$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5E1F/01F7D6CA586211EA814D8459C4F9AE02/C71wWJDyeOHVk-mKdPA0cPeU_lw.mft File: C71wWJDyeOHVk-mKdPA0cPeU_lw.mft (raw, json) Hash identifier: XxYos/zwC9iXEay+dMbCp2yHXBJt1sGmy4fZk7sZu0Q= Subject key identifier: 14:A5:CC:A9:EA:FC:F4:12:48:54:CF:19:95:C5:70:BC:98:3D:3E:3C Authority key identifier: 0B:BD:70:58:90:F2:78:E1:D5:93:E9:8A:74:F0:34:70:F7:94:FE:5C Certificate issuer: /CN=A91A5E1F/serialNumber=0BBD705890F278E1D593E98A74F03470F794FE5C Certificate serial: 0AB3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C71wWJDyeOHVk-mKdPA0cPeU_lw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5E1F/01F7D6CA586211EA814D8459C4F9AE02/C71wWJDyeOHVk-mKdPA0cPeU_lw.mft Manifest number: 0AA4 Signing time: Fri 30 May 2025 19:45:28 +0000 Manifest this update: Fri 30 May 2025 19:45:28 +0000 Manifest next update: Fri 06 Jun 2025 19:45:28 +0000 Files and hashes: 1: C71wWJDyeOHVk-mKdPA0cPeU_lw.crl (hash: JLVcRPd7WhLiZ8fpBSqmbqn72VSy9aljsxfhxOCtX/0=) 2: FF723568A0F311EBA4E4D83CC4F9AE02.roa (hash: mPyJyn/hNgsJM5dLLqcQiKjGiDQ28uU6I1BenfIYNic=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5E1F/01F7D6CA586211EA814D8459C4F9AE02/C71wWJDyeOHVk-mKdPA0cPeU_lw.crl rsync://rpki.apnic.net/member_repository/A91A5E1F/01F7D6CA586211EA814D8459C4F9AE02/C71wWJDyeOHVk-mKdPA0cPeU_lw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C71wWJDyeOHVk-mKdPA0cPeU_lw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 19:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2739 (0xab3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5E1F, serialNumber=0BBD705890F278E1D593E98A74F03470F794FE5C Validity Not Before: May 30 19:45:28 2025 GMT Not After : Jun 6 19:45:28 2025 GMT Subject: CN=683a0ad8-d35d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:0c:cf:dc:35:9a:08:21:c9:94:ac:f4:3d:1b: b2:81:6e:7f:4f:00:f9:d3:c2:7d:00:99:31:6d:79: 38:fb:23:a8:4d:58:7c:29:f4:e0:6e:ba:1a:57:4d: 32:ca:1c:bc:81:f4:66:1d:ea:23:80:62:b1:9b:d8: 47:43:86:47:ec:18:a3:99:4c:fe:5a:6d:79:0f:37: e7:ff:95:45:fe:ff:80:e3:18:e5:1f:87:d1:7c:5c: 7f:51:b6:45:0c:52:90:cd:14:51:9d:5f:3e:92:b4: 8b:e7:e0:5b:0b:42:be:6c:d7:e2:46:c7:a9:8f:7c: 04:b1:7c:82:60:72:41:fe:ef:e5:d8:35:59:27:51: c5:02:1d:88:7f:eb:86:27:21:fc:a8:dc:fc:94:c2: b9:ee:d0:23:00:99:04:9d:6b:c7:ad:d0:4c:8a:46: cb:fc:3f:6c:de:f3:5a:55:c7:4c:0b:b2:0d:36:1b: 4a:3d:2d:f1:2b:66:f8:0e:ad:81:d8:1f:34:3c:99: 2f:32:b6:73:61:50:f0:06:b3:ea:19:14:d6:c9:98: db:67:88:68:31:84:31:ee:f1:3d:50:80:ff:06:ba: e0:2d:aa:da:ce:86:d9:3c:bb:53:ed:ed:90:6a:be: e9:6e:20:b1:97:2e:b8:8a:e5:8b:0c:88:d0:5d:98: 4d:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:A5:CC:A9:EA:FC:F4:12:48:54:CF:19:95:C5:70:BC:98:3D:3E:3C X509v3 Authority Key Identifier: keyid:0B:BD:70:58:90:F2:78:E1:D5:93:E9:8A:74:F0:34:70:F7:94:FE:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5E1F/01F7D6CA586211EA814D8459C4F9AE02/C71wWJDyeOHVk-mKdPA0cPeU_lw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C71wWJDyeOHVk-mKdPA0cPeU_lw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5E1F/01F7D6CA586211EA814D8459C4F9AE02/C71wWJDyeOHVk-mKdPA0cPeU_lw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:ce:86:5b:d4:c8:43:49:ef:a3:70:02:15:ea:52:05:42:5c: 3e:6f:e5:83:8f:8b:d3:a6:30:64:3a:94:56:b0:f1:51:a0:5f: 24:3a:3a:a7:c7:51:21:f9:4c:66:de:9e:b2:84:6e:7c:06:6d: 49:b4:b1:78:79:07:74:f9:23:e8:55:a8:27:7b:e8:c0:f7:1a: 6d:2b:ed:73:ca:b3:41:f6:2a:02:37:9a:52:8f:04:b3:ee:1c: 49:25:ed:30:6c:d2:9a:f9:1b:10:90:a2:5d:35:c3:c5:dd:7b: 68:ce:f0:a6:b4:28:d0:b1:9d:f9:fe:b8:29:0d:6c:61:2e:a6: 73:b9:90:f6:e3:67:51:57:33:c2:29:de:71:26:b8:24:8f:25: 56:85:83:05:bf:63:e0:fd:d8:4e:15:30:d2:c2:7f:6d:98:06: 33:62:f6:ef:3e:ff:a0:6e:24:80:50:31:97:a4:0a:fb:df:a4: 88:f5:09:37:ca:81:74:3e:76:5e:d1:0d:1a:25:1c:21:01:d0: ba:21:ff:27:91:d2:e9:9f:eb:bd:c4:93:64:25:0f:3c:98:eb: 6a:d0:34:d1:fb:58:92:cf:e8:e8:70:9b:1f:8e:a3:91:63:40: e3:0c:4f:96:3f:f8:91:6d:dd:c0:09:53:40:f6:31:53:bf:76: 2c:ff:be:c1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCrMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTVFMUYxMTAvBgNVBAUTKDBCQkQ3MDU4OTBGMjc4RTFENTkzRTk4QTc0RjAzNDcw Rjc5NEZFNUMwHhcNMjUwNTMwMTk0NTI4WhcNMjUwNjA2MTk0NTI4WjAYMRYwFAYD VQQDEw02ODNhMGFkOC1kMzVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnQzP3DWaCCHJlKz0PRuygW5/TwD508J9AJkxbXk4+yOoTVh8KfTgbroaV00y yhy8gfRmHeojgGKxm9hHQ4ZH7BijmUz+Wm15Dzfn/5VF/v+A4xjlH4fRfFx/UbZF DFKQzRRRnV8+krSL5+BbC0K+bNfiRsepj3wEsXyCYHJB/u/l2DVZJ1HFAh2If+uG JyH8qNz8lMK57tAjAJkEnWvHrdBMikbL/D9s3vNaVcdMC7INNhtKPS3xK2b4Dq2B 2B80PJkvMrZzYVDwBrPqGRTWyZjbZ4hoMYQx7vE9UID/BrrgLarazobZPLtT7e2Q ar7pbiCxly64iuWLDIjQXZhNZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBSlzKnq /PQSSFTPGZXFcLyYPT48MB8GA1UdIwQYMBaAFAu9cFiQ8njh1ZPpinTwNHD3lP5c MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNUUxRi8wMUY3RDZDQTU4 NjIxMUVBODE0RDg0NTlDNEY5QUUwMi9DNzF3V0pEeWVPSFZrLW1LZFBBMGNQZVVf bHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0M3MXdXSkR5ZU9IVmstbUtkUEEwY1BlVV9sdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NUUxRi8wMUY3RDZDQTU4NjIxMUVBODE0RDg0NTlDNEY5QUUwMi9DNzF3V0pEeWVP SFZrLW1LZFBBMGNQZVVfbHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCBzoZb1MhDSe+jcAIV6lIFQlw+b+WDj4vTpjBkOpRWsPFRoF8kOjqn x1Eh+Uxm3p6yhG58Bm1JtLF4eQd0+SPoVagne+jA9xptK+1zyrNB9ioCN5pSjwSz 7hxJJe0wbNKa+RsQkKJdNcPF3XtozvCmtCjQsZ35/rgpDWxhLqZzuZD242dRVzPC Kd5xJrgkjyVWhYMFv2Pg/dhOFTDSwn9tmAYzYvbvPv+gbiSAUDGXpAr736SI9Qk3 yoF0PnZe0Q0aJRwhAdC6If8nkdLpn+u9xJNkJQ88mOtq0DTR+1iSz+jocJsfjqOR Y0DjDE+WP/iRbd3ACVNA9jFTv3Ys/77B -----END CERTIFICATE-----Generated at Sat May 31 17:03:24 2025 by rpki-client