$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1DCF/36978A7C30BC11ECA303EF86C4F9AE02/cEv_Tsqp3IqLcgkmTGB9tfIvJII.mft File: cEv_Tsqp3IqLcgkmTGB9tfIvJII.mft (raw, json) Hash identifier: 6fGIGAhsUaO7X3g/rQIsRVZoNp1LrnnOof/dbmEW8g4= Subject key identifier: AD:8B:83:46:17:D3:BA:DB:48:0B:60:9F:27:9F:F7:82:75:80:8C:F2 Authority key identifier: 70:4B:FF:4E:CA:A9:DC:8A:8B:72:09:26:4C:60:7D:B5:F2:2F:24:82 Certificate issuer: /CN=A91B1DCF/serialNumber=704BFF4ECAA9DC8A8B7209264C607DB5F22F2482 Certificate serial: 04BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cEv_Tsqp3IqLcgkmTGB9tfIvJII.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B1DCF/36978A7C30BC11ECA303EF86C4F9AE02/cEv_Tsqp3IqLcgkmTGB9tfIvJII.mft Manifest number: 04B2 Signing time: Sun 08 Jun 2025 23:31:13 +0000 Manifest this update: Sun 08 Jun 2025 23:31:13 +0000 Manifest next update: Sun 15 Jun 2025 23:31:13 +0000 Files and hashes: 1: cEv_Tsqp3IqLcgkmTGB9tfIvJII.crl (hash: zKIG0jd7LUHw5VHv3L9uxRNBpVQHBBWEqU6vnj6OR6E=) 2: 40565FA23C8311ECA86D031EC4F9AE02.roa (hash: 4ooeZLcPwkHZ/ZShvap31EsyiH4g04EjDdlB/3H2WWc=) 3: 3F3532743C8311ECA86D031EC4F9AE02.roa (hash: IONLpqLbIWNcEINYfdYWnA0lQhPUSCbB7gozoJAI8ic=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B1DCF/36978A7C30BC11ECA303EF86C4F9AE02/cEv_Tsqp3IqLcgkmTGB9tfIvJII.crl rsync://rpki.apnic.net/member_repository/A91B1DCF/36978A7C30BC11ECA303EF86C4F9AE02/cEv_Tsqp3IqLcgkmTGB9tfIvJII.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cEv_Tsqp3IqLcgkmTGB9tfIvJII.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Jun 2025 23:31:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1214 (0x4be) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B1DCF, serialNumber=704BFF4ECAA9DC8A8B7209264C607DB5F22F2482 Validity Not Before: Jun 8 23:31:13 2025 GMT Not After : Jun 15 23:31:13 2025 GMT Subject: CN=68461d41-9eb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:8d:f6:eb:73:ce:6f:0e:d6:c8:39:fa:c7:70: 33:13:ea:d3:56:09:42:38:3e:b5:d4:eb:24:00:9e: 10:8d:6d:63:79:9f:e6:90:71:d8:db:9c:fe:c2:87: b8:4f:28:5e:e1:2c:0d:c8:8f:df:e0:4b:ff:27:4d: 78:0d:fe:75:2d:91:7a:62:6a:ac:a0:f6:0f:b8:04: bc:f8:f9:57:b0:6c:46:3c:a6:49:d9:f2:4a:5f:74: 68:e0:62:f8:0d:b8:64:23:92:c2:46:03:94:0d:2f: 3f:d2:b8:a6:c8:23:4c:ee:ec:ad:99:98:b4:59:4a: 79:97:cb:12:e0:8f:04:a2:88:57:ec:4c:89:bd:f4: a6:e4:7a:00:a9:3c:c2:9f:79:05:ce:a5:76:b9:90: 02:cf:9f:9d:19:75:03:61:b4:16:45:c8:c0:5f:30: 36:7d:d6:98:a3:e4:52:ae:cc:75:35:80:f9:d0:ef: 1e:4e:cc:e1:dc:b9:9d:e1:b7:a2:3d:78:30:dc:c5: e4:63:a8:6f:92:bd:99:8f:d8:7a:32:b7:f6:17:ac: c0:b0:31:68:2a:4c:9f:88:68:f5:07:b7:ff:cf:83: 89:d8:38:08:a7:dc:5f:9f:96:a0:a7:2c:69:55:e8: 01:63:75:d5:01:91:19:9c:9f:07:cf:36:99:3a:3b: ae:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:8B:83:46:17:D3:BA:DB:48:0B:60:9F:27:9F:F7:82:75:80:8C:F2 X509v3 Authority Key Identifier: keyid:70:4B:FF:4E:CA:A9:DC:8A:8B:72:09:26:4C:60:7D:B5:F2:2F:24:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B1DCF/36978A7C30BC11ECA303EF86C4F9AE02/cEv_Tsqp3IqLcgkmTGB9tfIvJII.