$ rpki-client -vvf rpki.apnic.net/member_repository/A91650EA/521D1AD8D76711EEAF22C066C4F9AE02/SyWxRyDwREuz1mj5Y1hDVPf6whM.mft File: SyWxRyDwREuz1mj5Y1hDVPf6whM.mft (raw, json) Hash identifier: RN+LiVkHzKxoF34pzLW32Ge1KYfUgXjyCwTAUo2250E= Subject key identifier: 1A:E6:6E:51:61:D8:B4:65:A1:73:4F:A7:95:12:9F:CD:E4:3A:CF:94 Authority key identifier: 4B:25:B1:47:20:F0:44:4B:B3:D6:68:F9:63:58:43:54:F7:FA:C2:13 Certificate issuer: /CN=A91650EA/serialNumber=4B25B14720F0444BB3D668F963584354F7FAC213 Certificate serial: EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SyWxRyDwREuz1mj5Y1hDVPf6whM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91650EA/521D1AD8D76711EEAF22C066C4F9AE02/SyWxRyDwREuz1mj5Y1hDVPf6whM.mft Manifest number: E8 Signing time: Sat 31 May 2025 04:59:42 +0000 Manifest this update: Sat 31 May 2025 04:59:41 +0000 Manifest next update: Sat 07 Jun 2025 04:59:41 +0000 Files and hashes: 1: SyWxRyDwREuz1mj5Y1hDVPf6whM.crl (hash: oAEXoH96AngpKfRQjNLpLkN0//xAbNMPJNRYArdKlys=) 2: D0F245E0D76711EE99C72C29C4F9AE02.roa (hash: 9VKla165NEuwDujrYh1FdBvK2ZH/U/K5NZJL+RjIV7c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91650EA/521D1AD8D76711EEAF22C066C4F9AE02/SyWxRyDwREuz1mj5Y1hDVPf6whM.crl rsync://rpki.apnic.net/member_repository/A91650EA/521D1AD8D76711EEAF22C066C4F9AE02/SyWxRyDwREuz1mj5Y1hDVPf6whM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SyWxRyDwREuz1mj5Y1hDVPf6whM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 04:59:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 234 (0xea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91650EA, serialNumber=4B25B14720F0444BB3D668F963584354F7FAC213 Validity Not Before: May 31 04:59:41 2025 GMT Not After : Jun 7 04:59:41 2025 GMT Subject: CN=683a8cbd-1859 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:2c:d6:e2:ad:c9:bd:7e:5b:6b:3b:01:db:b8: f2:59:0e:41:84:af:15:41:7b:a2:59:cb:25:ba:3f: 43:81:f5:65:df:0f:9b:9b:35:78:ad:af:ee:8c:90: 88:71:5c:c3:59:d6:a4:74:d4:c8:37:e8:af:72:c8: a6:c5:46:10:41:56:a8:69:60:b2:bc:88:4c:f8:25: 3d:de:39:65:ed:90:c8:66:6d:bc:68:90:71:25:64: 33:8f:86:f6:1c:13:90:a3:c1:1f:9c:2e:79:41:42: d9:07:f7:1c:fd:86:62:8f:37:03:bc:50:eb:6c:2e: 8a:bd:2d:a4:61:ad:38:f5:d8:e8:f3:d8:4f:fb:52: 89:48:4c:7e:33:6c:a5:00:60:6e:87:fe:7e:1c:fc: e6:9d:de:4b:47:5d:02:da:88:9d:52:31:ba:2b:71: 96:03:8d:6a:4e:21:aa:cc:4d:bc:ef:b6:04:12:bc: 21:ce:dc:eb:5b:ef:f1:ed:4c:1d:a0:b9:0f:a4:db: e9:6d:05:c8:7f:9f:10:e5:d0:75:6b:97:6f:10:92: 05:ff:01:57:50:e6:93:82:44:9b:b8:65:06:18:c0: 89:bf:72:18:db:15:50:60:85:f0:7f:82:3c:51:82: c2:af:21:ec:83:76:06:1f:c1:51:70:89:43:e9:4e: e9:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:E6:6E:51:61:D8:B4:65:A1:73:4F:A7:95:12:9F:CD:E4:3A:CF:94 X509v3 Authority Key Identifier: keyid:4B:25:B1:47:20:F0:44:4B:B3:D6:68:F9:63:58:43:54:F7:FA:C2:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91650EA/521D1AD8D76711EEAF22C066C4F9AE02/SyWxRyDwREuz1mj5Y1hDVPf6whM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SyWxRyDwREuz1mj5Y1hDVPf6whM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91650EA/521D1AD8D76711EEAF22C066C4F9AE02/SyWxRyDwREuz1mj5Y1hDVPf6whM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:5e:61:47:ec:a1:df:39:38:92:3e:93:34:39:7c:4f:36:2d: 51:93:0e:ff:ef:ed:02:d1:dc:39:a1:9e:08:68:76:c3:bb:79: e0:82:b1:92:c5:f9:17:a5:38:3d:74:b3:69:ed:7e:1b:a9:6d: 03:e4:47:e6:01:a6:c8:c7:5c:a1:d9:7c:ac:20:a4:2e:14:8c: e2:bc:64:30:a4:59:07:9c:9a:62:a9:ef:db:e0:32:94:eb:e8: 17:f7:08:c5:c4:72:f5:3a:82:49:09:e0:3f:6d:fe:07:25:7f: 5e:93:c2:e0:ac:5b:27:b6:62:d7:b8:b3:62:04:62:81:f2:50: 7e:16:1a:3d:38:53:f3:53:1c:d0:cf:ff:eb:d2:23:27:85:bc: 45:f3:30:ad:f4:e9:c3:56:d7:e7:69:a0:43:cb:cd:b9:17:fe: 1e:d6:c1:4e:63:cf:21:7b:4e:97:4a:5e:82:a3:68:3e:08:d1: a0:0f:a2:68:15:86:4f:e9:ee:73:20:4e:c8:2e:d7:d4:d9:e9: 24:ba:ba:0c:5f:3e:6e:82:fa:57:65:07:9b:ea:be:60:6b:59: 79:72:e6:97:32:a3:6e:11:55:79:8b:dc:7b:bd:9d:9e:25:e7: dd:38:2d:2f:d5:9c:4d:0e:45:bb:68:4f:2d:b3:f5:36:47:37: c8:ad:71:26 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjUwRUExMTAvBgNVBAUTKDRCMjVCMTQ3MjBGMDQ0NEJCM0Q2NjhGOTYzNTg0MzU0 RjdGQUMyMTMwHhcNMjUwNTMxMDQ1OTQxWhcNMjUwNjA3MDQ1OTQxWjAYMRYwFAYD VQQDEw02ODNhOGNiZC0xODU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAySzW4q3JvX5bazsB27jyWQ5BhK8VQXuiWcsluj9DgfVl3w+bmzV4ra/ujJCI cVzDWdakdNTIN+ivcsimxUYQQVaoaWCyvIhM+CU93jll7ZDIZm28aJBxJWQzj4b2 HBOQo8EfnC55QULZB/cc/YZijzcDvFDrbC6KvS2kYa049djo89hP+1KJSEx+M2yl AGBuh/5+HPzmnd5LR10C2oidUjG6K3GWA41qTiGqzE2877YEErwhztzrW+/x7Uwd oLkPpNvpbQXIf58Q5dB1a5dvEJIF/wFXUOaTgkSbuGUGGMCJv3IY2xVQYIXwf4I8 UYLCryHsg3YGH8FRcIlD6U7pkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBrmblFh 2LRloXNPp5USn83kOs+UMB8GA1UdIwQYMBaAFEslsUcg8ERLs9Zo+WNYQ1T3+sIT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTBFQS81MjFEMUFEOEQ3 NjcxMUVFQUYyMkMwNjZDNEY5QUUwMi9TeVd4UnlEd1JFdXoxbWo1WTFoRFZQZjZ3 aE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1N5V3hSeUR3UkV1ejFtajVZMWhEVlBmNndoTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NTBFQS81MjFEMUFEOEQ3NjcxMUVFQUYyMkMwNjZDNEY5QUUwMi9TeVd4UnlEd1JF dXoxbWo1WTFoRFZQZjZ3aE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA4XmFH7KHfOTiSPpM0OXxPNi1Rkw7/7+0C0dw5oZ4IaHbDu3nggrGS xfkXpTg9dLNp7X4bqW0D5EfmAabIx1yh2XysIKQuFIzivGQwpFkHnJpiqe/b4DKU 6+gX9wjFxHL1OoJJCeA/bf4HJX9ek8LgrFsntmLXuLNiBGKB8lB+Fho9OFPzUxzQ z//r0iMnhbxF8zCt9OnDVtfnaaBDy825F/4e1sFOY88he06XSl6Co2g+CNGgD6Jo FYZP6e5zIE7ILtfU2ekkuroMXz5ugvpXZQeb6r5ga1l5cuaXMqNuEVV5i9x7vZ2e JefdOC0v1ZxNDkW7aE8ts/U2RzfIrXEm -----END CERTIFICATE-----Generated at Sat May 31 16:35:50 2025 by rpki-client