$ rpki-client -vvf rpki.apnic.net/member_repository/A91A80F9/49773AD0F4A411E98CC75E37C4F9AE02/aWr0_gNmE9ZRteKaCdT-cbVVpEk.mft File: aWr0_gNmE9ZRteKaCdT-cbVVpEk.mft (raw, json) Hash identifier: EdpXfbNNnDXoMw9oaIsd5RglH9U/0CQISGK/jtkku4I= Subject key identifier: 20:9C:03:31:E8:61:0A:33:AB:86:B8:BC:9B:27:31:D5:10:3B:67:EA Authority key identifier: 69:6A:F4:FE:03:66:13:D6:51:B5:E2:9A:09:D4:FE:71:B5:55:A4:49 Certificate issuer: /CN=A91A80F9/serialNumber=696AF4FE036613D651B5E29A09D4FE71B555A449 Certificate serial: 0CA3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWr0_gNmE9ZRteKaCdT-cbVVpEk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A80F9/49773AD0F4A411E98CC75E37C4F9AE02/aWr0_gNmE9ZRteKaCdT-cbVVpEk.mft Manifest number: 0C9B Signing time: Fri 30 May 2025 18:23:14 +0000 Manifest this update: Fri 30 May 2025 18:23:13 +0000 Manifest next update: Fri 06 Jun 2025 18:23:13 +0000 Files and hashes: 1: aWr0_gNmE9ZRteKaCdT-cbVVpEk.crl (hash: 13CniDyWEPglECrrqWHQ6XeN11j0F0FIIhPo8kyvvb8=) 2: 3EF3C6EEF8B511EAAD434755C4F9AE02.roa (hash: 2oxrZykX6FImkgj0+sEn3YTkG/5Ks+ROCEDtHP8d+xs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A80F9/49773AD0F4A411E98CC75E37C4F9AE02/aWr0_gNmE9ZRteKaCdT-cbVVpEk.crl rsync://rpki.apnic.net/member_repository/A91A80F9/49773AD0F4A411E98CC75E37C4F9AE02/aWr0_gNmE9ZRteKaCdT-cbVVpEk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWr0_gNmE9ZRteKaCdT-cbVVpEk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 18:23:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3235 (0xca3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A80F9, serialNumber=696AF4FE036613D651B5E29A09D4FE71B555A449 Validity Not Before: May 30 18:23:13 2025 GMT Not After : Jun 6 18:23:13 2025 GMT Subject: CN=6839f792-8343 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:3c:66:5b:0e:50:cf:e1:38:7d:0b:ea:02:36: 08:33:9c:30:ac:c4:c6:15:fe:e0:d6:9f:e1:ab:65: 8e:6d:68:7c:68:9c:c6:7c:b6:33:f2:35:10:9d:c2: 2c:88:cf:8c:db:cf:48:7f:48:e8:c7:94:f8:e9:f2: fe:1b:ea:d9:da:a2:38:9f:12:c6:2a:48:a3:e5:fc: 46:71:a2:bb:ca:f4:6d:f1:bb:be:55:75:a6:a8:c6: e6:f4:ed:bc:37:fc:39:70:3e:7a:9f:84:b1:8a:09: 6a:e9:e9:8c:e6:df:20:4c:4d:ff:7c:a6:7a:30:78: a6:40:5c:1a:72:1a:df:ee:b5:d4:2a:03:aa:dc:8b: 93:0f:43:17:9d:89:d3:b9:c8:d8:84:17:1b:94:7d: 59:c3:c3:b0:9e:e7:53:c6:11:b6:da:ac:44:06:c0: ba:63:90:c2:a8:5b:66:0b:d0:31:1c:ef:81:5a:5d: 71:c0:46:9f:e3:54:54:3f:0f:c8:c4:e6:32:fb:cf: 71:00:15:d7:ec:4a:55:38:1c:13:67:9d:21:eb:8c: 65:28:f0:5d:f2:bb:07:82:ae:2d:ef:c1:0e:9c:66: d0:74:96:34:10:59:42:27:77:7d:01:d1:a3:d6:69: a4:bd:1d:76:fc:26:9a:6a:17:7a:7a:7f:d4:e3:ac: c6:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:9C:03:31:E8:61:0A:33:AB:86:B8:BC:9B:27:31:D5:10:3B:67:EA X509v3 Authority Key Identifier: keyid:69:6A:F4:FE:03:66:13:D6:51:B5:E2:9A:09:D4:FE:71:B5:55:A4:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A80F9/49773AD0F4A411E98CC75E37C4F9AE02/aWr0_gNmE9ZRteKaCdT-cbVVpEk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWr0_gNmE9ZRteKaCdT-cbVVpEk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A80F9/49773AD0F4A411E98CC75E37C4F9AE02/aWr0_gNmE9ZRteKaCdT-cbVVpEk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:c0:69:8b:71:e6:f7:ea:08:ef:4a:dc:a4:ad:c1:57:58:11: 4d:5d:ca:7c:a1:6c:a7:43:c3:f6:a8:95:c4:5a:e5:63:d4:15: 33:00:d1:fe:a5:59:a6:e0:b2:b0:ff:8d:cc:84:26:45:75:01: 2c:d3:34:72:a1:8e:ca:63:9a:8d:ad:af:df:d7:14:04:65:9a: f5:94:60:2b:77:23:78:f7:de:38:59:46:17:89:59:1b:cb:05: c1:ef:73:bd:c9:4f:20:c3:e6:b3:82:fb:30:c4:a4:db:12:f4: f3:3e:e3:ea:37:c0:38:ae:b8:a5:1f:4d:8a:d4:3c:4f:70:f2: 29:fb:d7:13:87:83:d0:18:d1:ee:c1:6a:e4:00:54:8c:3a:1c: 6b:10:5f:b7:85:29:0e:b6:7c:05:62:8f:c2:11:47:2c:97:db: 79:19:4f:a1:df:f6:95:e0:b6:fc:ca:d2:79:48:fa:e3:c1:e7: c2:b3:9f:9e:3b:5d:f7:81:83:71:38:ca:e0:6a:ed:71:ed:58: d2:41:ff:ca:2f:2e:06:1c:df:2e:30:f5:02:34:98:75:02:8d: 21:31:42:0b:95:1a:4a:7c:f4:1d:f6:a6:4e:b2:9a:92:18:6a: 90:7f:c1:61:57:34:18:c3:82:71:8c:4e:61:f8:5e:ac:20:a3: ea:cf:9c:b3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDKMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTgwRjkxMTAvBgNVBAUTKDY5NkFGNEZFMDM2NjEzRDY1MUI1RTI5QTA5RDRGRTcx QjU1NUE0NDkwHhcNMjUwNTMwMTgyMzEzWhcNMjUwNjA2MTgyMzEzWjAYMRYwFAYD VQQDEw02ODM5Zjc5Mi04MzQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6DxmWw5Qz+E4fQvqAjYIM5wwrMTGFf7g1p/hq2WObWh8aJzGfLYz8jUQncIs iM+M289If0jox5T46fL+G+rZ2qI4nxLGKkij5fxGcaK7yvRt8bu+VXWmqMbm9O28 N/w5cD56n4Sxiglq6emM5t8gTE3/fKZ6MHimQFwachrf7rXUKgOq3IuTD0MXnYnT ucjYhBcblH1Zw8OwnudTxhG22qxEBsC6Y5DCqFtmC9AxHO+BWl1xwEaf41RUPw/I xOYy+89xABXX7EpVOBwTZ50h64xlKPBd8rsHgq4t78EOnGbQdJY0EFlCJ3d9AdGj 1mmkvR12/Caaahd6en/U46zGIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCCcAzHo YQozq4a4vJsnMdUQO2fqMB8GA1UdIwQYMBaAFGlq9P4DZhPWUbXimgnU/nG1VaRJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODBGOS80OTc3M0FEMEY0 QTQxMUU5OENDNzVFMzdDNEY5QUUwMi9hV3IwX2dObUU5WlJ0ZUthQ2RULWNiVlZw RWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FXcjBfZ05tRTlaUnRlS2FDZFQtY2JWVnBFay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB ODBGOS80OTc3M0FEMEY0QTQxMUU5OENDNzVFMzdDNEY5QUUwMi9hV3IwX2dObUU5 WlJ0ZUthQ2RULWNiVlZwRWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAwwGmLceb36gjvStykrcFXWBFNXcp8oWynQ8P2qJXEWuVj1BUzANH+ pVmm4LKw/43MhCZFdQEs0zRyoY7KY5qNra/f1xQEZZr1lGArdyN49944WUYXiVkb ywXB73O9yU8gw+azgvswxKTbEvTzPuPqN8A4rrilH02K1DxPcPIp+9cTh4PQGNHu wWrkAFSMOhxrEF+3hSkOtnwFYo/CEUcsl9t5GU+h3/aV4Lb8ytJ5SPrjwefCs5+e O133gYNxOMrgau1x7VjSQf/KLy4GHN8uMPUCNJh1Ao0hMUILlRpKfPQd9qZOspqS GGqQf8FhVzQYw4JxjE5h+F6sIKPqz5yz -----END CERTIFICATE-----Generated at Sat May 31 17:23:39 2025 by rpki-client