$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9CBB/D53BD14615B111F0A2774A09C4F9AE02/_CT1OQdHh-zqsAwkJgbCvWiBmg0.mft File: _CT1OQdHh-zqsAwkJgbCvWiBmg0.mft (raw, json) Hash identifier: GqAnCWi18UzFuwoa0kyvfWUZHbM7bdjIIgV7MjWSrjY= Subject key identifier: 44:CE:F4:D0:75:EF:CD:49:CB:CE:E6:7B:3B:5C:5B:D4:2E:C8:18:85 Authority key identifier: FC:24:F5:39:07:47:87:EC:EA:B0:0C:24:26:06:C2:BD:68:81:9A:0D Certificate issuer: /CN=A91A9CBB/serialNumber=FC24F539074787ECEAB00C242606C2BD68819A0D Certificate serial: 1C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_CT1OQdHh-zqsAwkJgbCvWiBmg0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A9CBB/D53BD14615B111F0A2774A09C4F9AE02/_CT1OQdHh-zqsAwkJgbCvWiBmg0.mft Manifest number: 1B Signing time: Sat 31 May 2025 07:30:23 +0000 Manifest this update: Sat 31 May 2025 07:30:22 +0000 Manifest next update: Sat 07 Jun 2025 07:30:22 +0000 Files and hashes: 1: _CT1OQdHh-zqsAwkJgbCvWiBmg0.crl (hash: dJx/SyfsE1lP1bpWMbEP1a9nCTSKTGNiB/i42t6ZXCk=) 2: 2A8C8F02198E11F09D302145C4F9AE02.roa (hash: pkFF5f+Vaat+aJOayMibpTMU9Wp7Q864DQvUc24s624=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A9CBB/D53BD14615B111F0A2774A09C4F9AE02/_CT1OQdHh-zqsAwkJgbCvWiBmg0.crl rsync://rpki.apnic.net/member_repository/A91A9CBB/D53BD14615B111F0A2774A09C4F9AE02/_CT1OQdHh-zqsAwkJgbCvWiBmg0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_CT1OQdHh-zqsAwkJgbCvWiBmg0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 07:30:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28 (0x1c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A9CBB, serialNumber=FC24F539074787ECEAB00C242606C2BD68819A0D Validity Not Before: May 31 07:30:22 2025 GMT Not After : Jun 7 07:30:22 2025 GMT Subject: CN=683ab00e-18b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:d7:5b:80:af:e9:d9:17:6d:e5:18:83:fc:88: 1e:be:4c:93:1f:aa:df:b8:1f:4f:40:33:4e:8f:6a: f0:ab:ce:6c:f4:5a:e9:55:60:b0:46:b4:eb:ee:57: 22:ba:02:11:0f:e2:dc:c0:b0:cf:7c:23:21:cf:70: 2c:db:48:da:36:75:5f:92:ed:b7:ba:35:c0:93:b9: 4e:03:79:6c:cb:69:ec:6b:66:da:d2:71:a4:7c:17: c1:a4:d6:a0:92:ee:a6:97:61:50:f1:65:ca:7c:03: 1e:14:0b:50:7b:08:ed:4c:ff:ce:bf:f7:9f:ea:4b: d3:1b:6f:0a:36:be:7b:74:9c:a0:f2:4a:57:83:f7: 07:00:a5:51:71:39:32:3b:6f:14:2e:02:fd:ed:88: e7:53:8c:bc:ee:83:2f:0b:4f:80:e2:7d:ae:27:20: a8:79:27:cc:43:14:bf:c3:e0:a4:59:d9:b5:90:d7: 1d:3d:2d:63:3e:aa:56:dc:ec:af:5b:af:01:f9:c2: b8:1f:a0:97:47:7f:13:08:99:6a:d4:84:a1:29:cd: 68:4b:8a:12:78:1c:f5:e8:14:20:f4:a7:d6:b5:14: d2:94:36:e8:26:77:11:3a:3d:6a:6d:f4:7f:a0:1f: a6:15:b1:4e:e8:a3:7c:07:70:51:66:1e:17:cb:dc: 67:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:CE:F4:D0:75:EF:CD:49:CB:CE:E6:7B:3B:5C:5B:D4:2E:C8:18:85 X509v3 Authority Key Identifier: keyid:FC:24:F5:39:07:47:87:EC:EA:B0:0C:24:26:06:C2:BD:68:81:9A:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A9CBB/D53BD14615B111F0A2774A09C4F9AE02/_CT1OQdHh-zqsAwkJgbCvWiBmg0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_CT1OQdHh-zqsAwkJgbCvWiBmg0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9CBB/D53BD14615B111F0A2774A09C4F9AE02/_CT1OQdHh-zqsAwkJgbCvWiBmg0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:1d:a1:e5:01:bb:7c:ed:9f:1d:5b:7b:9f:a7:bf:ab:73:c5: 28:54:13:80:dd:85:fb:5d:45:ae:0c:7f:b9:66:dd:b3:a5:57: c1:b8:22:82:bf:81:0e:9b:18:d4:f2:e8:f1:38:49:c5:08:74: 5d:a6:77:4a:3d:d0:c7:9e:ed:4e:e0:15:bd:2e:e4:ce:77:2d: 73:82:c0:e2:98:87:e9:48:fd:08:15:95:32:ef:ce:a6:f5:e0: 31:72:17:e6:0c:03:2e:39:d1:73:98:ae:02:e4:8f:8b:c3:2c: 71:4e:cb:14:b9:7d:39:48:a5:1a:0d:a7:9a:b6:71:7a:75:39: a1:5c:69:9c:8c:1b:c4:25:0d:a9:e2:20:94:78:a8:0b:ef:4e: a9:03:6e:30:8b:cd:f2:d5:42:14:6d:1e:21:fa:c2:de:9d:d1: 3e:73:0f:e4:5d:48:11:4e:16:0a:7b:00:34:6e:6d:84:b1:a2: 79:e5:7d:8c:41:45:93:4b:21:77:54:2a:74:4d:3f:b7:b9:9a: 3b:6b:20:7e:46:9b:77:d5:20:04:e0:93:d8:2c:c9:67:a3:0e: d6:15:35:a1:b1:72:10:0b:f1:81:ae:07:8a:eb:ea:83:8c:39: 34:c8:90:eb:d6:6d:b6:9b:1b:a1:32:c1:e5:62:2f:68:bd:03: 55:0b:2a:17 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB OUNCQjExMC8GA1UEBRMoRkMyNEY1MzkwNzQ3ODdFQ0VBQjAwQzI0MjYwNkMyQkQ2 ODgxOUEwRDAeFw0yNTA1MzEwNzMwMjJaFw0yNTA2MDcwNzMwMjJaMBgxFjAUBgNV BAMTDTY4M2FiMDBlLTE4YjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC711uAr+nZF23lGIP8iB6+TJMfqt+4H09AM06PavCrzmz0WulVYLBGtOvuVyK6 AhEP4tzAsM98IyHPcCzbSNo2dV+S7be6NcCTuU4DeWzLaexrZtrScaR8F8Gk1qCS 7qaXYVDxZcp8Ax4UC1B7CO1M/86/95/qS9Mbbwo2vnt0nKDySleD9wcApVFxOTI7 bxQuAv3tiOdTjLzugy8LT4Difa4nIKh5J8xDFL/D4KRZ2bWQ1x09LWM+qlbc7K9b rwH5wrgfoJdHfxMImWrUhKEpzWhLihJ4HPXoFCD0p9a1FNKUNugmdxE6PWpt9H+g H6YVsU7oo3wHcFFmHhfL3GcJAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQURM700HXv zUnLzuZ7O1xb1C7IGIUwHwYDVR0jBBgwFoAU/CT1OQdHh+zqsAwkJgbCvWiBmg0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE5Q0JCL0Q1M0JEMTQ2MTVC MTExRjBBMjc3NEEwOUM0RjlBRTAyL19DVDFPUWRIaC16cXNBd2tKZ2JDdldpQm1n MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvX0NUMU9RZEhoLXpxc0F3a0pnYkN2V2lCbWcwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE5 Q0JCL0Q1M0JEMTQ2MTVCMTExRjBBMjc3NEEwOUM0RjlBRTAyL19DVDFPUWRIaC16 cXNBd2tKZ2JDdldpQm1nMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACUdoeUBu3ztnx1be5+nv6tzxShUE4DdhftdRa4Mf7lm3bOlV8G4IoK/ gQ6bGNTy6PE4ScUIdF2md0o90Mee7U7gFb0u5M53LXOCwOKYh+lI/QgVlTLvzqb1 4DFyF+YMAy450XOYrgLkj4vDLHFOyxS5fTlIpRoNp5q2cXp1OaFcaZyMG8QlDani IJR4qAvvTqkDbjCLzfLVQhRtHiH6wt6d0T5zD+RdSBFOFgp7ADRubYSxonnlfYxB RZNLIXdUKnRNP7e5mjtrIH5Gm3fVIATgk9gsyWejDtYVNaGxchAL8YGuB4rr6oOM OTTIkOvWbbabG6EyweViL2i9A1ULKhc= -----END CERTIFICATE-----Generated at Sat May 31 15:43:39 2025 by rpki-client