$ rpki-client -vvf rpki.apnic.net/member_repository/A91AEE40/0EEC29F80F3011EDB3568A84C4F9AE02/AwUYVzXgl--zaoYGU7JTq-n-EVw.mft File: AwUYVzXgl--zaoYGU7JTq-n-EVw.mft (raw, json) Hash identifier: a7FmxrQa+sxKKLLCpb4Exc966zfV0+YOBi1OzwGU60A= Subject key identifier: 07:31:B1:99:01:BB:50:36:E7:55:6C:42:0F:4A:10:A8:A6:3A:6F:18 Authority key identifier: 03:05:18:57:35:E0:97:EF:B3:6A:86:06:53:B2:53:AB:E9:FE:11:5C Certificate issuer: /CN=A91AEE40/serialNumber=0305185735E097EFB36A860653B253ABE9FE115C Certificate serial: 0276 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AwUYVzXgl--zaoYGU7JTq-n-EVw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AEE40/0EEC29F80F3011EDB3568A84C4F9AE02/AwUYVzXgl--zaoYGU7JTq-n-EVw.mft Manifest number: 0272 Signing time: Sat 31 May 2025 01:54:14 +0000 Manifest this update: Sat 31 May 2025 01:54:13 +0000 Manifest next update: Sat 07 Jun 2025 01:54:13 +0000 Files and hashes: 1: AwUYVzXgl--zaoYGU7JTq-n-EVw.crl (hash: 5W8CSVbD/+xYa0cvIVbKrdZJI3joBQw0aKKDZTrn49I=) 2: 59179A7E0F3211EDA9D57685C4F9AE02.roa (hash: rMev8024uF8TEESVT+FsfOfbRH+3KQX0Th9l2lAdoEA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AEE40/0EEC29F80F3011EDB3568A84C4F9AE02/AwUYVzXgl--zaoYGU7JTq-n-EVw.crl rsync://rpki.apnic.net/member_repository/A91AEE40/0EEC29F80F3011EDB3568A84C4F9AE02/AwUYVzXgl--zaoYGU7JTq-n-EVw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AwUYVzXgl--zaoYGU7JTq-n-EVw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 01:54:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 630 (0x276) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AEE40, serialNumber=0305185735E097EFB36A860653B253ABE9FE115C Validity Not Before: May 31 01:54:13 2025 GMT Not After : Jun 7 01:54:13 2025 GMT Subject: CN=683a6145-ddbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ec:06:5f:4e:dc:30:37:92:96:1a:f4:89:01: 4b:95:8a:6b:c7:b2:28:db:e1:34:5d:33:7e:d1:75: d6:58:21:fb:5a:77:46:35:f8:0c:7b:64:b8:26:da: 8a:a2:2a:cf:27:2f:d5:7e:8e:49:11:0a:66:dd:47: c8:dd:1a:01:ea:47:45:4e:e5:29:d0:12:60:ea:0e: 08:d5:a5:21:d2:2b:2f:37:70:8d:9e:6b:fe:9a:0f: 11:d7:70:05:62:c5:7a:b1:9b:ca:46:95:b3:72:a6: ba:3d:50:b7:05:43:71:7d:de:69:35:ff:30:1f:63: 47:1a:e9:c1:b0:89:7f:e4:81:6d:2c:f5:82:4a:cf: f3:bd:4f:2c:4a:34:fa:e6:35:a7:30:09:4b:c3:9f: 8f:91:1b:2f:71:49:11:ec:fc:2f:1f:ca:0c:63:1c: 3c:12:75:8a:65:5c:27:da:33:3a:3f:a1:ea:5d:88: 6f:2f:1f:2d:04:76:3b:42:46:30:8b:e0:ab:79:c6: 55:c3:93:ee:88:03:9e:83:08:29:4c:15:f7:4a:6b: 36:41:50:48:d6:73:eb:2c:32:ec:58:ef:61:9f:4c: c7:e4:40:46:f3:c0:41:86:bf:08:2d:35:f4:98:f2: 04:e8:cc:7b:c9:30:f5:0e:6e:66:1f:85:d5:60:1d: a0:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:31:B1:99:01:BB:50:36:E7:55:6C:42:0F:4A:10:A8:A6:3A:6F:18 X509v3 Authority Key Identifier: