$ rpki-client -vvf rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/cB88FPCtfu9l000APNwZJGSM3jc.mft File: cB88FPCtfu9l000APNwZJGSM3jc.mft (raw, json) Hash identifier: x/k0ztr6QU9T/miBnN/op94aK9drwfRn5YyaaemJ7Ns= Subject key identifier: AB:1C:5E:68:F9:2C:28:0D:94:2A:80:0D:E6:5C:EC:92:9F:64:E7:23 Authority key identifier: 70:1F:3C:14:F0:AD:7E:EF:65:D3:4D:00:3C:DC:19:24:64:8C:DE:37 Certificate issuer: /CN=A91C63A6/serialNumber=701F3C14F0AD7EEF65D34D003CDC1924648CDE37 Certificate serial: 03BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cB88FPCtfu9l000APNwZJGSM3jc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/cB88FPCtfu9l000APNwZJGSM3jc.mft Manifest number: 039F Signing time: Sun 11 May 2025 00:21:28 +0000 Manifest this update: Sun 11 May 2025 00:21:27 +0000 Manifest next update: Sun 18 May 2025 00:21:27 +0000 Files and hashes: 1: cB88FPCtfu9l000APNwZJGSM3jc.crl (hash: Xj2Hbd42zmKsgMG3NpQMik0PQSaPmcrcAUwv7CZQFoc=) 2: 7E16D3240B5011EE9A518C7BC4F9AE02.roa (hash: U0JaFB8CVVgKbLBmTTRMW+oeZZCXLA9kdsldXtwigwA=) 3: CDDEC562011711EEB15FDD2AC4F9AE02.roa (hash: PgsogDDZQkDovTqfqAZnCJjtewKfx64pNU23F3h3LOI=) 4: 2BF1D5F07E3511EE8CB63458C4F9AE02.roa (hash: xABbFnxjesSqqxHb5Z3LU/MaNyiAYDrCsWPlJjK46gQ=) 5: DF49B4400B4B11EEBAD3047AC4F9AE02.roa (hash: 5EplJ/qwJeqGMd35PNuR9x2zdZw/zJYIhHM0ma+2rK4=) 6: 513415BC400011EE88B66B4FC4F9AE02.roa (hash: La9bIBXUn7Pcc0HHfxEl2RzNwtBMPkoEmLR0KZnlaWs=) 7: 86550F680B4311EE8ABEE820C4F9AE02.roa (hash: yWfAEaYcbh5fjpOL87NsV9hi8Cg9epFjV+c+Su0AUew=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/cB88FPCtfu9l000APNwZJGSM3jc.crl rsync://rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/cB88FPCtfu9l000APNwZJGSM3jc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cB88FPCtfu9l000APNwZJGSM3jc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 00:21:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 954 (0x3ba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C63A6, serialNumber=701F3C14F0AD7EEF65D34D003CDC1924648CDE37 Validity Not Before: May 11 00:21:27 2025 GMT Not After : May 18 00:21:27 2025 GMT Subject: CN=681fed87-d7f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:8f:6c:a2:11:29:d1:02:8b:04:d9:93:90:97: d3:d9:6b:b7:b7:62:9e:2a:49:b5:2a:16:4e:8b:d1: 28:18:99:1a:39:11:5b:a5:a0:61:49:11:4b:0a:36: e1:f6:71:53:9d:00:e5:09:50:be:08:5e:09:ef:5e: 3d:0f:ff:c2:5c:13:3a:e5:fc:d4:13:c4:2d:fc:77: 5a:5e:67:ca:67:be:d3:61:25:c7:26:25:45:00:ce: f5:9a:ac:9f:70:fb:18:ee:8d:43:05:80:32:e0:06: ee:12:dc:25:ca:9e:af:0c:f4:4b:ea:a9:96:64:96: dd:f1:04:5c:b8:61:71:b7:57:6e:60:63:c2:51:b4: d5:f0:9c:c0:7f:bd:db:2b:41:3a:d5:68:10:d9:e8: 5c:65:8f:4a:f2:fd:d0:12:21:ea:72:1a:5d:bc:52: 41:97:11:ac:90:b1:8b:3a:0b:dd:02:67:a5:8c:fc: a2:45:88:ff:18:fc:fb:9c:ce:6a:87:98:ee:1a:4c: 47:4a:65:d8:2a:b8:fc:bb:f4:31:65:ff:4c:96:39: 83:52:a0:c0:73:a9:7a:03:13:2a:aa:0c:3b:5b:90: 08:74:32:c2:61:d2:86:8f:b5:c0:d4:4c:5c:14:db: 49:05:7d:6a:6e:24:a3:5b:06:72:08:ba:44:91:28: c2:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:1C:5E:68:F9:2C:28:0D:94:2A:80:0D:E6:5C:EC:92:9F:64:E7:23 X509v3 Authority Key Identifier: keyid:70:1F:3C:14:F0:AD:7E:EF:65:D3:4D:00:3C:DC:19:24:64:8C:DE:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/cB88FPCtfu9l000APNwZJGSM3jc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cB88FPCtfu9l000APNwZJGSM3jc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/cB88FPCtfu9l000APNwZJGSM3jc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:e3:09:0c:9a:e5:0e:dd:c9:cc:a2:f8:e6:1d:63:a2:0f:3b: a6:13:ed:fb:63:de:90:c2:e3:e9:ea:12:87:48:dc:0d:26:0f: f9:ff:2c:92:82:f5:70:d9:2b:68:b3:7d:c5:2a:14:7e:d5:ab: b3:70:fc:04:8b:81:9a:99:a2:90:97:c6:18:37:50:23:aa:dd: e6:3e:52:ad:1d:7e:e8:4c:31:51:23:80:c6:53:89:d5:7c:69: 18:ca:b1:d3:25:90:aa:b3:f5:1a:d2:ea:56:4c:f0:45:e9:92: 7b:45:db:f4:68:74:98:f6:76:39:6a:62:f8:4f:11:aa:06:f3: 88:d6:11:ec:3f:e2:6b:6f:25:5b:d6:e4:6a:cc:60:03:33:91: e5:7b:c1:4e:49:e2:96:1f:a2:57:05:42:24:d9:b8:75:2e:09: b6:09:d1:19:fc:60:c1:aa:c2:9f:b3:b5:7c:95:87:83:a1:ac: a8:9d:00:a0:23:bd:4a:2f:39:6d:59:3a:a2:67:69:b3:a7:39: fe:3d:d8:c4:f2:29:15:ed:fd:5e:b7:59:15:23:cc:d5:57:ec: 76:e5:60:93:c8:fe:a3:35:5b:bc:21:37:80:c0:f4:ea:4b:73: 78:eb:a6:95:8a:b6:e8:9c:37:e3:16:33:0d:45:54:df:a5:80: 5b:31:7c:6a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA7owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzYzQTYxMTAvBgNVBAUTKDcwMUYzQzE0RjBBRDdFRUY2NUQzNEQwMDNDREMxOTI0 NjQ4Q0RFMzcwHhcNMjUwNTExMDAyMTI3WhcNMjUwNTE4MDAyMTI3WjAYMRYwFAYD VQQDEw02ODFmZWQ4Ny1kN2YyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAso9sohEp0QKLBNmTkJfT2Wu3t2KeKkm1KhZOi9EoGJkaORFbpaBhSRFLCjbh 9nFTnQDlCVC+CF4J7149D//CXBM65fzUE8Qt/HdaXmfKZ77TYSXHJiVFAM71mqyf cPsY7o1DBYAy4AbuEtwlyp6vDPRL6qmWZJbd8QRcuGFxt1duYGPCUbTV8JzAf73b K0E61WgQ2ehcZY9K8v3QEiHqchpdvFJBlxGskLGLOgvdAmeljPyiRYj/GPz7nM5q h5juGkxHSmXYKrj8u/QxZf9MljmDUqDAc6l6AxMqqgw7W5AIdDLCYdKGj7XA1Exc FNtJBX1qbiSjWwZyCLpEkSjCSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKscXmj5 LCgNlCqADeZc7JKfZOcjMB8GA1UdIwQYMBaAFHAfPBTwrX7vZdNNADzcGSRkjN43 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjNBNi8wRDM5QzRFNDlB OUIxMUVDODJDNzBCMjBDNEY5QUUwMi9jQjg4RlBDdGZ1OWwwMDBBUE53WkpHU00z amMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NCODhGUEN0ZnU5bDAwMEFQTndaSkdTTTNqYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NjNBNi8wRDM5QzRFNDlBOUIxMUVDODJDNzBCMjBDNEY5QUUwMi9jQjg4RlBDdGZ1 OWwwMDBBUE53WkpHU00zamMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCa4wkMmuUO3cnMovjmHWOiDzumE+37Y96QwuPp6hKHSNwNJg/5/yyS gvVw2Stos33FKhR+1auzcPwEi4GamaKQl8YYN1Ajqt3mPlKtHX7oTDFRI4DGU4nV fGkYyrHTJZCqs/Ua0upWTPBF6ZJ7Rdv0aHSY9nY5amL4TxGqBvOI1hHsP+JrbyVb 1uRqzGADM5Hle8FOSeKWH6JXBUIk2bh1Lgm2CdEZ/GDBqsKfs7V8lYeDoayonQCg I71KLzltWTqiZ2mzpzn+PdjE8ikV7f1et1kVI8zVV+x25WCTyP6jNVu8ITeAwPTq S3N466aVirbonDfjFjMNRVTfpYBbMXxq -----END CERTIFICATE-----Generated at Sun May 11 19:57:23 2025 by rpki-client