$ rpki-client -vvf rpki.apnic.net/member_repository/A91AD0B2/2213E5BCCB2E11EBB2D39748C4F9AE02/RLpWm_0uyBawaXNFE-C78tNOtwc.mft File: RLpWm_0uyBawaXNFE-C78tNOtwc.mft (raw, json) Hash identifier: jyKkq/p3C0p7WWRU95WYA65KIZMVk/MkNVBBqf5EZkU= Subject key identifier: E3:1D:1F:EB:6E:F6:D2:67:8F:6F:C9:F9:A5:C1:28:D4:44:EE:DC:98 Authority key identifier: 44:BA:56:9B:FD:2E:C8:16:B0:69:73:45:13:E0:BB:F2:D3:4E:B7:07 Certificate issuer: /CN=A91AD0B2/serialNumber=44BA569BFD2EC816B069734513E0BBF2D34EB707 Certificate serial: 05C3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RLpWm_0uyBawaXNFE-C78tNOtwc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AD0B2/2213E5BCCB2E11EBB2D39748C4F9AE02/RLpWm_0uyBawaXNFE-C78tNOtwc.mft Manifest number: 05B1 Signing time: Fri 30 May 2025 23:22:55 +0000 Manifest this update: Fri 30 May 2025 23:22:55 +0000 Manifest next update: Fri 06 Jun 2025 23:22:55 +0000 Files and hashes: 1: RLpWm_0uyBawaXNFE-C78tNOtwc.crl (hash: u5AH6kxJve9XCqRGzFmfSoYbOKo+H360lXB9iVl1C8o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AD0B2/2213E5BCCB2E11EBB2D39748C4F9AE02/RLpWm_0uyBawaXNFE-C78tNOtwc.crl rsync://rpki.apnic.net/member_repository/A91AD0B2/2213E5BCCB2E11EBB2D39748C4F9AE02/RLpWm_0uyBawaXNFE-C78tNOtwc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RLpWm_0uyBawaXNFE-C78tNOtwc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 23:22:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1475 (0x5c3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AD0B2, serialNumber=44BA569BFD2EC816B069734513E0BBF2D34EB707 Validity Not Before: May 30 23:22:55 2025 GMT Not After : Jun 6 23:22:55 2025 GMT Subject: CN=683a3dcf-8a66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:dc:28:df:22:b6:6b:d2:7f:f4:2e:ae:9e:15: b3:05:b9:de:6a:8e:c7:23:94:70:bd:1e:3e:ca:a8: 75:0b:1d:12:ac:e1:6b:28:eb:f6:f8:66:5c:57:c6: d0:11:0a:04:9e:8c:75:e8:fe:52:cf:46:e4:82:04: 16:53:f4:d0:18:6f:40:93:bd:88:67:05:f5:3c:7f: 2e:78:3a:85:af:47:62:48:8e:f5:cb:4d:0f:23:12: ee:c8:d9:9c:1e:db:b1:29:0b:45:19:f4:fe:fb:35: d9:e3:fc:5d:f2:7a:fc:23:6d:c8:8b:bc:34:59:0f: 0a:91:48:b2:f7:ab:bb:33:39:6d:50:df:ad:cf:35: 27:80:36:15:7e:0a:69:a8:ca:5c:0c:6f:8f:17:9b: e7:12:0d:a6:b7:97:16:f9:23:4f:2d:6a:27:54:56: e9:2e:14:5f:44:71:c0:ba:ee:ef:c9:ee:19:c6:3d: c9:80:33:16:d3:ac:d7:41:b2:09:1d:6f:ef:9d:6e: 72:94:df:9c:61:f4:2b:86:1b:2a:b7:c9:fd:49:5d: c6:9b:13:d1:e8:c6:b1:41:60:09:93:b8:43:a6:6f: ad:37:15:bd:59:0e:03:44:44:17:aa:82:ac:e9:bf: 0f:30:0b:13:b2:7e:eb:9d:60:07:82:2d:e3:e9:ca: 69:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:1D:1F:EB:6E:F6:D2:67:8F:6F:C9:F9:A5:C1:28:D4:44:EE:DC:98 X509v3 Authority Key Identifier: keyid:44:BA:56:9B:FD:2E:C8:16:B0:69:73:45:13:E0:BB:F2:D3:4E:B7:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AD0B2/2213E5BCCB2E11EBB2D39748C4F9AE02/RLpWm_0uyBawaXNFE-C78tNOtwc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RLpWm_0uyBawaXNFE-C78tNOtwc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AD0B2/2213E5BCCB2E11EBB2D39748C4F9AE02/RLpWm_0uyBawaXNFE-C78tNOtwc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:20:6e:63:fd:06:0f:fc:0f:38:3c:33:75:52:dc:51:2f:42: ab:d6:84:d5:f9:f9:56:c2:c1:c8:38:7a:39:20:ec:cf:be:b0: 0d:ca:7c:31:a5:cf:7d:fe:bd:dd:af:6a:cc:5f:f5:d0:93:06: d0:47:e3:fe:82:9d:31:63:af:08:f9:bd:85:6b:10:a5:1a:ef: 7b:5f:46:15:4c:08:d4:5c:cc:83:af:be:3b:cb:a8:82:7e:64: 10:4e:e8:33:ef:61:ae:0a:75:69:44:64:4c:bd:b3:b2:e5:0e: d4:1c:c6:36:e2:3b:a8:5e:dd:1b:bf:2f:95:b3:a5:9b:0c:b5: 08:e3:f2:72:41:d8:ae:29:23:c8:60:33:0c:94:c1:e8:a9:26: 63:37:da:cb:f0:ac:15:11:9c:af:72:a3:6a:93:a1:0d:6c:ec: 8c:8a:e9:b7:73:72:6f:a4:7c:eb:b7:43:4d:34:dd:1b:31:22: 36:da:a6:3a:04:1c:0a:01:79:bd:56:62:3e:68:2e:7a:05:98: 93:70:b6:75:fc:a5:60:81:e9:49:f7:42:01:54:6e:0c:f6:77: 3b:74:c5:a3:31:97:0f:7b:18:46:8d:4d:6b:28:e3:ed:2a:60: 0d:b0:4c:31:73:b1:ec:44:3d:6c:8f:85:3e:8e:c2:4a:02:a3: ee:2f:7a:4d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBcMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUQwQjIxMTAvBgNVBAUTKDQ0QkE1NjlCRkQyRUM4MTZCMDY5NzM0NTEzRTBCQkYy RDM0RUI3MDcwHhcNMjUwNTMwMjMyMjU1WhcNMjUwNjA2MjMyMjU1WjAYMRYwFAYD VQQDEw02ODNhM2RjZi04YTY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6dwo3yK2a9J/9C6unhWzBbneao7HI5RwvR4+yqh1Cx0SrOFrKOv2+GZcV8bQ EQoEnox16P5Sz0bkggQWU/TQGG9Ak72IZwX1PH8ueDqFr0diSI71y00PIxLuyNmc HtuxKQtFGfT++zXZ4/xd8nr8I23Ii7w0WQ8KkUiy96u7MzltUN+tzzUngDYVfgpp qMpcDG+PF5vnEg2mt5cW+SNPLWonVFbpLhRfRHHAuu7vye4Zxj3JgDMW06zXQbIJ HW/vnW5ylN+cYfQrhhsqt8n9SV3GmxPR6MaxQWAJk7hDpm+tNxW9WQ4DREQXqoKs 6b8PMAsTsn7rnWAHgi3j6cpp/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOMdH+tu 9tJnj2/J+aXBKNRE7tyYMB8GA1UdIwQYMBaAFES6Vpv9LsgWsGlzRRPgu/LTTrcH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRDBCMi8yMjEzRTVCQ0NC MkUxMUVCQjJEMzk3NDhDNEY5QUUwMi9STHBXbV8wdXlCYXdhWE5GRS1DNzh0Tk90 d2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JMcFdtXzB1eUJhd2FYTkZFLUM3OHROT3R3Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RDBCMi8yMjEzRTVCQ0NCMkUxMUVCQjJEMzk3NDhDNEY5QUUwMi9STHBXbV8wdXlC YXdhWE5GRS1DNzh0Tk90d2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCTIG5j/QYP/A84PDN1UtxRL0Kr1oTV+flWwsHIOHo5IOzPvrANynwx pc99/r3dr2rMX/XQkwbQR+P+gp0xY68I+b2FaxClGu97X0YVTAjUXMyDr747y6iC fmQQTugz72GuCnVpRGRMvbOy5Q7UHMY24juoXt0bvy+Vs6WbDLUI4/JyQdiuKSPI YDMMlMHoqSZjN9rL8KwVEZyvcqNqk6ENbOyMium3c3JvpHzrt0NNNN0bMSI22qY6 BBwKAXm9VmI+aC56BZiTcLZ1/KVggelJ90IBVG4M9nc7dMWjMZcPexhGjU1rKOPt KmANsEwxc7HsRD1sj4U+jsJKAqPuL3pN -----END CERTIFICATE-----Generated at Sat May 31 17:02:22 2025 by rpki-client