$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7A06/48F4DCDAC6C311E88F71CC56C4F9AE02/reE11eBNSWNwmzymv8AQttD5fK8.mft File: reE11eBNSWNwmzymv8AQttD5fK8.mft (raw, json) Hash identifier: Gc2VCzS8nAs13yamzG5vWZdQVFCcP2xRm4b9V/Wcg9o= Subject key identifier: 66:79:A8:6A:CE:25:5F:71:9D:5E:C9:3F:80:55:29:83:33:02:88:84 Authority key identifier: AD:E1:35:D5:E0:4D:49:63:70:9B:3C:A6:BF:C0:10:B6:D0:F9:7C:AF Certificate issuer: /CN=A91B7A06/serialNumber=ADE135D5E04D4963709B3CA6BFC010B6D0F97CAF Certificate serial: 12AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/reE11eBNSWNwmzymv8AQttD5fK8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7A06/48F4DCDAC6C311E88F71CC56C4F9AE02/reE11eBNSWNwmzymv8AQttD5fK8.mft Manifest number: 129D Signing time: Tue 10 Jun 2025 17:03:55 +0000 Manifest this update: Tue 10 Jun 2025 17:03:54 +0000 Manifest next update: Tue 17 Jun 2025 17:03:54 +0000 Files and hashes: 1: reE11eBNSWNwmzymv8AQttD5fK8.crl (hash: GjRsQ7XeCX0IPY41xq27nkl2EF7Fz8Nbv637qrkbT5Y=) 2: F8E415E2987F11ED9E1F4D0FC4F9AE02.roa (hash: tYzlvKoaH6Iw/czt01Ia6uEcjkV7kohl/OzIkYhWPeY=) 3: F7B1497E987F11ED9E1F4D0FC4F9AE02.roa (hash: Gl4gKDf4aT96XGuS7DGEepsfpPgK8tonViSlMSSTaDQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7A06/48F4DCDAC6C311E88F71CC56C4F9AE02/reE11eBNSWNwmzymv8AQttD5fK8.crl rsync://rpki.apnic.net/member_repository/A91B7A06/48F4DCDAC6C311E88F71CC56C4F9AE02/reE11eBNSWNwmzymv8AQttD5fK8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/reE11eBNSWNwmzymv8AQttD5fK8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 17 Jun 2025 17:03:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4779 (0x12ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7A06, serialNumber=ADE135D5E04D4963709B3CA6BFC010B6D0F97CAF Validity Not Before: Jun 10 17:03:54 2025 GMT Not After : Jun 17 17:03:54 2025 GMT Subject: CN=6848657b-0af5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:ac:dd:87:f0:b8:7e:20:89:e1:97:97:66:a0: 11:7e:47:05:fb:36:c7:1e:b6:92:22:e7:90:05:01: b8:f1:34:c2:ad:cf:2b:8a:26:e8:de:f8:c9:a2:f7: b0:4a:09:fb:3c:9b:a4:0e:ef:af:ad:7f:83:60:96: 3a:93:1b:2f:53:fb:81:23:71:b2:bf:f9:d0:04:ef: 6f:73:39:12:14:b0:c9:d3:8b:92:be:c6:ed:e7:2f: f0:e1:ce:7f:4f:13:56:a1:29:ea:cb:34:d6:e2:04: 20:36:15:f4:38:33:1e:86:b2:76:a0:d6:da:f7:81: ca:3f:20:7c:46:46:93:23:c8:2d:fc:96:64:28:19: 21:21:a0:1c:69:bb:77:35:05:6d:f3:e9:b9:00:43: e3:cb:39:c5:12:85:fe:26:89:31:62:09:96:13:84: 08:c6:15:b1:81:88:7a:fd:6d:aa:cf:b4:b4:21:ae: b0:cb:dc:15:de:87:9e:e7:15:2d:4a:65:92:b8:86: 51:70:31:ca:a5:e8:37:02:90:a8:3b:c6:91:cd:30: 3d:dd:a8:43:96:04:f5:f8:6e:2f:22:cf:76:e9:53: 6f:11:87:1b:3e:3a:dd:9e:dd:2a:2a:8b:1e:12:92: fd:4d:e9:3f:74:bb:05:60:2c:ad:fc:4c:ac:76:46: a9:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:79:A8:6A:CE:25:5F:71:9D:5E:C9:3F:80:55:29:83:33:02:88:84 X509v3 Authority Key Identifier: