$ rpki-client -vvf rpki.apnic.net/member_repository/A91B30E5/7293C116868411EDB7BFA171C4F9AE02/S630I4efFU256siNFgtOEW9mzak.mft File: S630I4efFU256siNFgtOEW9mzak.mft (raw, json) Hash identifier: DeWokxxd0ry/kIexPxHPvoCsLPxivoSYa9my2RmvsrY= Subject key identifier: 02:02:D3:E2:08:7C:D8:F7:C8:8C:D9:3C:A9:3F:12:01:A7:5F:BE:8E Authority key identifier: 4B:AD:F4:23:87:9F:15:4D:B9:EA:C8:8D:16:0B:4E:11:6F:66:CD:A9 Certificate issuer: /CN=A91B30E5/serialNumber=4BADF423879F154DB9EAC88D160B4E116F66CDA9 Certificate serial: 01C9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S630I4efFU256siNFgtOEW9mzak.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B30E5/7293C116868411EDB7BFA171C4F9AE02/S630I4efFU256siNFgtOEW9mzak.mft Manifest number: 01C6 Signing time: Sat 31 May 2025 02:41:29 +0000 Manifest this update: Sat 31 May 2025 02:41:28 +0000 Manifest next update: Sat 07 Jun 2025 02:41:28 +0000 Files and hashes: 1: S630I4efFU256siNFgtOEW9mzak.crl (hash: o6pcPJ2DTe8GonngsvVrSYB3a93DsTv5GrsOIZ4/1e0=) 2: 0F1061D0868911EDA888A96CC4F9AE02.roa (hash: aGKXoopb0arb0ntbaAeX9hZshlxruOuTWjBQoFMqiCw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B30E5/7293C116868411EDB7BFA171C4F9AE02/S630I4efFU256siNFgtOEW9mzak.crl rsync://rpki.apnic.net/member_repository/A91B30E5/7293C116868411EDB7BFA171C4F9AE02/S630I4efFU256siNFgtOEW9mzak.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S630I4efFU256siNFgtOEW9mzak.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 02:41:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 457 (0x1c9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B30E5, serialNumber=4BADF423879F154DB9EAC88D160B4E116F66CDA9 Validity Not Before: May 31 02:41:28 2025 GMT Not After : Jun 7 02:41:28 2025 GMT Subject: CN=683a6c58-c041 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:20:ae:a5:f7:dc:89:8a:4b:e4:8f:84:23:a1: 68:bd:90:b5:47:f8:63:a2:89:92:25:d7:47:d8:ef: 8b:09:cf:52:97:31:12:19:ab:fb:2e:9d:4c:a2:08: 34:8a:43:b9:17:96:02:6e:57:db:6b:f9:b3:ee:ff: 32:2e:73:1b:d3:cd:cc:97:4c:8b:e3:ea:0f:b6:14: ef:9b:51:43:e4:33:15:93:f0:87:40:f0:36:95:ec: 18:5b:1c:97:6e:dc:27:6c:07:8a:bf:52:5a:1c:b7: ee:b8:17:27:8c:a9:95:83:3e:73:2e:64:50:90:53: 04:a8:87:01:a4:cd:a3:d5:24:c0:9b:1b:c7:03:c5: 19:c2:dd:36:93:39:e5:98:75:69:22:e8:25:c4:c9: 86:87:0f:dc:65:e0:5d:b6:bb:1d:06:ad:59:71:1b: 4f:11:d0:3b:49:24:3c:74:0f:fa:96:d7:62:a1:e7: 95:59:c5:72:e8:f8:53:ff:c3:75:ee:55:a0:17:0f: 02:c9:bf:22:73:3b:3a:66:a9:64:6e:d3:1f:25:f0: 5c:de:17:3f:39:e2:68:2d:55:ab:6c:27:32:23:7b: 66:69:44:90:b7:45:d4:52:74:e8:d9:c9:36:96:b4: 45:d6:e8:77:30:8c:90:39:44:8a:e0:42:57:f7:48: 71:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:02:D3:E2:08:7C:D8:F7:C8:8C:D9:3C:A9:3F:12:01:A7:5F:BE:8E X509v3 Authority Key Identifier: keyid:4B:AD:F4:23:87:9F:15:4D:B9:EA:C8:8D:16:0B:4E:11:6F:66:CD:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B30E5/7293C116868411EDB7BFA171C4F9AE02/S630I4efFU256siNFgtOEW9mzak.