$ rpki-client -vvf rpki.apnic.net/member_repository/A91836DB/51BE0124E45E11EFA1562846C4F9AE02/u1Bd_zLs1JK_Hv9_45TxKJCqZzQ.mft File: u1Bd_zLs1JK_Hv9_45TxKJCqZzQ.mft (raw, json) Hash identifier: B+mjBeWkAqTfrNDJrUZzT0datumbP2KdqnA2GX/+aHo= Subject key identifier: CE:F3:84:0F:89:90:E6:08:CD:63:D5:47:30:B0:48:28:3E:BE:C5:20 Authority key identifier: BB:50:5D:FF:32:EC:D4:92:BF:1E:FF:7F:E3:94:F1:28:90:AA:67:34 Certificate issuer: /CN=A91836DB/serialNumber=BB505DFF32ECD492BF1EFF7FE394F12890AA6734 Certificate serial: 3E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u1Bd_zLs1JK_Hv9_45TxKJCqZzQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91836DB/51BE0124E45E11EFA1562846C4F9AE02/u1Bd_zLs1JK_Hv9_45TxKJCqZzQ.mft Manifest number: 3D Signing time: Tue 03 Jun 2025 07:21:49 +0000 Manifest this update: Tue 03 Jun 2025 07:21:49 +0000 Manifest next update: Tue 10 Jun 2025 07:21:49 +0000 Files and hashes: 1: u1Bd_zLs1JK_Hv9_45TxKJCqZzQ.crl (hash: Lt2xjBIFA6/sbpsmI5XJHUktFDB61NDDiljlT3rW2s8=) 2: C7001B70E45E11EFA2243E47C4F9AE02.roa (hash: wGQDHFlAfYrGUZehEya3kdO0mpkCJUDStwU2YZOiDKI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91836DB/51BE0124E45E11EFA1562846C4F9AE02/u1Bd_zLs1JK_Hv9_45TxKJCqZzQ.crl rsync://rpki.apnic.net/member_repository/A91836DB/51BE0124E45E11EFA1562846C4F9AE02/u1Bd_zLs1JK_Hv9_45TxKJCqZzQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u1Bd_zLs1JK_Hv9_45TxKJCqZzQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 07:21:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62 (0x3e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91836DB, serialNumber=BB505DFF32ECD492BF1EFF7FE394F12890AA6734 Validity Not Before: Jun 3 07:21:49 2025 GMT Not After : Jun 10 07:21:49 2025 GMT Subject: CN=683ea28d-1a8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:26:34:e1:18:c9:25:39:d1:06:06:a9:47:5e: f8:34:ca:0d:50:49:ee:a7:22:a2:fb:22:57:cd:36: f5:7f:03:a1:d7:c9:58:94:bb:39:0a:29:fc:66:ab: f6:7f:91:ed:b5:58:fd:9c:99:54:07:af:45:95:80: d6:97:09:68:4d:33:4d:cb:1d:5e:03:ec:c3:ca:c3: 03:16:dd:94:4c:fe:5a:2e:d3:fc:85:f1:e0:7c:00: 9e:dc:b8:d3:9e:34:39:c4:1d:ca:cf:a1:6c:b3:9a: 61:c9:40:ce:0f:d6:30:22:d7:19:9d:b8:75:59:e0: e3:68:0d:2f:7e:c6:c8:f1:6f:35:d5:f3:db:b5:d2: 21:c8:3b:4a:18:8e:83:cf:28:28:ff:44:39:ce:39: 51:4a:ef:fb:b1:d0:8f:71:c8:8b:d1:82:25:05:19: fc:67:e9:bf:8d:0b:7e:52:d5:35:2a:f5:98:9f:9c: 26:c2:e6:b3:0a:e0:6e:46:0b:4c:4d:71:73:fa:00: 5b:b8:11:b7:44:c7:8f:e3:bd:15:12:5b:53:76:89: a6:d9:5c:e2:5f:40:0f:ff:37:02:5a:94:7d:c0:56: 38:a0:f5:cf:fb:62:55:0b:ce:e7:43:6c:f2:c2:6b: 03:08:14:10:b3:34:16:9f:e1:0c:00:1d:c3:47:21: 5a:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:F3:84:0F:89:90:E6:08:CD:63:D5:47:30:B0:48:28:3E:BE:C5:20 X509v3 Authority Key Identifier: keyid:BB:50:5D:FF:32:EC:D4:92:BF:1E:FF:7F:E3:94:F1:28:90:AA:67:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91836DB/51BE0124E45E11EFA1562846C4F9AE02/u1Bd_zLs1JK_Hv9_45TxKJCqZzQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u1Bd_zLs1JK_Hv9_45TxKJCqZzQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91836DB/51BE0124E45E11EFA1562846C4F9AE02/u1Bd_zLs1JK_Hv9_45TxKJCqZzQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:88:9b:85:83:2a:57:34:fa:9c:d8:24:5c:c2:02:5c:6d:b3: f0:d2:84:01:57:cd:84:18:c2:de:fb:58:41:d9:18:49:28:6f: db:f1:f3:5c:f8:99:6b:6a:24:71:25:50:be:75:ab:30:ee:43: 29:de:49:25:ff:ef:28:22:a9:22:58:11:92:5d:35:b7:b4:0f: ba:b6:d6:5f:7c:de:73:f1:56:c9:9e:d3:76:1e:f9:50:47:e9: 6a:ac:e3:26:57:30:e4:de:7e:d1:38:64:a6:0c:5c:26:22:5d: af:6d:58:b5:41:eb:d8:e6:2c:a5:7c:c1:d8:e0:45:07:e2:dc: 1a:43:d8:88:91:d4:d4:20:b9:85:3c:ed:38:6b:ff:23:b9:bc: 6d:d6:85:e1:05:3b:9b:a4:84:13:5a:4e:94:e7:90:60:54:7b: 38:e7:d0:b3:29:65:11:ec:fe:7a:fc:c8:65:01:4d:0d:38:1c: 5a:a3:37:d7:65:47:7d:c3:6e:d2:4c:6c:85:38:b3:86:4d:a9: a1:8a:73:f1:1f:0a:33:c3:22:c6:cf:d6:cc:c4:da:bf:85:c7: a1:b0:d5:05:8f:49:df:6f:eb:3e:0f:e1:7f:74:84:c2:8b:8d: f7:29:cf:be:70:29:84:0e:9a:49:75:4e:b8:bd:39:3d:cb:9b: e1:7e:a4:47 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 MzZEQjExMC8GA1UEBRMoQkI1MDVERkYzMkVDRDQ5MkJGMUVGRjdGRTM5NEYxMjg5 MEFBNjczNDAeFw0yNTA2MDMwNzIxNDlaFw0yNTA2MTAwNzIxNDlaMBgxFjAUBgNV BAMTDTY4M2VhMjhkLTFhOGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDYJjThGMklOdEGBqlHXvg0yg1QSe6nIqL7IlfNNvV/A6HXyViUuzkKKfxmq/Z/ ke21WP2cmVQHr0WVgNaXCWhNM03LHV4D7MPKwwMW3ZRM/lou0/yF8eB8AJ7cuNOe NDnEHcrPoWyzmmHJQM4P1jAi1xmduHVZ4ONoDS9+xsjxbzXV89u10iHIO0oYjoPP KCj/RDnOOVFK7/ux0I9xyIvRgiUFGfxn6b+NC35S1TUq9ZifnCbC5rMK4G5GC0xN cXP6AFu4EbdEx4/jvRUSW1N2iabZXOJfQA//NwJalH3AVjig9c/7YlULzudDbPLC awMIFBCzNBaf4QwAHcNHIVrJAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUzvOED4mQ 5gjNY9VHMLBIKD6+xSAwHwYDVR0jBBgwFoAUu1Bd/zLs1JK/Hv9/45TxKJCqZzQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgzNkRCLzUxQkUwMTI0RTQ1 RTExRUZBMTU2Mjg0NkM0RjlBRTAyL3UxQmRfekxzMUpLX0h2OV80NVR4S0pDcVp6 US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvdTFCZF96THMxSktfSHY5XzQ1VHhLSkNxWnpRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgz NkRCLzUxQkUwMTI0RTQ1RTExRUZBMTU2Mjg0NkM0RjlBRTAyL3UxQmRfekxzMUpL X0h2OV80NVR4S0pDcVp6US5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAACIm4WDKlc0+pzYJFzCAlxts/DShAFXzYQYwt77WEHZGEkob9vx81z4 mWtqJHElUL51qzDuQyneSSX/7ygiqSJYEZJdNbe0D7q21l983nPxVsme03Ye+VBH 6Wqs4yZXMOTeftE4ZKYMXCYiXa9tWLVB69jmLKV8wdjgRQfi3BpD2IiR1NQguYU8 7Thr/yO5vG3WheEFO5ukhBNaTpTnkGBUezjn0LMpZRHs/nr8yGUBTQ04HFqjN9dl R33DbtJMbIU4s4ZNqaGKc/EfCjPDIsbP1szE2r+Fx6Gw1QWPSd9v6z4P4X90hMKL jfcpz75wKYQOmkl1Tri9OT3Lm+F+pEc= -----END CERTIFICATE-----Generated at Wed Jun 4 00:19:26 2025 by rpki-client