keyid:AD:E1:35:D5:E0:4D:49:63:70:9B:3C:A6:BF:C0:10:B6:D0:F9:7C:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7A06/48F4DCDAC6C311E88F71CC56C4F9AE02/reE11eBNSWNwmzymv8AQttD5fK8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/reE11eBNSWNwmzymv8AQttD5fK8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7A06/48F4DCDAC6C311E88F71CC56C4F9AE02/reE11eBNSWNwmzymv8AQttD5fK8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:68:be:57:36:10:7f:b1:8d:47:1e:5f:0c:7b:9a:fe:52:98: e5:5b:0d:b6:82:65:a1:0f:24:fb:d2:97:88:78:75:df:3a:7f: 29:e1:06:41:48:65:7b:6e:2b:55:4a:bf:f6:fa:f8:d5:9b:06: d8:7a:82:31:c1:3c:2a:d2:cd:ce:ed:ae:16:4d:38:81:74:b5: 9a:51:87:9c:bf:1c:39:29:ff:0d:a3:9d:61:de:19:0b:f6:a3: 01:34:1b:67:09:61:0b:eb:17:7c:3a:e6:06:d4:1a:14:30:e3: b9:37:40:73:62:4a:3b:26:2b:9e:60:0d:60:4c:80:d0:8f:04: a4:56:33:76:b7:ec:93:bf:8e:78:79:c4:bd:a2:c2:bf:24:b6: 03:51:9a:c3:be:35:62:c3:7a:86:2e:32:86:cd:41:0e:4c:a3: 44:4a:8f:9b:e0:ca:90:03:62:17:ed:39:0b:ce:e2:80:0a:b1: 92:04:17:8c:13:40:8b:a5:84:d7:ab:73:4d:f8:70:44:63:9f: 8e:ca:c5:cf:3f:3d:20:ac:cf:a9:6d:cb:54:f1:5e:3b:59:71: 78:e3:dd:f6:d4:a9:84:78:63:ca:82:c2:3b:ea:d5:a0:04:ea: 79:ff:7e:d6:b8:34:cd:3f:7f:02:30:48:ea:1c:5a:10:53:42: fd:95:75:11 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEqswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjdBMDYxMTAvBgNVBAUTKEFERTEzNUQ1RTA0RDQ5NjM3MDlCM0NBNkJGQzAxMEI2 RDBGOTdDQUYwHhcNMjUwNjEwMTcwMzU0WhcNMjUwNjE3MTcwMzU0WjAYMRYwFAYD VQQDEw02ODQ4NjU3Yi0wYWY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqKzdh/C4fiCJ4ZeXZqARfkcF+zbHHraSIueQBQG48TTCrc8riibo3vjJovew Sgn7PJukDu+vrX+DYJY6kxsvU/uBI3Gyv/nQBO9vczkSFLDJ04uSvsbt5y/w4c5/ TxNWoSnqyzTW4gQgNhX0ODMehrJ2oNba94HKPyB8RkaTI8gt/JZkKBkhIaAcabt3 NQVt8+m5AEPjyznFEoX+JokxYgmWE4QIxhWxgYh6/W2qz7S0Ia6wy9wV3oee5xUt SmWSuIZRcDHKpeg3ApCoO8aRzTA93ahDlgT1+G4vIs926VNvEYcbPjrdnt0qKose EpL9Tek/dLsFYCyt/EysdkapXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGZ5qGrO JV9xnV7JP4BVKYMzAoiEMB8GA1UdIwQYMBaAFK3hNdXgTUljcJs8pr/AELbQ+Xyv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCN0EwNi80OEY0RENEQUM2 QzMxMUU4OEY3MUNDNTZDNEY5QUUwMi9yZUUxMWVCTlNXTndtenltdjhBUXR0RDVm SzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JlRTExZUJOU1dOd216eW12OEFRdHRENWZLOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC N0EwNi80OEY0RENEQUM2QzMxMUU4OEY3MUNDNTZDNEY5QUUwMi9yZUUxMWVCTlNX TndtenltdjhBUXR0RDVmSzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZaL5XNhB/sY1HHl8Me5r+UpjlWw22gmWhDyT70peIeHXfOn8p4QZB SGV7bitVSr/2+vjVmwbYeoIxwTwq0s3O7a4WTTiBdLWaUYecvxw5Kf8No51h3hkL 9qMBNBtnCWEL6xd8OuYG1BoUMOO5N0BzYko7JiueYA1gTIDQjwSkVjN2t+yTv454 ecS9osK/JLYDUZrDvjViw3qGLjKGzUEOTKNESo+b4MqQA2IX7TkLzuKACrGSBBeM E0CLpYTXq3NN+HBEY5+OysXPPz0grM+pbctU8V47WXF449321KmEeGPKgsI76tWg BOp5/37WuDTNP38CMEjqHFoQU0L9lXUR -----END CERTIFICATE-----Generated at Wed Jun 11 12:56:09 2025 by rpki-client