$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDDED/79CC01669DF211ED95949F57C4F9AE02/90n3b5KhbSqHFDf3LIbQ0F3imtU.mft File: 90n3b5KhbSqHFDf3LIbQ0F3imtU.mft (raw, json) Hash identifier: 5M8OSFQGU7jL8L0LRACjvllDpKyj26CLPymsLg3AbjQ= Subject key identifier: 71:78:B4:F6:83:A8:AB:93:AF:5A:38:A4:67:E5:C4:C5:5D:AE:57:DF Authority key identifier: F7:49:F7:6F:92:A1:6D:2A:87:14:37:F7:2C:86:D0:D0:5D:E2:9A:D5 Certificate issuer: /CN=A91DDDED/serialNumber=F749F76F92A16D2A871437F72C86D0D05DE29AD5 Certificate serial: 01AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/90n3b5KhbSqHFDf3LIbQ0F3imtU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DDDED/79CC01669DF211ED95949F57C4F9AE02/90n3b5KhbSqHFDf3LIbQ0F3imtU.mft Manifest number: 01AC Signing time: Sun 11 May 2025 02:11:38 +0000 Manifest this update: Sun 11 May 2025 02:11:38 +0000 Manifest next update: Sun 18 May 2025 02:11:38 +0000 Files and hashes: 1: 90n3b5KhbSqHFDf3LIbQ0F3imtU.crl (hash: 3Td7dwKBfcs5YFJFEPZ90AKuD8JrS0KneYWimnEXYY4=) 2: 69B6C14A9DF611ED8D51D272C4F9AE02.roa (hash: 54OZtiC3lpeukDDzmCUDt697LQ+SuKtxGSa0nhIWHEA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DDDED/79CC01669DF211ED95949F57C4F9AE02/90n3b5KhbSqHFDf3LIbQ0F3imtU.crl rsync://rpki.apnic.net/member_repository/A91DDDED/79CC01669DF211ED95949F57C4F9AE02/90n3b5KhbSqHFDf3LIbQ0F3imtU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/90n3b5KhbSqHFDf3LIbQ0F3imtU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 02:11:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 431 (0x1af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DDDED, serialNumber=F749F76F92A16D2A871437F72C86D0D05DE29AD5 Validity Not Before: May 11 02:11:38 2025 GMT Not After : May 18 02:11:38 2025 GMT Subject: CN=6820075a-2502 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:07:ea:34:1f:7c:2b:91:5a:65:ee:8d:e2:e1: 92:8c:b3:94:cd:a7:ac:13:2b:bb:e5:dc:42:bd:c2: cc:02:02:31:60:19:55:1d:5b:f3:96:85:bd:a9:e5: 32:3e:0f:6a:25:1f:f8:a6:bf:51:7c:7c:f5:91:7b: b3:d7:2d:c9:08:71:f9:9b:c8:ee:8b:01:f7:fc:6f: 71:26:5e:d7:5c:7c:78:4c:f8:49:61:dc:38:fa:56: 1c:88:5b:67:84:f7:46:5a:96:8f:c6:5d:db:f5:ce: f7:90:09:1b:c8:18:77:16:6a:7b:2e:82:88:5b:6d: 33:ea:72:d3:b2:b4:86:be:46:a3:89:0f:cd:12:4e: 97:50:e4:51:cf:de:07:32:6e:24:30:fd:94:fe:e6: 70:8a:91:88:32:2d:ae:5f:06:ab:77:c5:60:a0:96: aa:2e:2c:db:ee:70:6b:f8:6b:31:ac:18:e5:40:69: 35:2c:4e:d1:77:94:06:e6:db:08:08:84:d7:e7:52: 7b:76:99:71:90:51:ed:4a:48:d1:96:93:cc:61:5f: 58:8f:5a:cd:e5:19:35:8e:0b:a9:23:a9:a1:bd:c8: 93:c9:1e:c1:68:2d:1a:a1:ca:08:38:96:d2:9a:76: 4e:3a:69:88:d9:a4:04:74:31:31:57:1c:1b:f5:a8: bd:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:78:B4:F6:83:A8:AB:93:AF:5A:38:A4:67:E5:C4:C5:5D:AE:57:DF X509v3 Authority Key Identifier: keyid:F7:49:F7:6F:92:A1:6D:2A:87:14:37:F7:2C:86:D0:D0:5D:E2:9A:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DDDED/79CC01669DF211ED95949F57C4F9AE02/90n3b5KhbSqHFDf3LIbQ0F3imtU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/90n3b5KhbSqHFDf3LIbQ0F3imtU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDDED/79CC01669DF211ED95949F57C4F9AE02/90n3b5KhbSqHFDf3LIbQ0F3imtU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:1f:e0:8c:a9:c9:bd:ba:82:13:8a:49:fd:3a:f5:33:6e:97: 30:46:75:78:79:d3:aa:e7:c8:07:77:25:cc:a8:de:88:6f:51: 9d:1b:0f:93:6d:2f:0f:d0:a1:a8:81:d7:f1:31:10:b6:21:b8: ae:7e:2b:1f:d2:a8:1f:21:76:07:9e:e2:c3:ed:00:28:2e:c2: ea:14:81:85:91:b5:dd:38:9e:3c:3e:97:09:0a:4b:57:c7:37: 32:13:4e:f8:52:01:68:ac:13:cd:0e:4f:23:a1:c0:c5:37:26: 39:ce:df:b5:03:9f:ab:a7:d7:cd:46:6f:db:96:86:d5:29:78: 48:a8:c3:5f:4e:4d:87:63:b1:91:88:d6:4c:0b:f6:6f:eb:2d: af:fc:26:f6:86:72:e6:72:75:1a:16:77:6b:90:f6:3d:22:08: ff:52:2c:3c:2e:1d:c1:52:b3:be:40:91:36:cb:a1:17:45:b8: 2f:2d:2a:a1:7f:d6:c8:7a:5d:48:7d:bd:5d:81:cb:e0:b0:12: ef:e3:36:cf:5b:06:f9:19:f2:a1:a0:58:d2:ec:16:30:15:e9: 24:aa:94:3d:87:a2:0f:4a:3d:f4:61:ab:94:a3:e8:91:99:23: de:3c:89:e7:9f:ee:7d:cd:78:1f:52:2f:a4:58:2a:b9:36:7f: fd:a5:c6:f6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAa8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RERERUQxMTAvBgNVBAUTKEY3NDlGNzZGOTJBMTZEMkE4NzE0MzdGNzJDODZEMEQw NURFMjlBRDUwHhcNMjUwNTExMDIxMTM4WhcNMjUwNTE4MDIxMTM4WjAYMRYwFAYD VQQDEw02ODIwMDc1YS0yNTAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0gfqNB98K5FaZe6N4uGSjLOUzaesEyu75dxCvcLMAgIxYBlVHVvzloW9qeUy Pg9qJR/4pr9RfHz1kXuz1y3JCHH5m8juiwH3/G9xJl7XXHx4TPhJYdw4+lYciFtn hPdGWpaPxl3b9c73kAkbyBh3Fmp7LoKIW20z6nLTsrSGvkajiQ/NEk6XUORRz94H Mm4kMP2U/uZwipGIMi2uXward8VgoJaqLizb7nBr+GsxrBjlQGk1LE7Rd5QG5tsI CITX51J7dplxkFHtSkjRlpPMYV9Yj1rN5Rk1jgupI6mhvciTyR7BaC0aocoIOJbS mnZOOmmI2aQEdDExVxwb9ai93wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHF4tPaD qKuTr1o4pGflxMVdrlffMB8GA1UdIwQYMBaAFPdJ92+SoW0qhxQ39yyG0NBd4prV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERERFRC83OUNDMDE2NjlE RjIxMUVEOTU5NDlGNTdDNEY5QUUwMi85MG4zYjVLaGJTcUhGRGYzTEliUTBGM2lt dFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzkwbjNiNUtoYlNxSEZEZjNMSWJRMEYzaW10VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RERFRC83OUNDMDE2NjlERjIxMUVEOTU5NDlGNTdDNEY5QUUwMi85MG4zYjVLaGJT cUhGRGYzTEliUTBGM2ltdFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBWH+CMqcm9uoITikn9OvUzbpcwRnV4edOq58gHdyXMqN6Ib1GdGw+T bS8P0KGogdfxMRC2Ibiufisf0qgfIXYHnuLD7QAoLsLqFIGFkbXdOJ48PpcJCktX xzcyE074UgForBPNDk8jocDFNyY5zt+1A5+rp9fNRm/blobVKXhIqMNfTk2HY7GR iNZMC/Zv6y2v/Cb2hnLmcnUaFndrkPY9Igj/Uiw8Lh3BUrO+QJE2y6EXRbgvLSqh f9bIel1Ifb1dgcvgsBLv4zbPWwb5GfKhoFjS7BYwFekkqpQ9h6IPSj30YauUo+iR mSPePInnn+59zXgfUi+kWCq5Nn/9pcb2 -----END CERTIFICATE-----Generated at Sun May 11 12:30:04 2025 by rpki-client