$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADDD5/8B0D0FF2E3F811EB9E08DB14C4F9AE02/-xEsrVYxm_qsoasoznvX9MsmjOk.mft File: -xEsrVYxm_qsoasoznvX9MsmjOk.mft (raw, json) Hash identifier: xZ+Z3AuGcnAZ8u0jBe6+6KCpn4yOF4OFpFdSEyPWFb0= Subject key identifier: 37:A2:19:DA:06:31:4F:FB:8B:57:48:42:0F:09:91:B9:43:9D:BF:F8 Authority key identifier: FB:11:2C:AD:56:31:9B:FA:AC:A1:AB:28:CE:7B:D7:F4:CB:26:8C:E9 Certificate issuer: /CN=A91ADDD5/serialNumber=FB112CAD56319BFAACA1AB28CE7BD7F4CB268CE9 Certificate serial: 0586 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-xEsrVYxm_qsoasoznvX9MsmjOk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ADDD5/8B0D0FF2E3F811EB9E08DB14C4F9AE02/-xEsrVYxm_qsoasoznvX9MsmjOk.mft Manifest number: 057A Signing time: Mon 16 Jun 2025 22:58:05 +0000 Manifest this update: Mon 16 Jun 2025 22:58:04 +0000 Manifest next update: Mon 23 Jun 2025 22:58:04 +0000 Files and hashes: 1: -xEsrVYxm_qsoasoznvX9MsmjOk.crl (hash: Zo7+E/g7VPVWhhG9zheXRDfNaLJ5WmtdPvvoPqGl1/w=) 2: ABCDCC4EE16711EEA88FAE64C4F9AE02.roa (hash: ufMyNaGjuZX/NIDCDapqBE7K0L5whHlFadMDreUuVQI=) 3: 128DFF02E14611EE80D6C425C4F9AE02.roa (hash: iCz1ketzxjoXfDIC5MMDi5PROHAwL63mxQQHk82Ic5M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ADDD5/8B0D0FF2E3F811EB9E08DB14C4F9AE02/-xEsrVYxm_qsoasoznvX9MsmjOk.crl rsync://rpki.apnic.net/member_repository/A91ADDD5/8B0D0FF2E3F811EB9E08DB14C4F9AE02/-xEsrVYxm_qsoasoznvX9MsmjOk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-xEsrVYxm_qsoasoznvX9MsmjOk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Jun 2025 22:58:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1414 (0x586) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ADDD5, serialNumber=FB112CAD56319BFAACA1AB28CE7BD7F4CB268CE9 Validity Not Before: Jun 16 22:58:04 2025 GMT Not After : Jun 23 22:58:04 2025 GMT Subject: CN=6850a17d-b0de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:bd:28:ad:9b:c7:2a:bf:1a:5d:28:0d:ca:6d: 5c:72:5b:9b:e0:ce:84:19:32:49:50:01:38:8f:34: 75:99:8b:b7:e8:1f:1b:cd:e4:27:4a:a8:aa:98:0b: df:8f:8d:91:15:77:fb:6c:0b:98:e0:d7:c8:c0:00: 1c:5f:e6:13:6b:1f:0d:cc:e7:db:1d:b0:c1:52:f5: 3a:0b:a9:f7:d3:eb:83:71:b0:0f:e2:28:9f:01:af: 81:2f:89:13:04:7d:12:ca:f2:1b:83:5c:26:3e:f0: 92:02:44:2b:8b:78:3e:18:35:1c:a1:f6:00:41:05: dd:dc:39:62:67:db:3f:e3:08:15:5b:75:9c:1e:15: 28:3d:2a:4e:0b:86:fe:0d:09:f6:00:8a:f5:15:e5: 55:9f:72:6b:c9:29:da:7e:d0:7e:72:22:9c:53:b9: 6c:fd:d3:59:75:6a:07:99:72:fc:94:92:29:08:03: 9a:7f:f2:01:44:09:15:ab:92:dd:66:67:86:6f:0a: d7:68:ba:ad:73:16:b4:22:0b:a0:7d:d5:b1:a0:29: c4:db:5c:e6:bf:e2:d6:63:b3:1d:64:ec:47:05:5a: 12:55:62:38:10:a0:eb:fd:c4:23:36:7e:ba:35:4a: b3:97:42:d3:48:51:5b:82:75:26:b5:57:85:d2:39: a9:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:A2:19:DA:06:31:4F:FB:8B:57:48:42:0F:09:91:B9:43:9D:BF:F8 X509v3 Authority Key Identifier: keyid:FB:11:2C:AD:56:31:9B:FA:AC:A1:AB:28:CE:7B:D7:F4:CB:26:8C:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ADDD5/8B0D0FF2E3F811EB9E08DB14C4F9AE02/-xEsrVYxm_qsoasoznvX9MsmjOk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-xEsrVYxm_qsoasoznvX9MsmjOk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADDD5/8B0D0FF2E3F811EB9E08DB14C4F9AE02/-xEsrVYxm_qsoasoznvX9MsmjOk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c9:aa:de:4a:37:f6:1f:7a:36:6c:8f:17:23:a3:da:ec:f3:7d: 48:b2:fb:4e:28:16:ea:a4:a1:db:a2:49:bd:b5:41:af:85:77: 7d:02:53:fd:76:14:07:86:57:48:81:21:b6:d6:4b:c7:c3:b2: 99:e5:b4:f7:7c:7f:37:2b:0e:09:4a:ca:7d:1e:e4:43:08:e1: 32:8b:62:ef:99:8f:0e:f1:e0:aa:d3:eb:eb:0a:b2:6b:47:80: de:eb:b4:e3:d4:c2:d1:bf:88:1e:b0:70:1b:4d:5e:67:51:d4: ea:14:8d:17:42:f1:9e:7f:e0:89:01:4f:b1:63:5d:9c:bc:09: ef:b5:93:37:00:c0:ff:53:b1:96:54:97:26:de:70:99:57:00: b7:ed:76:c4:65:a4:42:0a:f4:80:54:41:e4:58:95:09:02:e1: 26:6f:2a:f0:af:37:9b:ba:f1:c3:c1:7b:c4:60:6e:bb:09:8d: ef:07:09:9b:36:87:be:76:f7:25:be:b9:21:ed:4a:5a:44:9c: b8:3b:47:1c:7c:a5:aa:40:d6:35:ec:af:69:d7:82:ef:a0:bb: 26:4e:08:ed:3c:fb:ee:f6:ae:3d:1c:56:f0:7d:cc:cb:26:33: 9c:cb:2f:75:f3:e8:fe:48:36:52:55:ab:c1:3a:d2:3b:f0:64: 0e:19:c7:86 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBYYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QURERDUxMTAvBgNVBAUTKEZCMTEyQ0FENTYzMTlCRkFBQ0ExQUIyOENFN0JEN0Y0 Q0IyNjhDRTkwHhcNMjUwNjE2MjI1ODA0WhcNMjUwNjIzMjI1ODA0WjAYMRYwFAYD VQQDEw02ODUwYTE3ZC1iMGRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr70orZvHKr8aXSgNym1cclub4M6EGTJJUAE4jzR1mYu36B8bzeQnSqiqmAvf j42RFXf7bAuY4NfIwAAcX+YTax8NzOfbHbDBUvU6C6n30+uDcbAP4iifAa+BL4kT BH0SyvIbg1wmPvCSAkQri3g+GDUcofYAQQXd3DliZ9s/4wgVW3WcHhUoPSpOC4b+ DQn2AIr1FeVVn3JrySnaftB+ciKcU7ls/dNZdWoHmXL8lJIpCAOaf/IBRAkVq5Ld ZmeGbwrXaLqtcxa0IgugfdWxoCnE21zmv+LWY7MdZOxHBVoSVWI4EKDr/cQjNn66 NUqzl0LTSFFbgnUmtVeF0jmpAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDeiGdoG MU/7i1dIQg8JkblDnb/4MB8GA1UdIwQYMBaAFPsRLK1WMZv6rKGrKM571/TLJozp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRERENS84QjBEMEZGMkUz RjgxMUVCOUUwOERCMTRDNEY5QUUwMi8teEVzclZZeG1fcXNvYXNvem52WDlNc21q T2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy14RXNyVll4bV9xc29hc296bnZYOU1zbWpPay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RERENS84QjBEMEZGMkUzRjgxMUVCOUUwOERCMTRDNEY5QUUwMi8teEVzclZZeG1f cXNvYXNvem52WDlNc21qT2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDJqt5KN/YfejZsjxcjo9rs831IsvtOKBbqpKHbokm9tUGvhXd9AlP9 dhQHhldIgSG21kvHw7KZ5bT3fH83Kw4JSsp9HuRDCOEyi2LvmY8O8eCq0+vrCrJr R4De67Tj1MLRv4gesHAbTV5nUdTqFI0XQvGef+CJAU+xY12cvAnvtZM3AMD/U7GW VJcm3nCZVwC37XbEZaRCCvSAVEHkWJUJAuEmbyrwrzebuvHDwXvEYG67CY3vBwmb Noe+dvclvrkh7UpaRJy4O0ccfKWqQNY17K9p14LvoLsmTgjtPPvu9q49HFbwfczL JjOcyy918+j+SDZSVavBOtI78GQOGceG -----END CERTIFICATE-----Generated at Wed Jun 18 04:42:19 2025 by rpki-client