$ rpki-client -vvf rpki.apnic.net/member_repository/A91F59A6/40848C3EE5E511E99F1F7C13C4F9AE02/MMRROGeLe9mvTFyk6xpdPiBhxcE.mft File: MMRROGeLe9mvTFyk6xpdPiBhxcE.mft (raw, json) Hash identifier: hj9UCTflGg4bavtywoYs3A6ks5cYTsSAMAe/L4QsUQA= Subject key identifier: 86:F1:01:60:B8:85:5C:2C:00:07:15:BD:9F:8D:33:03:DD:6A:D1:BB Authority key identifier: 30:C4:51:38:67:8B:7B:D9:AF:4C:5C:A4:EB:1A:5D:3E:20:61:C5:C1 Certificate issuer: /CN=A91F59A6/serialNumber=30C45138678B7BD9AF4C5CA4EB1A5D3E2061C5C1 Certificate serial: 0D06 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MMRROGeLe9mvTFyk6xpdPiBhxcE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F59A6/40848C3EE5E511E99F1F7C13C4F9AE02/MMRROGeLe9mvTFyk6xpdPiBhxcE.mft Manifest number: 0CE9 Signing time: Sat 10 May 2025 17:57:56 +0000 Manifest this update: Sat 10 May 2025 17:57:55 +0000 Manifest next update: Sat 17 May 2025 17:57:55 +0000 Files and hashes: 1: MMRROGeLe9mvTFyk6xpdPiBhxcE.crl (hash: GjRy/omD9CV17yJukQROpIltk6GJxXDDw23tPqdJMYY=) 2: 82A69048E5E611E9A31D0F15C4F9AE02.roa (hash: qEkECxoCgKBKTnw3bchzSUCu8r6TBFUP4UAPJP8qzMY=) 3: 813F208AE5E611E9A31D0F15C4F9AE02.roa (hash: +TPxOAHNAMtvnIcGRR6E+FNpj29vW6xe3VQISwdy/bw=) 4: 81D3C438E5E611E9A31D0F15C4F9AE02.roa (hash: 0SPtnF49m4JXYvDmELKfCYTUI/b5FZMwuniRPfNINfE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F59A6/40848C3EE5E511E99F1F7C13C4F9AE02/MMRROGeLe9mvTFyk6xpdPiBhxcE.crl rsync://rpki.apnic.net/member_repository/A91F59A6/40848C3EE5E511E99F1F7C13C4F9AE02/MMRROGeLe9mvTFyk6xpdPiBhxcE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MMRROGeLe9mvTFyk6xpdPiBhxcE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 17:57:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3334 (0xd06) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F59A6, serialNumber=30C45138678B7BD9AF4C5CA4EB1A5D3E2061C5C1 Validity Not Before: May 10 17:57:55 2025 GMT Not After : May 17 17:57:55 2025 GMT Subject: CN=681f93a3-cf3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:51:ec:bf:e8:55:b7:5d:ca:1a:47:fe:84:83: e3:e3:4a:a8:ed:aa:53:00:c3:df:c6:bd:8b:72:99: b0:8d:e5:45:3b:55:6b:47:ba:22:85:02:40:63:53: d4:71:47:9b:94:c3:3b:e2:08:e3:e6:66:f9:ea:e2: b6:c9:fa:bf:ef:77:e5:05:61:5b:cc:f6:2b:4b:bd: 70:15:97:c1:c1:ef:b6:25:2a:d2:e5:b9:ff:dc:d2: 00:57:40:82:4f:d1:13:0d:36:33:c8:0e:4a:97:12: 02:fa:0c:1d:85:c6:2c:6b:a2:ec:36:59:d1:8e:6a: 39:13:0e:c5:f0:0e:47:c8:86:5e:7d:53:bb:e7:b8: 5d:07:57:42:45:8a:80:64:85:9b:ba:84:0f:76:ad: d3:81:e1:f4:3c:64:9b:0a:94:17:93:fd:73:30:f5: 93:cb:e7:70:29:37:32:43:c8:49:2e:d5:f8:3b:05: cf:07:a8:76:11:dc:36:fc:37:26:c5:f4:a3:71:1b: 33:ff:9b:b6:1a:a3:59:3a:cd:ad:56:47:42:64:95: 85:08:ac:3f:98:27:3c:e6:ee:5a:71:b1:ef:c1:e0: 06:20:24:59:9d:48:17:a1:05:9d:38:97:c5:69:1d: d7:c8:01:23:c0:55:f9:a1:c1:de:50:74:73:3e:87: fa:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:F1:01:60:B8:85:5C:2C:00:07:15:BD:9F:8D:33:03:DD:6A:D1:BB