$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6B3D/0E978E64596211EBA40B5C85C4F9AE02/exUBXdufhEEqZ9s-Jv7LTdy72YA.mft File: exUBXdufhEEqZ9s-Jv7LTdy72YA.mft (raw, json) Hash identifier: hyptGO/SJA4cp04B14CkNh7RTVILaYOyOgkBIlQ5D8A= Subject key identifier: CE:A2:6F:D6:43:87:0B:E8:41:C5:B5:FD:92:10:29:43:59:68:AB:AB Authority key identifier: 7B:15:01:5D:DB:9F:84:41:2A:67:DB:3E:26:FE:CB:4D:DC:BB:D9:80 Certificate issuer: /CN=A91F6B3D/serialNumber=7B15015DDB9F84412A67DB3E26FECB4DDCBBD980 Certificate serial: 06D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exUBXdufhEEqZ9s-Jv7LTdy72YA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F6B3D/0E978E64596211EBA40B5C85C4F9AE02/exUBXdufhEEqZ9s-Jv7LTdy72YA.mft Manifest number: 06C3 Signing time: Sat 10 May 2025 21:44:02 +0000 Manifest this update: Sat 10 May 2025 21:44:02 +0000 Manifest next update: Sat 17 May 2025 21:44:02 +0000 Files and hashes: 1: exUBXdufhEEqZ9s-Jv7LTdy72YA.crl (hash: LF6Wx3pE1LvHw1E3EizR+posRQXPVKFkg5/bFm9+on8=) 2: 0F83E674B45611EC8D43DA35C4F9AE02.roa (hash: 44B6YCXFFFx+bCdGIykmPbtlTvIuZVPUkL4VeJYbwxg=) 3: 76F636C6C13111EC8B2DD839C4F9AE02.roa (hash: ji78Z3bYDne8h3ntfFAr2jh173VOiqckcY3Gt5rpLOI=) 4: 4FB0329A827311EBAB565A86C4F9AE02.roa (hash: gFcpYNnFwW2L/eMps8n5pMtg1/xMFxUVZSJLx7s2gUc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F6B3D/0E978E64596211EBA40B5C85C4F9AE02/exUBXdufhEEqZ9s-Jv7LTdy72YA.crl rsync://rpki.apnic.net/member_repository/A91F6B3D/0E978E64596211EBA40B5C85C4F9AE02/exUBXdufhEEqZ9s-Jv7LTdy72YA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exUBXdufhEEqZ9s-Jv7LTdy72YA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 21:44:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1747 (0x6d3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F6B3D, serialNumber=7B15015DDB9F84412A67DB3E26FECB4DDCBBD980 Validity Not Before: May 10 21:44:02 2025 GMT Not After : May 17 21:44:02 2025 GMT Subject: CN=681fc8a2-618d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:59:13:b6:a3:42:7b:5a:5a:18:2f:0b:13:a7: de:00:19:fd:23:e2:86:c8:91:aa:e7:96:42:78:8c: db:24:51:4b:37:70:dd:c1:31:0c:b1:97:70:e5:5f: d9:fc:34:14:32:a2:47:c6:a0:dc:f0:a9:2d:8d:fb: c5:70:ea:6b:f1:16:41:89:26:53:0e:32:2e:d4:d1: 7c:33:2b:8e:77:3a:0d:2d:5f:7a:0a:c0:d1:fa:9d: 12:90:11:e5:06:a3:02:33:7c:dc:c2:5b:4a:aa:90: be:9d:77:83:f9:8a:fe:8f:79:8f:09:b0:0e:2d:ef: d7:c7:8f:71:87:6f:cf:51:86:55:e5:3f:e5:56:7f: 38:e2:ff:42:36:1b:03:13:a9:95:f3:82:44:c2:06: 83:e3:c6:e9:aa:18:5c:bf:31:d7:af:ad:30:11:6a: 55:fb:89:ca:d9:ea:22:8f:84:2c:1d:12:d8:1a:dd: da:46:81:25:56:09:21:ac:50:ed:a8:f9:af:9a:20: 1d:9a:a1:6b:2d:5b:84:64:aa:c4:8a:9c:9b:98:cc: e1:7b:83:b2:6e:a6:53:c3:b5:cb:42:33:16:16:69: 29:1f:14:3c:21:b8:52:ea:44:ba:f8:14:28:69:24: 61:32:d4:14:30:0a:3e:b7:fc:3a:34:0a:8f:d6:f8: 6f:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:A2:6F:D6:43:87:0B:E8:41:C5:B5:FD:92:10:29:43:59:68:AB:AB