$ rpki-client -vvf rpki.apnic.net/member_repository/A91828F3/C27958B8A5CD11EDAECE1278C4F9AE02/dmYQCNrIkoTFN_Lc4KkgupTgeM8.mft File: dmYQCNrIkoTFN_Lc4KkgupTgeM8.mft (raw, json) Hash identifier: Ts+W3yVRJI5/JQbgIapTPuHT7nMSqhksJGekQuk+beI= Subject key identifier: A0:2E:04:C7:0F:B1:A2:A4:BC:71:54:4B:24:35:82:BE:A1:49:87:79 Authority key identifier: 76:66:10:08:DA:C8:92:84:C5:37:F2:DC:E0:A9:20:BA:94:E0:78:CF Certificate issuer: /CN=A91828F3/serialNumber=76661008DAC89284C537F2DCE0A920BA94E078CF Certificate serial: 01B5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dmYQCNrIkoTFN_Lc4KkgupTgeM8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91828F3/C27958B8A5CD11EDAECE1278C4F9AE02/dmYQCNrIkoTFN_Lc4KkgupTgeM8.mft Manifest number: 01B2 Signing time: Tue 03 Jun 2025 02:55:39 +0000 Manifest this update: Tue 03 Jun 2025 02:55:39 +0000 Manifest next update: Tue 10 Jun 2025 02:55:39 +0000 Files and hashes: 1: dmYQCNrIkoTFN_Lc4KkgupTgeM8.crl (hash: l+2kjPgBeqRGLxcLed/0v3uqSQcNyQueIsipkASr84k=) 2: 05E078B2A5D211EDBC42DA12C4F9AE02.roa (hash: 949cDrd9O3ejSTUuoxYP0yKZgFwRWnkdff/N9Ay5rNE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91828F3/C27958B8A5CD11EDAECE1278C4F9AE02/dmYQCNrIkoTFN_Lc4KkgupTgeM8.crl rsync://rpki.apnic.net/member_repository/A91828F3/C27958B8A5CD11EDAECE1278C4F9AE02/dmYQCNrIkoTFN_Lc4KkgupTgeM8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dmYQCNrIkoTFN_Lc4KkgupTgeM8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 02:55:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 437 (0x1b5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91828F3, serialNumber=76661008DAC89284C537F2DCE0A920BA94E078CF Validity Not Before: Jun 3 02:55:39 2025 GMT Not After : Jun 10 02:55:39 2025 GMT Subject: CN=683e642b-acf5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:d5:44:8b:3b:ac:01:c9:87:2f:d4:7f:1a:ec: a9:08:69:f8:2b:a6:98:5a:83:63:8a:20:4a:a6:0d: 4e:f0:60:db:a6:35:3f:8e:08:4b:6b:f5:68:34:1f: 4c:cd:93:41:81:52:eb:5d:1e:05:1f:0f:3a:1f:11: 69:ac:de:ab:5f:08:e0:e1:f2:b3:49:a7:f2:9c:e2: cd:de:6c:ef:5a:21:e8:32:8a:cb:2a:81:62:88:9d: 81:62:e5:69:99:ad:99:fb:84:54:d8:78:8c:43:50: cc:1d:7f:90:37:b6:9e:89:fb:d2:8d:67:3b:95:9e: f3:54:3d:41:21:7e:bf:65:de:3d:de:b5:6b:f5:2f: 16:a1:c6:b2:b9:01:57:42:ee:46:0b:74:1d:cb:b1: e4:dc:a9:95:35:b7:ce:5a:f4:1d:0a:2a:e0:88:14: 6b:45:93:cc:25:67:e6:d1:de:6c:5a:9d:f8:19:b7: 77:70:cc:a8:89:9f:be:08:bf:3d:5d:7b:1c:cd:97: e2:2c:8c:43:1b:1a:77:52:6e:62:fb:c9:0c:1d:1d: 9f:b7:22:25:06:86:f6:b1:94:37:24:9b:5f:d8:d6: 88:d9:8a:b3:97:15:58:02:ae:d6:94:53:11:b4:09: e4:23:61:f4:47:91:ad:b4:10:93:c0:32:97:7b:55: cb:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:2E:04:C7:0F:B1:A2:A4:BC:71:54:4B:24:35:82:BE:A1:49:87:79 X509v3 Authority Key Identifier: keyid:76:66:10:08:DA:C8:92:84:C5:37:F2:DC:E0:A9:20:BA:94:E0:78:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91828F3/C27958B8A5CD11EDAECE1278C4F9AE02/dmYQCNrIkoTFN_Lc4KkgupTgeM8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dmYQCNrIkoTFN_Lc4KkgupTgeM8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91828F3/C27958B8A5CD11EDAECE1278C4F9AE02/dmYQCNrIkoTFN_Lc4KkgupTgeM8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:9e:47:76:97:5e:7f:9f:5e:b1:76:1e:c4:ad:4a:f0:8d:2e: d2:c4:11:05:db:21:6c:c8:6f:d0:d5:75:47:84:ff:b8:e4:55: 9b:e2:71:3b:fa:81:97:b7:00:0d:cd:65:8a:35:1f:fc:b0:ee: 4a:22:55:eb:c1:d5:d1:a8:58:bd:c1:d0:42:cc:ff:b5:2e:09: 76:8e:2c:01:a2:44:69:cd:fd:a3:71:6b:61:c5:9a:3b:74:91: 6c:24:9b:ce:c2:e5:43:ba:33:29:7a:85:ab:18:19:d7:cd:fb: 3b:99:fa:50:2f:ef:20:67:4f:cc:90:23:1a:bc:63:d3:4e:cb: 7f:79:62:8b:72:f3:13:9a:1b:95:4a:73:36:13:3b:0d:17:16: 16:fe:48:9e:a9:71:ba:4f:f5:d1:2c:05:0d:74:0c:be:f1:94: 57:8f:68:f7:9d:68:88:0f:ba:11:93:94:20:5a:9d:4e:a0:ce: f8:88:f3:08:12:c7:0c:9b:59:87:78:c7:e3:cf:64:c9:cc:b5: fb:2d:16:69:87:6c:43:ae:ef:ac:10:37:0e:d7:74:6a:db:8a: d3:30:17:d4:e0:7a:2c:7b:a2:78:c3:32:b2:26:03:f3:68:b3: a7:29:59:69:01:23:b7:34:e7:05:4c:62:8d:f6:3f:ee:c2:6e: db:d4:58:41 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODI4RjMxMTAvBgNVBAUTKDc2NjYxMDA4REFDODkyODRDNTM3RjJEQ0UwQTkyMEJB OTRFMDc4Q0YwHhcNMjUwNjAzMDI1NTM5WhcNMjUwNjEwMDI1NTM5WjAYMRYwFAYD VQQDEw02ODNlNjQyYi1hY2Y1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6dVEizusAcmHL9R/GuypCGn4K6aYWoNjiiBKpg1O8GDbpjU/jghLa/VoNB9M zZNBgVLrXR4FHw86HxFprN6rXwjg4fKzSafynOLN3mzvWiHoMorLKoFiiJ2BYuVp ma2Z+4RU2HiMQ1DMHX+QN7aeifvSjWc7lZ7zVD1BIX6/Zd493rVr9S8WocayuQFX Qu5GC3Qdy7Hk3KmVNbfOWvQdCirgiBRrRZPMJWfm0d5sWp34Gbd3cMyoiZ++CL89 XXsczZfiLIxDGxp3Um5i+8kMHR2ftyIlBob2sZQ3JJtf2NaI2YqzlxVYAq7WlFMR tAnkI2H0R5GttBCTwDKXe1XLhwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKAuBMcP saKkvHFUSyQ1gr6hSYd5MB8GA1UdIwQYMBaAFHZmEAjayJKExTfy3OCpILqU4HjP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MjhGMy9DMjc5NThCOEE1 Q0QxMUVEQUVDRTEyNzhDNEY5QUUwMi9kbVlRQ05ySWtvVEZOX0xjNEtrZ3VwVGdl TTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RtWVFDTnJJa29URk5fTGM0S2tndXBUZ2VNOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MjhGMy9DMjc5NThCOEE1Q0QxMUVEQUVDRTEyNzhDNEY5QUUwMi9kbVlRQ05ySWtv VEZOX0xjNEtrZ3VwVGdlTTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBenkd2l15/n16xdh7ErUrwjS7SxBEF2yFsyG/Q1XVHhP+45FWb4nE7 +oGXtwANzWWKNR/8sO5KIlXrwdXRqFi9wdBCzP+1Lgl2jiwBokRpzf2jcWthxZo7 dJFsJJvOwuVDujMpeoWrGBnXzfs7mfpQL+8gZ0/MkCMavGPTTst/eWKLcvMTmhuV SnM2EzsNFxYW/kieqXG6T/XRLAUNdAy+8ZRXj2j3nWiID7oRk5QgWp1OoM74iPMI EscMm1mHeMfjz2TJzLX7LRZph2xDru+sEDcO13Rq24rTMBfU4Hose6J4wzKyJgPz aLOnKVlpASO3NOcFTGKN9j/uwm7b1FhB -----END CERTIFICATE-----Generated at Wed Jun 4 00:16:35 2025 by rpki-client