$ rpki-client -vvf rpki.apnic.net/member_repository/A91A030C/A7036700F47611EFBE466D7FC4F9AE02/EDki63fZQHF8gZ4oyWZGKUgLvOU.mft File: EDki63fZQHF8gZ4oyWZGKUgLvOU.mft (raw, json) Hash identifier: 6QFkH8qatmw0JWn/tN1MYytgIzdK2mImj449syxX1sk= Subject key identifier: C1:47:26:04:F7:DE:8A:B6:C5:6A:CB:88:B2:D2:2E:14:74:71:74:94 Authority key identifier: 10:39:22:EB:77:D9:40:71:7C:81:9E:28:C9:66:46:29:48:0B:BC:E5 Certificate issuer: /CN=A91A030C/serialNumber=103922EB77D940717C819E28C9664629480BBCE5 Certificate serial: 37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EDki63fZQHF8gZ4oyWZGKUgLvOU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A030C/A7036700F47611EFBE466D7FC4F9AE02/EDki63fZQHF8gZ4oyWZGKUgLvOU.mft Manifest number: 34 Signing time: Sat 31 May 2025 07:13:04 +0000 Manifest this update: Sat 31 May 2025 07:13:03 +0000 Manifest next update: Sat 07 Jun 2025 07:13:03 +0000 Files and hashes: 1: EDki63fZQHF8gZ4oyWZGKUgLvOU.crl (hash: 6fpKwHgyAR+akWrUdWSSKj5G4FB4Cb95y/keUHdhMaU=) 2: 17D98518FD6911EFA889E84DC4F9AE02.roa (hash: TAYiLVNUfBDudM++NA0KlcXDtTA+39+D4En0/M5r2I8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A030C/A7036700F47611EFBE466D7FC4F9AE02/EDki63fZQHF8gZ4oyWZGKUgLvOU.crl rsync://rpki.apnic.net/member_repository/A91A030C/A7036700F47611EFBE466D7FC4F9AE02/EDki63fZQHF8gZ4oyWZGKUgLvOU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EDki63fZQHF8gZ4oyWZGKUgLvOU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 07:13:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55 (0x37) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A030C, serialNumber=103922EB77D940717C819E28C9664629480BBCE5 Validity Not Before: May 31 07:13:03 2025 GMT Not After : Jun 7 07:13:03 2025 GMT Subject: CN=683aac00-885c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:48:5e:f2:cf:84:b0:cb:c7:87:d5:ec:fc:89: ff:b0:e2:40:94:17:47:4c:52:42:36:fe:95:f9:e6: 5d:d8:a3:4c:5c:78:43:23:22:c0:8a:5e:de:c7:f9: 1d:6a:d2:cf:15:14:ec:ae:e1:f0:72:46:4a:66:c9: ba:57:1c:30:ba:21:32:48:b0:7c:fd:c0:b2:71:d2: 4d:47:23:00:b3:24:34:79:a6:80:c3:4b:44:c8:b1: e3:00:d1:cd:79:1b:86:ee:4d:2b:a9:e9:17:87:f7: a3:f5:f2:ca:6a:9e:af:82:e8:f7:31:31:9d:9d:a5: 71:3b:20:fd:1b:a3:76:d9:19:ae:6b:5a:33:68:a2: ff:74:44:41:c9:81:cf:b5:25:ae:f3:39:64:f5:4e: ba:e7:fd:bb:4a:ba:6f:0b:b0:5f:29:46:40:d6:b3: 9a:73:70:55:59:be:47:05:7f:82:b5:d1:fe:02:4e: 78:88:d9:7b:f3:a2:90:86:38:12:af:1b:bb:a8:19: 67:18:15:40:3d:e3:7a:0e:ef:4b:bb:59:60:a7:ff: 57:a4:02:ef:f2:b2:e4:ea:7d:65:67:fd:d9:c4:42: c9:16:7d:9e:8b:0e:73:8f:66:70:88:75:ba:39:74: e9:5c:79:3c:a2:97:4e:72:10:98:96:2a:d8:95:01: 5f:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:47:26:04:F7:DE:8A:B6:C5:6A:CB:88:B2:D2:2E:14:74:71:74:94 X509v3 Authority Key Identifier: