$ rpki-client -vvf rpki.apnic.net/member_repository/A91317E5/DB00F802A0FA11EBBC09943AC4F9AE02/RSWIQffwT7Odkdo-P6u1KehSj0k.mft File: RSWIQffwT7Odkdo-P6u1KehSj0k.mft (raw, json) Hash identifier: Y/qbFDbZ8vhmzdvq5eOJPlfavAgnbe+OjQyDb5hQUps= Subject key identifier: 9B:33:04:EC:90:B6:0F:0B:42:74:AB:99:D3:1E:3F:8D:44:12:D7:D3 Authority key identifier: 45:25:88:41:F7:F0:4F:B3:9D:91:DA:3E:3F:AB:B5:29:E8:52:8F:49 Certificate issuer: /CN=A91317E5/serialNumber=45258841F7F04FB39D91DA3E3FABB529E8528F49 Certificate serial: 0622 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RSWIQffwT7Odkdo-P6u1KehSj0k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91317E5/DB00F802A0FA11EBBC09943AC4F9AE02/RSWIQffwT7Odkdo-P6u1KehSj0k.mft Manifest number: 061A Signing time: Fri 30 May 2025 23:02:15 +0000 Manifest this update: Fri 30 May 2025 23:02:15 +0000 Manifest next update: Fri 06 Jun 2025 23:02:15 +0000 Files and hashes: 1: RSWIQffwT7Odkdo-P6u1KehSj0k.crl (hash: knolpgsw4Mn3KEFimokkqsRUDd/q7Cp7BOtYM/EkpWE=) 2: 53E7583E3D0511EF99169B21C4F9AE02.roa (hash: qCXzkeKuPVL2AFCLekUycL2ac1PSk1oLXnC7v+nyDIA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91317E5/DB00F802A0FA11EBBC09943AC4F9AE02/RSWIQffwT7Odkdo-P6u1KehSj0k.crl rsync://rpki.apnic.net/member_repository/A91317E5/DB00F802A0FA11EBBC09943AC4F9AE02/RSWIQffwT7Odkdo-P6u1KehSj0k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RSWIQffwT7Odkdo-P6u1KehSj0k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 23:02:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1570 (0x622) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91317E5, serialNumber=45258841F7F04FB39D91DA3E3FABB529E8528F49 Validity Not Before: May 30 23:02:15 2025 GMT Not After : Jun 6 23:02:15 2025 GMT Subject: CN=683a38f7-1b59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:08:60:5e:4c:2f:0c:70:05:38:45:de:7c:7e: 6c:43:af:d6:31:60:d7:fb:a1:f1:1c:1a:ce:ab:7e: 21:d1:5d:38:8a:f8:06:de:98:24:56:03:c4:a9:31: ac:72:ca:ce:86:2c:46:9d:48:b5:29:4b:d3:57:ad: fa:72:9e:d7:4f:97:40:f8:34:bb:1a:21:aa:ef:84: e5:e6:e8:be:ce:0a:57:13:06:bf:3a:00:21:90:56: 62:d3:83:cd:ea:f0:ba:7d:f2:07:fd:f5:03:db:54: 01:3f:21:92:ee:3c:87:5f:80:66:91:96:83:ed:ba: eb:aa:d8:b6:a1:7d:3a:8a:84:2a:05:99:e7:1a:d1: 39:45:1d:ef:1e:06:00:89:52:a1:47:23:0d:3d:43: 31:cb:a3:1a:c7:ef:e8:e3:01:6b:8a:80:7c:e3:28: 0c:19:d2:a4:96:76:72:c3:c2:6c:46:48:ea:09:08: 4c:31:93:77:5c:e3:26:d9:8d:d8:21:0f:ac:d6:d3: 0b:2a:fe:d7:fd:eb:5a:ac:4b:a7:fe:a6:91:65:6a: 0f:31:ed:7a:33:bf:54:64:88:f7:c8:03:4c:58:71: 72:12:0f:7b:4e:d0:b0:07:2d:6c:38:62:1e:76:85: ab:50:95:c1:e8:cb:7f:b9:58:50:3e:51:b7:a6:d5: c7:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:33:04:EC:90:B6:0F:0B:42:74:AB:99:D3:1E:3F:8D:44:12:D7:D3 X509v3 Authority Key Identifier: keyid:45:25:88:41:F7:F0:4F:B3:9D:91:DA:3E:3F:AB:B5:29:E8:52:8F:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91317E5/DB00F802A0FA11EBBC09943AC4F9AE02/RSWIQffwT7Odkdo-P6u1KehSj0k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RSWIQffwT7Odkdo-P6u1KehSj0k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91317E5/DB00F802A0FA11EBBC09943AC4F9AE02/RSWIQffwT7Odkdo-P6u1KehSj0k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:5a:eb:01:4f:b8:e9:5d:cd:02:8d:9b:c6:86:92:1b:4a:12: 36:a0:2b:04:17:7e:f0:be:21:bf:55:94:2a:3a:4f:55:2c:0b: ea:37:ca:74:ff:78:da:20:e8:1a:21:a6:b2:cf:d9:fe:b9:8d: 04:24:8f:ab:dd:ab:d0:0a:61:6e:52:3e:c8:b2:97:e3:9b:fe: 15:36:69:e7:42:25:57:2e:df:11:f4:98:e9:bc:ef:30:c9:6e: b1:7d:7a:53:bc:50:15:0e:b3:9d:fc:bc:f6:cc:9c:e0:72:ba: eb:85:bb:c8:eb:d6:43:5f:4f:29:c7:f8:3e:ff:eb:7a:cc:fb: 5f:e1:52:44:20:c5:70:36:44:34:d3:57:d7:1e:42:b6:dd:26: ae:12:d3:c4:c9:89:c4:f4:01:96:0d:ee:35:05:c7:0e:86:6a: 09:55:9f:ee:26:88:e7:42:67:18:cc:67:eb:e6:5e:db:10:11: 9e:c0:07:ca:61:1d:2e:6d:a2:f9:f1:9d:69:c5:7c:f5:4c:a9: 35:a0:0e:ac:b8:cf:80:98:cd:c7:64:94:a7:ae:8f:2f:a2:3c: ec:b0:20:70:42:97:fd:9b:2d:9b:2e:84:be:69:51:6b:bb:f6: a4:c9:5b:e8:c0:aa:ed:8b:46:95:dd:bc:74:67:ca:12:d5:fc: 3c:05:01:8b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBiIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzE3RTUxMTAvBgNVBAUTKDQ1MjU4ODQxRjdGMDRGQjM5RDkxREEzRTNGQUJCNTI5 RTg1MjhGNDkwHhcNMjUwNTMwMjMwMjE1WhcNMjUwNjA2MjMwMjE1WjAYMRYwFAYD VQQDEw02ODNhMzhmNy0xYjU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxghgXkwvDHAFOEXefH5sQ6/WMWDX+6HxHBrOq34h0V04ivgG3pgkVgPEqTGs csrOhixGnUi1KUvTV636cp7XT5dA+DS7GiGq74Tl5ui+zgpXEwa/OgAhkFZi04PN 6vC6ffIH/fUD21QBPyGS7jyHX4BmkZaD7brrqti2oX06ioQqBZnnGtE5RR3vHgYA iVKhRyMNPUMxy6Max+/o4wFrioB84ygMGdKklnZyw8JsRkjqCQhMMZN3XOMm2Y3Y IQ+s1tMLKv7X/etarEun/qaRZWoPMe16M79UZIj3yANMWHFyEg97TtCwBy1sOGIe doWrUJXB6Mt/uVhQPlG3ptXHyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJszBOyQ tg8LQnSrmdMeP41EEtfTMB8GA1UdIwQYMBaAFEUliEH38E+znZHaPj+rtSnoUo9J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTdFNS9EQjAwRjgwMkEw RkExMUVCQkMwOTk0M0FDNEY5QUUwMi9SU1dJUWZmd1Q3T2RrZG8tUDZ1MUtlaFNq MGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JTV0lRZmZ3VDdPZGtkby1QNnUxS2VoU2oway5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MTdFNS9EQjAwRjgwMkEwRkExMUVCQkMwOTk0M0FDNEY5QUUwMi9SU1dJUWZmd1Q3 T2RrZG8tUDZ1MUtlaFNqMGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAWWusBT7jpXc0CjZvGhpIbShI2oCsEF37wviG/VZQqOk9VLAvqN8p0 /3jaIOgaIaayz9n+uY0EJI+r3avQCmFuUj7Ispfjm/4VNmnnQiVXLt8R9JjpvO8w yW6xfXpTvFAVDrOd/Lz2zJzgcrrrhbvI69ZDX08px/g+/+t6zPtf4VJEIMVwNkQ0 01fXHkK23SauEtPEyYnE9AGWDe41BccOhmoJVZ/uJojnQmcYzGfr5l7bEBGewAfK YR0ubaL58Z1pxXz1TKk1oA6suM+AmM3HZJSnro8vojzssCBwQpf9my2bLoS+aVFr u/akyVvowKrti0aV3bx0Z8oS1fw8BQGL -----END CERTIFICATE-----Generated at Sat May 31 16:45:51 2025 by rpki-client