keyid:03:05:18:57:35:E0:97:EF:B3:6A:86:06:53:B2:53:AB:E9:FE:11:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AEE40/0EEC29F80F3011EDB3568A84C4F9AE02/AwUYVzXgl--zaoYGU7JTq-n-EVw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AwUYVzXgl--zaoYGU7JTq-n-EVw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AEE40/0EEC29F80F3011EDB3568A84C4F9AE02/AwUYVzXgl--zaoYGU7JTq-n-EVw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:41:3f:a2:77:9b:c3:b8:a0:e4:b6:5b:7e:0f:02:53:93:e0: 0d:5c:5d:40:f6:93:2a:b7:3b:63:9f:89:2c:f5:d6:a6:a9:99: 04:27:bc:e5:8a:37:7e:cd:0b:76:74:e4:e2:99:f5:c9:ba:57: 90:d1:66:12:09:ab:3c:cf:db:2b:ef:43:a2:30:97:4e:04:88: 5e:85:ab:de:55:b6:f2:d6:41:95:98:d7:b0:e0:cc:53:bc:8e: dc:9a:26:b0:2d:78:78:a0:69:66:d1:80:79:4e:c0:1d:31:6a: 6c:e7:87:55:3d:85:cc:ce:07:5c:c4:42:3d:6a:9d:f1:dc:c1: bc:d1:ec:f4:f2:f8:1c:d0:c1:1c:cf:1b:fa:44:29:17:8b:db: 64:ec:64:60:65:08:a5:ed:3f:04:f5:12:80:16:42:54:76:24: 22:02:5b:0b:e3:36:9a:32:0c:e8:9f:a6:e6:7f:66:0d:09:f3: 79:d2:9b:62:8c:e5:e6:92:89:10:14:f4:0c:84:30:9e:df:b3: 07:7c:fa:ce:af:e2:3e:78:a6:a7:4f:ca:8b:fe:ec:43:8e:fb: d8:a4:e2:e6:85:8d:6d:a5:9f:75:c7:0b:57:6b:d1:32:d0:44: 63:b0:2c:da:30:1d:de:63:7c:f0:0b:34:63:61:d8:c0:2f:75: bd:e9:98:f1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAnYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUVFNDAxMTAvBgNVBAUTKDAzMDUxODU3MzVFMDk3RUZCMzZBODYwNjUzQjI1M0FC RTlGRTExNUMwHhcNMjUwNTMxMDE1NDEzWhcNMjUwNjA3MDE1NDEzWjAYMRYwFAYD VQQDEw02ODNhNjE0NS1kZGJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuuwGX07cMDeSlhr0iQFLlYprx7Io2+E0XTN+0XXWWCH7WndGNfgMe2S4JtqK oirPJy/Vfo5JEQpm3UfI3RoB6kdFTuUp0BJg6g4I1aUh0isvN3CNnmv+mg8R13AF YsV6sZvKRpWzcqa6PVC3BUNxfd5pNf8wH2NHGunBsIl/5IFtLPWCSs/zvU8sSjT6 5jWnMAlLw5+PkRsvcUkR7PwvH8oMYxw8EnWKZVwn2jM6P6HqXYhvLx8tBHY7QkYw i+CrecZVw5PuiAOegwgpTBX3Sms2QVBI1nPrLDLsWO9hn0zH5EBG88BBhr8ILTX0 mPIE6Mx7yTD1Dm5mH4XVYB2g9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAcxsZkB u1A251VsQg9KEKimOm8YMB8GA1UdIwQYMBaAFAMFGFc14Jfvs2qGBlOyU6vp/hFc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRUU0MC8wRUVDMjlGODBG MzAxMUVEQjM1NjhBODRDNEY5QUUwMi9Bd1VZVnpYZ2wtLXphb1lHVTdKVHEtbi1F VncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0F3VVlWelhnbC0temFvWUdVN0pUcS1uLUVWdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RUU0MC8wRUVDMjlGODBGMzAxMUVEQjM1NjhBODRDNEY5QUUwMi9Bd1VZVnpYZ2wt LXphb1lHVTdKVHEtbi1FVncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQByQT+id5vDuKDktlt+DwJTk+ANXF1A9pMqtztjn4ks9damqZkEJ7zl ijd+zQt2dOTimfXJuleQ0WYSCas8z9sr70OiMJdOBIhehaveVbby1kGVmNew4MxT vI7cmiawLXh4oGlm0YB5TsAdMWps54dVPYXMzgdcxEI9ap3x3MG80ez08vgc0MEc zxv6RCkXi9tk7GRgZQil7T8E9RKAFkJUdiQiAlsL4zaaMgzon6bmf2YNCfN50pti jOXmkokQFPQMhDCe37MHfPrOr+I+eKanT8qL/uxDjvvYpOLmhY1tpZ91xwtXa9Ey 0ERjsCzaMB3eY3zwCzRjYdjAL3W96Zjx -----END CERTIFICATE-----Generated at Sat May 31 16:49:05 2025 by rpki-client