$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4B9D/95AD03881D9E11E2880E868E08B02CD2/72i9vAcsq0VbbaMWDt-PtsSI3RU.mft File: 72i9vAcsq0VbbaMWDt-PtsSI3RU.mft (raw, json) Hash identifier: /NKYuJf88rCxO6TM2S+/3Yy0sMNKsTjyKlgpfKzXBW8= Subject key identifier: 54:07:D1:F4:7D:5C:27:E9:CC:19:FD:5B:27:EC:DA:A3:03:A8:EF:36 Authority key identifier: EF:68:BD:BC:07:2C:AB:45:5B:6D:A3:16:0E:DF:8F:B6:C4:88:DD:15 Certificate issuer: /CN=A91A4B9D/serialNumber=EF68BDBC072CAB455B6DA3160EDF8FB6C488DD15 Certificate serial: 34AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72i9vAcsq0VbbaMWDt-PtsSI3RU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4B9D/95AD03881D9E11E2880E868E08B02CD2/72i9vAcsq0VbbaMWDt-PtsSI3RU.mft Manifest number: 34A2 Signing time: Sat 31 May 2025 15:01:17 +0000 Manifest this update: Sat 31 May 2025 15:01:17 +0000 Manifest next update: Sat 07 Jun 2025 15:01:17 +0000 Files and hashes: 1: 72i9vAcsq0VbbaMWDt-PtsSI3RU.crl (hash: LEVSK3NR0TV4dRVQXVeEsk76TQ+HaolTzrqWUdksBJE=) 2: 43BD42D8C6FA11EEB1BFF11FC4F9AE02.roa (hash: +Z1Ldyuz4HB0yeC9kiN8GX7/0TnuMGaHDVLqOr783Qw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4B9D/95AD03881D9E11E2880E868E08B02CD2/72i9vAcsq0VbbaMWDt-PtsSI3RU.crl rsync://rpki.apnic.net/member_repository/A91A4B9D/95AD03881D9E11E2880E868E08B02CD2/72i9vAcsq0VbbaMWDt-PtsSI3RU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72i9vAcsq0VbbaMWDt-PtsSI3RU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 15:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13484 (0x34ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4B9D, serialNumber=EF68BDBC072CAB455B6DA3160EDF8FB6C488DD15 Validity Not Before: May 31 15:01:17 2025 GMT Not After : Jun 7 15:01:17 2025 GMT Subject: CN=683b19bd-de2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:f4:d8:d2:99:c1:6f:96:27:77:17:c0:86:4f: 91:6d:c6:61:1e:b2:de:2c:d6:c3:a1:43:52:ec:3d: a6:1f:67:b8:dd:23:39:63:70:48:09:55:b9:fc:ea: 14:4a:5c:8a:2d:d3:84:c7:f4:01:c9:8d:1f:c4:f4: 7b:15:ed:8a:75:7a:d9:be:e9:6a:57:64:84:42:fb: 75:be:5e:27:26:df:7f:7e:a2:db:e1:c2:86:fa:04: c5:7c:ed:cc:c5:6f:63:77:7d:5e:71:ba:54:78:07: 40:bd:b5:61:2a:52:35:7f:84:78:39:b0:b2:e9:9b: 5e:a6:78:a9:89:a3:c9:e0:4b:43:6a:6e:fa:7f:ee: 54:e3:c2:cf:74:fe:94:1f:4f:50:29:ef:1c:fc:dd: 33:8a:f3:0a:1a:82:5e:9e:7c:c1:19:42:e4:8d:31: 34:2a:c2:7d:2e:81:97:d0:e2:68:ea:32:fd:81:27: 3a:20:e1:fa:e1:6d:17:d1:5e:a1:9c:3d:2a:9b:da: 9f:99:be:95:ff:59:86:73:aa:aa:ba:b8:e5:5f:89: 24:a9:15:2f:6f:93:1c:e0:0c:54:e6:b0:01:f5:a9: ec:ae:83:96:df:72:3b:1f:30:67:06:ac:cd:dc:cd: 04:27:a8:c1:b5:d1:01:af:78:3c:67:8e:be:43:6c: e7:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:07:D1:F4:7D:5C:27:E9:CC:19:FD:5B:27:EC:DA:A3:03:A8:EF:36 X509v3 Authority Key Identifier: keyid:EF:68:BD:BC:07:2C:AB:45:5B:6D:A3:16:0E:DF:8F:B6:C4:88:DD:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4B9D/95AD03881D9E11E2880E868E08B02CD2/72i9vAcsq0VbbaMWDt-PtsSI3RU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72i9vAcsq0VbbaMWDt-PtsSI3RU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4B9D/95AD03881D9E11E2880E868E08B02CD2/72i9vAcsq0VbbaMWDt-PtsSI3RU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:7a:ad:e4:b5:64:b7:0b:7d:99:b8:f9:b8:5e:00:97:70:4f: 1d:d6:6f:bf:e7:05:53:ff:5a:09:e9:8d:2c:1d:54:df:03:7d: bd:64:72:58:59:00:0b:65:ec:91:4a:f4:59:6e:89:6a:e1:da: f1:8f:9d:99:3a:05:f4:81:b3:db:eb:a8:49:45:ae:65:b0:3a: 91:a0:9f:07:6b:71:e0:c3:86:1c:f2:38:a4:b3:ac:fb:8b:73: ce:b4:d9:de:16:68:b5:27:48:e8:71:f9:f6:dd:2e:c6:3e:9f: e4:71:7d:86:36:ba:67:38:fe:92:ee:ef:a5:e3:6d:b1:b8:1c: 77:2a:86:aa:04:92:5d:65:f4:2c:44:c7:1b:f6:64:60:48:bc: 13:c0:ec:c1:48:ad:9f:94:c1:54:08:97:52:62:8d:a9:91:af: d6:6e:4d:76:7a:60:42:05:35:0f:85:3f:e8:d9:df:00:b0:ec: 9e:26:e9:b6:61:a3:a0:2e:c3:e7:1b:2f:03:58:2c:e3:68:2e: b0:86:06:2f:05:15:6a:f6:83:34:b0:e2:5c:76:1d:c2:97:a1: 1f:4e:f1:98:bc:4a:9e:bc:55:4b:61:5f:84:d7:3e:e5:93:f3: f6:3d:0e:09:19:55:06:01:4d:1c:b8:c5:01:4c:29:bb:16:35: c2:19:50:80 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNKwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTRCOUQxMTAvBgNVBAUTKEVGNjhCREJDMDcyQ0FCNDU1QjZEQTMxNjBFREY4RkI2 QzQ4OEREMTUwHhcNMjUwNTMxMTUwMTE3WhcNMjUwNjA3MTUwMTE3WjAYMRYwFAYD VQQDEw02ODNiMTliZC1kZTJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAovTY0pnBb5YndxfAhk+RbcZhHrLeLNbDoUNS7D2mH2e43SM5Y3BICVW5/OoU SlyKLdOEx/QByY0fxPR7Fe2KdXrZvulqV2SEQvt1vl4nJt9/fqLb4cKG+gTFfO3M xW9jd31ecbpUeAdAvbVhKlI1f4R4ObCy6ZtepnipiaPJ4EtDam76f+5U48LPdP6U H09QKe8c/N0zivMKGoJennzBGULkjTE0KsJ9LoGX0OJo6jL9gSc6IOH64W0X0V6h nD0qm9qfmb6V/1mGc6qqurjlX4kkqRUvb5Mc4AxU5rAB9ansroOW33I7HzBnBqzN 3M0EJ6jBtdEBr3g8Z46+Q2znKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFQH0fR9 XCfpzBn9Wyfs2qMDqO82MB8GA1UdIwQYMBaAFO9ovbwHLKtFW22jFg7fj7bEiN0V MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNEI5RC85NUFEMDM4ODFE OUUxMUUyODgwRTg2OEUwOEIwMkNEMi83Mmk5dkFjc3EwVmJiYU1XRHQtUHRzU0kz UlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzcyaTl2QWNzcTBWYmJhTVdEdC1QdHNTSTNSVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NEI5RC85NUFEMDM4ODFEOUUxMUUyODgwRTg2OEUwOEIwMkNEMi83Mmk5dkFjc3Ew VmJiYU1XRHQtUHRzU0kzUlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBDeq3ktWS3C32ZuPm4XgCXcE8d1m+/5wVT/1oJ6Y0sHVTfA329ZHJY WQALZeyRSvRZbolq4drxj52ZOgX0gbPb66hJRa5lsDqRoJ8Ha3Hgw4Yc8jiks6z7 i3POtNneFmi1J0jocfn23S7GPp/kcX2GNrpnOP6S7u+l422xuBx3KoaqBJJdZfQs RMcb9mRgSLwTwOzBSK2flMFUCJdSYo2pka/Wbk12emBCBTUPhT/o2d8AsOyeJum2 YaOgLsPnGy8DWCzjaC6whgYvBRVq9oM0sOJcdh3Cl6EfTvGYvEqevFVLYV+E1z7l k/P2PQ4JGVUGAU0cuMUBTCm7FjXCGVCA -----END CERTIFICATE-----Generated at Sat May 31 17:37:47 2025 by rpki-client