X509v3 Authority Key Identifier: keyid:30:C4:51:38:67:8B:7B:D9:AF:4C:5C:A4:EB:1A:5D:3E:20:61:C5:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F59A6/40848C3EE5E511E99F1F7C13C4F9AE02/MMRROGeLe9mvTFyk6xpdPiBhxcE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MMRROGeLe9mvTFyk6xpdPiBhxcE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F59A6/40848C3EE5E511E99F1F7C13C4F9AE02/MMRROGeLe9mvTFyk6xpdPiBhxcE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:da:4c:30:49:67:d4:f1:bf:fa:75:3f:78:d7:8b:67:47:e3: fb:36:bb:0f:bc:21:2a:98:10:31:8f:a6:56:49:9e:ba:ad:1f: 58:a7:4c:39:b9:62:17:ca:3f:e2:f4:c1:3f:5d:f1:41:57:e1: c8:c9:4c:de:6e:21:75:39:3e:15:32:3a:9d:ca:d8:c9:12:30: 3d:70:3f:ed:cf:ac:46:64:fb:dd:62:2a:41:ff:66:23:db:69: 72:af:44:9c:d3:6d:b5:8e:2a:09:46:3c:19:d3:07:0c:3b:1c: 57:98:eb:b6:ec:98:16:0b:83:7d:94:88:58:2b:f4:bb:83:8b: 70:a5:f9:72:d8:15:9d:96:8f:9a:cc:7c:a7:6d:b4:b0:b4:a6: cb:89:03:5f:71:1e:c3:c1:35:dc:58:4e:7d:af:d2:2b:23:b0: 7f:10:61:eb:3f:88:7f:ce:d1:30:18:44:7f:50:c7:1c:79:03: a4:d2:14:28:13:37:11:3b:09:c3:9a:d8:e9:26:83:e9:ad:f2: a5:33:4c:ab:fc:e7:21:67:bd:0a:21:83:af:a6:77:98:c7:02: f2:66:2b:c8:5b:60:fa:ef:08:97:9f:fd:4e:1a:0d:0b:0d:1e: a0:51:a3:fe:d6:44:29:26:01:26:e1:32:ee:e6:da:a7:49:41: 2c:e4:b1:bd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDQYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjU5QTYxMTAvBgNVBAUTKDMwQzQ1MTM4Njc4QjdCRDlBRjRDNUNBNEVCMUE1RDNF MjA2MUM1QzEwHhcNMjUwNTEwMTc1NzU1WhcNMjUwNTE3MTc1NzU1WjAYMRYwFAYD VQQDEw02ODFmOTNhMy1jZjNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzVHsv+hVt13KGkf+hIPj40qo7apTAMPfxr2LcpmwjeVFO1VrR7oihQJAY1PU cUeblMM74gjj5mb56uK2yfq/73flBWFbzPYrS71wFZfBwe+2JSrS5bn/3NIAV0CC T9ETDTYzyA5KlxIC+gwdhcYsa6LsNlnRjmo5Ew7F8A5HyIZefVO757hdB1dCRYqA ZIWbuoQPdq3TgeH0PGSbCpQXk/1zMPWTy+dwKTcyQ8hJLtX4OwXPB6h2Edw2/Dcm xfSjcRsz/5u2GqNZOs2tVkdCZJWFCKw/mCc85u5acbHvweAGICRZnUgXoQWdOJfF aR3XyAEjwFX5ocHeUHRzPof6hwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIbxAWC4 hVwsAAcVvZ+NMwPdatG7MB8GA1UdIwQYMBaAFDDEUThni3vZr0xcpOsaXT4gYcXB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTlBNi80MDg0OEMzRUU1 RTUxMUU5OUYxRjdDMTNDNEY5QUUwMi9NTVJST0dlTGU5bXZURnlrNnhwZFBpQmh4 Y0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01NUlJPR2VMZTltdlRGeWs2eHBkUGlCaHhjRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NTlBNi80MDg0OEMzRUU1RTUxMUU5OUYxRjdDMTNDNEY5QUUwMi9NTVJST0dlTGU5 bXZURnlrNnhwZFBpQmh4Y0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCb2kwwSWfU8b/6dT9414tnR+P7NrsPvCEqmBAxj6ZWSZ66rR9Yp0w5 uWIXyj/i9ME/XfFBV+HIyUzebiF1OT4VMjqdytjJEjA9cD/tz6xGZPvdYipB/2Yj 22lyr0Sc0221jioJRjwZ0wcMOxxXmOu27JgWC4N9lIhYK/S7g4twpfly2BWdlo+a zHynbbSwtKbLiQNfcR7DwTXcWE59r9IrI7B/EGHrP4h/ztEwGER/UMcceQOk0hQo EzcROwnDmtjpJoPprfKlM0yr/OchZ70KIYOvpneYxwLyZivIW2D67wiXn/1OGg0L DR6gUaP+1kQpJgEm4TLu5tqnSUEs5LG9 -----END CERTIFICATE-----Generated at Sun May 11 00:35:43 2025 by rpki-client