$ rpki-client -vvf rpki.apnic.net/member_repository/A91B29F8/92D0BE02906811EB9E3FC66CC4F9AE02/dsjgEVVJ7akt4iI2oqWlCvCfhBE.mft File: dsjgEVVJ7akt4iI2oqWlCvCfhBE.mft (raw, json) Hash identifier: Oon7kiue/Lsh3QIb0OUOHvJDpWHaQ2s8FgDN3EThAL0= Subject key identifier: 88:CA:38:3E:4C:11:46:F0:F5:63:8F:D9:69:E7:F3:AD:90:11:95:1C Authority key identifier: 76:C8:E0:11:55:49:ED:A9:2D:E2:22:36:A2:A5:A5:0A:F0:9F:84:11 Certificate issuer: /CN=A91B29F8/serialNumber=76C8E0115549EDA92DE22236A2A5A50AF09F8411 Certificate serial: 066C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dsjgEVVJ7akt4iI2oqWlCvCfhBE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B29F8/92D0BE02906811EB9E3FC66CC4F9AE02/dsjgEVVJ7akt4iI2oqWlCvCfhBE.mft Manifest number: 0653 Signing time: Fri 30 May 2025 22:50:31 +0000 Manifest this update: Fri 30 May 2025 22:50:31 +0000 Manifest next update: Fri 06 Jun 2025 22:50:31 +0000 Files and hashes: 1: dsjgEVVJ7akt4iI2oqWlCvCfhBE.crl (hash: RxzABquMwUOkgUP9aM3sEBSZdftLfdTS4xNSRZuI+9M=) 2: 94F5846AE0D011ECAF88A30DC4F9AE02.roa (hash: Tkim0bj/DqFtnK3qLWdBDKeH3dbPF/RS93ZGfjewyNw=) 3: 9056CDF6A6D211EDA1D2862BC4F9AE02.roa (hash: l25nuyCLbxX8YszYNp7Lh0hCVKg/XaMvp8JSklUBmx4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B29F8/92D0BE02906811EB9E3FC66CC4F9AE02/dsjgEVVJ7akt4iI2oqWlCvCfhBE.crl rsync://rpki.apnic.net/member_repository/A91B29F8/92D0BE02906811EB9E3FC66CC4F9AE02/dsjgEVVJ7akt4iI2oqWlCvCfhBE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dsjgEVVJ7akt4iI2oqWlCvCfhBE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 22:50:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1644 (0x66c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B29F8, serialNumber=76C8E0115549EDA92DE22236A2A5A50AF09F8411 Validity Not Before: May 30 22:50:31 2025 GMT Not After : Jun 6 22:50:31 2025 GMT Subject: CN=683a3637-9b8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:86:f8:59:cc:59:e5:ad:51:17:a8:8b:a5:df: 6e:e4:ab:a1:98:83:4d:1a:b5:52:fd:3d:70:b7:c3: e2:0a:41:94:ee:33:fa:0e:4a:b3:31:9e:aa:88:e6: fc:71:2a:84:e7:ea:78:84:58:e2:66:8c:10:87:71: d2:8b:58:15:14:c3:55:5a:91:88:b4:01:1a:cf:43: 64:7e:f8:ce:c6:1d:9d:8e:aa:b0:a5:09:98:2c:27: e4:57:b0:68:7c:53:d0:30:41:89:c8:26:c0:a1:03: d8:7e:36:d8:1b:2b:64:67:3e:ee:5e:18:6c:f1:82: dd:c2:f4:8e:b2:0d:cc:09:11:40:bc:9b:7d:09:c0: ce:1b:36:e7:65:07:55:3f:fc:85:c3:3d:74:66:9d: de:f2:bc:3d:15:82:a3:60:d6:af:30:cd:a0:8f:1a: 89:11:4d:49:a7:e4:ce:22:0e:50:4d:9b:d9:35:e5: 6e:6e:7b:84:0a:80:03:c2:c7:60:36:5c:79:9f:b7: cf:be:0c:03:7b:ce:e0:38:7c:e4:b0:99:d4:c9:ef: 05:d7:df:66:30:36:1f:df:4f:b1:10:15:37:6c:48: e4:67:d1:bf:b1:96:b1:9f:ef:a0:bd:e0:2d:0c:64: 2c:9b:aa:c3:f2:38:6e:88:da:37:99:8b:f2:be:87: e0:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:CA:38:3E:4C:11:46:F0:F5:63:8F:D9:69:E7:F3:AD:90:11:95:1C X509v3 Authority Key Identifier: keyid:76:C8:E0:11:55:49:ED:A9:2D:E2:22:36:A2:A5:A5:0A:F0:9F:84:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B29F8/92D0BE02906811EB9E3FC66CC4F9AE02/dsjgEVVJ7akt4iI2oqWlCvCfhBE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dsjgEVVJ7akt4iI2oqWlCvCfhBE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B29F8/92D0BE02906811EB9E3FC66CC4F9AE02/dsjgEVVJ7akt4iI2oqWlCvCfhBE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:2a:4f:fa:98:75:93:d6:f1:10:82:19:ce:b0:ea:ce:59:46: 5c:d4:c8:bc:28:69:75:2b:44:4d:f9:79:fd:bc:50:1b:ea:13: fd:ad:4c:fb:61:d4:58:91:a8:91:56:ef:18:6b:41:cb:bb:52: 0e:4b:45:66:9d:68:10:0a:2e:9f:08:21:4e:a7:47:b5:99:7d: d0:1c:85:7a:65:bb:23:0c:29:41:b0:1c:b4:fa:db:9d:1f:9c: 65:f5:5a:40:6c:82:9c:59:e2:16:7e:ca:ac:4b:5e:0a:e3:e9: 93:fa:d0:ab:c3:aa:16:7f:75:0b:4a:39:21:75:af:ac:7d:ef: 1e:31:9e:db:54:b2:16:56:9c:8f:d1:68:31:9d:52:ea:e5:b2: 0e:35:13:32:0b:b8:3b:dd:c9:c2:95:ed:e6:09:ce:db:28:73: 24:58:9a:40:29:3a:fc:38:42:55:e4:41:a7:6e:61:13:09:ba: bc:09:4b:5a:75:8c:d5:b5:95:6e:99:32:3a:09:8e:e1:dd:ef: 3a:78:90:9a:eb:f7:77:94:8f:91:2e:17:e1:d5:0d:ef:eb:14: 4b:71:b0:f8:7f:0d:f5:02:18:8a:f1:3a:1d:63:fe:9d:d4:ea: 73:b5:1e:da:03:56:04:44:3b:e5:77:64:25:f4:e0:56:be:2d: 5b:98:4c:2a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBmwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjI5RjgxMTAvBgNVBAUTKDc2QzhFMDExNTU0OUVEQTkyREUyMjIzNkEyQTVBNTBB RjA5Rjg0MTEwHhcNMjUwNTMwMjI1MDMxWhcNMjUwNjA2MjI1MDMxWjAYMRYwFAYD VQQDEw02ODNhMzYzNy05YjhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvob4WcxZ5a1RF6iLpd9u5KuhmINNGrVS/T1wt8PiCkGU7jP6DkqzMZ6qiOb8 cSqE5+p4hFjiZowQh3HSi1gVFMNVWpGItAEaz0NkfvjOxh2djqqwpQmYLCfkV7Bo fFPQMEGJyCbAoQPYfjbYGytkZz7uXhhs8YLdwvSOsg3MCRFAvJt9CcDOGzbnZQdV P/yFwz10Zp3e8rw9FYKjYNavMM2gjxqJEU1Jp+TOIg5QTZvZNeVubnuECoADwsdg Nlx5n7fPvgwDe87gOHzksJnUye8F199mMDYf30+xEBU3bEjkZ9G/sZaxn++gveAt DGQsm6rD8jhuiNo3mYvyvofgHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIjKOD5M EUbw9WOP2Wnn862QEZUcMB8GA1UdIwQYMBaAFHbI4BFVSe2pLeIiNqKlpQrwn4QR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMjlGOC85MkQwQkUwMjkw NjgxMUVCOUUzRkM2NkNDNEY5QUUwMi9kc2pnRVZWSjdha3Q0aUkyb3FXbEN2Q2Zo QkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RzamdFVlZKN2FrdDRpSTJvcVdsQ3ZDZmhCRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MjlGOC85MkQwQkUwMjkwNjgxMUVCOUUzRkM2NkNDNEY5QUUwMi9kc2pnRVZWSjdh a3Q0aUkyb3FXbEN2Q2ZoQkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCAKk/6mHWT1vEQghnOsOrOWUZc1Mi8KGl1K0RN+Xn9vFAb6hP9rUz7 YdRYkaiRVu8Ya0HLu1IOS0VmnWgQCi6fCCFOp0e1mX3QHIV6ZbsjDClBsBy0+tud H5xl9VpAbIKcWeIWfsqsS14K4+mT+tCrw6oWf3ULSjkhda+sfe8eMZ7bVLIWVpyP 0WgxnVLq5bIONRMyC7g73cnCle3mCc7bKHMkWJpAKTr8OEJV5EGnbmETCbq8CUta dYzVtZVumTI6CY7h3e86eJCa6/d3lI+RLhfh1Q3v6xRLcbD4fw31AhiK8TodY/6d 1OpztR7aA1YERDvld2Ql9OBWvi1bmEwq -----END CERTIFICATE-----Generated at Sat May 31 16:42:06 2025 by rpki-client