$ rpki-client -vvf rpki.apnic.net/member_repository/A91A86D0/FA78B0446FCE11E988C44B3EC4F9AE02/2K83cS1WsbaT720D40bADPPwST4.mft File: 2K83cS1WsbaT720D40bADPPwST4.mft (raw, json) Hash identifier: KettUmZN/F/dv6zZxzndZt4v9NXotAQXyuBxckP+4K0= Subject key identifier: D0:45:E5:7A:00:D7:03:2F:5C:0E:BB:BF:7C:45:F9:AF:0D:79:9C:B8 Authority key identifier: D8:AF:37:71:2D:56:B1:B6:93:EF:6D:03:E3:46:C0:0C:F3:F0:49:3E Certificate issuer: /CN=A91A86D0/serialNumber=D8AF37712D56B1B693EF6D03E346C00CF3F0493E Certificate serial: 0F58 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2K83cS1WsbaT720D40bADPPwST4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A86D0/FA78B0446FCE11E988C44B3EC4F9AE02/2K83cS1WsbaT720D40bADPPwST4.mft Manifest number: 0F4A Signing time: Fri 06 Jun 2025 17:37:17 +0000 Manifest this update: Fri 06 Jun 2025 17:37:16 +0000 Manifest next update: Fri 13 Jun 2025 17:37:16 +0000 Files and hashes: 1: 2K83cS1WsbaT720D40bADPPwST4.crl (hash: +RKwWY6mk5CotUiaLlilpuO2L14rDTgyVTXUjHETjPo=) 2: CC99502E382F11EEAB87A63EC4F9AE02.roa (hash: H75rCk5vM8kD4h9GxneHBI+FagArNRGg0zjNp/brQWY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A86D0/FA78B0446FCE11E988C44B3EC4F9AE02/2K83cS1WsbaT720D40bADPPwST4.crl rsync://rpki.apnic.net/member_repository/A91A86D0/FA78B0446FCE11E988C44B3EC4F9AE02/2K83cS1WsbaT720D40bADPPwST4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2K83cS1WsbaT720D40bADPPwST4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 13 Jun 2025 17:37:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3928 (0xf58) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A86D0, serialNumber=D8AF37712D56B1B693EF6D03E346C00CF3F0493E Validity Not Before: Jun 6 17:37:16 2025 GMT Not After : Jun 13 17:37:16 2025 GMT Subject: CN=6843274c-d3d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:a7:98:00:87:39:b5:a9:87:30:f5:a7:b1:c1: 2a:33:a1:61:45:61:70:c7:77:bc:d5:46:e5:a8:3f: 04:f0:ed:16:fe:03:d6:85:ba:5c:ff:5d:d4:be:d8: 81:65:5b:33:f2:bb:68:95:1f:b6:5f:65:f1:db:ee: 00:ce:2a:5c:f5:81:3b:76:76:1f:d9:7c:54:72:cc: 44:86:3f:c1:6c:a4:59:d1:18:5c:57:f1:56:dc:1f: b3:c3:1e:a7:78:e3:b6:31:f3:ae:ea:72:67:3f:bc: 3d:f1:0b:5b:43:52:3b:dd:00:4f:c9:03:ef:d9:17: 15:56:5b:2b:95:5a:1a:43:25:2d:26:77:ff:f9:6d: 9c:f4:75:b9:41:ba:62:f6:23:6b:c8:f1:8b:35:6a: 5d:32:da:c2:ac:63:23:5c:cd:ef:81:13:3e:a5:0f: 6a:05:d7:61:4f:c1:0d:4e:51:8d:86:f2:39:60:4b: 61:a7:05:9d:d2:06:a2:7f:5e:70:17:27:b5:34:e4: 8d:5f:24:e9:00:1b:34:bd:ca:bc:47:7f:0f:65:63: 05:c7:79:8c:e9:1c:7c:57:73:9f:37:06:1d:64:59: 80:91:8a:51:48:fb:0e:ac:fd:5b:18:15:78:a9:ff: ae:e2:c1:fb:fc:fb:1d:a9:c5:f3:ad:c4:0e:e6:53: 75:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:45:E5:7A:00:D7:03:2F:5C:0E:BB:BF:7C:45:F9:AF:0D:79:9C:B8 X509v3 Authority Key Identifier: keyid:D8:AF:37:71:2D:56:B1:B6:93:EF:6D:03:E3:46:C0:0C:F3:F0:49:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A86D0/FA78B0446FCE11E988C44B3EC4F9AE02/2K83cS1WsbaT720D40bADPPwST4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2K83cS1WsbaT720D40bADPPwST4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A86D0/FA78B0446FCE11E988C44B3EC4F9AE02/2K83cS1WsbaT720D40bADPPwST4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:e4:d2:a6:8e:b7:17:1f:ca:70:b7:57:f6:c2:de:bd:5b:49: 55:ec:fd:06:eb:8e:81:05:09:a2:41:a1:17:cf:b6:91:70:24: 21:fd:0d:a6:fb:d5:48:7e:ae:d2:25:51:a4:43:fb:03:d1:b1: ad:9d:28:7f:91:80:7c:60:2a:e7:84:85:21:75:8c:5a:ae:34: fe:a1:88:4b:57:bd:e2:6a:0b:c3:2c:52:12:00:25:c9:4c:3f: 45:ea:b6:cd:57:32:5b:85:63:7f:96:bd:52:4f:21:b8:51:11: 11:19:99:a2:3e:6e:7a:72:22:6f:7d:0a:2d:98:31:68:23:e9: 0a:09:5c:3e:a9:48:63:ce:b2:78:8b:e5:ee:ca:df:a5:0f:d6: ce:17:8b:a3:c4:d6:cb:57:d8:fc:9d:ce:d5:43:bd:ee:df:04: df:1a:48:7f:72:1e:56:0f:0e:41:b1:a9:4d:ad:1d:72:99:2c: cf:1c:cc:06:e3:a1:70:8e:1f:aa:58:e0:c8:60:00:1d:9d:88: 35:97:d7:4d:67:34:5d:2d:99:58:83:c4:b3:31:8f:4f:a3:b6: 3a:78:d7:6d:88:e1:bf:fb:79:4a:ec:aa:1f:55:e4:df:7c:0c: d1:b5:ea:1d:b6:b2:d9:83:91:9b:58:04:27:21:ee:6b:f4:49: 9e:e1:f0:b5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD1gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTg2RDAxMTAvBgNVBAUTKEQ4QUYzNzcxMkQ1NkIxQjY5M0VGNkQwM0UzNDZDMDBD RjNGMDQ5M0UwHhcNMjUwNjA2MTczNzE2WhcNMjUwNjEzMTczNzE2WjAYMRYwFAYD VQQDEw02ODQzMjc0Yy1kM2QyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtaeYAIc5tamHMPWnscEqM6FhRWFwx3e81UblqD8E8O0W/gPWhbpc/13UvtiB ZVsz8rtolR+2X2Xx2+4Azipc9YE7dnYf2XxUcsxEhj/BbKRZ0RhcV/FW3B+zwx6n eOO2MfOu6nJnP7w98QtbQ1I73QBPyQPv2RcVVlsrlVoaQyUtJnf/+W2c9HW5Qbpi 9iNryPGLNWpdMtrCrGMjXM3vgRM+pQ9qBddhT8ENTlGNhvI5YEthpwWd0gaif15w Fye1NOSNXyTpABs0vcq8R38PZWMFx3mM6Rx8V3OfNwYdZFmAkYpRSPsOrP1bGBV4 qf+u4sH7/PsdqcXzrcQO5lN1IwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNBF5XoA 1wMvXA67v3xF+a8NeZy4MB8GA1UdIwQYMBaAFNivN3EtVrG2k+9tA+NGwAzz8Ek+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODZEMC9GQTc4QjA0NDZG Q0UxMUU5ODhDNDRCM0VDNEY5QUUwMi8ySzgzY1MxV3NiYVQ3MjBENDBiQURQUHdT VDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJLODNjUzFXc2JhVDcyMEQ0MGJBRFBQd1NUNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB ODZEMC9GQTc4QjA0NDZGQ0UxMUU5ODhDNDRCM0VDNEY5QUUwMi8ySzgzY1MxV3Ni YVQ3MjBENDBiQURQUHdTVDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCw5NKmjrcXH8pwt1f2wt69W0lV7P0G646BBQmiQaEXz7aRcCQh/Q2m +9VIfq7SJVGkQ/sD0bGtnSh/kYB8YCrnhIUhdYxarjT+oYhLV73iagvDLFISACXJ TD9F6rbNVzJbhWN/lr1STyG4URERGZmiPm56ciJvfQotmDFoI+kKCVw+qUhjzrJ4 i+Xuyt+lD9bOF4ujxNbLV9j8nc7VQ73u3wTfGkh/ch5WDw5BsalNrR1ymSzPHMwG 46Fwjh+qWODIYAAdnYg1l9dNZzRdLZlYg8SzMY9Po7Y6eNdtiOG/+3lK7KofVeTf fAzRteodtrLZg5GbWAQnIe5r9Eme4fC1 -----END CERTIFICATE-----Generated at Sat Jun 7 06:02:06 2025 by rpki-client