$ rpki-client -vvf rpki.apnic.net/member_repository/A91324D4/1A6E751CA71F11EB848AF030C4F9AE02/v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.mft File: v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.mft (raw, json) Hash identifier: fGth/apBAIyXP4n9NerIEQ8UhGbP7GAq+Wabwz4gLZo= Subject key identifier: 6A:08:7D:6F:FF:FE:57:5F:43:4D:4A:75:02:9A:6D:49:73:D5:F5:74 Authority key identifier: BF:74:E7:E6:14:D4:B2:2E:4B:7F:E4:0B:6B:EC:EF:D1:70:5A:CF:C1 Certificate issuer: /CN=A91324D4/serialNumber=BF74E7E614D4B22E4B7FE40B6BECEFD1705ACFC1 Certificate serial: 0636 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91324D4/1A6E751CA71F11EB848AF030C4F9AE02/v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.mft Manifest number: 061A Signing time: Fri 30 May 2025 23:04:45 +0000 Manifest this update: Fri 30 May 2025 23:04:44 +0000 Manifest next update: Fri 06 Jun 2025 23:04:44 +0000 Files and hashes: 1: v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.crl (hash: THTJFA9jtsX+rnVDF39Dta5MdIDZqRZt+HP99F7IQHA=) 2: DD643EBCE00C11ED8C71C709C4F9AE02.roa (hash: tNDEmIxy5H25Y3zlO9rXFUC8hfA45BbpRsPK4rM8u7s=) 3: 8A88CCDC667911EE9D7DA167C4F9AE02.roa (hash: 9S57tdyd45wHLsInsTnI/GZly1K4hEDfcQJTNYuSOFQ=) 4: 236C6906A73F11EBA1751E33C4F9AE02.roa (hash: JyPetDHabfuANEcar/HU38MZvBtPYhC6A1gULHuakq8=) 5: 78345D00E01211ED8766DC5CC4F9AE02.roa (hash: CGANdjpj39CJWyCZVGb4EKEpCCBaXu9btf2XqDDOLY4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91324D4/1A6E751CA71F11EB848AF030C4F9AE02/v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.crl rsync://rpki.apnic.net/member_repository/A91324D4/1A6E751CA71F11EB848AF030C4F9AE02/v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 23:04:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1590 (0x636) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91324D4, serialNumber=BF74E7E614D4B22E4B7FE40B6BECEFD1705ACFC1 Validity Not Before: May 30 23:04:44 2025 GMT Not After : Jun 6 23:04:44 2025 GMT Subject: CN=683a398c-5896 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:b8:a5:3a:5e:a1:12:8f:f9:b3:e0:e3:98:ff: 92:b4:71:4c:63:0a:64:d4:b9:be:50:94:f5:ab:79: 3c:c8:1e:ba:dc:70:a9:c9:17:b5:18:c7:3e:8f:fe: 42:e5:20:9a:45:b2:00:12:83:8e:cf:14:a7:26:93: c4:af:a7:13:f6:b3:13:ff:21:26:99:5e:df:ba:a8: 6d:4c:87:9d:f5:dd:a4:8f:e4:76:21:7d:64:6d:bc: 0f:4c:73:fb:6c:dd:61:f7:ac:29:eb:b6:49:9a:c6: fb:1e:1e:07:04:bf:75:4e:f8:41:0a:b0:c6:56:67: e0:b1:80:4c:00:ab:b9:5b:41:a7:5f:ff:de:9f:d2: 89:ac:ae:6b:c3:e2:fb:83:63:d0:15:bf:c8:d4:2b: d7:66:60:2f:5d:29:bf:d1:a1:02:b7:d9:a8:e3:ce: d0:fc:a7:4a:ff:44:82:7d:43:64:54:8c:23:86:16: 10:fc:5c:18:8a:58:b1:cf:f0:55:ca:c3:c3:e4:ad: d5:19:c4:e2:1c:6d:a7:a3:84:25:74:08:d4:02:67: 12:9c:e0:af:d4:1a:03:e9:49:ef:a6:06:98:84:ea: b1:b3:67:a7:b4:6f:c7:04:78:75:9e:fd:59:59:b0: 00:81:5e:e2:b6:35:61:62:c7:a1:41:bc:2b:f7:7b: f7:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:08:7D:6F:FF:FE:57:5F:43:4D:4A:75:02:9A:6D:49:73:D5:F5:74 X509v3 Authority Key Identifier: keyid:BF:74:E7:E6:14:D4:B2:2E:4B:7F:E4:0B:6B:EC:EF:D1:70:5A:CF:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91324D4/1A6E751CA71F11EB848AF030C4F9AE02/v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91324D4/1A6E751CA71F11EB848AF030C4F9AE02/v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:6d:ce:86:d1:f2:e3:cc:6a:66:a1:6a:a1:64:3f:18:59:35: 58:23:e9:4c:8c:a6:0c:55:56:65:94:85:b7:55:e1:15:7e:e0: 14:6b:9a:74:1b:55:4f:99:01:c3:21:0d:4c:99:36:8a:63:bb: a8:18:bc:7d:b7:29:12:ec:03:b9:38:52:9d:1d:14:45:d6:16: ce:2b:45:c0:b5:01:77:86:d8:47:41:d1:4f:41:74:52:06:bf: 21:fc:db:9c:e3:c5:71:9f:bf:79:cc:4b:6a:7c:81:b4:c7:f6: 0b:7a:40:f9:07:c0:68:d6:ee:f6:9f:96:28:6e:e2:de:9c:c7: 52:c9:f7:30:d4:67:eb:32:27:f2:d2:77:84:f4:82:50:f5:f8: 72:a6:25:ce:4d:a5:65:fc:a3:3c:91:77:da:6a:ad:64:12:c7: 3e:93:57:6d:44:bc:57:3f:b2:21:81:1b:bb:84:06:4c:f0:88: e1:c3:fd:17:a5:17:bb:a9:10:88:97:73:f8:d9:f8:db:28:62: 6c:2c:62:b4:51:87:61:1b:ae:c4:4b:20:af:78:cf:f0:91:35: 24:33:77:3b:e3:4c:ca:db:9d:7d:c5:db:6e:32:cb:2b:29:95: f2:25:a1:53:f3:bb:f6:8f:97:75:4c:d3:32:b3:86:46:d5:9d: 45:62:f8:8e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBjYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzI0RDQxMTAvBgNVBAUTKEJGNzRFN0U2MTRENEIyMkU0QjdGRTQwQjZCRUNFRkQx NzA1QUNGQzEwHhcNMjUwNTMwMjMwNDQ0WhcNMjUwNjA2MjMwNDQ0WjAYMRYwFAYD VQQDEw02ODNhMzk4Yy01ODk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0bilOl6hEo/5s+DjmP+StHFMYwpk1Lm+UJT1q3k8yB663HCpyRe1GMc+j/5C 5SCaRbIAEoOOzxSnJpPEr6cT9rMT/yEmmV7fuqhtTIed9d2kj+R2IX1kbbwPTHP7 bN1h96wp67ZJmsb7Hh4HBL91TvhBCrDGVmfgsYBMAKu5W0GnX//en9KJrK5rw+L7 g2PQFb/I1CvXZmAvXSm/0aECt9mo487Q/KdK/0SCfUNkVIwjhhYQ/FwYilixz/BV ysPD5K3VGcTiHG2no4QldAjUAmcSnOCv1BoD6UnvpgaYhOqxs2entG/HBHh1nv1Z WbAAgV7itjVhYsehQbwr93v3KQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGoIfW// /ldfQ01KdQKabUlz1fV0MB8GA1UdIwQYMBaAFL905+YU1LIuS3/kC2vs79FwWs/B MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMjRENC8xQTZFNzUxQ0E3 MUYxMUVCODQ4QUYwMzBDNEY5QUUwMi92M1RuNWhUVXNpNUxmLVFMYS16djBYQmF6 OEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3YzVG41aFRVc2k1TGYtUUxhLXp2MFhCYXo4RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MjRENC8xQTZFNzUxQ0E3MUYxMUVCODQ4QUYwMzBDNEY5QUUwMi92M1RuNWhUVXNp NUxmLVFMYS16djBYQmF6OEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQADbc6G0fLjzGpmoWqhZD8YWTVYI+lMjKYMVVZllIW3VeEVfuAUa5p0 G1VPmQHDIQ1MmTaKY7uoGLx9tykS7AO5OFKdHRRF1hbOK0XAtQF3hthHQdFPQXRS Br8h/Nuc48Vxn795zEtqfIG0x/YLekD5B8Bo1u72n5YobuLenMdSyfcw1GfrMify 0neE9IJQ9fhypiXOTaVl/KM8kXfaaq1kEsc+k1dtRLxXP7IhgRu7hAZM8Ijhw/0X pRe7qRCIl3P42fjbKGJsLGK0UYdhG67ESyCveM/wkTUkM3c740zK2519xdtuMssr KZXyJaFT87v2j5d1TNMys4ZG1Z1FYviO -----END CERTIFICATE-----Generated at Sat May 31 16:57:52 2025 by rpki-client