$ rpki-client -vvf rpki.apnic.net/member_repository/A91975CC/1EA343E2AFE311ECA2CB066DC4F9AE02/C6xCmG6avbfO4s37Kp_o1tAqq1w.mft File: C6xCmG6avbfO4s37Kp_o1tAqq1w.mft (raw, json) Hash identifier: ehWcgfgRlmpBALV71DRYpDi/6+3hiTTGCnzcEqjtbAU= Subject key identifier: 5E:52:48:9B:F2:05:3B:F6:43:8E:82:39:A8:23:6C:57:A5:05:A0:CB Authority key identifier: 0B:AC:42:98:6E:9A:BD:B7:CE:E2:CD:FB:2A:9F:E8:D6:D0:2A:AB:5C Certificate issuer: /CN=A91975CC/serialNumber=0BAC42986E9ABDB7CEE2CDFB2A9FE8D6D02AAB5C Certificate serial: 038E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6xCmG6avbfO4s37Kp_o1tAqq1w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91975CC/1EA343E2AFE311ECA2CB066DC4F9AE02/C6xCmG6avbfO4s37Kp_o1tAqq1w.mft Manifest number: 037E Signing time: Sat 31 May 2025 01:08:02 +0000 Manifest this update: Sat 31 May 2025 01:08:01 +0000 Manifest next update: Sat 07 Jun 2025 01:08:01 +0000 Files and hashes: 1: C6xCmG6avbfO4s37Kp_o1tAqq1w.crl (hash: 9LBoM4How3eD7fphDT2FG3kXOPPNPBvBoh6lpQKiX3M=) 2: 1CF68346F0BF11EEA1A0B559C4F9AE02.roa (hash: 6/4Wi7NNWL18DEfbDuCr0VcAnjHlRgOew4WUdCphh0Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91975CC/1EA343E2AFE311ECA2CB066DC4F9AE02/C6xCmG6avbfO4s37Kp_o1tAqq1w.crl rsync://rpki.apnic.net/member_repository/A91975CC/1EA343E2AFE311ECA2CB066DC4F9AE02/C6xCmG6avbfO4s37Kp_o1tAqq1w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6xCmG6avbfO4s37Kp_o1tAqq1w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 01:08:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 910 (0x38e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91975CC, serialNumber=0BAC42986E9ABDB7CEE2CDFB2A9FE8D6D02AAB5C Validity Not Before: May 31 01:08:01 2025 GMT Not After : Jun 7 01:08:01 2025 GMT Subject: CN=683a5671-38ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:7d:aa:7a:01:f6:5a:07:14:3e:54:8e:e3:34: 9d:c0:da:5e:61:46:bf:8c:b5:8e:b6:a8:1e:49:99: 62:68:5c:95:37:04:43:4f:9f:38:95:34:92:4c:53: 58:fc:60:10:c6:71:47:78:8e:d0:52:17:f3:dd:4c: d3:f9:ea:0c:fe:4e:4e:c5:d7:41:dd:20:79:85:e3: dc:ee:e4:11:6d:ea:8e:a3:c2:2e:be:fa:de:28:94: 51:3d:10:9e:84:4f:fd:53:1a:38:40:94:3f:df:b7: 6d:81:57:96:65:a0:4e:e1:a5:1e:cd:84:1a:65:f8: fa:e1:fe:4a:dc:ce:77:41:91:43:42:15:22:48:d2: 57:b2:8a:64:05:c0:22:80:cf:8c:12:27:dc:26:39: 9c:fe:bb:91:86:18:c9:1d:2d:94:8a:42:98:e3:67: b2:cd:10:bc:53:7e:b1:d9:98:ab:d6:d1:57:c9:f7: de:1e:75:91:6d:e7:bc:9d:e7:e3:99:9b:d3:61:9e: 74:f2:d5:99:27:67:e2:48:78:7a:d0:42:15:9c:d5: f9:a4:c5:94:e0:45:5a:0b:8a:2f:98:f9:bb:bf:6f: bf:4a:cb:42:68:98:e7:94:47:b2:20:26:92:36:7d: 22:8a:99:10:cd:81:bd:07:93:43:dc:e0:c0:34:d7: e4:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:52:48:9B:F2:05:3B:F6:43:8E:82:39:A8:23:6C:57:A5:05:A0:CB X509v3 Authority Key Identifier: keyid:0B:AC:42:98:6E:9A:BD:B7:CE:E2:CD:FB:2A:9F:E8:D6:D0:2A:AB:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91975CC/1EA343E2AFE311ECA2CB066DC4F9AE02/C6xCmG6avbfO4s37Kp_o1tAqq1w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6xCmG6avbfO4s37Kp_o1tAqq1w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91975CC/1EA343E2AFE311ECA2CB066DC4F9AE02/C6xCmG6avbfO4s37Kp_o1tAqq1w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:e9:46:71:17:38:85:fb:58:87:c8:e7:c6:a2:9f:fd:7b:60: 7f:75:2f:d1:40:47:86:72:85:ea:9e:c1:bc:a0:3c:a5:b3:96: 5d:70:48:bd:4b:11:ac:43:b1:14:ec:5b:fd:ce:85:d8:6e:72: b8:3a:9b:f5:a1:08:91:5e:2f:fc:cc:eb:c7:30:14:b0:96:7c: 19:87:98:67:73:96:19:f7:fe:0a:72:6a:fd:0b:e0:55:b1:1a: a0:10:5e:c1:a6:f6:1c:28:a9:7a:9b:ec:ec:a1:ae:09:fc:e1: cc:61:99:ad:68:dc:45:2f:9b:d6:85:f5:23:b3:d5:5f:f7:ca: a7:08:26:3d:c8:40:5b:ff:da:f8:bd:29:cc:a5:6b:69:21:53: fe:24:e5:6d:9c:29:db:cb:5f:2b:4a:35:29:15:5c:22:a9:20: ec:37:fc:d9:c2:6b:a5:1f:3c:96:dd:52:5f:e7:1c:a4:a6:8f: be:17:e6:6f:75:a9:ab:84:c7:6e:e3:3f:d8:53:c1:0b:1d:74: fc:6c:a3:cb:f0:78:63:a9:29:af:1a:55:12:55:fa:84:f4:e3: 00:63:19:b8:60:9a:47:a0:86:b3:3f:0b:40:b9:3f:9b:de:f4: f7:31:d0:a2:52:64:1c:ca:7f:50:f5:7e:63:e2:ce:39:b5:6d: 83:11:92:28 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA44wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTc1Q0MxMTAvBgNVBAUTKDBCQUM0Mjk4NkU5QUJEQjdDRUUyQ0RGQjJBOUZFOEQ2 RDAyQUFCNUMwHhcNMjUwNTMxMDEwODAxWhcNMjUwNjA3MDEwODAxWjAYMRYwFAYD VQQDEw02ODNhNTY3MS0zOGVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAun2qegH2WgcUPlSO4zSdwNpeYUa/jLWOtqgeSZliaFyVNwRDT584lTSSTFNY /GAQxnFHeI7QUhfz3UzT+eoM/k5OxddB3SB5hePc7uQRbeqOo8IuvvreKJRRPRCe hE/9Uxo4QJQ/37dtgVeWZaBO4aUezYQaZfj64f5K3M53QZFDQhUiSNJXsopkBcAi gM+MEifcJjmc/ruRhhjJHS2UikKY42eyzRC8U36x2Zir1tFXyffeHnWRbee8nefj mZvTYZ508tWZJ2fiSHh60EIVnNX5pMWU4EVaC4ovmPm7v2+/SstCaJjnlEeyICaS Nn0iipkQzYG9B5ND3ODANNfk7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF5SSJvy BTv2Q46COagjbFelBaDLMB8GA1UdIwQYMBaAFAusQphumr23zuLN+yqf6NbQKqtc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzVDQy8xRUEzNDNFMkFG RTMxMUVDQTJDQjA2NkRDNEY5QUUwMi9DNnhDbUc2YXZiZk80czM3S3BfbzF0QXFx MXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0M2eENtRzZhdmJmTzRzMzdLcF9vMXRBcXExdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NzVDQy8xRUEzNDNFMkFGRTMxMUVDQTJDQjA2NkRDNEY5QUUwMi9DNnhDbUc2YXZi Zk80czM3S3BfbzF0QXFxMXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAt6UZxFziF+1iHyOfGop/9e2B/dS/RQEeGcoXqnsG8oDyls5ZdcEi9 SxGsQ7EU7Fv9zoXYbnK4Opv1oQiRXi/8zOvHMBSwlnwZh5hnc5YZ9/4Kcmr9C+BV sRqgEF7BpvYcKKl6m+zsoa4J/OHMYZmtaNxFL5vWhfUjs9Vf98qnCCY9yEBb/9r4 vSnMpWtpIVP+JOVtnCnby18rSjUpFVwiqSDsN/zZwmulHzyW3VJf5xykpo++F+Zv damrhMdu4z/YU8ELHXT8bKPL8HhjqSmvGlUSVfqE9OMAYxm4YJpHoIazPwtAuT+b 3vT3MdCiUmQcyn9Q9X5j4s45tW2DEZIo -----END CERTIFICATE-----Generated at Sat May 31 17:06:25 2025 by rpki-client