$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1CF4/9AC4851A857F11EB9B285775C4F9AE02/MqT2cNoPUoWO3e8GkMjlUN_bNBE.mft File: MqT2cNoPUoWO3e8GkMjlUN_bNBE.mft (raw, json) Hash identifier: 5OJ/7rU/EiElRlS9zyynJa0oaVfCW2SSgfxTQ5KN7Mg= Subject key identifier: 5A:E0:3B:61:11:2D:A5:8E:EF:A4:F9:02:37:64:D3:66:5E:E1:BE:3D Authority key identifier: 32:A4:F6:70:DA:0F:52:85:8E:DD:EF:06:90:C8:E5:50:DF:DB:34:11 Certificate issuer: /CN=A91A1CF4/serialNumber=32A4F670DA0F52858EDDEF0690C8E550DFDB3411 Certificate serial: 0664 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MqT2cNoPUoWO3e8GkMjlUN_bNBE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A1CF4/9AC4851A857F11EB9B285775C4F9AE02/MqT2cNoPUoWO3e8GkMjlUN_bNBE.mft Manifest number: 065D Signing time: Fri 30 May 2025 22:42:14 +0000 Manifest this update: Fri 30 May 2025 22:42:13 +0000 Manifest next update: Fri 06 Jun 2025 22:42:13 +0000 Files and hashes: 1: MqT2cNoPUoWO3e8GkMjlUN_bNBE.crl (hash: ea82jI9QBDQkEzA30qGCFCpcZqUpuZ/tRKRcs9jELpM=) 2: 813CF67A858111EB914A5377C4F9AE02.roa (hash: HvQM/EpIOcxtsakqm5fBHMGZc8MdIewsQwp8yX5c0vo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A1CF4/9AC4851A857F11EB9B285775C4F9AE02/MqT2cNoPUoWO3e8GkMjlUN_bNBE.crl rsync://rpki.apnic.net/member_repository/A91A1CF4/9AC4851A857F11EB9B285775C4F9AE02/MqT2cNoPUoWO3e8GkMjlUN_bNBE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MqT2cNoPUoWO3e8GkMjlUN_bNBE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 22:42:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1636 (0x664) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A1CF4, serialNumber=32A4F670DA0F52858EDDEF0690C8E550DFDB3411 Validity Not Before: May 30 22:42:13 2025 GMT Not After : Jun 6 22:42:13 2025 GMT Subject: CN=683a3445-a064 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:14:d6:9d:12:37:a5:97:32:25:20:4e:cf:da: 35:23:63:62:74:e6:07:9e:f8:f3:4e:9d:8a:00:2d: 33:1f:ab:a3:a2:2f:00:8b:9f:ab:96:4f:57:e4:89: d1:b9:3f:88:54:2f:86:b9:ec:bb:ba:7b:c8:88:84: 49:19:94:61:f6:e2:a6:a9:c3:1f:a3:eb:50:e9:9e: 1e:86:13:9d:61:93:93:3e:d0:d9:33:d3:e8:b7:93: 53:7a:b7:29:16:9a:fc:82:44:8c:c6:26:ae:38:f2: e3:6b:c7:89:01:8f:4a:b2:5d:a8:44:d9:9e:42:31: 69:f2:d4:8e:91:fb:6b:52:7c:f9:46:03:15:36:f5: 2e:08:ed:a1:c9:38:79:22:32:d7:9b:43:1a:31:20: 4a:d6:ad:0e:a4:e9:9f:ff:bf:34:81:7d:02:56:a6: bb:2e:72:8a:97:56:72:1c:7d:d9:8a:c7:ba:4c:a9: 10:7f:60:66:a5:3f:96:c0:3d:ea:45:52:64:27:0a: 14:ad:76:8b:b2:32:4b:b0:cc:62:9d:6c:00:2f:58: d8:2a:55:72:f5:d7:b0:80:2e:aa:9b:a4:c6:dc:5a: e6:89:e0:91:25:30:cd:3c:c4:0f:14:84:94:8a:27: 76:8b:e1:3d:c1:1f:6b:f7:cb:07:93:c7:ce:ff:e3: e2:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:E0:3B:61:11:2D:A5:8E:EF:A4:F9:02:37:64:D3:66:5E:E1:BE:3D X509v3 Authority Key Identifier: keyid:32:A4:F6:70:DA:0F:52:85:8E:DD:EF:06:90:C8:E5:50:DF:DB:34:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A1CF4/9AC4851A857F11EB9B285775C4F9AE02/MqT2cNoPUoWO3e8GkMjlUN_bNBE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MqT2cNoPUoWO3e8GkMjlUN_bNBE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1CF4/9AC4851A857F11EB9B285775C4F9AE02/MqT2cNoPUoWO3e8GkMjlUN_bNBE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:cc:28:1f:61:eb:94:27:df:46:86:f0:47:6e:07:5b:93:7c: be:d2:d3:a1:1d:da:98:dc:08:87:ee:d6:44:62:c0:1c:c0:5b: a0:cd:1a:6f:5f:53:87:05:13:8b:48:84:d4:12:24:bf:d4:00: 1c:2a:7c:bb:06:76:8f:51:2d:41:d4:10:c7:7b:d4:55:7e:f4: 4f:86:2e:a2:3c:51:ba:97:7e:bd:5f:c6:9a:dc:af:a6:d7:a4: 7b:e6:c7:12:9c:3e:e0:26:75:c8:7c:69:77:26:64:f9:c2:83: b0:40:8f:71:34:10:f7:81:e0:9f:0c:b8:de:7e:c4:bd:fb:e1: 14:50:ca:84:31:12:cd:ca:03:d1:ce:a1:02:82:58:a3:e0:65: fa:51:0d:f7:fb:d4:fa:b5:a2:7e:c1:7d:9a:c4:6c:51:df:e5: b7:d4:06:fb:fb:e9:3e:74:fb:87:25:57:ec:d8:09:5e:e5:76: 17:47:01:9d:7a:cc:1f:12:6d:68:07:da:23:10:c6:b0:3b:d0: a3:bc:ab:0b:c8:4b:2f:64:6e:aa:17:ab:4c:99:17:e6:bd:d9: a0:f4:d2:19:22:5b:8a:ae:7c:49:05:54:09:71:bc:d3:fa:84: 39:10:c8:80:77:bb:16:eb:0a:0b:99:91:24:42:cd:e5:d7:97: 36:2f:a8:d0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBmQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTFDRjQxMTAvBgNVBAUTKDMyQTRGNjcwREEwRjUyODU4RURERUYwNjkwQzhFNTUw REZEQjM0MTEwHhcNMjUwNTMwMjI0MjEzWhcNMjUwNjA2MjI0MjEzWjAYMRYwFAYD VQQDEw02ODNhMzQ0NS1hMDY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtxTWnRI3pZcyJSBOz9o1I2NidOYHnvjzTp2KAC0zH6ujoi8Ai5+rlk9X5InR uT+IVC+Guey7unvIiIRJGZRh9uKmqcMfo+tQ6Z4ehhOdYZOTPtDZM9Pot5NTercp Fpr8gkSMxiauOPLja8eJAY9Ksl2oRNmeQjFp8tSOkftrUnz5RgMVNvUuCO2hyTh5 IjLXm0MaMSBK1q0OpOmf/780gX0CVqa7LnKKl1ZyHH3Zise6TKkQf2BmpT+WwD3q RVJkJwoUrXaLsjJLsMxinWwAL1jYKlVy9dewgC6qm6TG3FrmieCRJTDNPMQPFISU iid2i+E9wR9r98sHk8fO/+PiwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFrgO2ER LaWO76T5Ajdk02Ze4b49MB8GA1UdIwQYMBaAFDKk9nDaD1KFjt3vBpDI5VDf2zQR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMUNGNC85QUM0ODUxQTg1 N0YxMUVCOUIyODU3NzVDNEY5QUUwMi9NcVQyY05vUFVvV08zZThHa01qbFVOX2JO QkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01xVDJjTm9QVW9XTzNlOEdrTWpsVU5fYk5CRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MUNGNC85QUM0ODUxQTg1N0YxMUVCOUIyODU3NzVDNEY5QUUwMi9NcVQyY05vUFVv V08zZThHa01qbFVOX2JOQkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA4zCgfYeuUJ99GhvBHbgdbk3y+0tOhHdqY3AiH7tZEYsAcwFugzRpv X1OHBROLSITUEiS/1AAcKny7BnaPUS1B1BDHe9RVfvRPhi6iPFG6l369X8aa3K+m 16R75scSnD7gJnXIfGl3JmT5woOwQI9xNBD3geCfDLjefsS9++EUUMqEMRLNygPR zqECglij4GX6UQ33+9T6taJ+wX2axGxR3+W31Ab7++k+dPuHJVfs2Ale5XYXRwGd eswfEm1oB9ojEMawO9CjvKsLyEsvZG6qF6tMmRfmvdmg9NIZIluKrnxJBVQJcbzT +oQ5EMiAd7sW6woLmZEkQs3l15c2L6jQ -----END CERTIFICATE-----Generated at Sat May 31 16:42:00 2025 by rpki-client