$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0FCC/F5C42408A41F11EABDC2F531C4F9AE02/-SrbMNtsD5zpgLXbl3FF-MGcgks.mft File: -SrbMNtsD5zpgLXbl3FF-MGcgks.mft (raw, json) Hash identifier: hbWAQhcSWZpTtPKyUs5LF01fgZmVZrZhiCPoCy3X1Bo= Subject key identifier: D2:F6:7E:DC:8F:89:BE:6B:E4:9E:75:BE:39:4E:9D:52:97:F7:C7:20 Authority key identifier: F9:2A:DB:30:DB:6C:0F:9C:E9:80:B5:DB:97:71:45:F8:C1:9C:82:4B Certificate issuer: /CN=A91C0FCC/serialNumber=F92ADB30DB6C0F9CE980B5DB977145F8C19C824B Certificate serial: 0913 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-SrbMNtsD5zpgLXbl3FF-MGcgks.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C0FCC/F5C42408A41F11EABDC2F531C4F9AE02/-SrbMNtsD5zpgLXbl3FF-MGcgks.mft Manifest number: 090D Signing time: Mon 12 May 2025 20:09:23 +0000 Manifest this update: Mon 12 May 2025 20:09:23 +0000 Manifest next update: Mon 19 May 2025 20:09:23 +0000 Files and hashes: 1: -SrbMNtsD5zpgLXbl3FF-MGcgks.crl (hash: hSu52WOqdKsojEGqHMSyLDaZKB0VH2tIxcaIsycuXrU=) 2: A778AAF6A42111EAB3108934C4F9AE02.roa (hash: y624BzVkuEiikHslOtq6hgxDkVhcX1eWu3QlNuMQNRA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C0FCC/F5C42408A41F11EABDC2F531C4F9AE02/-SrbMNtsD5zpgLXbl3FF-MGcgks.crl rsync://rpki.apnic.net/member_repository/A91C0FCC/F5C42408A41F11EABDC2F531C4F9AE02/-SrbMNtsD5zpgLXbl3FF-MGcgks.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-SrbMNtsD5zpgLXbl3FF-MGcgks.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 20:09:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2323 (0x913) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C0FCC, serialNumber=F92ADB30DB6C0F9CE980B5DB977145F8C19C824B Validity Not Before: May 12 20:09:23 2025 GMT Not After : May 19 20:09:23 2025 GMT Subject: CN=68225573-0cb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:0f:24:a5:7b:90:ec:cc:d1:0a:bb:60:c8:92: f5:a4:38:e3:b5:6a:75:59:bd:1c:78:ad:55:da:ba: c1:82:5a:ed:56:2a:14:ff:fb:96:4c:09:e5:2f:94: 88:f6:07:bb:46:94:7a:9a:a9:e5:f1:9b:4e:57:d5: d5:f2:01:5a:77:e4:f8:4d:a3:71:42:87:b6:07:5b: d6:dc:1a:7a:16:4c:16:40:ec:2d:21:da:31:41:53: e8:c0:c1:7a:af:10:6b:66:f0:5b:85:71:2a:71:70: 5f:57:6c:26:ab:a7:bc:cb:7a:4c:a4:a4:61:9a:a6: 9f:d4:c2:dc:1d:2f:15:c6:df:d9:ca:47:20:fb:03: 2e:69:36:42:8f:4c:f9:75:1f:8d:c4:03:49:67:4b: 8b:40:8b:d1:5a:ee:cd:db:33:60:bd:9d:5a:26:4a: ad:ab:fe:3a:2a:3a:cd:78:54:f8:72:cc:a4:08:61: 83:63:26:7b:50:1e:b4:ee:17:b0:9b:52:c8:eb:4d: b2:c4:bc:cc:6f:88:59:4a:48:9a:50:5b:e7:23:3c: a9:a0:46:38:1c:11:38:31:16:11:9f:ee:76:e4:f9: 8e:af:48:7b:5f:cc:d1:1b:a2:15:a2:b0:be:1d:37: d5:0a:2a:f3:22:1c:a2:d9:ee:ac:d0:c6:c0:31:b1: 5e:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:F6:7E:DC:8F:89:BE:6B:E4:9E:75:BE:39:4E:9D:52:97:F7:C7:20 X509v3 Authority Key Identifier: keyid:F9:2A:DB:30:DB:6C:0F:9C:E9:80:B5:DB:97:71:45:F8:C1:9C:82:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C0FCC/F5C42408A41F11EABDC2F531C4F9AE02/-SrbMNtsD5zpgLXbl3FF-MGcgks.