$ rpki-client -vvf rpki.apnic.net/member_repository/A91838AE/7070A0F0559B11EBBA117137C4F9AE02/dJQnIYER0vL1pXC5lRfKCOV3NyQ.mft File: dJQnIYER0vL1pXC5lRfKCOV3NyQ.mft (raw, json) Hash identifier: ipXRccM1V5NY0yjitcQa9RJuFwGx8OzoSRNNH3QjA4g= Subject key identifier: 1D:17:5C:54:36:E3:86:2A:56:2D:A2:96:F2:03:F1:5F:54:AD:5B:65 Authority key identifier: 74:94:27:21:81:11:D2:F2:F5:A5:70:B9:95:17:CA:08:E5:77:37:24 Certificate issuer: /CN=A91838AE/serialNumber=749427218111D2F2F5A570B99517CA08E5773724 Certificate serial: 06DD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dJQnIYER0vL1pXC5lRfKCOV3NyQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91838AE/7070A0F0559B11EBBA117137C4F9AE02/dJQnIYER0vL1pXC5lRfKCOV3NyQ.mft Manifest number: 06D6 Signing time: Fri 30 May 2025 22:15:53 +0000 Manifest this update: Fri 30 May 2025 22:15:52 +0000 Manifest next update: Fri 06 Jun 2025 22:15:52 +0000 Files and hashes: 1: dJQnIYER0vL1pXC5lRfKCOV3NyQ.crl (hash: GXw25XzsIrACUcDZF8QnMLv0IJnboqp9vUBvOCK1LoE=) 2: 33EA4CE055AE11EBA5EFA876C4F9AE02.roa (hash: Zjwbd7A/MXOwRReQkUKden3QdXuGaPIKzLzYkjV/0SE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91838AE/7070A0F0559B11EBBA117137C4F9AE02/dJQnIYER0vL1pXC5lRfKCOV3NyQ.crl rsync://rpki.apnic.net/member_repository/A91838AE/7070A0F0559B11EBBA117137C4F9AE02/dJQnIYER0vL1pXC5lRfKCOV3NyQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dJQnIYER0vL1pXC5lRfKCOV3NyQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 22:15:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1757 (0x6dd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91838AE, serialNumber=749427218111D2F2F5A570B99517CA08E5773724 Validity Not Before: May 30 22:15:52 2025 GMT Not After : Jun 6 22:15:52 2025 GMT Subject: CN=683a2e19-e511 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:9e:da:e1:5d:b5:b9:eb:44:f8:3b:32:4d:3e: 08:f6:9f:46:a9:25:2d:b2:87:c4:f7:06:13:35:48: 14:56:99:e7:ed:b1:73:51:d2:2c:e9:e0:f0:6e:13: 5f:f4:30:94:0b:0c:05:5d:f0:86:d7:58:1e:83:35: f9:d2:aa:07:e0:5c:e0:0c:0b:2e:81:ef:95:75:02: bb:a2:8f:b6:19:12:c6:f7:4a:36:fb:83:65:8c:df: 36:ff:b8:d5:82:99:8a:cb:18:f8:c8:f9:bc:00:4f: a0:25:32:e5:b4:f5:c2:44:43:c7:2a:6f:5c:5b:75: d2:93:1c:a6:78:d4:2d:05:c0:87:e0:14:98:27:2a: 10:0f:d1:b2:49:a5:d2:10:22:79:ec:fd:4f:94:8d: 0f:06:92:6d:ce:9b:82:d7:1e:4b:04:70:62:79:ae: 53:ac:d0:da:6b:bf:2a:2d:8b:98:a7:3d:f8:67:9f: 1a:62:4e:2e:0d:00:ec:1b:95:93:71:c9:91:26:ec: 3f:1a:6d:7f:b2:51:d5:e3:9f:42:2b:d9:28:95:e4: eb:6e:22:19:30:13:e8:87:dc:20:09:bc:85:da:c7: e1:ea:98:2d:ba:1f:4d:4c:b1:b9:f0:31:9f:3e:eb: 2e:77:7f:3c:75:ef:df:59:3f:2a:ba:f9:48:76:f3: 01:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:17:5C:54:36:E3:86:2A:56:2D:A2:96:F2:03:F1:5F:54:AD:5B:65 X509v3 Authority Key Identifier: keyid:74:94:27:21:81:11:D2:F2:F5:A5:70:B9:95:17:CA:08:E5:77:37:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91838AE/7070A0F0559B11EBBA117137C4F9AE02/dJQnIYER0vL1pXC5lRfKCOV3NyQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dJQnIYER0vL1pXC5lRfKCOV3NyQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91838AE/7070A0F0559B11EBBA117137C4F9AE02/dJQnIYER0vL1pXC5lRfKCOV3NyQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:d2:a7:5c:71:e4:e5:5f:2e:d7:d0:49:f5:47:25:e7:86:b4: bf:2a:84:88:4f:b9:aa:9e:ec:6d:e8:ee:d4:79:2a:a1:d9:07: 48:43:9d:82:6f:e6:b3:1e:de:12:38:56:5e:a0:00:19:3a:06: 71:cc:1c:2f:d2:5f:cc:9a:b1:e6:04:01:34:ae:ea:f1:85:e0: 88:6e:cc:da:a2:ae:33:8d:59:9f:e8:14:5c:f2:86:78:c1:02: 6a:05:52:c5:6b:d6:70:c2:10:d4:27:dd:5e:e1:76:04:9f:a1: f2:2c:08:38:26:d2:d2:92:cd:31:c8:a3:1f:0e:23:ee:80:37: f2:65:20:40:dd:14:14:0b:95:ef:5a:78:22:b0:af:62:43:b3: 48:4f:33:e1:bb:f2:0d:44:9c:c2:67:bd:a3:53:fc:57:34:b1: 2f:13:57:23:00:bf:a1:84:a4:07:2a:df:30:9d:a3:4e:d5:1a: da:16:6b:bb:a9:cd:da:53:52:ea:a3:83:f9:7c:ab:1f:19:c0: 5f:df:7b:46:a5:1c:31:21:4f:2c:31:f3:ef:44:8f:5a:8b:37: 07:c6:40:ef:95:8c:bb:05:52:1c:05:fe:61:a2:53:c6:1c:39: e0:13:70:79:b9:5d:12:e8:97:d1:37:5e:19:63:8e:6d:d1:db: 9a:78:4f:53 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBt0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODM4QUUxMTAvBgNVBAUTKDc0OTQyNzIxODExMUQyRjJGNUE1NzBCOTk1MTdDQTA4 RTU3NzM3MjQwHhcNMjUwNTMwMjIxNTUyWhcNMjUwNjA2MjIxNTUyWjAYMRYwFAYD VQQDEw02ODNhMmUxOS1lNTExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7Z7a4V21uetE+DsyTT4I9p9GqSUtsofE9wYTNUgUVpnn7bFzUdIs6eDwbhNf 9DCUCwwFXfCG11gegzX50qoH4FzgDAsuge+VdQK7oo+2GRLG90o2+4NljN82/7jV gpmKyxj4yPm8AE+gJTLltPXCREPHKm9cW3XSkxymeNQtBcCH4BSYJyoQD9GySaXS ECJ57P1PlI0PBpJtzpuC1x5LBHBiea5TrNDaa78qLYuYpz34Z58aYk4uDQDsG5WT ccmRJuw/Gm1/slHV459CK9koleTrbiIZMBPoh9wgCbyF2sfh6pgtuh9NTLG58DGf Pusud388de/fWT8quvlIdvMBtQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB0XXFQ2 44YqVi2ilvID8V9UrVtlMB8GA1UdIwQYMBaAFHSUJyGBEdLy9aVwuZUXygjldzck MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MzhBRS83MDcwQTBGMDU1 OUIxMUVCQkExMTcxMzdDNEY5QUUwMi9kSlFuSVlFUjB2TDFwWEM1bFJmS0NPVjNO eVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RKUW5JWUVSMHZMMXBYQzVsUmZLQ09WM055US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MzhBRS83MDcwQTBGMDU1OUIxMUVCQkExMTcxMzdDNEY5QUUwMi9kSlFuSVlFUjB2 TDFwWEM1bFJmS0NPVjNOeVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCA0qdcceTlXy7X0En1RyXnhrS/KoSIT7mqnuxt6O7UeSqh2QdIQ52C b+azHt4SOFZeoAAZOgZxzBwv0l/MmrHmBAE0rurxheCIbszaoq4zjVmf6BRc8oZ4 wQJqBVLFa9ZwwhDUJ91e4XYEn6HyLAg4JtLSks0xyKMfDiPugDfyZSBA3RQUC5Xv WngisK9iQ7NITzPhu/INRJzCZ72jU/xXNLEvE1cjAL+hhKQHKt8wnaNO1RraFmu7 qc3aU1Lqo4P5fKsfGcBf33tGpRwxIU8sMfPvRI9aizcHxkDvlYy7BVIcBf5holPG HDngE3B5uV0S6JfRN14ZY45t0duaeE9T -----END CERTIFICATE-----Generated at Sat May 31 17:22:13 2025 by rpki-client