$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7537/802AE646A27111EFA392F079C4F9AE02/31_iG3yVUhWTRHF5TYsHBmPSs04.mft File: 31_iG3yVUhWTRHF5TYsHBmPSs04.mft (raw, json) Hash identifier: 93BFLR6iqydyf3bLldMuV3FQ0hPa6LPLhKJYTTSQBvU= Subject key identifier: DD:92:76:4D:36:89:2F:47:85:8B:36:E6:EB:8D:8F:7D:5B:3A:1C:ED Authority key identifier: DF:5F:E2:1B:7C:95:52:15:93:44:71:79:4D:8B:07:06:63:D2:B3:4E Certificate issuer: /CN=A91F7537/serialNumber=DF5FE21B7C955215934471794D8B070663D2B34E Certificate serial: 62 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/31_iG3yVUhWTRHF5TYsHBmPSs04.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F7537/802AE646A27111EFA392F079C4F9AE02/31_iG3yVUhWTRHF5TYsHBmPSs04.mft Manifest number: 5F Signing time: Wed 07 May 2025 06:16:46 +0000 Manifest this update: Wed 07 May 2025 06:16:45 +0000 Manifest next update: Wed 14 May 2025 06:16:45 +0000 Files and hashes: 1: 31_iG3yVUhWTRHF5TYsHBmPSs04.crl (hash: RjvyeVwFZEUd+v7DWZz1lttPeGDhSh1dD2AudFquFEk=) 2: 9B35F348266211F09E7C3657C4F9AE02.roa (hash: w98iv4SMeaHMbmTMicpq1ZJ/swub43o1vMMkgZ6/hgM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F7537/802AE646A27111EFA392F079C4F9AE02/31_iG3yVUhWTRHF5TYsHBmPSs04.crl rsync://rpki.apnic.net/member_repository/A91F7537/802AE646A27111EFA392F079C4F9AE02/31_iG3yVUhWTRHF5TYsHBmPSs04.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/31_iG3yVUhWTRHF5TYsHBmPSs04.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 May 2025 06:16:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 98 (0x62) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F7537, serialNumber=DF5FE21B7C955215934471794D8B070663D2B34E Validity Not Before: May 7 06:16:45 2025 GMT Not After : May 14 06:16:45 2025 GMT Subject: CN=681afacd-1e06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:d8:a3:08:5b:03:30:13:de:64:25:e4:d8:32: a6:c1:80:5f:2a:9b:fa:f8:24:56:d5:4f:dc:76:3d: 7d:e9:c2:69:a4:45:f1:d6:55:e8:87:11:8a:64:31: 01:9a:48:81:6f:eb:9c:37:eb:7b:78:fd:da:6b:55: 4b:20:8f:d7:1d:58:37:ba:e8:83:dc:4a:14:1b:79: bb:50:7d:ad:fc:8d:74:c4:c1:90:f9:98:d0:d0:09: bc:e7:97:e7:04:f7:16:eb:fd:0c:74:2f:31:f5:2a: e0:61:d4:d4:06:34:19:34:80:fc:ad:24:e3:6b:2d: f6:05:ab:20:ea:b3:5c:23:dc:a3:dd:2f:1f:18:16: 79:7b:02:a7:06:ee:d0:47:e6:bd:7f:96:e6:24:24: c9:d0:19:42:7c:e3:43:24:11:c3:38:e2:f9:75:c8: 02:22:1d:fb:e7:ad:f2:92:e8:02:ac:8c:1b:06:34: 1b:2a:96:fd:e5:22:ff:72:2d:83:8d:d4:2f:2d:31: 56:c4:d3:f8:a0:f8:23:bc:9c:f9:df:7a:fc:22:83: 8b:06:17:9d:ee:06:6d:8a:34:23:5f:39:12:07:15: d0:01:f3:b4:80:13:15:2c:3d:7b:08:63:ab:80:af: be:75:38:79:f7:ff:1d:ac:3a:30:0f:64:20:8e:82: fd:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:92:76:4D:36:89:2F:47:85:8B:36:E6:EB:8D:8F:7D:5B:3A:1C:ED X509v3 Authority Key Identifier: keyid:DF:5F:E2:1B:7C:95:52:15:93:44:71:79:4D:8B:07:06:63:D2:B3:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F7537/802AE646A27111EFA392F079C4F9AE02/31_iG3yVUhWTRHF5TYsHBmPSs04.