$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7948/4F976DF837D011EF8945471AC4F9AE02/rJMLYl2DnFaNqBmeOP-dt-N4M70.mft File: rJMLYl2DnFaNqBmeOP-dt-N4M70.mft (raw, json) Hash identifier: DWqH+TSAZ3UH4PsVSfTBFpsmgV4uQ5SXI0IWkw4OIs4= Subject key identifier: D8:16:87:FC:DE:C6:F8:1E:74:7C:F6:29:F7:A8:DD:5F:6A:4C:D7:DB Authority key identifier: AC:93:0B:62:5D:83:9C:56:8D:A8:19:9E:38:FF:9D:B7:E3:78:33:BD Certificate issuer: /CN=A91B7948/serialNumber=AC930B625D839C568DA8199E38FF9DB7E37833BD Certificate serial: AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rJMLYl2DnFaNqBmeOP-dt-N4M70.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7948/4F976DF837D011EF8945471AC4F9AE02/rJMLYl2DnFaNqBmeOP-dt-N4M70.mft Manifest number: AA Signing time: Sat 31 May 2025 05:39:35 +0000 Manifest this update: Sat 31 May 2025 05:39:34 +0000 Manifest next update: Sat 07 Jun 2025 05:39:34 +0000 Files and hashes: 1: rJMLYl2DnFaNqBmeOP-dt-N4M70.crl (hash: k1grYxqH1WRmawZink7aLEV6AOFIZrfh7AUtfydi4mw=) 2: 7152252C37D111EF99A8011CC4F9AE02.roa (hash: qyHVBU6r1vopcSbtOHBuL6JaUanY0OBKOoUk8MRDDbM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7948/4F976DF837D011EF8945471AC4F9AE02/rJMLYl2DnFaNqBmeOP-dt-N4M70.crl rsync://rpki.apnic.net/member_repository/A91B7948/4F976DF837D011EF8945471AC4F9AE02/rJMLYl2DnFaNqBmeOP-dt-N4M70.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rJMLYl2DnFaNqBmeOP-dt-N4M70.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 05:39:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 171 (0xab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7948, serialNumber=AC930B625D839C568DA8199E38FF9DB7E37833BD Validity Not Before: May 31 05:39:34 2025 GMT Not After : Jun 7 05:39:34 2025 GMT Subject: CN=683a9617-ecc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:7c:3a:aa:aa:69:35:40:0d:8c:ff:f6:59:46: 1a:cf:fe:a2:9b:f4:09:3f:c5:8a:f5:48:cc:f0:df: 3f:6d:70:00:fe:2a:af:10:c3:c7:e5:a3:3d:52:7d: ab:f3:3a:10:c6:9d:83:f0:6d:a7:28:7d:78:5d:24: 86:01:a3:17:1b:21:5d:26:bb:4c:1d:69:c2:74:1f: 24:0b:e4:ff:32:a3:04:25:9e:f1:de:b4:eb:9b:be: f0:20:0f:72:52:e8:6b:b6:7e:19:30:6c:69:d5:46: 26:e0:97:d0:6f:c5:b1:0f:31:31:94:a5:26:9d:ce: 34:bd:72:20:84:a6:6c:9d:45:b2:f8:5c:dc:f3:f3: ed:4c:74:26:b7:d6:30:0a:3c:47:ea:5e:91:db:10: 3f:be:d9:2d:a6:23:20:73:83:09:c4:98:f3:5c:4a: 3b:1c:85:41:a6:44:87:28:8c:5d:ac:b8:71:2e:87: 2b:3e:9f:7b:d7:4b:75:f9:b3:ea:87:00:3c:f6:1f: c8:83:85:b8:67:6e:ed:f2:7d:1d:cd:fd:f0:b0:4b: bd:8c:5d:04:56:e1:b8:77:85:35:d8:6b:54:ab:ca: b8:be:a8:88:c0:f5:5d:d6:6d:21:4b:73:db:3a:90: 43:9c:83:4a:18:05:87:ed:9f:e3:b0:77:ab:34:d3: 46:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:16:87:FC:DE:C6:F8:1E:74:7C:F6:29:F7:A8:DD:5F:6A:4C:D7:DB X509v3 Authority Key Identifier: keyid:AC:93:0B:62:5D:83:9C:56:8D:A8:19:9E:38:FF:9D:B7:E3:78:33:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7948/4F976DF837D011EF8945471AC4F9AE02/rJMLYl2DnFaNqBmeOP-dt-N4M70.