$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF15E/94B2D376031D11ED99F29E1CC4F9AE02/u759h-rKuKMp6DvLD_fVAIi-Cc0.mft File: u759h-rKuKMp6DvLD_fVAIi-Cc0.mft (raw, json) Hash identifier: CF1n/hgBW5VegXeOjsC4sPanH7zQtixbLBremVEi3qc= Subject key identifier: F0:01:CC:EE:E6:72:09:43:E6:B9:5B:51:11:9E:F6:A9:D4:CA:65:1B Authority key identifier: BB:BE:7D:87:EA:CA:B8:A3:29:E8:3B:CB:0F:F7:D5:00:88:BE:09:CD Certificate issuer: /CN=A91AF15E/serialNumber=BBBE7D87EACAB8A329E83BCB0FF7D50088BE09CD Certificate serial: 028E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u759h-rKuKMp6DvLD_fVAIi-Cc0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF15E/94B2D376031D11ED99F29E1CC4F9AE02/u759h-rKuKMp6DvLD_fVAIi-Cc0.mft Manifest number: 028E Signing time: Sat 31 May 2025 01:45:36 +0000 Manifest this update: Sat 31 May 2025 01:45:35 +0000 Manifest next update: Sat 07 Jun 2025 01:45:35 +0000 Files and hashes: 1: u759h-rKuKMp6DvLD_fVAIi-Cc0.crl (hash: gCpAAYS8no1euU//HtKeUFdqPm1Xd3ZJiIOTFNgtXzI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF15E/94B2D376031D11ED99F29E1CC4F9AE02/u759h-rKuKMp6DvLD_fVAIi-Cc0.crl rsync://rpki.apnic.net/member_repository/A91AF15E/94B2D376031D11ED99F29E1CC4F9AE02/u759h-rKuKMp6DvLD_fVAIi-Cc0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u759h-rKuKMp6DvLD_fVAIi-Cc0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 01:45:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 654 (0x28e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF15E, serialNumber=BBBE7D87EACAB8A329E83BCB0FF7D50088BE09CD Validity Not Before: May 31 01:45:35 2025 GMT Not After : Jun 7 01:45:35 2025 GMT Subject: CN=683a5f3f-a725 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:07:43:45:81:48:d0:ba:fd:d0:5f:3e:92:80: c2:3a:58:c9:e7:14:ae:c7:ed:8c:07:71:b8:28:74: ed:d0:89:a8:f9:3e:79:c3:de:d5:b0:72:dc:d1:30: 1a:18:7c:82:89:e4:0e:41:da:ea:25:e4:4e:24:25: 5f:72:d7:b7:6b:45:3c:24:39:d4:f0:57:c6:5c:65: d7:04:59:8f:22:11:cb:a7:f2:49:24:f4:5e:62:26: e0:7a:40:95:78:ed:b9:7e:80:ec:e0:21:d4:a1:5f: 84:3d:ad:75:f0:10:6d:e8:99:b8:ad:b2:f2:a2:9d: e1:85:f5:ee:c5:77:52:3a:7a:91:c2:5a:15:7b:3e: 07:dc:55:28:bf:06:42:e4:d5:c1:39:b9:82:3d:c5: 14:84:c9:8c:36:3f:3a:01:ed:9f:1a:4b:c4:4a:30: 9c:c8:8e:af:34:02:4d:7d:04:1e:f7:f0:8d:99:ae: cd:0a:72:b7:a8:24:18:44:b2:71:e3:8e:cf:b8:dd: ce:69:bc:3e:d8:3f:3a:f9:3f:8d:f9:de:85:37:bd: 39:2b:1d:11:0d:af:8f:c5:4e:19:ca:90:87:4b:1d: 45:af:b9:02:38:9b:44:df:3c:53:77:60:84:b8:25: 1d:8b:f6:ef:4f:4d:90:0e:92:9d:10:52:95:ff:b2: 11:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:01:CC:EE:E6:72:09:43:E6:B9:5B:51:11:9E:F6:A9:D4:CA:65:1B X509v3 Authority Key Identifier: