$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8AC8/E9BE05DCB13C11EFAAF9D731C4F9AE02/4uYwZnXV9U0ge2eCqWx6qWex_JE.mft File: 4uYwZnXV9U0ge2eCqWx6qWex_JE.mft (raw, json) Hash identifier: LUUzRQHIDxRluCQYNe46GYEFz5oPf29WENUUNOXwlns= Subject key identifier: 89:C9:7E:A1:C7:CC:8E:9B:9D:71:34:7B:2D:67:CF:2A:85:B8:D4:CE Authority key identifier: E2:E6:30:66:75:D5:F5:4D:20:7B:67:82:A9:6C:7A:A9:67:B1:FC:91 Certificate issuer: /CN=A91B8AC8/serialNumber=E2E6306675D5F54D207B6782A96C7AA967B1FC91 Certificate serial: 64 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4uYwZnXV9U0ge2eCqWx6qWex_JE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B8AC8/E9BE05DCB13C11EFAAF9D731C4F9AE02/4uYwZnXV9U0ge2eCqWx6qWex_JE.mft Manifest number: 61 Signing time: Sat 31 May 2025 06:42:27 +0000 Manifest this update: Sat 31 May 2025 06:42:26 +0000 Manifest next update: Sat 07 Jun 2025 06:42:26 +0000 Files and hashes: 1: 4uYwZnXV9U0ge2eCqWx6qWex_JE.crl (hash: KGrBov0HMAmsb9KWR/sJD4ukJM1rQsccLIRihhjFqmQ=) 2: 9074B02EB13D11EF9EFDE433C4F9AE02.roa (hash: +DamE3tU9Fo7eBYdyyuSzK/6/nm5KtgHW7yUMIG6MHM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B8AC8/E9BE05DCB13C11EFAAF9D731C4F9AE02/4uYwZnXV9U0ge2eCqWx6qWex_JE.crl rsync://rpki.apnic.net/member_repository/A91B8AC8/E9BE05DCB13C11EFAAF9D731C4F9AE02/4uYwZnXV9U0ge2eCqWx6qWex_JE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4uYwZnXV9U0ge2eCqWx6qWex_JE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 06:42:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 100 (0x64) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B8AC8, serialNumber=E2E6306675D5F54D207B6782A96C7AA967B1FC91 Validity Not Before: May 31 06:42:26 2025 GMT Not After : Jun 7 06:42:26 2025 GMT Subject: CN=683aa4d3-7c73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:43:79:9b:4a:6f:6d:d5:51:42:0e:8d:53:69: 47:ab:c0:f6:41:a2:5e:39:74:d3:24:60:cb:cd:ac: 31:00:04:10:d8:f3:ad:14:bf:ab:7e:00:45:f8:a0: cc:5c:8b:16:e1:53:e8:d8:4d:a3:ef:70:0b:f9:04: 8d:cf:a5:cf:62:bd:46:27:81:cc:51:58:be:68:20: b0:f3:88:15:86:22:0d:b0:65:aa:74:91:45:a2:01: 90:76:a9:f2:32:78:e0:3b:9a:dd:1c:4a:f5:f1:5a: 3f:be:7e:c3:4a:d0:53:2e:46:ae:33:e5:c4:34:12: a4:77:34:73:50:3b:61:6b:3b:d6:14:0a:37:0f:41: 51:ae:3c:09:86:66:d7:eb:26:55:7c:6f:24:a9:7f: b3:c3:48:82:61:4c:ac:ed:b1:1e:28:2a:6b:de:3a: bb:8f:ed:86:3e:26:1c:8e:f2:e3:0d:1e:34:c7:0c: 35:da:b7:cc:b4:97:69:b0:ae:54:52:90:9e:03:9e: 09:5b:10:aa:13:59:a8:b2:8e:a7:5d:f4:6e:19:12: bc:37:2f:fe:fb:91:3d:95:ac:d8:3a:ef:34:6e:41: b0:c7:4b:90:95:39:9a:2d:b4:93:81:6e:aa:0d:ec: 37:fc:06:d5:02:0f:78:00:9b:7f:64:24:ac:e5:5b: 2c:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:C9:7E:A1:C7:CC:8E:9B:9D:71:34:7B:2D:67:CF:2A:85:B8:D4:CE X509v3 Authority Key Identifier: keyid:E2:E6:30:66:75:D5:F5:4D:20:7B:67:82:A9:6C:7A:A9:67:B1:FC:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B8AC8/E9BE05DCB13C11EFAAF9D731C4F9AE02/4uYwZnXV9U0ge2eCqWx6qWex_JE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4uYwZnXV9U0ge2eCqWx6qWex_JE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8AC8/E9BE05DCB13C11EFAAF9D731C4F9AE02/4uYwZnXV9U0ge2eCqWx6qWex_JE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:7a:20:8a:a8:d1:d2:5d:9f:02:8f:47:e5:7e:80:6e:ad:3a: fe:f8:58:0f:cf:ad:2b:29:a9:b2:07:b6:5b:20:93:69:a9:3f: e2:63:67:ec:71:c2:28:8e:f9:06:11:68:c6:92:03:cf:e1:d0: e4:92:db:db:e3:8f:49:7b:e5:6d:01:d2:2e:f1:1b:39:dc:e7: b1:c7:cf:07:ab:da:47:1d:98:28:99:87:ac:c0:a2:26:03:fc: 46:4b:8d:91:63:47:ce:5d:fa:ed:79:ff:70:82:e2:9f:d5:fd: 00:30:23:0a:b5:17:81:f3:bb:d6:b8:66:35:82:60:be:5d:f2: 3a:ec:29:31:51:01:33:a3:c8:da:ac:04:e7:2e:ba:2e:8c:05: a6:ed:4c:14:97:24:6b:e0:f4:5f:f8:23:e3:50:81:2f:10:96: 4b:d0:41:6b:79:9d:15:6c:a7:dd:e6:0f:42:09:c3:67:84:5d: 6f:9c:7a:dd:e7:d7:45:71:33:53:fc:84:46:a2:cc:25:28:93: a7:c6:1a:10:41:30:3d:52:86:5a:2c:af:6f:01:20:61:50:03: db:9e:6e:49:47:95:5b:04:7e:5b:7e:e8:a7:ec:70:a6:bb:b9: 2c:32:52:90:a0:2b:5e:38:50:21:25:0f:02:8a:91:0e:6d:25: 5f:dd:2c:6f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBZDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC OEFDODExMC8GA1UEBRMoRTJFNjMwNjY3NUQ1RjU0RDIwN0I2NzgyQTk2QzdBQTk2 N0IxRkM5MTAeFw0yNTA1MzEwNjQyMjZaFw0yNTA2MDcwNjQyMjZaMBgxFjAUBgNV BAMTDTY4M2FhNGQzLTdjNzMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDFQ3mbSm9t1VFCDo1TaUerwPZBol45dNMkYMvNrDEABBDY860Uv6t+AEX4oMxc ixbhU+jYTaPvcAv5BI3Ppc9ivUYngcxRWL5oILDziBWGIg2wZap0kUWiAZB2qfIy eOA7mt0cSvXxWj++fsNK0FMuRq4z5cQ0EqR3NHNQO2FrO9YUCjcPQVGuPAmGZtfr JlV8bySpf7PDSIJhTKztsR4oKmveOruP7YY+JhyO8uMNHjTHDDXat8y0l2mwrlRS kJ4DnglbEKoTWaiyjqdd9G4ZErw3L/77kT2VrNg67zRuQbDHS5CVOZottJOBbqoN 7Df8BtUCD3gAm39kJKzlWywJAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUicl+ocfM jpudcTR7LWfPKoW41M4wHwYDVR0jBBgwFoAU4uYwZnXV9U0ge2eCqWx6qWex/JEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI4QUM4L0U5QkUwNURDQjEz QzExRUZBQUY5RDczMUM0RjlBRTAyLzR1WXdablhWOVUwZ2UyZUNxV3g2cVdleF9K RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNHVZd1puWFY5VTBnZTJlQ3FXeDZxV2V4X0pFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI4 QUM4L0U5QkUwNURDQjEzQzExRUZBQUY5RDczMUM0RjlBRTAyLzR1WXdablhWOVUw Z2UyZUNxV3g2cVdleF9KRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGV6IIqo0dJdnwKPR+V+gG6tOv74WA/PrSspqbIHtlsgk2mpP+JjZ+xx wiiO+QYRaMaSA8/h0OSS29vjj0l75W0B0i7xGznc57HHzwer2kcdmCiZh6zAoiYD /EZLjZFjR85d+u15/3CC4p/V/QAwIwq1F4Hzu9a4ZjWCYL5d8jrsKTFRATOjyNqs BOcuui6MBabtTBSXJGvg9F/4I+NQgS8QlkvQQWt5nRVsp93mD0IJw2eEXW+cet3n 10VxM1P8hEaizCUok6fGGhBBMD1Shlosr28BIGFQA9uebklHlVsEflt+6KfscKa7 uSwyUpCgK144UCElDwKKkQ5tJV/dLG8= -----END CERTIFICATE-----Generated at Sat May 31 16:46:57 2025 by rpki-client