$ rpki-client -vvf rpki.apnic.net/member_repository/A91ABEAC/1CD146B0FD1111ECAD8B5228C4F9AE02/j11eWHmnUVjyz_syrdlEcfl0GD8.mft File: j11eWHmnUVjyz_syrdlEcfl0GD8.mft (raw, json) Hash identifier: pWlDoz6yCkIZHhiFgiSO5yvEEV3un5mZvUL/7jGdcos= Subject key identifier: 79:DA:E7:CC:2F:57:7F:E8:71:69:26:B2:AD:85:73:A2:53:28:0A:42 Authority key identifier: 8F:5D:5E:58:79:A7:51:58:F2:CF:FB:32:AD:D9:44:71:F9:74:18:3F Certificate issuer: /CN=A91ABEAC/serialNumber=8F5D5E5879A75158F2CFFB32ADD94471F974183F Certificate serial: 02A6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j11eWHmnUVjyz_syrdlEcfl0GD8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ABEAC/1CD146B0FD1111ECAD8B5228C4F9AE02/j11eWHmnUVjyz_syrdlEcfl0GD8.mft Manifest number: 02A2 Signing time: Sat 31 May 2025 01:41:54 +0000 Manifest this update: Sat 31 May 2025 01:41:53 +0000 Manifest next update: Sat 07 Jun 2025 01:41:53 +0000 Files and hashes: 1: j11eWHmnUVjyz_syrdlEcfl0GD8.crl (hash: M8CxSo6RyYiINgDLWxcIf8DF4kZ7G5q+QWnqjoAapgk=) 2: 7F64C44645A511ED93E3C45BC4F9AE02.roa (hash: Bg1GhaBWG9ZnbioiTw4VxZi4hDCzIRIbJ2r9iNJxCVE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ABEAC/1CD146B0FD1111ECAD8B5228C4F9AE02/j11eWHmnUVjyz_syrdlEcfl0GD8.crl rsync://rpki.apnic.net/member_repository/A91ABEAC/1CD146B0FD1111ECAD8B5228C4F9AE02/j11eWHmnUVjyz_syrdlEcfl0GD8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j11eWHmnUVjyz_syrdlEcfl0GD8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 01:41:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 678 (0x2a6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ABEAC, serialNumber=8F5D5E5879A75158F2CFFB32ADD94471F974183F Validity Not Before: May 31 01:41:53 2025 GMT Not After : Jun 7 01:41:53 2025 GMT Subject: CN=683a5e62-d2c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:04:cf:9c:8c:a5:37:f2:1a:e7:80:dc:95:07: 63:31:34:15:ac:f8:f3:07:7b:66:8a:f1:60:0f:a5: de:55:54:27:fc:97:0e:be:20:70:51:5f:db:7e:fa: 1a:a8:bc:0e:79:72:c0:73:a9:15:da:1c:dd:42:5e: ae:8a:ba:71:51:ee:d1:58:ac:5a:00:ca:0e:1c:59: 2e:c8:52:c8:95:69:54:09:73:d3:9f:75:c5:cc:33: 01:57:dd:04:39:41:c1:2e:da:8e:cd:c6:31:51:d9: 48:68:22:52:96:b0:c0:c4:20:e3:d8:95:2f:8c:2f: 04:bb:ec:ba:6b:53:3a:88:0e:2c:7f:d5:aa:96:7e: 1d:ed:77:2c:e1:07:c4:1e:12:31:6e:73:26:54:71: b1:d2:1a:24:66:19:f2:b2:dd:12:bd:ab:61:6c:38: 93:21:c3:e5:18:38:08:3d:d6:83:3c:9b:b7:af:b9: ef:aa:71:33:63:55:2a:6d:24:e1:2e:ec:e7:6e:76: e1:30:94:98:d9:c6:ed:a4:7f:8e:11:68:25:55:6a: 7c:b0:3d:e6:31:2f:46:77:d3:52:ad:9a:89:93:5d: f4:da:08:d1:b7:e8:7e:70:45:1e:ea:6a:4a:75:3d: 38:12:62:f8:37:67:56:a0:a3:8d:7d:a8:3c:ba:43: 72:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:DA:E7:CC:2F:57:7F:E8:71:69:26:B2:AD:85:73:A2:53:28:0A:42 X509v3 Authority Key Identifier: keyid:8F:5D:5E:58:79:A7:51:58:F2:CF:FB:32:AD:D9:44:71:F9:74:18:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ABEAC/1CD146B0FD1111ECAD8B5228C4F9AE02/j11eWHmnUVjyz_syrdlEcfl0GD8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j11eWHmnUVjyz_syrdlEcfl0GD8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ABEAC/1CD146B0FD1111ECAD8B5228C4F9AE02/j11eWHmnUVjyz_syrdlEcfl0GD8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:22:84:78:13:87:96:82:0d:85:5b:ae:79:ae:61:6d:5e:b0: e7:76:de:ed:97:0e:d3:0a:b4:93:1f:3c:9d:4f:cb:13:67:9a: 81:7c:a5:92:ca:a0:37:6a:90:86:80:f4:a4:55:34:7e:5d:db: 2d:7c:52:c7:4d:92:1a:da:65:d3:56:ed:5a:b0:a6:d7:7a:1a: 38:ee:b2:9b:b1:06:ea:24:3d:90:49:30:75:b2:77:8e:9e:6c: 46:07:8f:63:24:1e:64:f3:56:1a:79:fa:ce:77:b3:84:26:45: 65:db:3b:61:4d:5a:bc:fe:00:f0:ae:16:c2:8c:93:91:84:fa: 56:fe:75:47:4b:44:d7:ed:e9:17:df:f0:f1:ce:83:46:11:5d: 20:7b:95:ab:70:68:18:f9:79:3d:4f:a1:65:7d:ca:2a:06:18: ad:cd:7f:c9:23:2c:66:46:dc:81:93:ec:a7:4a:75:dd:34:e1: 28:ca:a7:79:de:f1:39:47:bd:0e:cd:a8:e2:fa:10:56:51:cd: ef:5b:fe:68:ac:09:d2:c8:25:71:55:18:57:de:54:9e:93:c3: 7e:b1:56:91:88:83:ff:cd:12:ec:be:5c:36:95:78:0f:58:40: 7f:44:cb:55:25:69:b7:7e:76:5c:9d:b4:9a:52:fd:7e:00:19: e9:e0:cc:48 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAqYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUJFQUMxMTAvBgNVBAUTKDhGNUQ1RTU4NzlBNzUxNThGMkNGRkIzMkFERDk0NDcx Rjk3NDE4M0YwHhcNMjUwNTMxMDE0MTUzWhcNMjUwNjA3MDE0MTUzWjAYMRYwFAYD VQQDEw02ODNhNWU2Mi1kMmM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvATPnIylN/Ia54DclQdjMTQVrPjzB3tmivFgD6XeVVQn/JcOviBwUV/bfvoa qLwOeXLAc6kV2hzdQl6uirpxUe7RWKxaAMoOHFkuyFLIlWlUCXPTn3XFzDMBV90E OUHBLtqOzcYxUdlIaCJSlrDAxCDj2JUvjC8Eu+y6a1M6iA4sf9Wqln4d7Xcs4QfE HhIxbnMmVHGx0hokZhnyst0SvathbDiTIcPlGDgIPdaDPJu3r7nvqnEzY1UqbSTh LuznbnbhMJSY2cbtpH+OEWglVWp8sD3mMS9Gd9NSrZqJk1302gjRt+h+cEUe6mpK dT04EmL4N2dWoKONfag8ukNyvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHna58wv V3/ocWkmsq2Fc6JTKApCMB8GA1UdIwQYMBaAFI9dXlh5p1FY8s/7Mq3ZRHH5dBg/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQkVBQy8xQ0QxNDZCMEZE MTExMUVDQUQ4QjUyMjhDNEY5QUUwMi9qMTFlV0htblVWanl6X3N5cmRsRWNmbDBH RDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2oxMWVXSG1uVVZqeXpfc3lyZGxFY2ZsMEdEOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QkVBQy8xQ0QxNDZCMEZEMTExMUVDQUQ4QjUyMjhDNEY5QUUwMi9qMTFlV0htblVW anl6X3N5cmRsRWNmbDBHRDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBVIoR4E4eWgg2FW655rmFtXrDndt7tlw7TCrSTHzydT8sTZ5qBfKWS yqA3apCGgPSkVTR+XdstfFLHTZIa2mXTVu1asKbXeho47rKbsQbqJD2QSTB1sneO nmxGB49jJB5k81YaefrOd7OEJkVl2zthTVq8/gDwrhbCjJORhPpW/nVHS0TX7ekX 3/DxzoNGEV0ge5WrcGgY+Xk9T6FlfcoqBhitzX/JIyxmRtyBk+ynSnXdNOEoyqd5 3vE5R70Ozaji+hBWUc3vW/5orAnSyCVxVRhX3lSek8N+sVaRiIP/zRLsvlw2lXgP WEB/RMtVJWm3fnZcnbSaUv1+ABnp4MxI -----END CERTIFICATE-----Generated at Sat May 31 16:32:10 2025 by rpki-client