$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8A52/FB7E4BDE70B511ED93F0DD16C4F9AE02/cS61otcGnxjunGXzsBMnGtvx9UA.mft File: cS61otcGnxjunGXzsBMnGtvx9UA.mft (raw, json) Hash identifier: DbmyJm2fAGcuiTfr/Aqu24fwg0ypMWhPqGyD6qDhG2A= Subject key identifier: E3:2A:A5:D5:D6:EE:82:5A:52:F3:B4:3A:8C:CD:66:DE:30:A4:98:38 Authority key identifier: 71:2E:B5:A2:D7:06:9F:18:EE:9C:65:F3:B0:13:27:1A:DB:F1:F5:40 Certificate issuer: /CN=A91A8A52/serialNumber=712EB5A2D7069F18EE9C65F3B013271ADBF1F540 Certificate serial: 01EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cS61otcGnxjunGXzsBMnGtvx9UA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A8A52/FB7E4BDE70B511ED93F0DD16C4F9AE02/cS61otcGnxjunGXzsBMnGtvx9UA.mft Manifest number: 01DE Signing time: Thu 05 Jun 2025 02:11:43 +0000 Manifest this update: Thu 05 Jun 2025 02:11:43 +0000 Manifest next update: Thu 12 Jun 2025 02:11:43 +0000 Files and hashes: 1: cS61otcGnxjunGXzsBMnGtvx9UA.crl (hash: dPvqFHereuOvW4S7mOvb3jyqKoag1H+nA/EKGVJxaGY=) 2: 655B85F0225B11EFADDE6F63C4F9AE02.roa (hash: n2zLDtDaPNL3Ye6qBkwU/zpDC2mfhiqQ0N3aGF+8gOs=) 3: 8F14EDAA70B911EDB6E1F81BC4F9AE02.roa (hash: KwJcRfcCHNm1/1H4hZVLWjzBmRVSuYEae2GuTglAJm0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A8A52/FB7E4BDE70B511ED93F0DD16C4F9AE02/cS61otcGnxjunGXzsBMnGtvx9UA.crl rsync://rpki.apnic.net/member_repository/A91A8A52/FB7E4BDE70B511ED93F0DD16C4F9AE02/cS61otcGnxjunGXzsBMnGtvx9UA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cS61otcGnxjunGXzsBMnGtvx9UA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 12 Jun 2025 02:11:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 490 (0x1ea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A8A52, serialNumber=712EB5A2D7069F18EE9C65F3B013271ADBF1F540 Validity Not Before: Jun 5 02:11:43 2025 GMT Not After : Jun 12 02:11:43 2025 GMT Subject: CN=6840fcdf-cd5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:7b:9c:24:99:f0:ea:d8:4f:ea:78:f6:d0:17: 2e:ae:43:61:e8:67:bf:6a:b3:5a:84:34:5d:62:06: c6:e8:dc:29:0c:b9:52:be:be:0d:bf:c0:20:96:79: 6e:68:d2:87:de:f0:96:c7:95:09:78:de:0c:3c:df: fd:23:8c:0b:16:3f:b2:b9:4e:61:46:2c:b9:14:f3: 42:45:fe:6a:6c:df:d3:f3:bf:73:a2:21:ac:da:9e: b4:01:c0:7b:16:b5:88:1d:fe:1d:64:b7:49:ca:4e: df:b9:ec:ac:01:51:4d:1a:3d:69:d6:d2:dd:3d:7d: ca:98:b2:85:ef:b6:99:7b:ef:2f:96:df:c0:cf:0b: 24:d1:40:45:d7:dd:30:77:82:d6:e6:77:8c:d4:ba: 2f:7b:01:8d:ab:76:14:80:32:77:3a:25:a1:a0:3e: b9:13:10:30:bd:82:85:23:df:38:7a:54:5d:53:b6: 6c:2a:d7:2b:ca:0b:18:23:80:6d:de:68:53:d7:29: 43:c9:18:59:8f:d6:26:ad:89:a5:22:9e:cf:14:f5: d8:4b:72:c0:80:11:d5:15:14:de:90:62:5a:07:59: ae:a3:8c:af:6c:c9:31:59:54:1a:80:ca:71:61:c6: 74:b5:d1:ee:04:5d:bd:67:c9:d7:82:b8:48:1f:c6: e9:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:2A:A5:D5:D6:EE:82:5A:52:F3:B4:3A:8C:CD:66:DE:30:A4:98:38 X509v3 Authority Key Identifier: keyid:71:2E:B5:A2:D7:06:9F:18:EE:9C:65:F3:B0:13:27:1A:DB:F1:F5:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A8A52/FB7E4BDE70B511ED93F0DD16C4F9AE02/cS61otcGnxjunGXzsBMnGtvx9UA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cS61otcGnxjunGXzsBMnGtvx9UA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8A52/FB7E4BDE70B511ED93F0DD16C4F9AE02/cS61otcGnxjunGXzsBMnGtvx9UA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:b0:1e:25:f5:a8:40:41:c6:95:32:ff:13:69:53:c9:a0:e1: 03:1f:f9:d8:ff:9c:3d:12:f5:9a:e0:37:94:8b:f4:a6:96:ae: ed:9f:18:11:86:e4:97:b2:2d:93:b8:be:a9:d1:04:e4:f4:6e: 82:65:24:f9:04:d4:63:37:dd:2c:be:db:56:0e:62:55:c6:3f: 6c:be:af:8c:75:ce:8c:b0:fc:7f:1d:fe:32:2f:13:e7:de:49: 42:75:f3:14:0b:c6:31:a5:49:d6:f4:ce:51:53:78:87:17:5a: 70:66:07:77:a5:1b:27:6a:20:32:a6:19:4b:14:b9:11:86:30: b2:89:96:0c:c1:bc:ad:dc:3c:9d:34:64:ad:13:73:5d:b5:2a: 91:2f:0a:c3:c8:05:6f:c5:42:16:5c:eb:d0:49:a4:61:7d:ab: d6:3c:58:33:e4:79:b8:39:ec:ee:a8:44:66:2e:13:8f:8f:49: 3b:19:fd:1c:12:cb:89:c8:2a:81:49:f7:10:e0:ba:44:40:b8: 37:27:f4:79:52:52:cd:b7:58:02:07:97:2f:f8:2d:4c:86:77: e0:2f:5f:38:78:da:1e:ec:64:a1:80:61:fc:10:8d:4e:10:7e: fc:70:b3:4c:e8:0e:51:5e:01:aa:e7:63:50:86:dd:66:44:0e: 36:fe:95:62 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAeowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QThBNTIxMTAvBgNVBAUTKDcxMkVCNUEyRDcwNjlGMThFRTlDNjVGM0IwMTMyNzFB REJGMUY1NDAwHhcNMjUwNjA1MDIxMTQzWhcNMjUwNjEyMDIxMTQzWjAYMRYwFAYD VQQDEw02ODQwZmNkZi1jZDVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv3ucJJnw6thP6nj20BcurkNh6Ge/arNahDRdYgbG6NwpDLlSvr4Nv8Aglnlu aNKH3vCWx5UJeN4MPN/9I4wLFj+yuU5hRiy5FPNCRf5qbN/T879zoiGs2p60AcB7 FrWIHf4dZLdJyk7fueysAVFNGj1p1tLdPX3KmLKF77aZe+8vlt/Azwsk0UBF190w d4LW5neM1LovewGNq3YUgDJ3OiWhoD65ExAwvYKFI984elRdU7ZsKtcrygsYI4Bt 3mhT1ylDyRhZj9YmrYmlIp7PFPXYS3LAgBHVFRTekGJaB1muo4yvbMkxWVQagMpx YcZ0tdHuBF29Z8nXgrhIH8bp9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOMqpdXW 7oJaUvO0OozNZt4wpJg4MB8GA1UdIwQYMBaAFHEutaLXBp8Y7pxl87ATJxrb8fVA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOEE1Mi9GQjdFNEJERTcw QjUxMUVEOTNGMEREMTZDNEY5QUUwMi9jUzYxb3RjR254anVuR1h6c0JNbkd0dng5 VUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NTNjFvdGNHbnhqdW5HWHpzQk1uR3R2eDlVQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OEE1Mi9GQjdFNEJERTcwQjUxMUVEOTNGMEREMTZDNEY5QUUwMi9jUzYxb3RjR254 anVuR1h6c0JNbkd0dng5VUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA2sB4l9ahAQcaVMv8TaVPJoOEDH/nY/5w9EvWa4DeUi/Smlq7tnxgR huSXsi2TuL6p0QTk9G6CZST5BNRjN90svttWDmJVxj9svq+Mdc6MsPx/Hf4yLxPn 3klCdfMUC8YxpUnW9M5RU3iHF1pwZgd3pRsnaiAyphlLFLkRhjCyiZYMwbyt3Dyd NGStE3NdtSqRLwrDyAVvxUIWXOvQSaRhfavWPFgz5Hm4OezuqERmLhOPj0k7Gf0c EsuJyCqBSfcQ4LpEQLg3J/R5UlLNt1gCB5cv+C1MhnfgL184eNoe7GShgGH8EI1O EH78cLNM6A5RXgGq52NQht1mRA42/pVi -----END CERTIFICATE-----Generated at Thu Jun 5 19:18:27 2025 by rpki-client