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-SrbMNtsD5zpgLXbl3FF-MGcgks.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0FCC/F5C42408A41F11EABDC2F531C4F9AE02/-SrbMNtsD5zpgLXbl3FF-MGcgks.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:1d:94:b1:3a:e4:3a:41:9b:27:58:56:d1:56:54:9c:16:ba: 58:2f:35:5f:0f:20:fb:28:6e:03:27:2d:69:1c:11:35:86:65: de:a3:fb:d4:c9:8c:21:76:69:c7:8b:21:4b:e9:d8:33:c1:27: aa:9d:75:7e:04:05:3a:cf:d7:34:68:74:b0:0d:c5:25:91:28: fc:9f:b5:15:ec:53:e9:9b:b9:4e:7a:62:0c:a2:bd:ed:8a:3c: 6a:a5:57:16:77:c2:96:3c:38:60:b8:76:bf:94:35:2b:63:d2: 20:f0:5a:62:65:0c:37:d2:7e:4f:c8:cf:30:88:61:19:9e:7d: 46:bb:61:f9:da:63:af:b4:71:5d:37:7e:2a:ac:7d:b0:8e:d1: f5:d8:93:84:e8:3b:76:0a:8f:7f:11:11:97:a7:15:f7:83:2c: ef:a5:dd:ae:49:92:6a:33:0d:22:b4:ab:a1:b9:a4:44:ff:d0: 46:1a:f7:0e:d0:a0:58:32:82:e1:a1:23:40:7e:c6:e8:4e:a4: cc:8a:e8:3e:07:a1:51:96:5d:00:0f:47:7b:39:d7:db:39:43: a2:df:8f:16:5f:2b:ab:7d:2f:a0:5b:6d:36:e5:fc:06:9d:c6: 18:eb:a2:81:5d:e8:ba:13:54:a0:62:f5:0b:1c:53:f7:56:ad: b3:57:86:72 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCRMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzBGQ0MxMTAvBgNVBAUTKEY5MkFEQjMwREI2QzBGOUNFOTgwQjVEQjk3NzE0NUY4 QzE5QzgyNEIwHhcNMjUwNTEyMjAwOTIzWhcNMjUwNTE5MjAwOTIzWjAYMRYwFAYD VQQDEw02ODIyNTU3My0wY2I2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyw8kpXuQ7MzRCrtgyJL1pDjjtWp1Wb0ceK1V2rrBglrtVioU//uWTAnlL5SI 9ge7RpR6mqnl8ZtOV9XV8gFad+T4TaNxQoe2B1vW3Bp6FkwWQOwtIdoxQVPowMF6 rxBrZvBbhXEqcXBfV2wmq6e8y3pMpKRhmqaf1MLcHS8Vxt/Zykcg+wMuaTZCj0z5 dR+NxANJZ0uLQIvRWu7N2zNgvZ1aJkqtq/46KjrNeFT4csykCGGDYyZ7UB607hew m1LI602yxLzMb4hZSkiaUFvnIzypoEY4HBE4MRYRn+525PmOr0h7X8zRG6IVorC+ HTfVCirzIhyi2e6s0MbAMbFe5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNL2ftyP ib5r5J51vjlOnVKX98cgMB8GA1UdIwQYMBaAFPkq2zDbbA+c6YC125dxRfjBnIJL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMEZDQy9GNUM0MjQwOEE0 MUYxMUVBQkRDMkY1MzFDNEY5QUUwMi8tU3JiTU50c0Q1enBnTFhibDNGRi1NR2Nn a3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1TcmJNTnRzRDV6cGdMWGJsM0ZGLU1HY2drcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MEZDQy9GNUM0MjQwOEE0MUYxMUVBQkRDMkY1MzFDNEY5QUUwMi8tU3JiTU50c0Q1 enBnTFhibDNGRi1NR2Nna3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCHHZSxOuQ6QZsnWFbRVlScFrpYLzVfDyD7KG4DJy1pHBE1hmXeo/vU yYwhdmnHiyFL6dgzwSeqnXV+BAU6z9c0aHSwDcUlkSj8n7UV7FPpm7lOemIMor3t ijxqpVcWd8KWPDhguHa/lDUrY9Ig8FpiZQw30n5PyM8wiGEZnn1Gu2H52mOvtHFd N34qrH2wjtH12JOE6Dt2Co9/ERGXpxX3gyzvpd2uSZJqMw0itKuhuaRE/9BGGvcO 0KBYMoLhoSNAfsboTqTMiug+B6FRll0AD0d7OdfbOUOi348WXyurfS+gW2025fwG ncYY66KBXei6E1SgYvULHFP3Vq2zV4Zy -----END CERTIFICATE-----Generated at Tue May 13 11:15:58 2025 by rpki-client