$ rpki-client -vvf rpki.apnic.net/member_repository/A91115D5/4EBCAF26D0AF11E8AAEB0756C4F9AE02/R29XKjgCNq8z9i2CpbomTS-7rXw.mft File: R29XKjgCNq8z9i2CpbomTS-7rXw.mft (raw, json) Hash identifier: ulwADjeADo6UyDFI65t5+1Jhpyw2NoL/EbSEmjAc6qc= Subject key identifier: D3:72:44:D3:5D:48:F5:D6:03:14:B3:DD:93:32:D3:07:3D:17:6E:E0 Authority key identifier: 47:6F:57:2A:38:02:36:AF:33:F6:2D:82:A5:BA:26:4D:2F:BB:AD:7C Certificate issuer: /CN=A91115D5/serialNumber=476F572A380236AF33F62D82A5BA264D2FBBAD7C Certificate serial: 1299 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R29XKjgCNq8z9i2CpbomTS-7rXw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91115D5/4EBCAF26D0AF11E8AAEB0756C4F9AE02/R29XKjgCNq8z9i2CpbomTS-7rXw.mft Manifest number: 1277 Signing time: Fri 30 May 2025 17:17:19 +0000 Manifest this update: Fri 30 May 2025 17:17:19 +0000 Manifest next update: Fri 06 Jun 2025 17:17:19 +0000 Files and hashes: 1: R29XKjgCNq8z9i2CpbomTS-7rXw.crl (hash: dbUFMRtyId2SpcEh9E54/zjd8wtMRScv/eDVexef2eE=) 2: 4978C5B2089911F0B2664480C4F9AE02.roa (hash: 00dFUbxtRi+P5zmsb5ryh9HhmqE32J+HOZ/FYXFpiHQ=) 3: 48B8F476089911F0B2664480C4F9AE02.roa (hash: JWTxPbAMnC0V4yG1gFdPedapzuHJ8Aw4XsiM14hADdY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91115D5/4EBCAF26D0AF11E8AAEB0756C4F9AE02/R29XKjgCNq8z9i2CpbomTS-7rXw.crl rsync://rpki.apnic.net/member_repository/A91115D5/4EBCAF26D0AF11E8AAEB0756C4F9AE02/R29XKjgCNq8z9i2CpbomTS-7rXw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R29XKjgCNq8z9i2CpbomTS-7rXw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 17:17:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4761 (0x1299) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91115D5, serialNumber=476F572A380236AF33F62D82A5BA264D2FBBAD7C Validity Not Before: May 30 17:17:19 2025 GMT Not After : Jun 6 17:17:19 2025 GMT Subject: CN=6839e81f-4ff2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:a1:45:c8:70:9f:bc:2a:b4:44:0f:b8:bb:75: ac:77:ca:0e:43:d4:e1:1c:e5:a0:fa:38:e4:04:3c: 22:07:ce:31:ea:c5:de:c7:2a:8b:3d:c6:e9:7b:50: b3:16:26:db:99:9c:00:db:5e:da:5d:18:9f:ae:69: 66:26:60:58:b9:ab:42:ed:06:f0:85:cd:d9:28:12: ea:ca:80:c9:f1:58:11:2a:36:dd:2c:9d:86:e7:3b: 49:f0:80:cb:17:81:a9:04:37:a9:8c:da:17:58:bc: 3b:4d:bd:f4:68:c5:1a:f3:ac:94:4e:f3:5b:d9:a8: 88:7e:8e:90:0e:43:dc:f8:fa:b0:30:0a:cb:e7:f3: c4:ed:2e:4a:ee:3a:26:c2:ee:61:a6:fb:80:0c:b7: 3a:38:5a:6e:23:3f:46:55:ea:67:39:62:3d:6c:e2: b7:e9:4f:31:0f:65:1d:93:b6:d2:a6:88:11:46:3c: 41:5f:ca:56:c9:9f:2a:5b:8c:f4:c1:b7:63:1c:12: d0:a7:86:1e:1b:9a:71:fa:6c:47:5b:58:55:6e:96: d9:9b:ef:c2:61:a9:97:6a:50:72:41:09:3b:23:ec: c1:90:84:f0:42:4c:d5:b9:9e:33:9c:83:af:c8:0a: b9:5d:82:6b:15:63:2b:8d:1e:26:78:38:79:2f:08: 56:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:72:44:D3:5D:48:F5:D6:03:14:B3:DD:93:32:D3:07:3D:17:6E:E0 X509v3 Authority Key Identifier: keyid:47:6F:57:2A:38:02:36:AF:33:F6:2D:82:A5:BA:26:4D:2F:BB:AD:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91115D5/4EBCAF26D0AF11E8AAEB0756C4F9AE02/R29XKjgCNq8z9i2CpbomTS-7rXw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R29XKjgCNq8z9i2CpbomTS-7rXw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91115D5/4EBCAF26D0AF11E8AAEB0756C4F9AE02/R29XKjgCNq8z9i2CpbomTS-7rXw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ba:2c:f0:4d:15:21:fb:54:11:8d:a8:6e:3b:10:cd:a7:24:1c: 4d:bd:10:a2:3c:f5:95:b6:37:4e:8d:ec:d2:21:d5:ed:c4:a8: 58:b5:a3:1e:be:f8:8d:30:bc:17:64:43:2f:ed:70:7b:4a:b4: 7a:27:b0:64:9e:92:80:d8:ea:4b:97:7f:f1:f6:2e:82:8b:ca: d4:e8:34:8b:57:da:cd:5a:bf:97:60:67:31:d2:09:84:b9:b0: b3:b5:e5:9e:8f:fd:0c:b8:8e:44:03:6b:b0:24:83:84:75:34: 60:fb:7f:14:df:ba:80:e6:a6:5e:24:c3:90:d4:87:0c:3d:bc: 08:b8:8a:42:12:90:66:3c:eb:a9:38:bf:44:81:a2:83:c3:ca: 25:18:07:38:5e:0b:5e:1b:99:de:46:5c:15:d6:c9:80:67:c4: b6:9b:cd:e5:2e:20:96:96:2f:6d:62:c6:71:ea:d3:dc:77:05: 6b:7b:e4:05:ad:db:3c:0a:1d:9c:6f:b0:f1:94:1a:87:f1:03: 0a:5e:7b:83:7a:85:3f:aa:61:19:20:ae:1b:4b:c7:81:b3:b1: cc:c2:09:b5:bb:88:cf:d6:2b:42:e8:88:63:53:fe:2e:8e:e1: 02:89:e4:35:9c:4a:be:c8:ce:77:a2:95:cc:17:80:e6:3c:0b: aa:04:81:f9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEpkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTE1RDUxMTAvBgNVBAUTKDQ3NkY1NzJBMzgwMjM2QUYzM0Y2MkQ4MkE1QkEyNjRE MkZCQkFEN0MwHhcNMjUwNTMwMTcxNzE5WhcNMjUwNjA2MTcxNzE5WjAYMRYwFAYD VQQDEw02ODM5ZTgxZi00ZmYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzKFFyHCfvCq0RA+4u3Wsd8oOQ9ThHOWg+jjkBDwiB84x6sXexyqLPcbpe1Cz FibbmZwA217aXRifrmlmJmBYuatC7Qbwhc3ZKBLqyoDJ8VgRKjbdLJ2G5ztJ8IDL F4GpBDepjNoXWLw7Tb30aMUa86yUTvNb2aiIfo6QDkPc+PqwMArL5/PE7S5K7jom wu5hpvuADLc6OFpuIz9GVepnOWI9bOK36U8xD2Udk7bSpogRRjxBX8pWyZ8qW4z0 wbdjHBLQp4YeG5px+mxHW1hVbpbZm+/CYamXalByQQk7I+zBkITwQkzVuZ4znIOv yAq5XYJrFWMrjR4meDh5LwhWBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNNyRNNd SPXWAxSz3ZMy0wc9F27gMB8GA1UdIwQYMBaAFEdvVyo4AjavM/YtgqW6Jk0vu618 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMTVENS80RUJDQUYyNkQw QUYxMUU4QUFFQjA3NTZDNEY5QUUwMi9SMjlYS2pnQ05xOHo5aTJDcGJvbVRTLTdy WHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1IyOVhLamdDTnE4ejlpMkNwYm9tVFMtN3JYdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MTVENS80RUJDQUYyNkQwQUYxMUU4QUFFQjA3NTZDNEY5QUUwMi9SMjlYS2pnQ05x OHo5aTJDcGJvbVRTLTdyWHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC6LPBNFSH7VBGNqG47EM2nJBxNvRCiPPWVtjdOjezSIdXtxKhYtaMe vviNMLwXZEMv7XB7SrR6J7BknpKA2OpLl3/x9i6Ci8rU6DSLV9rNWr+XYGcx0gmE ubCzteWej/0MuI5EA2uwJIOEdTRg+38U37qA5qZeJMOQ1IcMPbwIuIpCEpBmPOup OL9EgaKDw8olGAc4XgteG5neRlwV1smAZ8S2m83lLiCWli9tYsZx6tPcdwVre+QF rds8Ch2cb7DxlBqH8QMKXnuDeoU/qmEZIK4bS8eBs7HMwgm1u4jP1itC6IhjU/4u juECieQ1nEq+yM53opXMF4DmPAuqBIH5 -----END CERTIFICATE-----Generated at Sat May 31 17:12:57 2025 by rpki-client