$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7E17/7AB0B566880711EBA0A9B62AC4F9AE02/dtH2bAFtwYRzTm2b4b7pCAH_oB8.mft File: dtH2bAFtwYRzTm2b4b7pCAH_oB8.mft (raw, json) Hash identifier: D0yzySsR9zf3OXTyr9tYVrs+g+8hhHCfPR6Krf/cb+E= Subject key identifier: 2D:20:D4:8F:46:ED:82:5E:4D:2E:F0:13:33:61:A5:FE:0D:FC:53:39 Authority key identifier: 76:D1:F6:6C:01:6D:C1:84:73:4E:6D:9B:E1:BE:E9:08:01:FF:A0:1F Certificate issuer: /CN=A91B7E17/serialNumber=76D1F66C016DC184734E6D9BE1BEE90801FFA01F Certificate serial: 0656 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dtH2bAFtwYRzTm2b4b7pCAH_oB8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7E17/7AB0B566880711EBA0A9B62AC4F9AE02/dtH2bAFtwYRzTm2b4b7pCAH_oB8.mft Manifest number: 0651 Signing time: Fri 30 May 2025 22:44:58 +0000 Manifest this update: Fri 30 May 2025 22:44:58 +0000 Manifest next update: Fri 06 Jun 2025 22:44:57 +0000 Files and hashes: 1: dtH2bAFtwYRzTm2b4b7pCAH_oB8.crl (hash: IQ8YSfqMg+ix+MxmjJye70tE4csynsaJZpk8ztJbirI=) 2: 87F6FDDC880911EB96D8882DC4F9AE02.roa (hash: HlAv5VKHlCkHYXAj9IKNWvazVRDv1+Tmr+7FuDlOMWM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7E17/7AB0B566880711EBA0A9B62AC4F9AE02/dtH2bAFtwYRzTm2b4b7pCAH_oB8.crl rsync://rpki.apnic.net/member_repository/A91B7E17/7AB0B566880711EBA0A9B62AC4F9AE02/dtH2bAFtwYRzTm2b4b7pCAH_oB8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dtH2bAFtwYRzTm2b4b7pCAH_oB8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 22:44:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1622 (0x656) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7E17, serialNumber=76D1F66C016DC184734E6D9BE1BEE90801FFA01F Validity Not Before: May 30 22:44:58 2025 GMT Not After : Jun 6 22:44:57 2025 GMT Subject: CN=683a34ea-77d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:92:e6:99:16:06:27:48:6f:72:9d:32:95:9d: 2d:be:99:bd:7c:f5:69:46:b2:72:ed:ba:b9:c6:c8: 02:6d:82:9d:a9:f3:c6:fe:3d:99:ec:ec:a6:50:ff: 6a:eb:f4:7a:5f:02:52:72:b0:60:61:78:89:89:a9: 71:98:56:8e:68:e5:56:4d:69:42:03:ec:74:07:c8: 46:70:66:3e:ed:f4:d4:97:b6:a8:3d:e9:60:c9:88: 41:f9:00:63:1e:7b:2a:5a:b5:4f:99:4b:31:ec:07: 7f:ca:8d:b8:07:4b:73:1e:73:da:f4:df:3a:cf:f0: 24:4e:55:15:d4:eb:ab:8b:7f:bf:13:25:f2:eb:79: b0:23:88:4c:5e:af:ce:57:fe:bb:0a:70:c8:20:2d: f6:a3:4c:35:c9:63:87:da:96:a8:37:09:98:37:35: c8:0b:6f:50:5d:d7:5d:cb:8f:dd:74:99:79:3f:d3: 8d:05:2b:48:b5:72:94:c2:40:05:57:62:9c:6c:de: b1:6a:7c:bf:cb:cb:ea:c9:06:f2:b5:17:7c:ff:f9: 55:b8:da:46:59:fe:33:4e:1c:fe:db:c5:9e:07:8f: 65:37:30:8d:c6:51:2f:7d:85:a0:8a:03:8c:f3:ef: 3f:61:df:a7:2d:25:43:7a:8d:5a:ff:ab:08:73:72: 9f:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:20:D4:8F:46:ED:82:5E:4D:2E:F0:13:33:61:A5:FE:0D:FC:53:39 X509v3 Authority Key Identifier: keyid:76:D1:F6:6C:01:6D:C1:84:73:4E:6D:9B:E1:BE:E9:08:01:FF:A0:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7E17/7AB0B566880711EBA0A9B62AC4F9AE02/dtH2bAFtwYRzTm2b4b7pCAH_oB8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dtH2bAFtwYRzTm2b4b7pCAH_oB8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7E17/7AB0B566880711EBA0A9B62AC4F9AE02/dtH2bAFtwYRzTm2b4b7pCAH_oB8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:5f:a9:86:49:d0:5c:90:1d:bf:7e:e8:16:ed:f5:2d:1c:93: b4:8b:6a:7b:ea:7f:5c:cc:36:07:03:3c:1e:94:16:f4:b1:3e: 14:9e:f6:48:14:95:df:d3:c5:eb:90:78:37:07:e4:3e:e8:7e: 83:82:56:31:6b:c5:ca:ae:39:de:78:49:7d:f0:e3:c0:9e:95: 95:89:a3:78:3b:5b:9c:b1:7c:12:74:32:de:a5:85:76:47:3a: 0f:df:c6:a6:88:b4:62:d9:48:0d:e1:8e:20:d7:c8:72:12:c3: bc:95:93:47:15:5f:7f:e6:5b:c6:b5:24:de:5f:a9:c5:a4:ef: 55:13:ef:bc:27:87:03:bb:1c:8f:24:94:8e:72:1a:dc:44:77: 79:3b:78:3b:d9:c3:97:ad:8e:01:e1:64:2b:4b:9c:3e:7b:96: bd:45:92:66:9c:a0:26:61:6c:9c:84:c1:ae:c1:02:42:72:a1: 17:f2:3e:09:fe:c2:4f:78:3d:34:4e:0f:4d:e9:10:c1:8f:57: 77:24:65:fd:03:2f:03:0e:c6:de:df:68:85:31:57:f9:47:a4: ad:ff:4a:75:3d:0a:8b:18:7f:21:76:ce:8f:7f:d7:65:83:4d: a1:28:75:a5:30:15:ed:d9:29:85:50:18:0b:df:76:df:5c:73: 4f:e3:10:f1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBlYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjdFMTcxMTAvBgNVBAUTKDc2RDFGNjZDMDE2REMxODQ3MzRFNkQ5QkUxQkVFOTA4 MDFGRkEwMUYwHhcNMjUwNTMwMjI0NDU4WhcNMjUwNjA2MjI0NDU3WjAYMRYwFAYD VQQDEw02ODNhMzRlYS03N2Q3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm5LmmRYGJ0hvcp0ylZ0tvpm9fPVpRrJy7bq5xsgCbYKdqfPG/j2Z7OymUP9q 6/R6XwJScrBgYXiJialxmFaOaOVWTWlCA+x0B8hGcGY+7fTUl7aoPelgyYhB+QBj HnsqWrVPmUsx7Ad/yo24B0tzHnPa9N86z/AkTlUV1Ouri3+/EyXy63mwI4hMXq/O V/67CnDIIC32o0w1yWOH2paoNwmYNzXIC29QXdddy4/ddJl5P9ONBStItXKUwkAF V2KcbN6xany/y8vqyQbytRd8//lVuNpGWf4zThz+28WeB49lNzCNxlEvfYWgigOM 8+8/Yd+nLSVDeo1a/6sIc3KftQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC0g1I9G 7YJeTS7wEzNhpf4N/FM5MB8GA1UdIwQYMBaAFHbR9mwBbcGEc05tm+G+6QgB/6Af MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCN0UxNy83QUIwQjU2Njg4 MDcxMUVCQTBBOUI2MkFDNEY5QUUwMi9kdEgyYkFGdHdZUnpUbTJiNGI3cENBSF9v QjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2R0SDJiQUZ0d1lSelRtMmI0YjdwQ0FIX29COC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC N0UxNy83QUIwQjU2Njg4MDcxMUVCQTBBOUI2MkFDNEY5QUUwMi9kdEgyYkFGdHdZ UnpUbTJiNGI3cENBSF9vQjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAeX6mGSdBckB2/fugW7fUtHJO0i2p76n9czDYHAzwelBb0sT4UnvZI FJXf08XrkHg3B+Q+6H6DglYxa8XKrjneeEl98OPAnpWViaN4O1ucsXwSdDLepYV2 RzoP38amiLRi2UgN4Y4g18hyEsO8lZNHFV9/5lvGtSTeX6nFpO9VE++8J4cDuxyP JJSOchrcRHd5O3g72cOXrY4B4WQrS5w+e5a9RZJmnKAmYWychMGuwQJCcqEX8j4J /sJPeD00Tg9N6RDBj1d3JGX9Ay8DDsbe32iFMVf5R6St/0p1PQqLGH8hds6Pf9dl g02hKHWlMBXt2SmFUBgL33bfXHNP4xDx -----END CERTIFICATE-----Generated at Sat May 31 15:51:49 2025 by rpki-client