X509v3 Authority Key Identifier: keyid:7B:15:01:5D:DB:9F:84:41:2A:67:DB:3E:26:FE:CB:4D:DC:BB:D9:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F6B3D/0E978E64596211EBA40B5C85C4F9AE02/exUBXdufhEEqZ9s-Jv7LTdy72YA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exUBXdufhEEqZ9s-Jv7LTdy72YA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6B3D/0E978E64596211EBA40B5C85C4F9AE02/exUBXdufhEEqZ9s-Jv7LTdy72YA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:35:90:33:f8:76:10:ff:0f:7e:11:aa:ba:d6:53:f1:27:5b: 7d:74:9b:67:4b:a6:d0:a3:e2:78:fb:5f:32:20:60:26:5e:5a: a6:43:1d:70:0e:6e:a1:a5:cb:20:ef:d2:2e:91:8e:47:d5:35: b1:1e:62:16:8f:e6:44:2a:6b:52:e1:2d:f8:f0:18:79:21:60: 94:30:d4:28:f7:9e:eb:65:1c:0a:74:4d:f1:76:04:2b:a0:d8: 62:65:e7:cc:51:ff:23:29:f4:97:a6:38:63:59:b8:40:23:21: 70:16:02:1a:7a:ff:9b:d7:24:6c:4b:41:ff:5c:33:07:c1:e4: ba:bb:33:b7:a5:c8:6f:71:77:51:5b:73:1c:c8:e2:25:28:1c: f6:4f:96:be:88:f6:e0:f4:36:43:1c:1f:29:e7:a1:db:3a:ac: f8:8f:f5:be:1b:ba:9e:13:4e:e4:24:f9:6f:03:54:f9:0d:65: 3c:10:da:9c:b1:62:14:52:5b:6d:bc:bc:75:c5:ce:a0:80:8e: 96:69:5d:0c:94:5f:eb:0b:85:77:0b:88:ba:2d:4a:66:64:bd: 6d:9f:4b:5f:66:f8:40:ac:8f:59:95:bd:7b:2f:9f:29:a1:0b: 46:0a:84:0d:1b:a5:4c:77:a8:87:8e:21:c6:5a:90:94:72:52: 27:50:28:56 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBtMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjZCM0QxMTAvBgNVBAUTKDdCMTUwMTVEREI5Rjg0NDEyQTY3REIzRTI2RkVDQjRE RENCQkQ5ODAwHhcNMjUwNTEwMjE0NDAyWhcNMjUwNTE3MjE0NDAyWjAYMRYwFAYD VQQDEw02ODFmYzhhMi02MThkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqVkTtqNCe1paGC8LE6feABn9I+KGyJGq55ZCeIzbJFFLN3DdwTEMsZdw5V/Z /DQUMqJHxqDc8KktjfvFcOpr8RZBiSZTDjIu1NF8MyuOdzoNLV96CsDR+p0SkBHl BqMCM3zcwltKqpC+nXeD+Yr+j3mPCbAOLe/Xx49xh2/PUYZV5T/lVn844v9CNhsD E6mV84JEwgaD48bpqhhcvzHXr60wEWpV+4nK2eoij4QsHRLYGt3aRoElVgkhrFDt qPmvmiAdmqFrLVuEZKrEipybmMzhe4OybqZTw7XLQjMWFmkpHxQ8IbhS6kS6+BQo aSRhMtQUMAo+t/w6NAqP1vhvLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM6ib9ZD hwvoQcW1/ZIQKUNZaKurMB8GA1UdIwQYMBaAFHsVAV3bn4RBKmfbPib+y03cu9mA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNkIzRC8wRTk3OEU2NDU5 NjIxMUVCQTQwQjVDODVDNEY5QUUwMi9leFVCWGR1ZmhFRXFaOXMtSnY3TFRkeTcy WUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2V4VUJYZHVmaEVFcVo5cy1KdjdMVGR5NzJZQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NkIzRC8wRTk3OEU2NDU5NjIxMUVCQTQwQjVDODVDNEY5QUUwMi9leFVCWGR1ZmhF RXFaOXMtSnY3TFRkeTcyWUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAxNZAz+HYQ/w9+Eaq61lPxJ1t9dJtnS6bQo+J4+18yIGAmXlqmQx1w Dm6hpcsg79IukY5H1TWxHmIWj+ZEKmtS4S348Bh5IWCUMNQo957rZRwKdE3xdgQr oNhiZefMUf8jKfSXpjhjWbhAIyFwFgIaev+b1yRsS0H/XDMHweS6uzO3pchvcXdR W3McyOIlKBz2T5a+iPbg9DZDHB8p56HbOqz4j/W+G7qeE07kJPlvA1T5DWU8ENqc sWIUUlttvLx1xc6ggI6WaV0MlF/rC4V3C4i6LUpmZL1tn0tfZvhArI9Zlb17L58p oQtGCoQNG6VMd6iHjiHGWpCUclInUChW -----END CERTIFICATE-----Generated at Mon May 12 15:52:01 2025 by rpki-client