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rJMLYl2DnFaNqBmeOP-dt-N4M70.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7948/4F976DF837D011EF8945471AC4F9AE02/rJMLYl2DnFaNqBmeOP-dt-N4M70.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bc:f4:8d:7a:02:0b:f9:31:57:a7:12:a6:62:06:a7:4d:b0:e9: 7b:38:ac:d2:00:94:40:66:61:94:dd:22:28:84:cb:17:f1:66: f1:5b:ce:df:d9:cb:17:2b:d7:d2:40:5b:f2:e0:8c:8b:4b:50: 7f:cb:86:46:58:f8:d3:cb:11:76:34:97:8d:9f:de:2c:ab:60: 37:22:11:65:b8:5b:a8:e1:a2:71:dc:6a:5c:4d:ba:73:e6:0d: 20:2b:75:bc:54:17:9e:e3:11:38:f1:2e:b5:ce:53:68:8e:15: 7f:6d:fd:f3:ae:df:b3:a6:da:a1:4d:20:3d:bb:e2:37:2c:98: b8:a8:14:06:d3:16:70:cb:34:35:44:f4:a9:ae:1f:98:29:9f: 37:4a:c3:01:cc:3a:ca:1e:68:c6:ec:44:ec:bf:bd:3b:b9:43: fb:84:54:06:cd:6a:4b:2c:20:3f:cc:a7:52:73:e1:35:17:28: 48:b9:1b:b1:74:e5:0d:e0:ba:8f:b4:97:4d:35:9d:e6:8b:8a: 01:dc:03:b2:91:d3:bf:dd:ac:30:f6:0a:75:45:09:63:bd:d9: 53:f2:f0:a8:2c:9a:1f:7f:d4:dd:11:ec:d7:e3:42:98:42:5a: d1:bd:7a:fc:14:a4:74:30:21:0c:27:3c:10:0c:6f:0c:3f:df: 9c:9a:9a:f7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjc5NDgxMTAvBgNVBAUTKEFDOTMwQjYyNUQ4MzlDNTY4REE4MTk5RTM4RkY5REI3 RTM3ODMzQkQwHhcNMjUwNTMxMDUzOTM0WhcNMjUwNjA3MDUzOTM0WjAYMRYwFAYD VQQDEw02ODNhOTYxNy1lY2MyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxHw6qqppNUANjP/2WUYaz/6im/QJP8WK9UjM8N8/bXAA/iqvEMPH5aM9Un2r 8zoQxp2D8G2nKH14XSSGAaMXGyFdJrtMHWnCdB8kC+T/MqMEJZ7x3rTrm77wIA9y Uuhrtn4ZMGxp1UYm4JfQb8WxDzExlKUmnc40vXIghKZsnUWy+Fzc8/PtTHQmt9Yw CjxH6l6R2xA/vtktpiMgc4MJxJjzXEo7HIVBpkSHKIxdrLhxLocrPp9710t1+bPq hwA89h/Ig4W4Z27t8n0dzf3wsEu9jF0EVuG4d4U12GtUq8q4vqiIwPVd1m0hS3Pb OpBDnINKGAWH7Z/jsHerNNNGmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNgWh/ze xvgedHz2Kfeo3V9qTNfbMB8GA1UdIwQYMBaAFKyTC2Jdg5xWjagZnjj/nbfjeDO9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNzk0OC80Rjk3NkRGODM3 RDAxMUVGODk0NTQ3MUFDNEY5QUUwMi9ySk1MWWwyRG5GYU5xQm1lT1AtZHQtTjRN NzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JKTUxZbDJEbkZhTnFCbWVPUC1kdC1ONE03MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Nzk0OC80Rjk3NkRGODM3RDAxMUVGODk0NTQ3MUFDNEY5QUUwMi9ySk1MWWwyRG5G YU5xQm1lT1AtZHQtTjRNNzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC89I16Agv5MVenEqZiBqdNsOl7OKzSAJRAZmGU3SIohMsX8WbxW87f 2csXK9fSQFvy4IyLS1B/y4ZGWPjTyxF2NJeNn94sq2A3IhFluFuo4aJx3GpcTbpz 5g0gK3W8VBee4xE48S61zlNojhV/bf3zrt+zptqhTSA9u+I3LJi4qBQG0xZwyzQ1 RPSprh+YKZ83SsMBzDrKHmjG7ETsv707uUP7hFQGzWpLLCA/zKdSc+E1FyhIuRux dOUN4LqPtJdNNZ3mi4oB3AOykdO/3aww9gp1RQljvdlT8vCoLJoff9TdEezX40KY QlrRvXr8FKR0MCEMJzwQDG8MP9+cmpr3 -----END CERTIFICATE-----Generated at Sat May 31 16:30:31 2025 by rpki-client