$ rpki-client -vvf rpki.apnic.net/member_repository/A91105F6/E820026AB3FB11EDBBDB3022C4F9AE02/acVuJtdk8a5PRoYo5XUx03NKwCc.mft File: acVuJtdk8a5PRoYo5XUx03NKwCc.mft (raw, json) Hash identifier: I26InvBZnl/tIyfx7M2CvTCR+2tTQMylbTJg3i4Fg98= Subject key identifier: 34:3B:9D:14:45:6B:10:5A:68:C6:5E:19:59:BE:A1:55:0E:76:CB:5D Authority key identifier: 69:C5:6E:26:D7:64:F1:AE:4F:46:86:28:E5:75:31:D3:73:4A:C0:27 Certificate issuer: /CN=A91105F6/serialNumber=69C56E26D764F1AE4F468628E57531D3734AC027 Certificate serial: 01B5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/acVuJtdk8a5PRoYo5XUx03NKwCc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91105F6/E820026AB3FB11EDBBDB3022C4F9AE02/acVuJtdk8a5PRoYo5XUx03NKwCc.mft Manifest number: 01AD Signing time: Sat 31 May 2025 02:56:42 +0000 Manifest this update: Sat 31 May 2025 02:56:42 +0000 Manifest next update: Sat 07 Jun 2025 02:56:42 +0000 Files and hashes: 1: acVuJtdk8a5PRoYo5XUx03NKwCc.crl (hash: EswijevkBSni9XuSC9uWxvmoJH6qdHEcGH2hL+DIaZU=) 2: 3D93BEB65E6611EEA526DB11C4F9AE02.roa (hash: rj/BOYyadeyH55DESWaHfqSsiGriCli8KPof7zAigo4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91105F6/E820026AB3FB11EDBBDB3022C4F9AE02/acVuJtdk8a5PRoYo5XUx03NKwCc.crl rsync://rpki.apnic.net/member_repository/A91105F6/E820026AB3FB11EDBBDB3022C4F9AE02/acVuJtdk8a5PRoYo5XUx03NKwCc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/acVuJtdk8a5PRoYo5XUx03NKwCc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 02:56:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 437 (0x1b5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91105F6, serialNumber=69C56E26D764F1AE4F468628E57531D3734AC027 Validity Not Before: May 31 02:56:42 2025 GMT Not After : Jun 7 02:56:42 2025 GMT Subject: CN=683a6fea-6df1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:73:95:16:84:31:04:94:73:6c:8f:b7:1e:52: a7:0a:0a:b7:71:d6:4b:b0:77:ce:c3:03:35:53:37: a5:8c:7f:d2:f5:3f:df:73:23:8b:c5:5e:7e:82:9a: 2a:28:e7:e7:bb:88:82:46:01:e5:8f:78:24:15:bc: b0:59:5a:d4:df:60:28:7d:11:8a:97:92:e7:7a:d0: d2:fe:fa:8d:f7:2f:4f:39:59:bf:72:d3:1b:25:2d: 75:32:a1:99:9d:1c:3d:fc:28:96:b7:90:a6:04:20: 6a:3f:d8:4d:a6:01:4b:33:dc:ad:a3:30:16:86:e8: df:a1:45:79:66:5d:34:f1:05:29:90:e4:f1:b2:12: aa:1e:1c:72:8e:73:bc:32:ab:2e:d6:dd:f9:52:a8: c5:22:67:23:86:03:c5:31:d0:2f:20:7c:27:d3:11: 5d:74:cf:37:20:aa:e9:67:75:46:0b:47:bd:ac:68: 63:7f:70:59:db:64:de:47:df:a2:15:86:bc:49:c1: ec:55:1e:f2:65:2d:0b:c7:78:51:6b:71:40:12:d3: fa:ef:21:a5:14:99:72:b9:6e:90:5e:52:b6:d0:1a: 52:c3:9f:ae:31:86:1d:f2:a7:81:cf:37:09:c1:00: 1d:36:05:5c:d6:08:5a:ce:26:42:52:4e:e6:d0:e4: fa:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:3B:9D:14:45:6B:10:5A:68:C6:5E:19:59:BE:A1:55:0E:76:CB:5D X509v3 Authority Key Identifier: keyid:69:C5:6E:26:D7:64:F1:AE:4F:46:86:28:E5:75:31:D3:73:4A:C0:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91105F6/E820026AB3FB11EDBBDB3022C4F9AE02/acVuJtdk8a5PRoYo5XUx03NKwCc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/acVuJtdk8a5PRoYo5XUx03NKwCc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91105F6/E820026AB3FB11EDBBDB3022C4F9AE02/acVuJtdk8a5PRoYo5XUx03NKwCc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:06:fa:3e:5c:57:0d:91:75:c0:04:8f:ab:f5:2b:59:7f:c3: d8:ab:b5:e7:13:84:e2:96:81:65:36:51:22:d6:9e:ac:8e:c1: c0:9b:a0:38:4a:19:bf:bb:51:7d:f8:0f:8b:09:6a:d1:eb:ce: a7:af:7b:84:61:9d:54:d6:e4:d1:25:08:d5:6e:95:6f:d8:6a: d4:c6:17:16:97:13:95:47:79:44:88:2d:6c:bb:30:a5:8b:cf: 2c:0d:a1:6d:6a:b4:2b:98:1d:e0:49:1d:47:59:08:a9:e5:1c: df:2e:7a:97:50:20:67:82:e2:7a:8a:92:e7:40:4e:d2:96:5d: cc:e3:fe:45:73:cc:d9:6b:89:90:86:09:e7:7d:4c:6e:d1:d1: 84:e3:0e:d6:43:d0:c7:26:ff:9d:a6:ec:a6:e9:04:72:a0:45: 41:36:c0:e7:86:1e:83:7b:67:24:ae:ad:d8:5a:46:e8:16:45: 69:64:8a:3f:fd:4c:64:58:e4:64:79:59:59:e4:42:00:e3:70: 8e:5b:17:4e:3b:1e:60:a7:c7:ee:f4:8e:45:18:2a:ac:bf:03: e5:c6:b7:1e:5b:c2:35:84:63:31:a9:98:67:58:51:c2:0e:7e: c5:37:70:40:23:29:5d:bf:e6:bf:0a:a6:b4:33:71:57:1d:2e: 01:ab:80:d4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTA1RjYxMTAvBgNVBAUTKDY5QzU2RTI2RDc2NEYxQUU0RjQ2ODYyOEU1NzUzMUQz NzM0QUMwMjcwHhcNMjUwNTMxMDI1NjQyWhcNMjUwNjA3MDI1NjQyWjAYMRYwFAYD VQQDEw02ODNhNmZlYS02ZGYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArXOVFoQxBJRzbI+3HlKnCgq3cdZLsHfOwwM1UzeljH/S9T/fcyOLxV5+gpoq KOfnu4iCRgHlj3gkFbywWVrU32AofRGKl5LnetDS/vqN9y9POVm/ctMbJS11MqGZ nRw9/CiWt5CmBCBqP9hNpgFLM9ytozAWhujfoUV5Zl008QUpkOTxshKqHhxyjnO8 Mqsu1t35UqjFImcjhgPFMdAvIHwn0xFddM83IKrpZ3VGC0e9rGhjf3BZ22TeR9+i FYa8ScHsVR7yZS0Lx3hRa3FAEtP67yGlFJlyuW6QXlK20BpSw5+uMYYd8qeBzzcJ wQAdNgVc1ghaziZCUk7m0OT6MwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDQ7nRRF axBaaMZeGVm+oVUOdstdMB8GA1UdIwQYMBaAFGnFbibXZPGuT0aGKOV1MdNzSsAn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMDVGNi9FODIwMDI2QUIz RkIxMUVEQkJEQjMwMjJDNEY5QUUwMi9hY1Z1SnRkazhhNVBSb1lvNVhVeDAzTkt3 Q2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FjVnVKdGRrOGE1UFJvWW81WFV4MDNOS3dDYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MDVGNi9FODIwMDI2QUIzRkIxMUVEQkJEQjMwMjJDNEY5QUUwMi9hY1Z1SnRkazhh NVBSb1lvNVhVeDAzTkt3Q2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBGBvo+XFcNkXXABI+r9StZf8PYq7XnE4TiloFlNlEi1p6sjsHAm6A4 Shm/u1F9+A+LCWrR686nr3uEYZ1U1uTRJQjVbpVv2GrUxhcWlxOVR3lEiC1suzCl i88sDaFtarQrmB3gSR1HWQip5RzfLnqXUCBnguJ6ipLnQE7Sll3M4/5Fc8zZa4mQ hgnnfUxu0dGE4w7WQ9DHJv+dpuym6QRyoEVBNsDnhh6De2ckrq3YWkboFkVpZIo/ /UxkWORkeVlZ5EIA43COWxdOOx5gp8fu9I5FGCqsvwPlxrceW8I1hGMxqZhnWFHC Dn7FN3BAIyldv+a/Cqa0M3FXHS4Bq4DU -----END CERTIFICATE-----Generated at Sat May 31 15:14:38 2025 by rpki-client