$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6BF5/9D0B422213F311EA80B3745FC4F9AE02/PoReqE4RAwvCoQYTCJefeYoSET8.mft File: PoReqE4RAwvCoQYTCJefeYoSET8.mft (raw, json) Hash identifier: i7BHgysIJQ+W9Uab56gydkMe3QF691hhD4OA3F0SArc= Subject key identifier: 56:4D:92:18:1E:3B:FC:BA:6D:80:07:60:9E:28:EF:12:07:49:D9:E3 Authority key identifier: 3E:84:5E:A8:4E:11:03:0B:C2:A1:06:13:08:97:9F:79:8A:12:11:3F Certificate issuer: /CN=A91A6BF5/serialNumber=3E845EA84E11030BC2A1061308979F798A12113F Certificate serial: 0BFE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PoReqE4RAwvCoQYTCJefeYoSET8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A6BF5/9D0B422213F311EA80B3745FC4F9AE02/PoReqE4RAwvCoQYTCJefeYoSET8.mft Manifest number: 0BF6 Signing time: Fri 30 May 2025 18:55:54 +0000 Manifest this update: Fri 30 May 2025 18:55:54 +0000 Manifest next update: Fri 06 Jun 2025 18:55:54 +0000 Files and hashes: 1: PoReqE4RAwvCoQYTCJefeYoSET8.crl (hash: 3jgH6AV8ZYLJZZHyvxwBUeY6T/7uD6E/IHAITA94cfY=) 2: 03EE880413F511EA8D120C65C4F9AE02.roa (hash: RpJ/3A2zXQw9C0hNB2vN4upiPschgzxuaxvOtctAWMc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A6BF5/9D0B422213F311EA80B3745FC4F9AE02/PoReqE4RAwvCoQYTCJefeYoSET8.crl rsync://rpki.apnic.net/member_repository/A91A6BF5/9D0B422213F311EA80B3745FC4F9AE02/PoReqE4RAwvCoQYTCJefeYoSET8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PoReqE4RAwvCoQYTCJefeYoSET8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 18:55:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3070 (0xbfe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A6BF5, serialNumber=3E845EA84E11030BC2A1061308979F798A12113F Validity Not Before: May 30 18:55:54 2025 GMT Not After : Jun 6 18:55:54 2025 GMT Subject: CN=6839ff3a-59c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:56:8a:4c:87:e5:4d:81:3b:cb:f1:35:aa:12: 08:9a:00:ed:f1:8e:9d:95:cb:3b:64:4d:ff:0f:bc: 8c:d6:73:28:01:40:99:e1:13:a4:fa:11:04:f3:81: 85:4f:12:82:93:bb:32:85:a0:a6:af:ce:8c:25:e8: fb:c5:80:a5:86:5d:cc:d1:0b:8c:32:a0:51:b7:ad: b0:58:44:45:ba:6d:da:18:44:73:f6:e3:5c:2b:ab: 85:af:39:8b:6c:9e:75:a9:29:6b:0e:dd:78:13:be: f0:a4:13:d1:ac:30:d9:24:e9:fa:e6:da:e4:2f:b2: fa:7b:97:ca:8a:ec:15:d3:e5:32:ea:e2:ff:21:8c: e1:36:a8:c5:28:98:11:21:90:08:e4:12:97:9b:db: 4a:e4:7d:98:ae:1c:bd:bd:d2:66:5b:b9:17:f4:ec: 5a:c2:d4:ea:4f:ca:cd:13:76:7c:e0:d9:34:41:9f: d3:6a:09:e0:8e:cc:8d:8e:23:d8:35:c1:23:2f:d1: 63:e3:55:6e:c5:e2:9e:ad:5e:af:5b:59:c4:2b:40: 99:fc:1e:06:b8:e3:0a:44:19:62:5c:4d:7f:ce:06: 9e:bf:ab:f5:3e:51:9c:4e:cc:d8:32:74:0d:cb:e1: 58:55:72:d2:6c:4b:53:c7:df:d8:5a:05:a5:c4:2a: e6:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:4D:92:18:1E:3B:FC:BA:6D:80:07:60:9E:28:EF:12:07:49:D9:E3 X509v3 Authority Key Identifier: keyid:3E:84:5E:A8:4E:11:03:0B:C2:A1:06:13:08:97:9F:79:8A:12:11:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A6BF5/9D0B422213F311EA80B3745FC4F9AE02/PoReqE4RAwvCoQYTCJefeYoSET8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PoReqE4RAwvCoQYTCJefeYoSET8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6BF5/9D0B422213F311EA80B3745FC4F9AE02/PoReqE4RAwvCoQYTCJefeYoSET8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:61:23:6c:81:33:9e:76:6c:f8:38:4b:96:94:e8:13:1b:62: 00:db:19:48:fc:3a:9c:0d:a1:c1:11:31:f0:b2:bb:70:d7:b0: eb:63:3a:fc:85:39:94:11:5e:dc:bf:80:c7:e9:0e:98:f0:cb: 72:b1:db:11:9f:6d:d5:fc:82:5e:4c:13:cb:da:82:a2:88:bb: e7:9f:70:5f:92:73:26:fe:93:2d:01:3d:65:ed:e8:f9:92:a7: 33:63:56:52:cb:ec:23:2e:e5:66:7c:e5:e9:76:1b:c5:28:d7: 9f:a9:51:62:bd:65:80:cb:d3:b2:f5:94:03:fd:2d:44:42:34: e6:bb:bc:31:a9:51:76:c3:82:59:35:7a:76:f3:1a:ca:14:9e: 2d:8a:8d:e1:56:75:e6:ce:5f:e9:d1:15:75:de:5b:27:4c:7b: c6:d2:98:ea:af:eb:61:4e:53:ee:4f:a2:e4:8e:c4:40:d8:dc: 67:26:5d:81:d8:a5:01:0d:85:93:d3:6d:82:8e:68:ce:ea:d0: b3:c1:a8:a7:f2:94:8b:a6:91:86:06:54:2a:af:db:51:4e:54: 55:86:8b:43:23:35:1e:52:77:3a:3f:8b:93:d9:6e:e3:ab:e9: 5b:e6:74:18:19:4d:84:f4:82:95:ca:9c:b0:bd:aa:b2:b3:f3: 26:3e:42:15 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC/4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTZCRjUxMTAvBgNVBAUTKDNFODQ1RUE4NEUxMTAzMEJDMkExMDYxMzA4OTc5Rjc5 OEExMjExM0YwHhcNMjUwNTMwMTg1NTU0WhcNMjUwNjA2MTg1NTU0WjAYMRYwFAYD VQQDEw02ODM5ZmYzYS01OWM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwFaKTIflTYE7y/E1qhIImgDt8Y6dlcs7ZE3/D7yM1nMoAUCZ4ROk+hEE84GF TxKCk7syhaCmr86MJej7xYClhl3M0QuMMqBRt62wWERFum3aGERz9uNcK6uFrzmL bJ51qSlrDt14E77wpBPRrDDZJOn65trkL7L6e5fKiuwV0+Uy6uL/IYzhNqjFKJgR IZAI5BKXm9tK5H2Yrhy9vdJmW7kX9OxawtTqT8rNE3Z84Nk0QZ/TagngjsyNjiPY NcEjL9Fj41VuxeKerV6vW1nEK0CZ/B4GuOMKRBliXE1/zgaev6v1PlGcTszYMnQN y+FYVXLSbEtTx9/YWgWlxCrmAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFZNkhge O/y6bYAHYJ4o7xIHSdnjMB8GA1UdIwQYMBaAFD6EXqhOEQMLwqEGEwiXn3mKEhE/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNkJGNS85RDBCNDIyMjEz RjMxMUVBODBCMzc0NUZDNEY5QUUwMi9Qb1JlcUU0UkF3dkNvUVlUQ0plZmVZb1NF VDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BvUmVxRTRSQXd2Q29RWVRDSmVmZVlvU0VUOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NkJGNS85RDBCNDIyMjEzRjMxMUVBODBCMzc0NUZDNEY5QUUwMi9Qb1JlcUU0UkF3 dkNvUVlUQ0plZmVZb1NFVDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAOYSNsgTOedmz4OEuWlOgTG2IA2xlI/DqcDaHBETHwsrtw17DrYzr8 hTmUEV7cv4DH6Q6Y8MtysdsRn23V/IJeTBPL2oKiiLvnn3BfknMm/pMtAT1l7ej5 kqczY1ZSy+wjLuVmfOXpdhvFKNefqVFivWWAy9Oy9ZQD/S1EQjTmu7wxqVF2w4JZ NXp28xrKFJ4tio3hVnXmzl/p0RV13lsnTHvG0pjqr+thTlPuT6LkjsRA2NxnJl2B 2KUBDYWT022CjmjO6tCzwain8pSLppGGBlQqr9tRTlRVhotDIzUeUnc6P4uT2W7j q+lb5nQYGU2E9IKVypywvaqys/MmPkIV -----END CERTIFICATE-----Generated at Sat May 31 17:41:07 2025 by rpki-client