$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE9F7/379EC742544A11E9A350C127C4F9AE02/AXCw4NBuMUc8rBZOSwttIb300jc.mft File: AXCw4NBuMUc8rBZOSwttIb300jc.mft (raw, json) Hash identifier: VayqundviwWeZd9B1c2za5V3uvcXJ5seEz8KdiRjhDc= Subject key identifier: 66:37:62:AE:81:26:2D:3F:3A:B6:7C:17:FD:C2:33:F1:2D:6E:55:A3 Authority key identifier: 01:70:B0:E0:D0:6E:31:47:3C:AC:16:4E:4B:0B:6D:21:BD:F4:D2:37 Certificate issuer: /CN=A91AE9F7/serialNumber=0170B0E0D06E31473CAC164E4B0B6D21BDF4D237 Certificate serial: 0FDC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AXCw4NBuMUc8rBZOSwttIb300jc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AE9F7/379EC742544A11E9A350C127C4F9AE02/AXCw4NBuMUc8rBZOSwttIb300jc.mft Manifest number: 0FD0 Signing time: Fri 30 May 2025 17:41:01 +0000 Manifest this update: Fri 30 May 2025 17:41:00 +0000 Manifest next update: Fri 06 Jun 2025 17:41:00 +0000 Files and hashes: 1: AXCw4NBuMUc8rBZOSwttIb300jc.crl (hash: 5lazkVtgtWjeINaikrhp3U84/HSiQkBuGz/2ZQAF04s=) 2: 1585570A544C11E9BDFF2B2DC4F9AE02.roa (hash: jZa47LQUiVvIxoLDSyE/2t1CJaYFtRO42+/jeT3MONo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AE9F7/379EC742544A11E9A350C127C4F9AE02/AXCw4NBuMUc8rBZOSwttIb300jc.crl rsync://rpki.apnic.net/member_repository/A91AE9F7/379EC742544A11E9A350C127C4F9AE02/AXCw4NBuMUc8rBZOSwttIb300jc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AXCw4NBuMUc8rBZOSwttIb300jc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 17:41:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4060 (0xfdc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AE9F7, serialNumber=0170B0E0D06E31473CAC164E4B0B6D21BDF4D237 Validity Not Before: May 30 17:41:00 2025 GMT Not After : Jun 6 17:41:00 2025 GMT Subject: CN=6839edac-b0e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:4b:f3:3f:e0:fb:06:39:85:2a:29:d9:68:1c: 34:6a:eb:96:63:c4:8d:15:75:ab:31:a8:10:b9:f3: ef:1a:26:36:a7:fc:36:be:00:f2:29:50:c4:0f:0f: 33:00:70:b2:ed:51:93:de:33:eb:b8:48:4d:39:90: 25:57:33:0a:b9:b8:76:9c:30:fa:5f:e7:02:6f:c1: 21:82:6b:1c:2b:e8:13:8f:17:9f:7c:cf:ca:5d:09: 61:8d:b3:13:f9:bb:2e:66:90:4b:0b:91:c0:93:63: ce:aa:e2:01:85:ff:2b:42:98:6e:55:8c:1a:b1:87: 03:7c:74:42:03:eb:5c:4a:a4:a0:65:8b:ee:2e:a0: 17:63:b2:c6:a9:ec:3c:73:5e:7b:ff:31:a9:2d:86: 88:f9:d1:c8:15:0d:e0:78:63:cf:fc:62:97:ae:d7: c5:0f:8a:4d:b9:d8:fc:26:23:0a:77:79:5a:f3:eb: fb:27:12:f1:60:a4:58:c3:34:d9:ea:27:16:34:56: 87:e1:c4:46:5f:6d:93:86:de:45:b8:3d:07:98:ce: 3c:38:9e:14:9a:08:bf:aa:9c:22:59:15:60:3e:1b: 83:49:f6:58:70:57:06:8a:2c:96:c6:6a:5f:51:ea: b7:a5:bc:2f:30:4e:f5:9f:41:ea:b1:7c:60:f5:f2: 2b:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:37:62:AE:81:26:2D:3F:3A:B6:7C:17:FD:C2:33:F1:2D:6E:55:A3 X509v3 Authority Key Identifier: keyid:01:70:B0:E0:D0:6E:31:47:3C:AC:16:4E:4B:0B:6D:21:BD:F4:D2:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AE9F7/379EC742544A11E9A350C127C4F9AE02/AXCw4NBuMUc8rBZOSwttIb300jc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AXCw4NBuMUc8rBZOSwttIb300jc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE9F7/379EC742544A11E9A350C127C4F9AE02/AXCw4NBuMUc8rBZOSwttIb300jc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:16:c2:26:de:7e:ba:dc:29:b3:ed:67:8e:d5:27:53:95:b6: 2d:d1:d5:b1:b3:73:0e:15:50:d3:c0:9a:ce:bc:d9:a7:bb:ec: 56:d0:52:60:39:9e:98:87:e8:a6:57:b5:61:8b:01:e8:9e:72: d5:0b:c2:13:75:1d:26:cd:64:13:77:ed:74:7d:be:d8:95:98: 8d:0f:4c:f7:9c:ee:29:53:bd:f3:9b:be:43:65:6f:b0:8b:7c: 1b:f0:e9:86:c6:24:3f:bc:8a:4d:52:d4:8c:b0:a7:52:c1:2f: 7e:ff:31:d3:e9:44:0b:98:d7:be:4f:76:0d:79:d8:55:96:48: 8c:92:40:a5:2a:91:0a:bf:20:2b:d0:18:39:a4:91:85:be:60: 75:49:c2:16:2c:74:74:02:bb:d6:2a:57:1f:6c:47:6d:65:1a: 0b:a0:26:69:32:24:5a:b5:da:57:1a:53:89:ee:1d:73:72:a5: 1c:90:4d:c3:45:b2:9f:e4:66:ef:8d:ff:6c:9f:6f:9c:89:f1: cf:2e:7e:9b:ca:9b:b7:d7:32:6d:1e:59:8e:a5:80:14:53:96: 9e:ed:d4:23:e6:8e:8b:a4:b1:30:18:55:f8:50:a0:ca:da:b0: b3:d6:bb:ec:fb:21:d8:5f:dd:63:ec:83:fd:41:53:e8:a1:ae: 00:ed:bd:e5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD9wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUU5RjcxMTAvBgNVBAUTKDAxNzBCMEUwRDA2RTMxNDczQ0FDMTY0RTRCMEI2RDIx QkRGNEQyMzcwHhcNMjUwNTMwMTc0MTAwWhcNMjUwNjA2MTc0MTAwWjAYMRYwFAYD VQQDEw02ODM5ZWRhYy1iMGUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2EvzP+D7BjmFKinZaBw0auuWY8SNFXWrMagQufPvGiY2p/w2vgDyKVDEDw8z AHCy7VGT3jPruEhNOZAlVzMKubh2nDD6X+cCb8EhgmscK+gTjxeffM/KXQlhjbMT +bsuZpBLC5HAk2POquIBhf8rQphuVYwasYcDfHRCA+tcSqSgZYvuLqAXY7LGqew8 c157/zGpLYaI+dHIFQ3geGPP/GKXrtfFD4pNudj8JiMKd3la8+v7JxLxYKRYwzTZ 6icWNFaH4cRGX22Tht5FuD0HmM48OJ4Umgi/qpwiWRVgPhuDSfZYcFcGiiyWxmpf Ueq3pbwvME71n0HqsXxg9fIrLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGY3Yq6B Ji0/OrZ8F/3CM/EtblWjMB8GA1UdIwQYMBaAFAFwsODQbjFHPKwWTksLbSG99NI3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRTlGNy8zNzlFQzc0MjU0 NEExMUU5QTM1MEMxMjdDNEY5QUUwMi9BWEN3NE5CdU1VYzhyQlpPU3d0dEliMzAw amMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FYQ3c0TkJ1TVVjOHJCWk9Td3R0SWIzMDBqYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RTlGNy8zNzlFQzc0MjU0NEExMUU5QTM1MEMxMjdDNEY5QUUwMi9BWEN3NE5CdU1V YzhyQlpPU3d0dEliMzAwamMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQALFsIm3n663Cmz7WeO1SdTlbYt0dWxs3MOFVDTwJrOvNmnu+xW0FJg OZ6Yh+imV7VhiwHonnLVC8ITdR0mzWQTd+10fb7YlZiND0z3nO4pU73zm75DZW+w i3wb8OmGxiQ/vIpNUtSMsKdSwS9+/zHT6UQLmNe+T3YNedhVlkiMkkClKpEKvyAr 0Bg5pJGFvmB1ScIWLHR0ArvWKlcfbEdtZRoLoCZpMiRatdpXGlOJ7h1zcqUckE3D RbKf5Gbvjf9sn2+cifHPLn6bypu31zJtHlmOpYAUU5ae7dQj5o6LpLEwGFX4UKDK 2rCz1rvs+yHYX91j7IP9QVPooa4A7b3l -----END CERTIFICATE-----Generated at Sat May 31 15:14:38 2025 by rpki-client