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/31_iG3yVUhWTRHF5TYsHBmPSs04.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7537/802AE646A27111EFA392F079C4F9AE02/31_iG3yVUhWTRHF5TYsHBmPSs04.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:34:97:ab:89:62:b0:3a:0c:11:5d:ac:3e:cc:7b:20:f9:37: ac:02:dd:51:cb:93:61:e5:bc:52:1d:91:11:ad:ed:9f:58:7a: 53:ba:1f:06:39:0b:a4:c8:a6:cf:c8:e8:c9:01:89:c7:ed:23: a0:43:9d:de:a5:42:ee:50:54:d2:bf:10:20:9f:c9:8f:02:96: da:33:5b:11:9d:8e:63:27:0a:eb:ec:17:ce:82:6d:cd:03:b1: 7a:f6:81:ee:d9:35:5b:62:de:6a:ca:31:89:b2:e8:e6:b1:c6: ce:4c:5a:b2:37:f4:c5:5d:ed:aa:a2:72:93:85:28:cd:87:3e: b4:88:dc:2b:5b:95:e9:6d:f3:2f:61:fd:d4:ef:73:25:3f:33: c1:b4:62:38:54:ac:43:51:42:34:da:6c:22:ea:cc:54:55:cf: 5b:e9:ab:39:78:b8:c6:0e:8f:92:3a:84:dd:85:9a:18:78:6e: 8d:50:77:e6:73:48:6b:bc:b4:e8:f8:48:e0:75:15:49:a9:70: 99:a6:0f:9f:00:f3:11:14:cc:3b:f2:b9:36:9a:19:5a:5b:ec: 97:67:7a:71:4c:01:a4:4d:04:c3:ea:fe:47:09:1e:7e:94:97: 48:52:e9:16:ed:03:95:41:43:10:45:14:1a:79:ff:48:e5:f7: 77:96:f5:19 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBYjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG NzUzNzExMC8GA1UEBRMoREY1RkUyMUI3Qzk1NTIxNTkzNDQ3MTc5NEQ4QjA3MDY2 M0QyQjM0RTAeFw0yNTA1MDcwNjE2NDVaFw0yNTA1MTQwNjE2NDVaMBgxFjAUBgNV BAMTDTY4MWFmYWNkLTFlMDYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDZ2KMIWwMwE95kJeTYMqbBgF8qm/r4JFbVT9x2PX3pwmmkRfHWVeiHEYpkMQGa SIFv65w363t4/dprVUsgj9cdWDe66IPcShQbebtQfa38jXTEwZD5mNDQCbznl+cE 9xbr/Qx0LzH1KuBh1NQGNBk0gPytJONrLfYFqyDqs1wj3KPdLx8YFnl7AqcG7tBH 5r1/luYkJMnQGUJ840MkEcM44vl1yAIiHfvnrfKS6AKsjBsGNBsqlv3lIv9yLYON 1C8tMVbE0/ig+CO8nPnfevwig4sGF53uBm2KNCNfORIHFdAB87SAExUsPXsIY6uA r751OHn3/x2sOjAPZCCOgv3NAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU3ZJ2TTaJ L0eFizbm642PfVs6HO0wHwYDVR0jBBgwFoAU31/iG3yVUhWTRHF5TYsHBmPSs04w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY3NTM3LzgwMkFFNjQ2QTI3 MTExRUZBMzkyRjA3OUM0RjlBRTAyLzMxX2lHM3lWVWhXVFJIRjVUWXNIQm1QU3Mw NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvMzFfaUczeVZVaFdUUkhGNVRZc0hCbVBTczA0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY3 NTM3LzgwMkFFNjQ2QTI3MTExRUZBMzkyRjA3OUM0RjlBRTAyLzMxX2lHM3lWVWhX VFJIRjVUWXNIQm1QU3MwNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAE80l6uJYrA6DBFdrD7MeyD5N6wC3VHLk2HlvFIdkRGt7Z9YelO6HwY5 C6TIps/I6MkBicftI6BDnd6lQu5QVNK/ECCfyY8CltozWxGdjmMnCuvsF86Cbc0D sXr2ge7ZNVti3mrKMYmy6Oaxxs5MWrI39MVd7aqicpOFKM2HPrSI3Ctblelt8y9h /dTvcyU/M8G0YjhUrENRQjTabCLqzFRVz1vpqzl4uMYOj5I6hN2Fmhh4bo1Qd+Zz SGu8tOj4SOB1FUmpcJmmD58A8xEUzDvyuTaaGVpb7JdnenFMAaRNBMPq/kcJHn6U l0hS6RbtA5VBQxBFFBp5/0jl93eW9Rk= -----END CERTIFICATE-----Generated at Thu May 8 12:31:29 2025 by rpki-client