$ rpki-client -vvf rpki.apnic.net/member_repository/A91B13DA/2EACAE2820F511F095B65182C4F9AE02/CkauL6_Mx63e8nLHAqtf-r3Mqk8.mft File: CkauL6_Mx63e8nLHAqtf-r3Mqk8.mft (raw, json) Hash identifier: zPZf48GbOIeVy/jg1Ui5wKNNkPLYWJfUhImJc6F4hh0= Subject key identifier: 62:2A:B2:52:FC:5F:53:9C:4C:CC:FA:D8:82:E3:5F:78:07:61:81:C7 Authority key identifier: 0A:46:AE:2F:AF:CC:C7:AD:DE:F2:72:C7:02:AB:5F:FA:BD:CC:AA:4F Certificate issuer: /CN=A91B13DA/serialNumber=0A46AE2FAFCCC7ADDEF272C702AB5FFABDCCAA4F Certificate serial: 17 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkauL6_Mx63e8nLHAqtf-r3Mqk8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B13DA/2EACAE2820F511F095B65182C4F9AE02/CkauL6_Mx63e8nLHAqtf-r3Mqk8.mft Manifest number: 15 Signing time: Sat 31 May 2025 07:35:12 +0000 Manifest this update: Sat 31 May 2025 07:35:12 +0000 Manifest next update: Sat 07 Jun 2025 07:35:12 +0000 Files and hashes: 1: CkauL6_Mx63e8nLHAqtf-r3Mqk8.crl (hash: 1/Qx/ayIsA/JttHhM1BRxPnS7TZnRmkWqsnH44bR4a4=) 2: E70C7B4620F611F09993632FC4F9AE02.roa (hash: 3DawsxjCSxaO9Yqtl+Go5xRwWPPzE2NpLIfRRBuYg5c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B13DA/2EACAE2820F511F095B65182C4F9AE02/CkauL6_Mx63e8nLHAqtf-r3Mqk8.crl rsync://rpki.apnic.net/member_repository/A91B13DA/2EACAE2820F511F095B65182C4F9AE02/CkauL6_Mx63e8nLHAqtf-r3Mqk8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkauL6_Mx63e8nLHAqtf-r3Mqk8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 07:35:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23 (0x17) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B13DA, serialNumber=0A46AE2FAFCCC7ADDEF272C702AB5FFABDCCAA4F Validity Not Before: May 31 07:35:12 2025 GMT Not After : Jun 7 07:35:12 2025 GMT Subject: CN=683ab130-35b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:57:21:e3:30:fa:73:74:a6:29:68:ad:ec:8c: 7f:93:26:db:cd:80:75:f7:94:02:82:c9:27:9b:e6: 96:ab:31:5b:e8:3a:e9:fa:9f:51:1b:e0:84:1d:83: 14:59:a8:c9:a6:1e:dd:1c:fb:61:3f:19:19:54:2d: fd:e6:e9:63:3d:18:dc:ee:24:3c:19:35:35:e9:72: b9:b3:c9:2f:13:6f:a3:52:e8:20:4f:5a:8e:f9:16: 22:e9:8f:4f:e8:53:3c:59:3d:f0:d1:25:6e:6d:b0: 5b:51:2a:43:f0:ce:bb:a8:d2:c9:a3:39:cd:5e:4d: 4f:6e:94:45:fb:94:08:0d:8c:40:1f:9c:86:ab:75: ec:fa:38:bf:f7:d7:a3:49:9b:10:96:a5:58:23:da: 91:f2:b4:0e:42:c8:9c:b1:a8:92:a0:2b:07:ee:db: ea:3e:17:03:5f:b3:b8:d9:ce:33:05:47:ef:11:c3: 5a:26:18:0d:60:c3:cb:3b:52:e0:1a:dd:83:55:b2: c0:31:02:a5:1b:46:b0:73:f1:93:17:56:15:d6:19: 9d:dc:ff:02:43:c6:40:e0:85:a2:0a:4d:6c:33:85: 25:a9:47:ef:67:a1:d4:3f:56:22:5e:8c:f9:9f:53: 70:85:ef:90:af:c3:75:27:46:b3:bf:9c:71:7e:9b: 88:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:2A:B2:52:FC:5F:53:9C:4C:CC:FA:D8:82:E3:5F:78:07:61:81:C7 X509v3 Authority Key Identifier: keyid:0A:46:AE:2F:AF:CC:C7:AD:DE:F2:72:C7:02:AB:5F:FA:BD:CC:AA:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B13DA/2EACAE2820F511F095B65182C4F9AE02/CkauL6_Mx63e8nLHAqtf-r3Mqk8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkauL6_Mx63e8nLHAqtf-r3Mqk8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B13DA/2EACAE2820F511F095B65182C4F9AE02/CkauL6_Mx63e8nLHAqtf-r3Mqk8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:ca:c3:cb:d1:dd:29:ad:1a:0f:c8:e0:93:fa:7e:43:54:8b: 69:48:6a:c7:e6:ce:7c:ad:02:2d:6c:0f:3b:8b:15:6e:c2:65: 30:81:2b:78:86:3b:85:85:b3:f8:a0:f7:c9:2e:82:49:38:b6: 7c:59:54:36:2f:82:1e:00:4e:11:2c:5d:26:22:7b:ff:ad:7f: ea:18:af:67:5a:d4:55:73:83:60:6b:7e:0a:56:31:7e:88:73: 79:cd:87:52:19:5a:34:6a:de:e7:cf:fd:b9:1b:86:88:f4:4e: be:c1:c6:ba:88:7d:65:31:e2:77:2d:16:96:72:88:a7:4f:d8: 8b:b6:ec:07:6f:c6:30:0c:44:f5:6b:06:3b:c1:2e:a2:ba:df: 2d:66:4b:58:8a:db:70:b7:30:c5:5c:d4:45:dc:e1:60:23:d8: 66:d7:4e:9e:fe:84:42:1a:cb:e3:01:ea:67:09:44:6c:0a:e7: 9f:15:48:8a:bb:4e:e5:a9:3b:2e:23:a0:46:ca:56:b6:b2:2b: 66:f0:c9:b8:16:32:8d:c9:bd:37:88:6f:be:83:1d:bd:16:02: 28:cc:e0:a5:ab:b9:36:7d:97:ec:1e:0d:dd:47:d4:62:4f:f5: df:39:7d:d2:03:fe:ae:10:c9:89:4f:52:c5:be:7a:75:4a:74: 93:28:6e:00 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC MTNEQTExMC8GA1UEBRMoMEE0NkFFMkZBRkNDQzdBRERFRjI3MkM3MDJBQjVGRkFC RENDQUE0RjAeFw0yNTA1MzEwNzM1MTJaFw0yNTA2MDcwNzM1MTJaMBgxFjAUBgNV BAMTDTY4M2FiMTMwLTM1YjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDVVyHjMPpzdKYpaK3sjH+TJtvNgHX3lAKCySeb5parMVvoOun6n1Eb4IQdgxRZ qMmmHt0c+2E/GRlULf3m6WM9GNzuJDwZNTXpcrmzyS8Tb6NS6CBPWo75FiLpj0/o UzxZPfDRJW5tsFtRKkPwzruo0smjOc1eTU9ulEX7lAgNjEAfnIardez6OL/316NJ mxCWpVgj2pHytA5CyJyxqJKgKwfu2+o+FwNfs7jZzjMFR+8Rw1omGA1gw8s7UuAa 3YNVssAxAqUbRrBz8ZMXVhXWGZ3c/wJDxkDghaIKTWwzhSWpR+9nodQ/ViJejPmf U3CF75Cvw3UnRrO/nHF+m4gFAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUYiqyUvxf U5xMzPrYguNfeAdhgccwHwYDVR0jBBgwFoAUCkauL6/Mx63e8nLHAqtf+r3Mqk8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIxM0RBLzJFQUNBRTI4MjBG NTExRjA5NUI2NTE4MkM0RjlBRTAyL0NrYXVMNl9NeDYzZThuTEhBcXRmLXIzTXFr OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQ2thdUw2X014NjNlOG5MSEFxdGYtcjNNcWs4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIx M0RBLzJFQUNBRTI4MjBGNTExRjA5NUI2NTE4MkM0RjlBRTAyL0NrYXVMNl9NeDYz ZThuTEhBcXRmLXIzTXFrOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHrKw8vR3SmtGg/I4JP6fkNUi2lIasfmznytAi1sDzuLFW7CZTCBK3iG O4WFs/ig98kugkk4tnxZVDYvgh4AThEsXSYie/+tf+oYr2da1FVzg2BrfgpWMX6I c3nNh1IZWjRq3ufP/bkbhoj0Tr7BxrqIfWUx4nctFpZyiKdP2Iu27AdvxjAMRPVr BjvBLqK63y1mS1iK23C3MMVc1EXc4WAj2GbXTp7+hEIay+MB6mcJRGwK558VSIq7 TuWpOy4joEbKVrayK2bwybgWMo3JvTeIb76DHb0WAijM4KWruTZ9l+weDd1H1GJP 9d85fdID/q4QyYlPUsW+enVKdJMobgA= -----END CERTIFICATE-----Generated at Sat May 31 16:49:05 2025 by rpki-client