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S630I4efFU256siNFgtOEW9mzak.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B30E5/7293C116868411EDB7BFA171C4F9AE02/S630I4efFU256siNFgtOEW9mzak.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c3:82:28:29:57:04:ad:66:b1:74:e6:ea:2b:b0:65:e9:46:52: 74:19:c2:f1:1d:95:48:5e:aa:fd:85:4c:f9:9d:f9:3c:aa:ac: 51:8b:4f:2c:23:ef:43:fe:63:96:4f:1e:bd:e0:c4:2f:6a:5e: 12:30:13:01:31:4d:7a:cc:dc:6b:a0:28:b0:52:94:7a:19:3a: 65:fa:d3:38:7b:d9:ba:b7:95:97:6f:fb:3b:2d:71:04:d4:c6: bb:c1:dd:72:b9:cf:73:bf:14:ec:66:89:d3:05:d8:7b:59:5e: 8d:c8:e4:20:32:3f:be:3d:d2:51:5d:97:3c:ac:b4:02:ac:a1: 4c:53:31:38:4e:31:e5:c4:8e:15:fa:94:b3:26:5e:12:4d:8f: 27:e0:ab:76:b6:5f:7c:6c:b7:ae:ba:37:33:4f:31:22:a8:7f: c6:f0:c5:09:9c:40:71:5a:c9:49:ea:4e:9e:0a:48:37:7e:47: 33:f1:b5:a5:71:14:1c:a8:b5:ae:69:e1:5f:be:25:4c:eb:02: 23:5f:ea:c5:38:9e:16:65:5a:16:75:5f:b1:07:2e:88:61:55: ff:1b:96:5a:c0:e1:7b:45:c1:21:51:7a:cb:19:2e:aa:11:ad: 1a:ac:b6:d7:8c:30:ae:4c:18:56:27:e3:0c:7d:1f:8b:1d:87: 55:01:2b:9d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAckwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjMwRTUxMTAvBgNVBAUTKDRCQURGNDIzODc5RjE1NERCOUVBQzg4RDE2MEI0RTEx NkY2NkNEQTkwHhcNMjUwNTMxMDI0MTI4WhcNMjUwNjA3MDI0MTI4WjAYMRYwFAYD VQQDEw02ODNhNmM1OC1jMDQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzCCupffciYpL5I+EI6FovZC1R/hjoomSJddH2O+LCc9SlzESGav7Lp1Mogg0 ikO5F5YCblfba/mz7v8yLnMb083Ml0yL4+oPthTvm1FD5DMVk/CHQPA2lewYWxyX btwnbAeKv1JaHLfuuBcnjKmVgz5zLmRQkFMEqIcBpM2j1STAmxvHA8UZwt02kznl mHVpIuglxMmGhw/cZeBdtrsdBq1ZcRtPEdA7SSQ8dA/6ltdioeeVWcVy6PhT/8N1 7lWgFw8Cyb8iczs6ZqlkbtMfJfBc3hc/OeJoLVWrbCcyI3tmaUSQt0XUUnTo2ck2 lrRF1uh3MIyQOUSK4EJX90hxawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAIC0+II fNj3yIzZPKk/EgGnX76OMB8GA1UdIwQYMBaAFEut9COHnxVNuerIjRYLThFvZs2p MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMzBFNS83MjkzQzExNjg2 ODQxMUVEQjdCRkExNzFDNEY5QUUwMi9TNjMwSTRlZkZVMjU2c2lORmd0T0VXOW16 YWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1M2MzBJNGVmRlUyNTZzaU5GZ3RPRVc5bXphay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MzBFNS83MjkzQzExNjg2ODQxMUVEQjdCRkExNzFDNEY5QUUwMi9TNjMwSTRlZkZV MjU2c2lORmd0T0VXOW16YWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDDgigpVwStZrF05uorsGXpRlJ0GcLxHZVIXqr9hUz5nfk8qqxRi08s I+9D/mOWTx694MQval4SMBMBMU16zNxroCiwUpR6GTpl+tM4e9m6t5WXb/s7LXEE 1Ma7wd1yuc9zvxTsZonTBdh7WV6NyOQgMj++PdJRXZc8rLQCrKFMUzE4TjHlxI4V +pSzJl4STY8n4Kt2tl98bLeuujczTzEiqH/G8MUJnEBxWslJ6k6eCkg3fkcz8bWl cRQcqLWuaeFfviVM6wIjX+rFOJ4WZVoWdV+xBy6IYVX/G5ZawOF7RcEhUXrLGS6q Ea0arLbXjDCuTBhWJ+MMfR+LHYdVASud -----END CERTIFICATE-----Generated at Sat May 31 15:06:10 2025 by rpki-client