keyid:10:39:22:EB:77:D9:40:71:7C:81:9E:28:C9:66:46:29:48:0B:BC:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A030C/A7036700F47611EFBE466D7FC4F9AE02/EDki63fZQHF8gZ4oyWZGKUgLvOU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EDki63fZQHF8gZ4oyWZGKUgLvOU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A030C/A7036700F47611EFBE466D7FC4F9AE02/EDki63fZQHF8gZ4oyWZGKUgLvOU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:d2:14:44:7c:9f:03:80:2f:09:59:d4:c2:38:4c:9e:50:34: e3:2f:5c:69:bf:ad:7e:ab:21:7c:3f:17:25:65:d3:b5:18:06: c7:a8:1d:35:1d:1f:cc:f9:4f:8f:5d:18:36:39:22:43:c7:91: 5d:d6:2c:fe:bb:59:07:9a:4e:fe:84:7c:f7:f4:cc:2e:99:3f: 12:3c:1e:8c:dc:90:34:7d:fb:01:d1:7d:2e:91:bf:a9:89:75: 15:21:45:14:83:97:db:2e:25:81:e0:e2:75:98:1e:17:14:ca: 9a:f4:13:e6:7f:45:5e:de:d2:cb:c1:c9:2f:21:62:ca:b9:a1: 11:f9:cf:53:b4:5c:e1:19:d4:59:ac:d3:08:de:86:b0:22:40: 23:c7:ad:be:c3:59:a9:56:ec:c4:12:fe:a4:ab:66:03:f1:45: 3c:24:19:d3:e8:f4:12:9a:e8:eb:cc:36:d9:02:e4:a4:20:20: f1:bd:91:58:79:89:ab:0d:41:ef:5d:8b:57:b1:0e:30:27:7d: 0c:d0:18:2d:f8:8d:98:fa:bc:c1:7f:08:e6:26:3c:52:1d:87: 26:17:e9:a5:74:07:1d:b7:50:55:ea:de:61:10:3c:3e:eb:25: 65:bf:7c:4d:11:bb:18:a9:22:ad:da:9e:e8:c1:eb:7b:89:46: c9:bf:0c:35 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB MDMwQzExMC8GA1UEBRMoMTAzOTIyRUI3N0Q5NDA3MTdDODE5RTI4Qzk2NjQ2Mjk0 ODBCQkNFNTAeFw0yNTA1MzEwNzEzMDNaFw0yNTA2MDcwNzEzMDNaMBgxFjAUBgNV BAMTDTY4M2FhYzAwLTg4NWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC3SF7yz4Swy8eH1ez8if+w4kCUF0dMUkI2/pX55l3Yo0xceEMjIsCKXt7H+R1q 0s8VFOyu4fByRkpmybpXHDC6ITJIsHz9wLJx0k1HIwCzJDR5poDDS0TIseMA0c15 G4buTSup6ReH96P18spqnq+C6PcxMZ2dpXE7IP0bo3bZGa5rWjNoov90REHJgc+1 Ja7zOWT1Trrn/btKum8LsF8pRkDWs5pzcFVZvkcFf4K10f4CTniI2XvzopCGOBKv G7uoGWcYFUA943oO70u7WWCn/1ekAu/ysuTqfWVn/dnEQskWfZ6LDnOPZnCIdbo5 dOlceTyil05yEJiWKtiVAV+bAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUwUcmBPfe irbFasuIstIuFHRxdJQwHwYDVR0jBBgwFoAUEDki63fZQHF8gZ4oyWZGKUgLvOUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEwMzBDL0E3MDM2NzAwRjQ3 NjExRUZCRTQ2NkQ3RkM0RjlBRTAyL0VEa2k2M2ZaUUhGOGdaNG95V1pHS1VnTHZP VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRURraTYzZlpRSEY4Z1o0b3lXWkdLVWdMdk9VLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEw MzBDL0E3MDM2NzAwRjQ3NjExRUZCRTQ2NkQ3RkM0RjlBRTAyL0VEa2k2M2ZaUUhG OGdaNG95V1pHS1VnTHZPVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACTSFER8nwOALwlZ1MI4TJ5QNOMvXGm/rX6rIXw/FyVl07UYBseoHTUd H8z5T49dGDY5IkPHkV3WLP67WQeaTv6EfPf0zC6ZPxI8HozckDR9+wHRfS6Rv6mJ dRUhRRSDl9suJYHg4nWYHhcUypr0E+Z/RV7e0svByS8hYsq5oRH5z1O0XOEZ1Fms 0wjehrAiQCPHrb7DWalW7MQS/qSrZgPxRTwkGdPo9BKa6OvMNtkC5KQgIPG9kVh5 iasNQe9di1exDjAnfQzQGC34jZj6vMF/COYmPFIdhyYX6aV0Bx23UFXq3mEQPD7r JWW/fE0RuxipIq3anujB63uJRsm/DDU= -----END CERTIFICATE-----Generated at Sat May 31 16:25:49 2025 by rpki-client