$ rpki-client -vvf rpki.apnic.net/member_repository/A91BBCC9/D30B15C0B6CF11EB84EB1851C4F9AE02/redjNI0CWa0SzYi3ZNOYy4rHQMk.mft File: redjNI0CWa0SzYi3ZNOYy4rHQMk.mft (raw, json) Hash identifier: MrJln8x64azfwJZmwPdYJKn6qRyOHAQrSBprg+cgsBg= Subject key identifier: 69:8C:64:6F:44:93:2D:95:01:15:5A:34:9C:0D:F9:92:D3:07:A3:F8 Authority key identifier: AD:E7:63:34:8D:02:59:AD:12:CD:88:B7:64:D3:98:CB:8A:C7:40:C9 Certificate issuer: /CN=A91BBCC9/serialNumber=ADE763348D0259AD12CD88B764D398CB8AC740C9 Certificate serial: 05E6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/redjNI0CWa0SzYi3ZNOYy4rHQMk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BBCC9/D30B15C0B6CF11EB84EB1851C4F9AE02/redjNI0CWa0SzYi3ZNOYy4rHQMk.mft Manifest number: 05DE Signing time: Fri 30 May 2025 23:10:43 +0000 Manifest this update: Fri 30 May 2025 23:10:43 +0000 Manifest next update: Fri 06 Jun 2025 23:10:43 +0000 Files and hashes: 1: redjNI0CWa0SzYi3ZNOYy4rHQMk.crl (hash: +gnsuuTw6jcbK7ElSa3pQaFIgu+JVWgeYdVQWaW3FC0=) 2: B69C27DCB6D711EB9D603F7DC4F9AE02.roa (hash: OWf8PDQ8WMymcLSHEfIQAksI7XQ+plK8c+CWI6STWXo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BBCC9/D30B15C0B6CF11EB84EB1851C4F9AE02/redjNI0CWa0SzYi3ZNOYy4rHQMk.crl rsync://rpki.apnic.net/member_repository/A91BBCC9/D30B15C0B6CF11EB84EB1851C4F9AE02/redjNI0CWa0SzYi3ZNOYy4rHQMk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/redjNI0CWa0SzYi3ZNOYy4rHQMk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 23:10:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1510 (0x5e6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BBCC9, serialNumber=ADE763348D0259AD12CD88B764D398CB8AC740C9 Validity Not Before: May 30 23:10:43 2025 GMT Not After : Jun 6 23:10:43 2025 GMT Subject: CN=683a3af3-860d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:06:d6:82:f6:72:8c:2b:28:1a:e9:66:80:63: 82:7e:70:5c:92:9c:e6:07:01:4b:5b:0c:ce:97:34: 8a:c9:5d:3e:ca:dd:96:1d:50:8b:41:81:09:39:8d: fb:bc:f4:db:1c:fe:2d:6c:72:b1:28:4c:fb:fb:02: e3:10:6b:92:c4:42:9e:93:71:68:8f:e9:96:53:0c: 5b:c0:09:ca:ec:cf:64:c7:10:f6:0c:f8:d8:9c:64: e3:fb:10:4e:3e:f3:6a:9d:e4:1d:c7:21:82:f3:35: c1:04:aa:7e:45:b1:8c:27:ae:26:ba:fc:5a:0e:f1: 61:b5:cd:6c:bc:37:ad:32:b5:0b:84:0f:fa:fe:97: f9:50:86:93:6f:84:6e:4e:87:15:47:9d:a0:81:88: 0e:0d:dc:2b:47:4e:ae:80:c3:87:84:ef:26:43:2b: bf:ef:81:c9:6a:83:92:88:9b:2c:a0:8a:97:96:a9: 68:32:f0:6f:d7:2b:fb:68:b9:1b:c0:67:4e:f3:52: f9:e7:b5:68:20:8d:99:9e:36:cd:ca:16:d1:55:76: 86:37:6f:f6:bd:57:27:d9:1a:d1:af:90:a2:c6:44: 43:e3:61:9f:52:3f:ae:08:7e:85:56:10:76:86:95: 81:58:78:c0:b2:49:02:eb:4b:f6:b0:5c:3a:c7:4a: e6:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:8C:64:6F:44:93:2D:95:01:15:5A:34:9C:0D:F9:92:D3:07:A3:F8 X509v3 Authority Key Identifier: keyid:AD:E7:63:34:8D:02:59:AD:12:CD:88:B7:64:D3:98:CB:8A:C7:40:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BBCC9/D30B15C0B6CF11EB84EB1851C4F9AE02/redjNI0CWa0SzYi3ZNOYy4rHQMk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/redjNI0CWa0SzYi3ZNOYy4rHQMk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBCC9/D30B15C0B6CF11EB84EB1851C4F9AE02/redjNI0CWa0SzYi3ZNOYy4rHQMk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:01:ff:96:c7:90:72:4d:cc:3d:cb:25:8f:ec:04:90:c0:2d: bd:db:52:04:13:08:14:e3:7e:76:97:45:c8:69:7f:54:c6:5b: a0:f0:34:ec:dc:60:9e:44:b4:4e:da:7e:b9:f7:cb:2a:97:00: 3a:ac:03:ba:0c:bb:59:cd:c3:f8:5b:da:42:51:56:46:67:da: bb:0b:1b:f1:68:b8:8d:0f:c3:a0:fd:ca:3f:01:2f:a7:30:22: 47:0e:e7:39:38:90:5e:1a:c4:34:07:1a:ed:25:ff:2d:b9:2e: 7c:b1:c0:54:02:cc:3c:4c:22:aa:24:09:2d:54:02:67:d3:bd: f7:bd:84:3c:e2:54:84:70:4a:23:04:51:4a:5a:03:8d:9f:a2: ee:38:db:1b:67:56:44:d8:d7:3b:36:01:36:f2:b1:5a:61:17: a4:db:11:ec:25:75:14:96:b1:f1:e7:6e:1e:46:df:3a:3d:b9: b6:5e:bf:06:69:97:53:c0:c1:f4:4b:65:03:42:11:b5:f6:1a: 73:1d:e2:13:3b:1e:a4:60:d9:c7:a1:98:e5:72:26:98:7b:0a: 84:7d:87:60:9e:11:25:43:22:4c:33:16:b4:6a:27:c0:7d:ce: 8a:51:4e:1d:90:c9:8a:6a:03:45:64:03:15:2a:38:0c:17:89: ba:ea:ba:be -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBeYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkJDQzkxMTAvBgNVBAUTKEFERTc2MzM0OEQwMjU5QUQxMkNEODhCNzY0RDM5OENC OEFDNzQwQzkwHhcNMjUwNTMwMjMxMDQzWhcNMjUwNjA2MjMxMDQzWjAYMRYwFAYD VQQDEw02ODNhM2FmMy04NjBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+AbWgvZyjCsoGulmgGOCfnBckpzmBwFLWwzOlzSKyV0+yt2WHVCLQYEJOY37 vPTbHP4tbHKxKEz7+wLjEGuSxEKek3Foj+mWUwxbwAnK7M9kxxD2DPjYnGTj+xBO PvNqneQdxyGC8zXBBKp+RbGMJ64muvxaDvFhtc1svDetMrULhA/6/pf5UIaTb4Ru TocVR52ggYgODdwrR06ugMOHhO8mQyu/74HJaoOSiJssoIqXlqloMvBv1yv7aLkb wGdO81L557VoII2ZnjbNyhbRVXaGN2/2vVcn2RrRr5CixkRD42GfUj+uCH6FVhB2 hpWBWHjAskkC60v2sFw6x0rmHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGmMZG9E ky2VARVaNJwN+ZLTB6P4MB8GA1UdIwQYMBaAFK3nYzSNAlmtEs2It2TTmMuKx0DJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQkNDOS9EMzBCMTVDMEI2 Q0YxMUVCODRFQjE4NTFDNEY5QUUwMi9yZWRqTkkwQ1dhMFN6WWkzWk5PWXk0ckhR TWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JlZGpOSTBDV2EwU3pZaTNaTk9ZeTRySFFNay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QkNDOS9EMzBCMTVDMEI2Q0YxMUVCODRFQjE4NTFDNEY5QUUwMi9yZWRqTkkwQ1dh MFN6WWkzWk5PWXk0ckhRTWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBfAf+Wx5ByTcw9yyWP7ASQwC2921IEEwgU4352l0XIaX9Uxlug8DTs 3GCeRLRO2n6598sqlwA6rAO6DLtZzcP4W9pCUVZGZ9q7CxvxaLiND8Og/co/AS+n MCJHDuc5OJBeGsQ0BxrtJf8tuS58scBUAsw8TCKqJAktVAJn0733vYQ84lSEcEoj BFFKWgONn6LuONsbZ1ZE2Nc7NgE28rFaYRek2xHsJXUUlrHx524eRt86Pbm2Xr8G aZdTwMH0S2UDQhG19hpzHeITOx6kYNnHoZjlciaYewqEfYdgnhElQyJMMxa0aifA fc6KUU4dkMmKagNFZAMVKjgMF4m66rq+ -----END CERTIFICATE-----Generated at Sat May 31 16:59:25 2025 by rpki-client