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cEv_Tsqp3IqLcgkmTGB9tfIvJII.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1DCF/36978A7C30BC11ECA303EF86C4F9AE02/cEv_Tsqp3IqLcgkmTGB9tfIvJII.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:e7:45:21:f6:2f:b7:1f:61:f5:a1:21:c2:9d:48:48:8a:3e: 6a:60:8e:24:7a:bb:e2:c3:86:ba:e1:fd:8c:a0:90:07:44:71: 66:19:91:1e:57:a8:17:b2:2c:c0:af:0b:dd:19:c2:e2:e3:0b: d5:52:67:c6:94:78:d5:2f:91:8b:b8:0b:66:6c:a7:35:6b:41: ec:09:73:a3:6d:f1:d9:91:56:60:05:77:8f:98:8f:bc:c5:06: 2b:33:52:c8:b5:d7:03:0d:38:90:ef:16:4b:bd:2b:ff:58:db: 84:ab:db:92:7d:df:a5:fc:60:1c:1e:1a:04:e1:6a:5c:ce:f9: e5:6f:11:db:62:83:e0:2d:7a:a3:16:7c:64:73:6a:89:a9:66: 99:2c:59:52:ec:a4:78:7e:20:7b:6f:e6:46:5a:4b:cf:94:23: ba:2a:eb:a7:af:21:08:90:70:4e:ff:5a:b9:b4:16:60:0e:30: 66:44:55:af:58:8e:a8:ab:11:3e:31:bb:31:4a:12:10:35:03: 12:84:85:dd:27:86:dd:c4:1d:d5:f5:3d:3b:ee:be:5a:d6:0a: 7b:60:1b:d7:36:d8:c9:41:1d:12:57:b5:41:ba:46:91:46:93: f4:9e:b2:93:a9:ba:71:cd:58:40:c8:08:e1:0c:08:24:f0:13: 76:ab:96:09 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBL4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjFEQ0YxMTAvBgNVBAUTKDcwNEJGRjRFQ0FBOURDOEE4QjcyMDkyNjRDNjA3REI1 RjIyRjI0ODIwHhcNMjUwNjA4MjMzMTEzWhcNMjUwNjE1MjMzMTEzWjAYMRYwFAYD VQQDEw02ODQ2MWQ0MS05ZWI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv43263PObw7WyDn6x3AzE+rTVglCOD611OskAJ4QjW1jeZ/mkHHY25z+woe4 Tyhe4SwNyI/f4Ev/J014Df51LZF6YmqsoPYPuAS8+PlXsGxGPKZJ2fJKX3Ro4GL4 DbhkI5LCRgOUDS8/0rimyCNM7uytmZi0WUp5l8sS4I8EoohX7EyJvfSm5HoAqTzC n3kFzqV2uZACz5+dGXUDYbQWRcjAXzA2fdaYo+RSrsx1NYD50O8eTszh3Lmd4bei PXgw3MXkY6hvkr2Zj9h6Mrf2F6zAsDFoKkyfiGj1B7f/z4OJ2DgIp9xfn5agpyxp VegBY3XVAZEZnJ8HzzaZOjuuawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK2Lg0YX 07rbSAtgnyef94J1gIzyMB8GA1UdIwQYMBaAFHBL/07KqdyKi3IJJkxgfbXyLySC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMURDRi8zNjk3OEE3QzMw QkMxMUVDQTMwM0VGODZDNEY5QUUwMi9jRXZfVHNxcDNJcUxjZ2ttVEdCOXRmSXZK SUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NFdl9Uc3FwM0lxTGNna21UR0I5dGZJdkpJSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MURDRi8zNjk3OEE3QzMwQkMxMUVDQTMwM0VGODZDNEY5QUUwMi9jRXZfVHNxcDNJ cUxjZ2ttVEdCOXRmSXZKSUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAO50Uh9i+3H2H1oSHCnUhIij5qYI4kerviw4a64f2MoJAHRHFmGZEe V6gXsizArwvdGcLi4wvVUmfGlHjVL5GLuAtmbKc1a0HsCXOjbfHZkVZgBXePmI+8 xQYrM1LItdcDDTiQ7xZLvSv/WNuEq9uSfd+l/GAcHhoE4WpczvnlbxHbYoPgLXqj Fnxkc2qJqWaZLFlS7KR4fiB7b+ZGWkvPlCO6KuunryEIkHBO/1q5tBZgDjBmRFWv WI6oqxE+MbsxShIQNQMShIXdJ4bdxB3V9T077r5a1gp7YBvXNtjJQR0SV7VBukaR RpP0nrKTqbpxzVhAyAjhDAgk8BN2q5YJ -----END CERTIFICATE-----Generated at Mon Jun 9 22:50:22 2025 by rpki-client