keyid:BB:BE:7D:87:EA:CA:B8:A3:29:E8:3B:CB:0F:F7:D5:00:88:BE:09:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF15E/94B2D376031D11ED99F29E1CC4F9AE02/u759h-rKuKMp6DvLD_fVAIi-Cc0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u759h-rKuKMp6DvLD_fVAIi-Cc0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF15E/94B2D376031D11ED99F29E1CC4F9AE02/u759h-rKuKMp6DvLD_fVAIi-Cc0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c5:2e:2d:0f:48:be:d7:e2:8b:a1:4c:cd:56:fe:9e:65:3b:5a: 93:c9:90:97:ad:89:61:7c:c1:e9:18:7d:e3:68:a3:09:a3:83: 03:f9:f7:ff:69:e1:19:5a:e8:ad:b3:23:99:fc:4e:b6:99:56: ca:ea:67:4e:6f:d7:8e:d4:8f:36:2b:7c:72:52:56:42:b1:cc: de:ca:b6:08:53:69:04:5b:06:43:d1:6b:ea:5b:bb:af:09:50: e0:86:c7:15:13:d8:51:21:c3:09:6e:2d:b3:12:be:27:3f:d7: 81:61:e8:a2:36:e9:bb:ea:59:06:14:6e:bc:17:18:e0:39:a8: 89:6c:64:58:c1:45:61:0c:19:40:cb:f1:0c:dd:f2:31:3c:2d: 65:58:39:84:b1:08:d3:35:75:8e:4b:a3:6b:58:01:0e:ac:b8: ba:cb:8d:29:c3:6f:a8:46:47:6c:71:3d:e3:8e:4b:c0:fe:eb: 95:9d:3e:8b:78:25:d1:65:fb:53:40:19:c5:25:34:15:69:fa: 03:df:9f:29:0d:c3:0a:a6:a5:9f:d1:40:a3:e0:77:b7:32:eb: 30:66:2e:19:6f:ee:d2:00:be:f3:ec:7b:29:fe:d5:46:46:b4: 77:a3:cf:ac:87:1c:aa:e9:26:fb:80:a8:99:00:81:61:48:2f: 2a:bb:b5:ed -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAo4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUYxNUUxMTAvBgNVBAUTKEJCQkU3RDg3RUFDQUI4QTMyOUU4M0JDQjBGRjdENTAw ODhCRTA5Q0QwHhcNMjUwNTMxMDE0NTM1WhcNMjUwNjA3MDE0NTM1WjAYMRYwFAYD VQQDEw02ODNhNWYzZi1hNzI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5QdDRYFI0Lr90F8+koDCOljJ5xSux+2MB3G4KHTt0Imo+T55w97VsHLc0TAa GHyCieQOQdrqJeROJCVfcte3a0U8JDnU8FfGXGXXBFmPIhHLp/JJJPReYibgekCV eO25foDs4CHUoV+EPa118BBt6Jm4rbLyop3hhfXuxXdSOnqRwloVez4H3FUovwZC 5NXBObmCPcUUhMmMNj86Ae2fGkvESjCcyI6vNAJNfQQe9/CNma7NCnK3qCQYRLJx 447PuN3Oabw+2D86+T+N+d6FN705Kx0RDa+PxU4ZypCHSx1Fr7kCOJtE3zxTd2CE uCUdi/bvT02QDpKdEFKV/7IRsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPABzO7m cglD5rlbURGe9qnUymUbMB8GA1UdIwQYMBaAFLu+fYfqyrijKeg7yw/31QCIvgnN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjE1RS85NEIyRDM3NjAz MUQxMUVEOTlGMjlFMUNDNEY5QUUwMi91NzU5aC1yS3VLTXA2RHZMRF9mVkFJaS1D YzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3U3NTloLXJLdUtNcDZEdkxEX2ZWQUlpLUNjMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RjE1RS85NEIyRDM3NjAzMUQxMUVEOTlGMjlFMUNDNEY5QUUwMi91NzU5aC1yS3VL TXA2RHZMRF9mVkFJaS1DYzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDFLi0PSL7X4ouhTM1W/p5lO1qTyZCXrYlhfMHpGH3jaKMJo4MD+ff/ aeEZWuitsyOZ/E62mVbK6mdOb9eO1I82K3xyUlZCsczeyrYIU2kEWwZD0WvqW7uv CVDghscVE9hRIcMJbi2zEr4nP9eBYeiiNum76lkGFG68FxjgOaiJbGRYwUVhDBlA y/EM3fIxPC1lWDmEsQjTNXWOS6NrWAEOrLi6y40pw2+oRkdscT3jjkvA/uuVnT6L eCXRZftTQBnFJTQVafoD358pDcMKpqWf0UCj4He3MuswZi4Zb+7SAL7z7Hsp/tVG RrR3o8+shxyq6Sb7gKiZAIFhSC8qu7Xt -----END CERTIFICATE-----Generated at Sat May 31 16:43:53 2025 by rpki-client