$ rpki-client -vvf rpki.apnic.net/member_repository/A91A995E/37BB5F82FA6211EF95555C0EC4F9AE02/pevfmDkZxg9iLzTvj8Uh5ySJ0c0.mft File: pevfmDkZxg9iLzTvj8Uh5ySJ0c0.mft (raw, json) Hash identifier: yhJFufCORG7jWVBTALeMtESa9p16Cur2j57UrIGUxLM= Subject key identifier: 42:02:E6:1F:63:71:14:03:1E:92:A8:0C:DF:8D:C8:D7:4D:D1:58:C9 Authority key identifier: A5:EB:DF:98:39:19:C6:0F:62:2F:34:EF:8F:C5:21:E7:24:89:D1:CD Certificate issuer: /CN=A91A995E/serialNumber=A5EBDF983919C60F622F34EF8FC521E72489D1CD Certificate serial: 31 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pevfmDkZxg9iLzTvj8Uh5ySJ0c0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A995E/37BB5F82FA6211EF95555C0EC4F9AE02/pevfmDkZxg9iLzTvj8Uh5ySJ0c0.mft Manifest number: 30 Signing time: Sat 31 May 2025 07:16:09 +0000 Manifest this update: Sat 31 May 2025 07:16:09 +0000 Manifest next update: Sat 07 Jun 2025 07:16:09 +0000 Files and hashes: 1: pevfmDkZxg9iLzTvj8Uh5ySJ0c0.crl (hash: oX7FigXU3FtdQa0y7p/okmtNBjLIEP8CNRkHuPc/XVE=) 2: B3E4D03621B111F089CE216DC4F9AE02.roa (hash: VCQENYwleJhQRqqUILKpkln6ADdmKoB6HviWfuCE7i4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A995E/37BB5F82FA6211EF95555C0EC4F9AE02/pevfmDkZxg9iLzTvj8Uh5ySJ0c0.crl rsync://rpki.apnic.net/member_repository/A91A995E/37BB5F82FA6211EF95555C0EC4F9AE02/pevfmDkZxg9iLzTvj8Uh5ySJ0c0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pevfmDkZxg9iLzTvj8Uh5ySJ0c0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 07:16:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49 (0x31) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A995E, serialNumber=A5EBDF983919C60F622F34EF8FC521E72489D1CD Validity Not Before: May 31 07:16:09 2025 GMT Not After : Jun 7 07:16:09 2025 GMT Subject: CN=683aacb9-8ab5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:d3:75:69:7d:49:c1:f8:70:77:54:df:eb:4f: 87:6a:09:9e:b6:da:9d:17:82:8b:e9:20:77:44:8a: 37:d6:11:90:fa:d9:55:a6:46:6d:40:98:d1:cb:0e: 28:85:3e:1f:b8:69:09:03:84:3d:d5:c6:07:2c:fd: 12:05:37:dc:19:d1:84:1f:9d:b9:96:84:72:e0:a0: 6d:73:04:7e:01:3a:fb:76:7b:95:be:2b:8b:a2:86: 1e:ea:4a:e3:80:48:bb:a1:ce:49:be:38:e7:d5:23: 82:e1:ac:71:c0:55:07:84:d3:57:a9:ae:9b:0a:14: da:c6:ab:78:63:97:76:07:92:fe:c5:4e:63:6f:d5: f3:7d:16:2e:ef:f9:f6:22:0c:1e:dd:e3:b7:58:ac: 61:ca:c5:ac:ce:d2:e8:51:ef:f7:20:7d:de:84:35: fe:9b:79:d4:1c:cd:61:6e:1c:85:13:da:3a:99:81: 26:72:a0:6b:3e:a2:93:52:8f:21:50:05:21:e4:9f: 46:dc:0a:1a:36:93:97:c2:c3:eb:87:1e:28:4e:83: fa:3c:90:84:49:25:c0:42:ce:d0:98:0f:2f:e1:53: c0:c5:cd:86:ec:4a:d3:85:5d:85:41:1b:e2:34:ce: 43:4d:ec:a0:ee:3b:ac:ad:49:ed:71:71:85:f9:4c: 1d:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:02:E6:1F:63:71:14:03:1E:92:A8:0C:DF:8D:C8:D7:4D:D1:58:C9 X509v3 Authority Key Identifier: keyid:A5:EB:DF:98:39:19:C6:0F:62:2F:34:EF:8F:C5:21:E7:24:89:D1:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A995E/37BB5F82FA6211EF95555C0EC4F9AE02/pevfmDkZxg9iLzTvj8Uh5ySJ0c0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pevfmDkZxg9iLzTvj8Uh5ySJ0c0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A995E/37BB5F82FA6211EF95555C0EC4F9AE02/pevfmDkZxg9iLzTvj8Uh5ySJ0c0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:c1:3d:a5:43:60:0f:ba:dc:e5:3b:c9:63:01:03:c1:dc:45: 98:45:89:c9:22:fa:1c:e1:2f:28:eb:c3:4f:bd:2b:51:29:28: 97:ca:d6:83:2f:f2:4e:0f:80:ed:25:f9:2a:6c:a7:01:fe:2f: fc:74:2d:d5:3b:15:75:e0:8f:8c:b8:23:6d:80:c4:30:01:c5: d8:00:0a:97:b8:9a:90:88:61:be:72:bb:5e:02:5e:dd:bc:4f: d5:1a:b1:05:33:ab:82:be:ae:3d:61:48:b4:af:43:17:7f:56: c0:6c:f1:37:bb:36:3e:7a:04:ec:6e:ad:87:c6:b4:7f:ee:14: 6b:78:10:12:7c:96:41:29:cf:ae:0e:e9:87:36:fa:70:5e:3a: 30:cd:a2:a6:9c:8f:c4:c8:bc:85:c6:97:e5:c1:2a:17:94:1b: 84:4b:c4:04:a0:48:2f:9c:ff:fa:79:68:bf:23:18:81:9e:fc: 6f:d1:be:0e:52:b2:20:10:c8:41:8e:b4:76:32:b7:50:a5:76: 61:0b:2a:eb:a4:f0:dc:63:97:a8:a5:05:31:50:d1:40:6f:02: 86:0e:10:e9:e9:16:4b:ad:c6:04:58:a9:82:f7:36:fb:da:b5: 8d:1a:27:51:44:ba:8c:ea:e7:ac:39:1d:d3:29:d1:55:cb:65: 8e:85:df:e9 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB OTk1RTExMC8GA1UEBRMoQTVFQkRGOTgzOTE5QzYwRjYyMkYzNEVGOEZDNTIxRTcy NDg5RDFDRDAeFw0yNTA1MzEwNzE2MDlaFw0yNTA2MDcwNzE2MDlaMBgxFjAUBgNV BAMTDTY4M2FhY2I5LThhYjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCc03VpfUnB+HB3VN/rT4dqCZ622p0XgovpIHdEijfWEZD62VWmRm1AmNHLDiiF Ph+4aQkDhD3Vxgcs/RIFN9wZ0YQfnbmWhHLgoG1zBH4BOvt2e5W+K4uihh7qSuOA SLuhzkm+OOfVI4LhrHHAVQeE01eprpsKFNrGq3hjl3YHkv7FTmNv1fN9Fi7v+fYi DB7d47dYrGHKxazO0uhR7/cgfd6ENf6bedQczWFuHIUT2jqZgSZyoGs+opNSjyFQ BSHkn0bcCho2k5fCw+uHHihOg/o8kIRJJcBCztCYDy/hU8DFzYbsStOFXYVBG+I0 zkNN7KDuO6ytSe1xcYX5TB3ZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUQgLmH2Nx FAMekqgM343I103RWMkwHwYDVR0jBBgwFoAUpevfmDkZxg9iLzTvj8Uh5ySJ0c0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE5OTVFLzM3QkI1RjgyRkE2 MjExRUY5NTU1NUMwRUM0RjlBRTAyL3BldmZtRGtaeGc5aUx6VHZqOFVoNXlTSjBj MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcGV2Zm1Ea1p4ZzlpTHpUdmo4VWg1eVNKMGMwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE5 OTVFLzM3QkI1RjgyRkE2MjExRUY5NTU1NUMwRUM0RjlBRTAyL3BldmZtRGtaeGc5 aUx6VHZqOFVoNXlTSjBjMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJnBPaVDYA+63OU7yWMBA8HcRZhFicki+hzhLyjrw0+9K1EpKJfK1oMv 8k4PgO0l+SpspwH+L/x0LdU7FXXgj4y4I22AxDABxdgACpe4mpCIYb5yu14CXt28 T9UasQUzq4K+rj1hSLSvQxd/VsBs8Te7Nj56BOxurYfGtH/uFGt4EBJ8lkEpz64O 6Yc2+nBeOjDNoqacj8TIvIXGl+XBKheUG4RLxASgSC+c//p5aL8jGIGe/G/Rvg5S siAQyEGOtHYyt1CldmELKuuk8Nxjl6ilBTFQ0UBvAoYOEOnpFkutxgRYqYL3Nvva tY0aJ1FEuozq56w5HdMp0VXLZY6F3+k= -----END CERTIFICATE-----Generated at Sat May 31 16:57:51 2025 by rpki-client