$ rpki-client -vvf rpki.apnic.net/member_repository/A911F8C9/4B4D712A5CDB11ECBD54F70CC4F9AE02/aCDlNpQmEvNLA3PdH3ftI0_981w.mft File: aCDlNpQmEvNLA3PdH3ftI0_981w.mft (raw, json) Hash identifier: yLswpvFLQl9AQASyGPmf33UyZLs9GXdlZlKgKGypIA0= Subject key identifier: CB:27:4E:4E:E2:40:70:E7:87:92:3C:6C:7A:66:A5:F4:8E:12:85:57 Authority key identifier: 68:20:E5:36:94:26:12:F3:4B:03:73:DD:1F:77:ED:23:4F:FD:F3:5C Certificate issuer: /CN=A911F8C9/serialNumber=6820E536942612F34B0373DD1F77ED234FFDF35C Certificate serial: 0440 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aCDlNpQmEvNLA3PdH3ftI0_981w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911F8C9/4B4D712A5CDB11ECBD54F70CC4F9AE02/aCDlNpQmEvNLA3PdH3ftI0_981w.mft Manifest number: 043B Signing time: Sat 31 May 2025 00:29:50 +0000 Manifest this update: Sat 31 May 2025 00:29:49 +0000 Manifest next update: Sat 07 Jun 2025 00:29:49 +0000 Files and hashes: 1: aCDlNpQmEvNLA3PdH3ftI0_981w.crl (hash: O+L15mLsq9HWkzixoxvBJbHAzjwrzqonJfcpO8fPq3A=) 2: 0DC4BC0C5CDE11ECB486850FC4F9AE02.roa (hash: FClvPvzoTDmX/ZzIigyjz+g4sikyQbqSLF5/K9p2wok=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911F8C9/4B4D712A5CDB11ECBD54F70CC4F9AE02/aCDlNpQmEvNLA3PdH3ftI0_981w.crl rsync://rpki.apnic.net/member_repository/A911F8C9/4B4D712A5CDB11ECBD54F70CC4F9AE02/aCDlNpQmEvNLA3PdH3ftI0_981w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aCDlNpQmEvNLA3PdH3ftI0_981w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 00:29:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1088 (0x440) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911F8C9, serialNumber=6820E536942612F34B0373DD1F77ED234FFDF35C Validity Not Before: May 31 00:29:49 2025 GMT Not After : Jun 7 00:29:49 2025 GMT Subject: CN=683a4d7d-ee33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:cc:92:54:20:be:34:69:b1:1a:08:cd:5b:7a: 46:bf:b8:13:38:0f:73:6b:1c:ba:a7:a6:9c:07:ab: cf:03:2d:07:97:2d:1e:fa:2d:14:db:26:1f:60:74: 60:a5:e3:ba:af:7a:75:58:22:5b:ef:73:9c:22:2f: 78:e6:18:0b:27:bd:23:3b:27:3d:75:b0:9e:16:62: 09:84:9d:05:35:fd:50:0c:0d:af:af:7f:35:7d:14: e5:61:bd:0d:86:76:b8:d5:6d:5f:17:d1:d0:1e:8c: a9:05:a7:9a:27:08:b8:65:1a:d5:86:3e:e8:cd:d2: db:08:29:ea:9a:6d:c9:62:0e:e7:bc:2b:1a:0c:60: 7b:1a:9c:5f:81:fe:bf:11:68:7a:96:f5:94:8c:c2: 58:05:48:80:1b:9f:db:f8:69:02:c6:70:1e:3d:a0: 43:df:3c:c5:04:ad:0f:ec:c1:5c:dc:33:34:f6:48: a1:e7:9d:c9:c4:c9:b0:b5:84:a7:f5:a9:32:6e:73: f8:d4:2b:32:ba:6a:f1:85:df:78:a4:db:cf:78:35: 71:f2:e4:4c:45:c7:16:dd:de:bd:01:01:46:76:7d: bd:2f:84:7f:0b:cf:9d:f2:93:3e:f8:f5:96:07:19: 93:75:b3:c7:a6:7e:95:a4:14:72:69:bf:b6:d6:88: 36:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:27:4E:4E:E2:40:70:E7:87:92:3C:6C:7A:66:A5:F4:8E:12:85:57 X509v3 Authority Key Identifier: keyid:68:20:E5:36:94:26:12:F3:4B:03:73:DD:1F:77:ED:23:4F:FD:F3:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911F8C9/4B4D712A5CDB11ECBD54F70CC4F9AE02/aCDlNpQmEvNLA3PdH3ftI0_981w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aCDlNpQmEvNLA3PdH3ftI0_981w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F8C9/4B4D712A5CDB11ECBD54F70CC4F9AE02/aCDlNpQmEvNLA3PdH3ftI0_981w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:67:05:40:ae:9d:47:33:14:fb:e2:8a:67:43:8b:1f:d0:6a: 03:cc:6a:7c:20:c5:82:cf:3c:90:32:56:c8:fe:39:9e:1d:b8: 5b:b5:2a:6c:6f:d5:28:53:e4:17:eb:33:0c:a0:c1:e2:dd:f9: d8:63:1f:c6:7e:f0:ac:c5:6a:8f:17:5a:9c:52:e8:2a:5f:06: 78:3b:32:ff:2b:bb:2b:90:71:ea:41:6a:8a:13:8f:0a:f4:84: 98:77:cd:3f:03:30:49:e3:36:6d:d6:75:79:32:01:ee:ab:41: 36:82:5e:48:e3:32:f5:b5:a8:d3:97:85:85:79:9d:95:6f:fb: 01:ff:59:ed:93:86:df:7e:07:da:fd:17:4f:64:69:0c:4b:46: 93:a7:99:8c:78:7d:70:18:98:20:bb:4b:90:bf:0e:c8:26:5a: 66:db:f1:33:aa:da:87:fa:74:20:c0:b7:d2:dd:7b:2b:a9:3e: 30:1a:8d:54:2e:9d:be:e0:38:a8:9e:e8:07:77:d6:b9:4d:79: a9:02:cb:80:8d:e1:c5:64:cb:1a:47:9d:c8:0b:ed:08:87:96: 02:66:e9:05:26:ac:6d:da:ac:65:5b:cf:03:48:9e:95:c0:22: 39:68:d9:42:9e:17:17:72:d9:62:9f:66:28:dc:c7:56:df:d9: 30:d6:6f:c8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBEAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUY4QzkxMTAvBgNVBAUTKDY4MjBFNTM2OTQyNjEyRjM0QjAzNzNERDFGNzdFRDIz NEZGREYzNUMwHhcNMjUwNTMxMDAyOTQ5WhcNMjUwNjA3MDAyOTQ5WjAYMRYwFAYD VQQDEw02ODNhNGQ3ZC1lZTMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAssySVCC+NGmxGgjNW3pGv7gTOA9zaxy6p6acB6vPAy0Hly0e+i0U2yYfYHRg peO6r3p1WCJb73OcIi945hgLJ70jOyc9dbCeFmIJhJ0FNf1QDA2vr381fRTlYb0N hna41W1fF9HQHoypBaeaJwi4ZRrVhj7ozdLbCCnqmm3JYg7nvCsaDGB7Gpxfgf6/ EWh6lvWUjMJYBUiAG5/b+GkCxnAePaBD3zzFBK0P7MFc3DM09kih553JxMmwtYSn 9akybnP41Csyumrxhd94pNvPeDVx8uRMRccW3d69AQFGdn29L4R/C8+d8pM++PWW BxmTdbPHpn6VpBRyab+21og2vQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMsnTk7i QHDnh5I8bHpmpfSOEoVXMB8GA1UdIwQYMBaAFGgg5TaUJhLzSwNz3R937SNP/fNc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRjhDOS80QjRENzEyQTVD REIxMUVDQkQ1NEY3MENDNEY5QUUwMi9hQ0RsTnBRbUV2TkxBM1BkSDNmdEkwXzk4 MXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FDRGxOcFFtRXZOTEEzUGRIM2Z0STBfOTgxdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RjhDOS80QjRENzEyQTVDREIxMUVDQkQ1NEY3MENDNEY5QUUwMi9hQ0RsTnBRbUV2 TkxBM1BkSDNmdEkwXzk4MXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCnZwVArp1HMxT74opnQ4sf0GoDzGp8IMWCzzyQMlbI/jmeHbhbtSps b9UoU+QX6zMMoMHi3fnYYx/GfvCsxWqPF1qcUugqXwZ4OzL/K7srkHHqQWqKE48K 9ISYd80/AzBJ4zZt1nV5MgHuq0E2gl5I4zL1tajTl4WFeZ2Vb/sB/1ntk4bffgfa /RdPZGkMS0aTp5mMeH1wGJggu0uQvw7IJlpm2/EzqtqH+nQgwLfS3XsrqT4wGo1U Lp2+4DionugHd9a5TXmpAsuAjeHFZMsaR53IC+0Ih5YCZukFJqxt2qxlW88DSJ6V wCI5aNlCnhcXctlin2Yo3MdW39kw1m/I -----END CERTIFICATE-----Generated at Sat May 31 17:16:18 2025 by rpki-client