9f:45:5d:5d:a4:18:dd:f5:ea:38:3e:e3:79:8c: 9f:11:4d:22:20:a5:40:df:93:95:31:0d:89:47:44: 79:33:7f:c9:03:ab:c8:ad:e4:9f:6b:dc:42:ba:42: 3b:f6:e4:16:f3:79:7d:d6:86:23:98:37:de:7e:5d: 0d:66:96:78:3a:17:ce:fc:b0:98:e1:d4:04:b1:da: 55:9c:a8:de:7d:db:68:65:b3:06:db:f9:90:a6:61: 18:50:3e:9d:d2:76:89:32:fa:19:90:92:9a:3e:b5: 35:dd:e5:c4:1a:d8:a6:6d:71:24:c8:d1:bc:ef:93: 68:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:C9:00:17:B8:4D:30:23:15:A2:6E:C6:12:03:2D:F3:2E:77:F2:79 X509v3 Authority Key Identifier: keyid:30:1E:A4:1B:93:8D:7F:4B:3C:F7:93:D0:12:F7:8D:D3:A5:39:70:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B1F4F/0FDB974C74D711E8BC82D42CC4F9AE02/MB6kG5ONf0s895PQEveN06U5cCQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MB6kG5ONf0s895PQEveN06U5cCQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1F4F/0FDB974C74D711E8BC82D42CC4F9AE02/MB6kG5ONf0s895PQEveN06U5cCQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:9e:5c:f5:ba:2c:4e:34:59:5a:e6:33:29:d6:52:3b:1e:58: 3a:44:71:a7:42:8b:51:68:ea:c0:f2:9f:5f:1d:8d:d4:80:78: 50:be:1d:bc:10:a5:f5:c3:ca:e7:c1:e9:37:29:95:9d:20:2e: 2b:e2:eb:b2:8e:3d:de:b5:4b:69:87:60:a5:27:a4:f3:a0:e7: 61:e7:6f:34:dd:e4:dd:9c:64:62:10:78:00:fc:09:bc:8f:e7: 22:bf:8d:05:6a:8c:22:eb:ca:75:ab:09:b5:78:48:be:70:01: 02:b5:09:5c:da:77:bb:f4:41:e0:04:72:d6:87:6a:a7:e9:25: b1:c9:ce:5e:81:06:d1:a4:37:76:15:58:9d:db:6f:58:f0:6b: cc:99:83:49:ac:67:68:31:12:3a:1b:cc:6f:af:82:62:5b:e5: 1c:09:0f:90:09:17:84:9c:b2:8b:37:fd:12:5a:b6:ba:3f:01: 1e:45:f9:5b:9d:f4:dc:0c:9f:ca:c7:bd:de:63:34:85:ce:78: 3f:9a:bd:29:99:ee:c4:4a:eb:1f:0d:e0:39:ac:ff:a6:31:8e: 64:bf:7c:25:2b:75:a7:4d:1d:51:4c:5d:52:db:31:db:60:36: 3d:62:a1:6c:70:f3:3f:cc:a7:ce:d6:f6:d7:74:cf:b7:8a:9b: 1b:50:7f:5d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFDwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjFGNEYxMTAvBgNVBAUTKDMwMUVBNDFCOTM4RDdGNEIzQ0Y3OTNEMDEyRjc4REQz QTUzOTcwMjQwHhcNMjUwNTEyMTY1MTA3WhcNMjUwNTE5MTY1MTA3WjAYMRYwFAYD VQQDEw02ODIyMjZmYi02NGY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtyTLZ0Ip7X/0PGPshkYKM8bJuswn13EN0mvUqgPFUaM3KUMgjLtNBwZ2/0DI 037v2i9ByhbokhhPhywgxfNL+RruR1atgKQBQGNnaq7ngeBljl3lsxbBVbXW2iTD sUko5f6Weu7Io3LZSpVUkMoCNvOIrzaJRsqC80dJSlGke79RADeiH6lVn0VdXaQY 3fXqOD7jeYyfEU0iIKVA35OVMQ2JR0R5M3/JA6vIreSfa9xCukI79uQW83l91oYj mDfefl0NZpZ4OhfO/LCY4dQEsdpVnKjefdtoZbMG2/mQpmEYUD6d0naJMvoZkJKa PrU13eXEGtimbXEkyNG875NoSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFADJABe4 TTAjFaJuxhIDLfMud/J5MB8GA1UdIwQYMBaAFDAepBuTjX9LPPeT0BL3jdOlOXAk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMUY0Ri8wRkRCOTc0Qzc0 RDcxMUU4QkM4MkQ0MkNDNEY5QUUwMi9NQjZrRzVPTmYwczg5NVBRRXZlTjA2VTVj Q1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01CNmtHNU9OZjBzODk1UFFFdmVOMDZVNWNDUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MUY0Ri8wRkRCOTc0Qzc0RDcxMUU4QkM4MkQ0MkNDNEY5QUUwMi9NQjZrRzVPTmYw czg5NVBRRXZlTjA2VTVjQ1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCSnlz1uixONFla5jMp1lI7Hlg6RHGnQotRaOrA8p9fHY3UgHhQvh28 EKX1w8rnwek3KZWdIC4r4uuyjj3etUtph2ClJ6TzoOdh52803eTdnGRiEHgA/Am8 j+civ40Faowi68p1qwm1eEi+cAECtQlc2ne79EHgBHLWh2qn6SWxyc5egQbRpDd2 FVid229Y8GvMmYNJrGdoMRI6G8xvr4JiW+UcCQ+QCReEnLKLN/0SWra6PwEeRflb nfTcDJ/Kx73eYzSFzng/mr0pme7ESusfDeA5rP+mMY5kv3wlK3WnTR1RTF1S2zHb YDY9YqFscPM/zKfO1vbXdM+3ipsbUH9d -----END CERTIFICATE-----Generated at Tue May 13 19:40:00 2025 by rpki-client