$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE85E/0BED35261D6E11E2B04A61AF08B02CD2/cJdlx9TTMfTDasa-NH-mah8CNJA.mft File: cJdlx9TTMfTDasa-NH-mah8CNJA.mft (raw, json) Hash identifier: HcU2QH5kWSpcwIk8guHNXZ4n+BMPrNQWC45OUCIBLMs= Subject key identifier: 76:9C:AF:D9:7B:18:43:C5:37:DB:47:09:1A:0F:99:59:C9:EC:0B:D3 Authority key identifier: 70:97:65:C7:D4:D3:31:F4:C3:6A:C6:BE:34:7F:A6:6A:1F:02:34:90 Certificate issuer: /CN=A91AE85E/serialNumber=709765C7D4D331F4C36AC6BE347FA66A1F023490 Certificate serial: 34E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cJdlx9TTMfTDasa-NH-mah8CNJA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AE85E/0BED35261D6E11E2B04A61AF08B02CD2/cJdlx9TTMfTDasa-NH-mah8CNJA.mft Manifest number: 34B4 Signing time: Sat 31 May 2025 14:18:11 +0000 Manifest this update: Sat 31 May 2025 14:18:11 +0000 Manifest next update: Sat 07 Jun 2025 14:18:11 +0000 Files and hashes: 1: cJdlx9TTMfTDasa-NH-mah8CNJA.crl (hash: /C+hp6MUb/nGhc0fx8i58mCxOqc0odAcS9d8TcuBkm8=) 2: 392987D254F611E79DF7E643C4F9AE02.roa (hash: E8L7EMY++G+/jL4fto/6X8FIxPH0nU/qyOAGKr50fbg=) 3: 09E2DC32B12B11E59337F35AC4F9AE02.roa (hash: cZP7pPe4Y/msfUjF/3Xl+aRlpqp1LPFsqoN3iYA504I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AE85E/0BED35261D6E11E2B04A61AF08B02CD2/cJdlx9TTMfTDasa-NH-mah8CNJA.crl rsync://rpki.apnic.net/member_repository/A91AE85E/0BED35261D6E11E2B04A61AF08B02CD2/cJdlx9TTMfTDasa-NH-mah8CNJA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cJdlx9TTMfTDasa-NH-mah8CNJA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 14:18:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13543 (0x34e7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AE85E, serialNumber=709765C7D4D331F4C36AC6BE347FA66A1F023490 Validity Not Before: May 31 14:18:11 2025 GMT Not After : Jun 7 14:18:11 2025 GMT Subject: CN=683b0fa3-0127 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:34:ab:e1:f7:a2:65:63:98:30:ac:e8:e2:0c: 7b:43:f2:4f:f9:a6:ba:40:52:1f:d4:5c:ab:6a:74: 6a:a9:7a:e0:2e:2d:43:d1:81:c7:a2:b4:5e:2d:53: 6e:6a:27:66:82:bf:f0:13:e0:68:70:e9:38:ed:40: f6:c2:ac:17:fa:22:9a:94:1f:18:e2:2a:d4:3c:e1: bd:ec:43:af:ce:c8:00:06:72:d2:b8:4c:35:58:57: 2c:25:d2:06:9b:35:8d:a6:03:52:70:36:40:20:2f: 50:78:27:92:62:1d:89:8d:c8:41:a9:1a:f3:ff:65: 6c:3a:04:75:7e:ba:ce:38:4c:da:08:31:6d:54:eb: e8:cf:6b:55:6c:3c:c0:c9:5c:72:9e:5c:ce:7d:0c: 37:60:76:1e:a3:4f:9e:2a:be:79:9e:8f:25:e5:be: f4:97:21:fe:9e:bb:17:54:6e:4a:d8:85:32:44:86: fa:a8:47:a3:d1:b0:a3:3c:27:70:8f:cc:21:f8:ac: 20:70:6b:50:d5:c2:21:7b:6c:c2:a0:8c:fb:59:83: 6c:39:9f:de:f0:5c:ec:8d:c9:9a:57:7b:65:d3:33: f1:9f:39:32:71:5c:39:df:e3:dc:40:98:70:2d:9e: ff:75:b5:c0:f6:21:80:7f:f9:a2:0b:f8:39:48:62: ef:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:9C:AF:D9:7B:18:43:C5:37:DB:47:09:1A:0F:99:59:C9:EC:0B:D3 X509v3 Authority Key Identifier: keyid:70:97:65:C7:D4:D3:31:F4:C3:6A:C6:BE:34:7F:A6:6A:1F:02:34:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AE85E/0BED35261D6E11E2B04A61AF08B02CD2/cJdlx9TTMfTDasa-NH-mah8CNJA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cJdlx9TTMfTDasa-NH-mah8CNJA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE85E/0BED35261D6E11E2B04A61AF08B02CD2/cJdlx9TTMfTDasa-NH-mah8CNJA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:c9:33:ad:9c:e6:cc:3b:62:ee:a3:e4:57:b1:29:df:4c:28: d2:d3:bd:02:6a:19:8d:90:a3:58:6d:de:2a:9d:a0:56:aa:bf: ae:5b:9e:50:e6:e3:cf:b0:14:2e:e7:b8:5b:a3:f4:e3:93:30: f6:90:9c:11:29:45:93:7f:bb:18:eb:84:00:04:8e:1b:1f:ea: 1f:eb:08:58:b5:9d:88:44:9b:75:1b:97:92:14:69:c0:e7:9b: 84:25:52:f2:cd:b7:24:eb:90:10:c9:58:df:70:1e:1e:60:3a: a7:06:95:24:4f:d1:d0:1e:9a:9e:20:4c:0d:40:fb:fc:94:9c: eb:a5:1c:56:e9:e1:39:b4:dd:d2:da:be:f4:c7:af:cf:1c:d9: 53:48:46:47:6a:cc:2f:74:4f:9b:e4:dc:a6:45:39:7e:f3:7b: 6b:c6:85:27:6b:d0:74:c4:a5:7f:2f:34:95:0f:1c:ed:4c:ed: ad:48:0a:b5:39:c1:69:cf:60:a2:72:9f:4b:01:17:2f:c2:ce: cd:50:86:7d:74:a3:b7:9f:91:15:09:4d:c9:33:a8:42:0a:86: c1:bc:e4:c3:9c:e6:f7:28:60:ab:8e:e4:61:d0:a4:0b:26:0e: a8:b6:b1:1f:2e:83:05:25:71:1f:62:78:6e:49:8c:79:63:e1: 63:03:2f:a4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNOcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUU4NUUxMTAvBgNVBAUTKDcwOTc2NUM3RDREMzMxRjRDMzZBQzZCRTM0N0ZBNjZB MUYwMjM0OTAwHhcNMjUwNTMxMTQxODExWhcNMjUwNjA3MTQxODExWjAYMRYwFAYD VQQDEw02ODNiMGZhMy0wMTI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvzSr4feiZWOYMKzo4gx7Q/JP+aa6QFIf1FyranRqqXrgLi1D0YHHorReLVNu aidmgr/wE+BocOk47UD2wqwX+iKalB8Y4irUPOG97EOvzsgABnLSuEw1WFcsJdIG mzWNpgNScDZAIC9QeCeSYh2JjchBqRrz/2VsOgR1frrOOEzaCDFtVOvoz2tVbDzA yVxynlzOfQw3YHYeo0+eKr55no8l5b70lyH+nrsXVG5K2IUyRIb6qEej0bCjPCdw j8wh+KwgcGtQ1cIhe2zCoIz7WYNsOZ/e8FzsjcmaV3tl0zPxnzkycVw53+PcQJhw LZ7/dbXA9iGAf/miC/g5SGLv5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHacr9l7 GEPFN9tHCRoPmVnJ7AvTMB8GA1UdIwQYMBaAFHCXZcfU0zH0w2rGvjR/pmofAjSQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRTg1RS8wQkVEMzUyNjFE NkUxMUUyQjA0QTYxQUYwOEIwMkNEMi9jSmRseDlUVE1mVERhc2EtTkgtbWFoOENO SkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NKZGx4OVRUTWZURGFzYS1OSC1tYWg4Q05KQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RTg1RS8wQkVEMzUyNjFENkUxMUUyQjA0QTYxQUYwOEIwMkNEMi9jSmRseDlUVE1m VERhc2EtTkgtbWFoOENOSkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA9yTOtnObMO2Luo+RXsSnfTCjS070CahmNkKNYbd4qnaBWqr+uW55Q 5uPPsBQu57hbo/TjkzD2kJwRKUWTf7sY64QABI4bH+of6whYtZ2IRJt1G5eSFGnA 55uEJVLyzbck65AQyVjfcB4eYDqnBpUkT9HQHpqeIEwNQPv8lJzrpRxW6eE5tN3S 2r70x6/PHNlTSEZHaswvdE+b5NymRTl+83trxoUna9B0xKV/LzSVDxztTO2tSAq1 OcFpz2Cicp9LARcvws7NUIZ9dKO3n5EVCU3JM6hCCobBvOTDnOb3KGCrjuRh0KQL Jg6otrEfLoMFJXEfYnhuSYx5Y+FjAy+k -----END CERTIFICATE-----Generated at Sat May 31 17:03:31 2025 by rpki-client