$ rpki-client -vvf rpki.apnic.net/member_repository/A91AD705/BA1DB762FB7411EC96A5B430C4F9AE02/dHzHy9sivZpILTNRgJ3qm8FGAoQ.mft File: dHzHy9sivZpILTNRgJ3qm8FGAoQ.mft (raw, json) Hash identifier: BsRPfdkZpnTI4OSRvKM2ALUtLIpbSebtqU06N4Ut5Vk= Subject key identifier: 74:FC:AE:25:2D:6E:E5:92:7B:6A:D2:B3:83:03:A3:A8:46:F6:28:B7 Authority key identifier: 74:7C:C7:CB:DB:22:BD:9A:48:2D:33:51:80:9D:EA:9B:C1:46:02:84 Certificate issuer: /CN=A91AD705/serialNumber=747CC7CBDB22BD9A482D3351809DEA9BC1460284 Certificate serial: 02B0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dHzHy9sivZpILTNRgJ3qm8FGAoQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AD705/BA1DB762FB7411EC96A5B430C4F9AE02/dHzHy9sivZpILTNRgJ3qm8FGAoQ.mft Manifest number: 02AC Signing time: Mon 09 Jun 2025 01:02:37 +0000 Manifest this update: Mon 09 Jun 2025 01:02:36 +0000 Manifest next update: Mon 16 Jun 2025 01:02:36 +0000 Files and hashes: 1: dHzHy9sivZpILTNRgJ3qm8FGAoQ.crl (hash: SYdj1aj1il5R1/HaWIEFY2fiwArlW9aNswwA0vTb24A=) 2: D628208AFB7611EC96592431C4F9AE02.roa (hash: tDCtD935JtRcgKFjdurBw3JcU/lSCjaGyyfEOwNOFIg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AD705/BA1DB762FB7411EC96A5B430C4F9AE02/dHzHy9sivZpILTNRgJ3qm8FGAoQ.crl rsync://rpki.apnic.net/member_repository/A91AD705/BA1DB762FB7411EC96A5B430C4F9AE02/dHzHy9sivZpILTNRgJ3qm8FGAoQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dHzHy9sivZpILTNRgJ3qm8FGAoQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Jun 2025 01:02:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 688 (0x2b0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AD705, serialNumber=747CC7CBDB22BD9A482D3351809DEA9BC1460284 Validity Not Before: Jun 9 01:02:36 2025 GMT Not After : Jun 16 01:02:36 2025 GMT Subject: CN=684632ac-2c16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:10:0b:60:68:60:4b:78:47:eb:cd:7c:a4:14: a5:b2:3c:f4:85:59:55:20:b7:5f:ae:11:d4:48:c1: ba:13:a7:4d:76:3e:d9:1a:b2:e4:14:6b:98:90:b2: 62:6a:30:38:cf:e1:ac:9c:e5:9a:ec:1c:26:75:2e: 67:eb:d8:ee:f7:27:e6:b2:e0:e1:ab:dc:bb:f2:5f: 12:f8:d3:83:c8:bf:a6:51:37:65:72:b2:27:12:03: 92:8f:77:d4:2b:28:f7:f8:27:4d:3b:8b:6b:0d:3a: a4:c1:2c:08:9d:65:e8:8a:fe:b1:d4:c3:3b:3c:76: 8d:e2:87:a2:dc:9f:6e:cd:6e:84:ef:e7:06:0d:fc: f2:49:2e:0e:60:04:35:f2:b8:d8:7a:4d:79:56:38: f2:d2:64:59:a4:fe:a3:93:aa:52:2a:dc:ba:4e:88: 9d:43:68:68:b1:3a:09:2f:f7:31:fc:4c:3f:b0:3e: 42:c6:eb:44:e6:ed:50:74:39:ae:24:bd:47:19:86: dd:aa:3e:65:1d:54:56:d5:c8:3c:c2:1e:a8:e8:ab: b1:aa:6d:10:69:d4:4c:3b:03:6e:bf:f0:e6:c7:9e: d2:a9:03:79:db:38:0b:9c:09:47:0c:97:06:1a:df: fc:2d:8c:4e:da:38:9b:78:d2:20:25:72:98:95:e8: 86:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:FC:AE:25:2D:6E:E5:92:7B:6A:D2:B3:83:03:A3:A8:46:F6:28:B7 X509v3 Authority Key Identifier: keyid:74:7C:C7:CB:DB:22:BD:9A:48:2D:33:51:80:9D:EA:9B:C1:46:02:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AD705/BA1DB762FB7411EC96A5B430C4F9AE02/dHzHy9sivZpILTNRgJ3qm8FGAoQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dHzHy9sivZpILTNRgJ3qm8FGAoQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AD705/BA1DB762FB7411EC96A5B430C4F9AE02/dHzHy9sivZpILTNRgJ3qm8FGAoQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:f8:18:56:4d:89:7f:75:4f:3c:ad:5a:90:af:5d:96:18:6e: 26:fe:5b:9a:1a:c6:15:0e:a6:f4:b8:ad:f7:c1:c1:d0:51:a8: 11:a8:a5:df:eb:90:15:a3:7d:ef:0f:a4:6c:ab:6b:b4:a8:5a: a1:d9:20:7a:8a:35:f2:de:06:aa:7b:e4:de:d1:f8:a9:30:f8: b1:af:76:47:92:6c:29:cc:ca:10:4d:2b:04:30:b9:e7:62:7c: 14:86:7a:1e:87:b9:06:a4:6e:8e:98:af:6d:d0:a0:3f:82:f0: 46:bb:e7:54:59:8d:28:62:db:1d:de:fc:e2:3d:42:1f:3b:7e: ad:00:a8:e1:26:e6:75:4f:e5:d6:e7:82:b6:c2:dc:7b:4e:68: 32:fd:cd:c4:e0:df:10:79:8f:28:d6:6f:97:81:8a:24:bb:ba: 53:4c:ce:8c:b1:b8:1d:39:0f:45:07:1e:e2:32:63:58:cb:38: 6a:c3:a3:c3:d7:a5:1c:04:0d:19:08:43:42:ae:4f:9a:fa:16: e2:ed:fa:71:e3:b5:3a:90:cf:5e:b9:bc:e6:02:e0:83:5e:32: ae:e2:0e:69:84:a5:a8:c1:e9:2d:ad:b8:cd:92:0e:31:eb:b7: 7c:d7:9d:45:f6:f8:20:9b:a8:e5:e2:d6:92:f1:37:dc:84:a9: 30:2d:41:fb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICArAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUQ3MDUxMTAvBgNVBAUTKDc0N0NDN0NCREIyMkJEOUE0ODJEMzM1MTgwOURFQTlC QzE0NjAyODQwHhcNMjUwNjA5MDEwMjM2WhcNMjUwNjE2MDEwMjM2WjAYMRYwFAYD VQQDEw02ODQ2MzJhYy0yYzE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuhALYGhgS3hH6818pBSlsjz0hVlVILdfrhHUSMG6E6dNdj7ZGrLkFGuYkLJi ajA4z+GsnOWa7BwmdS5n69ju9yfmsuDhq9y78l8S+NODyL+mUTdlcrInEgOSj3fU Kyj3+CdNO4trDTqkwSwInWXoiv6x1MM7PHaN4oei3J9uzW6E7+cGDfzySS4OYAQ1 8rjYek15Vjjy0mRZpP6jk6pSKty6ToidQ2hosToJL/cx/Ew/sD5CxutE5u1QdDmu JL1HGYbdqj5lHVRW1cg8wh6o6Kuxqm0QadRMOwNuv/Dmx57SqQN52zgLnAlHDJcG Gt/8LYxO2jibeNIgJXKYleiGWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHT8riUt buWSe2rSs4MDo6hG9ii3MB8GA1UdIwQYMBaAFHR8x8vbIr2aSC0zUYCd6pvBRgKE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRDcwNS9CQTFEQjc2MkZC NzQxMUVDOTZBNUI0MzBDNEY5QUUwMi9kSHpIeTlzaXZacElMVE5SZ0ozcW04RkdB b1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RIekh5OXNpdlpwSUxUTlJnSjNxbThGR0FvUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RDcwNS9CQTFEQjc2MkZCNzQxMUVDOTZBNUI0MzBDNEY5QUUwMi9kSHpIeTlzaXZa cElMVE5SZ0ozcW04RkdBb1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBx+BhWTYl/dU88rVqQr12WGG4m/luaGsYVDqb0uK33wcHQUagRqKXf 65AVo33vD6Rsq2u0qFqh2SB6ijXy3gaqe+Te0fipMPixr3ZHkmwpzMoQTSsEMLnn YnwUhnoeh7kGpG6OmK9t0KA/gvBGu+dUWY0oYtsd3vziPUIfO36tAKjhJuZ1T+XW 54K2wtx7Tmgy/c3E4N8QeY8o1m+XgYoku7pTTM6MsbgdOQ9FBx7iMmNYyzhqw6PD 16UcBA0ZCENCrk+a+hbi7fpx47U6kM9eubzmAuCDXjKu4g5phKWowektrbjNkg4x 67d8151F9vggm6jl4taS8TfchKkwLUH7 -----END CERTIFICATE-----Generated at Mon Jun 9 20:42:19 2025 by rpki-client