$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8E38/51F0DB3C3FFE11ED9A87A315C4F9AE02/ck4fZGxFGwGeHNo21DRq25tf2_g.mft File: ck4fZGxFGwGeHNo21DRq25tf2_g.mft (raw, json) Hash identifier: cpym4I6e+KZI5zuObbLAIgaNyYDTlAJNE/pIwWhR3jA= Subject key identifier: 0A:A0:EA:C3:5F:F1:8E:80:55:30:70:B6:98:C5:6C:F3:92:11:33:07 Authority key identifier: 72:4E:1F:64:6C:45:1B:01:9E:1C:DA:36:D4:34:6A:DB:9B:5F:DB:F8 Certificate issuer: /CN=A91B8E38/serialNumber=724E1F646C451B019E1CDA36D4346ADB9B5FDBF8 Certificate serial: 01F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ck4fZGxFGwGeHNo21DRq25tf2_g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B8E38/51F0DB3C3FFE11ED9A87A315C4F9AE02/ck4fZGxFGwGeHNo21DRq25tf2_g.mft Manifest number: 01F5 Signing time: Sat 31 May 2025 02:14:14 +0000 Manifest this update: Sat 31 May 2025 02:14:13 +0000 Manifest next update: Sat 07 Jun 2025 02:14:13 +0000 Files and hashes: 1: ck4fZGxFGwGeHNo21DRq25tf2_g.crl (hash: QD2hHTNaDB16qWXCySdp15wDw17sYNJCWhLMAOU35ao=) 2: A6789038400211ED808CCF0DC4F9AE02.roa (hash: AFcbY0/3GFwr3EcAHIPw3DWr7uIr3rpZ3pX3o3qycLQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B8E38/51F0DB3C3FFE11ED9A87A315C4F9AE02/ck4fZGxFGwGeHNo21DRq25tf2_g.crl rsync://rpki.apnic.net/member_repository/A91B8E38/51F0DB3C3FFE11ED9A87A315C4F9AE02/ck4fZGxFGwGeHNo21DRq25tf2_g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ck4fZGxFGwGeHNo21DRq25tf2_g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 02:14:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 504 (0x1f8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B8E38, serialNumber=724E1F646C451B019E1CDA36D4346ADB9B5FDBF8 Validity Not Before: May 31 02:14:13 2025 GMT Not After : Jun 7 02:14:13 2025 GMT Subject: CN=683a65f5-f8b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:05:f3:47:f0:34:9b:d4:14:57:7c:2b:dc:ef: 63:09:44:22:50:cb:24:5c:bc:57:5b:dd:e3:99:c8: 92:4c:7f:9a:6c:aa:bf:ae:0c:94:e3:59:b1:5c:de: 71:a4:ee:2c:33:ab:3a:a3:9f:a0:21:f9:8f:d4:c1: d6:20:82:75:2b:ac:08:1f:6a:c6:d1:5d:46:e0:96: 5b:3d:a5:8d:9f:cd:63:00:06:3d:cf:a5:b0:e6:45: 9d:9b:6d:bf:a2:92:1c:67:9f:db:bb:c1:d6:14:4e: ee:15:e3:ee:cf:35:6c:63:34:30:c8:80:88:85:37: 02:02:2d:78:62:50:7f:f0:7e:16:02:9d:1f:29:5a: 9c:5b:b4:6c:1e:7b:d0:1d:44:8a:cc:39:85:95:32: 18:42:53:fe:1e:e6:f3:e2:d5:7d:48:80:a1:25:d3: f6:f5:07:a0:01:34:50:77:32:8b:16:03:16:d1:9e: 85:fb:06:31:31:44:a4:33:6a:bc:80:14:31:45:8c: 94:cb:eb:38:d2:c6:9d:a6:6a:ec:4d:8c:95:8e:57: f1:f5:be:55:f4:14:ab:95:af:51:5c:49:65:8a:c8: 32:08:d9:94:35:89:01:ae:d2:8c:2a:f4:7a:0c:13: 07:f7:92:d6:93:51:23:15:d6:38:26:3a:47:84:0c: 62:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:A0:EA:C3:5F:F1:8E:80:55:30:70:B6:98:C5:6C:F3:92:11:33:07 X509v3 Authority Key Identifier: keyid:72:4E:1F:64:6C:45:1B:01:9E:1C:DA:36:D4:34:6A:DB:9B:5F:DB:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B8E38/51F0DB3C3FFE11ED9A87A315C4F9AE02/ck4fZGxFGwGeHNo21DRq25tf2_g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ck4fZGxFGwGeHNo21DRq25tf2_g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8E38/51F0DB3C3FFE11ED9A87A315C4F9AE02/ck4fZGxFGwGeHNo21DRq25tf2_g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:d0:c0:59:2e:fa:27:3d:ff:5a:a4:2e:1e:44:73:14:19:44: 8d:63:02:f2:fe:08:ec:4d:c3:03:e6:8b:c5:66:49:2c:79:fe: fb:17:25:fb:2f:98:de:47:92:08:bb:74:41:1a:17:12:68:e6: ac:4f:92:18:c5:d3:51:e9:5d:58:67:7c:67:18:83:98:cb:76: ab:18:b0:de:21:3c:68:89:59:63:f8:be:08:b6:ac:fb:e8:7a: 79:d5:00:c5:60:ab:28:ed:51:83:18:17:59:1e:a5:7e:d1:ee: 1c:bd:22:ec:19:ec:0a:96:e5:a7:48:60:22:88:71:69:ba:c8: f0:c7:d8:73:45:10:ec:cc:85:9b:f4:32:0e:57:a1:a4:67:65: 76:df:f6:18:08:b5:ce:fe:d7:b5:5d:17:f9:5d:e5:b4:6c:ed: 87:3a:0d:c5:e7:64:be:ba:bd:96:a9:b4:d6:1d:3e:78:2c:2d: 39:97:f2:e0:87:ea:60:d3:df:3d:14:48:8f:36:da:94:f0:c7: 2b:46:d1:9c:d6:65:b3:81:27:95:7a:e0:3e:0f:0b:45:28:57: 2e:2e:4d:37:4f:41:94:fb:34:92:f4:32:7a:a9:6d:96:73:14: f7:42:9e:be:44:47:c7:48:4a:25:86:f2:91:01:d3:b1:e9:a6: 07:c9:89:8c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjhFMzgxMTAvBgNVBAUTKDcyNEUxRjY0NkM0NTFCMDE5RTFDREEzNkQ0MzQ2QURC OUI1RkRCRjgwHhcNMjUwNTMxMDIxNDEzWhcNMjUwNjA3MDIxNDEzWjAYMRYwFAYD VQQDEw02ODNhNjVmNS1mOGIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0wXzR/A0m9QUV3wr3O9jCUQiUMskXLxXW93jmciSTH+abKq/rgyU41mxXN5x pO4sM6s6o5+gIfmP1MHWIIJ1K6wIH2rG0V1G4JZbPaWNn81jAAY9z6Ww5kWdm22/ opIcZ5/bu8HWFE7uFePuzzVsYzQwyICIhTcCAi14YlB/8H4WAp0fKVqcW7RsHnvQ HUSKzDmFlTIYQlP+Hubz4tV9SIChJdP29QegATRQdzKLFgMW0Z6F+wYxMUSkM2q8 gBQxRYyUy+s40sadpmrsTYyVjlfx9b5V9BSrla9RXEllisgyCNmUNYkBrtKMKvR6 DBMH95LWk1EjFdY4JjpHhAxiqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAqg6sNf 8Y6AVTBwtpjFbPOSETMHMB8GA1UdIwQYMBaAFHJOH2RsRRsBnhzaNtQ0atubX9v4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOEUzOC81MUYwREIzQzNG RkUxMUVEOUE4N0EzMTVDNEY5QUUwMi9jazRmWkd4Rkd3R2VITm8yMURScTI1dGYy X2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NrNGZaR3hGR3dHZUhObzIxRFJxMjV0ZjJfZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OEUzOC81MUYwREIzQzNGRkUxMUVEOUE4N0EzMTVDNEY5QUUwMi9jazRmWkd4Rkd3 R2VITm8yMURScTI1dGYyX2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAu0MBZLvonPf9apC4eRHMUGUSNYwLy/gjsTcMD5ovFZkksef77FyX7 L5jeR5IIu3RBGhcSaOasT5IYxdNR6V1YZ3xnGIOYy3arGLDeITxoiVlj+L4Itqz7 6Hp51QDFYKso7VGDGBdZHqV+0e4cvSLsGewKluWnSGAiiHFpusjwx9hzRRDszIWb 9DIOV6GkZ2V23/YYCLXO/te1XRf5XeW0bO2HOg3F52S+ur2WqbTWHT54LC05l/Lg h+pg0989FEiPNtqU8McrRtGc1mWzgSeVeuA+DwtFKFcuLk03T0GU+zSS9DJ6qW2W cxT3Qp6+REfHSEolhvKRAdOx6aYHyYmM -----END CERTIFICATE-----Generated at Sat May 31 16:53:48 2025 by rpki-client