$ rpki-client -vvf rpki.apnic.net/member_repository/A91BFCB1/6E872D5E656F11E9BBE8F724C4F9AE02/exEvnr7DQt_Kx3TrXCaBElxl4M8.mft File: exEvnr7DQt_Kx3TrXCaBElxl4M8.mft (raw, json) Hash identifier: Xsy//nzIIhrCzVxgPfsVidYzD1UhGEMd8M5sym2s2N4= Subject key identifier: 46:09:9C:40:E1:2A:18:A1:D6:31:69:B5:F5:CA:A1:32:FE:4C:2D:A6 Authority key identifier: 7B:11:2F:9E:BE:C3:42:DF:CA:C7:74:EB:5C:26:81:12:5C:65:E0:CF Certificate issuer: /CN=A91BFCB1/serialNumber=7B112F9EBEC342DFCAC774EB5C2681125C65E0CF Certificate serial: 0F73 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exEvnr7DQt_Kx3TrXCaBElxl4M8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BFCB1/6E872D5E656F11E9BBE8F724C4F9AE02/exEvnr7DQt_Kx3TrXCaBElxl4M8.mft Manifest number: 0F6C Signing time: Fri 30 May 2025 17:44:50 +0000 Manifest this update: Fri 30 May 2025 17:44:50 +0000 Manifest next update: Fri 06 Jun 2025 17:44:50 +0000 Files and hashes: 1: exEvnr7DQt_Kx3TrXCaBElxl4M8.crl (hash: zkn/2uxwnYiqRdFLPAkPGUDK+bLoSiPdYdvNQO5w4qI=) 2: FD58613E7B7B11E99CCAAF73C4F9AE02.roa (hash: 090bVc+Qwt8YDuc/RlwXjl9kZ0cXU70VKlUww1lp6Co=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BFCB1/6E872D5E656F11E9BBE8F724C4F9AE02/exEvnr7DQt_Kx3TrXCaBElxl4M8.crl rsync://rpki.apnic.net/member_repository/A91BFCB1/6E872D5E656F11E9BBE8F724C4F9AE02/exEvnr7DQt_Kx3TrXCaBElxl4M8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exEvnr7DQt_Kx3TrXCaBElxl4M8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 17:44:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3955 (0xf73) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BFCB1, serialNumber=7B112F9EBEC342DFCAC774EB5C2681125C65E0CF Validity Not Before: May 30 17:44:50 2025 GMT Not After : Jun 6 17:44:50 2025 GMT Subject: CN=6839ee92-db44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:af:bb:0f:73:c9:f7:c0:8a:4d:4f:9d:14:68: 0a:1f:33:12:6d:c0:4c:4a:4e:fc:b9:5d:b2:9a:ff: 73:fd:db:e0:d6:28:ac:e3:1c:02:22:c6:d0:6d:c5: 55:88:2f:bb:37:8c:56:e0:ee:39:52:08:78:c5:56: 27:99:f3:88:22:41:51:53:57:1a:19:19:3d:1a:1c: fc:cd:42:0a:7b:49:95:2e:0c:74:a6:d9:b8:57:21: e7:64:c8:d4:87:bc:bf:81:7f:a7:2e:87:4f:24:74: 59:7c:b9:3d:db:c5:3d:23:65:3e:5a:3e:62:10:08: b5:f4:63:c3:d9:c3:28:fc:9b:71:42:31:f4:1f:39: 18:c0:90:e0:93:1b:15:d7:1f:d8:45:97:a7:23:39: f5:c1:e9:b9:22:8d:cf:ff:fc:a5:f5:db:7e:f1:f6: 7e:5a:4b:5b:f3:6e:a0:ff:c3:23:cd:e1:63:ee:40: 0b:2e:9d:3a:d5:63:8c:01:aa:78:ab:15:9f:45:3d: 91:ba:29:b0:1f:76:0d:58:49:cf:36:19:77:13:52: f3:c6:7f:53:23:89:f8:28:09:2b:f7:af:a5:4f:75: 67:07:df:d9:29:bc:6b:a1:b3:8f:fe:17:f2:97:03: bd:80:e2:c2:5d:20:0a:02:a7:ed:70:18:e5:e4:91: eb:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:09:9C:40:E1:2A:18:A1:D6:31:69:B5:F5:CA:A1:32:FE:4C:2D:A6 X509v3 Authority Key Identifier: keyid:7B:11:2F:9E:BE:C3:42:DF:CA:C7:74:EB:5C:26:81:12:5C:65:E0:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BFCB1/6E872D5E656F11E9BBE8F724C4F9AE02/exEvnr7DQt_Kx3TrXCaBElxl4M8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exEvnr7DQt_Kx3TrXCaBElxl4M8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BFCB1/6E872D5E656F11E9BBE8F724C4F9AE02/exEvnr7DQt_Kx3TrXCaBElxl4M8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:32:f9:7c:3b:09:a4:6c:64:b4:d7:5f:74:f2:86:bd:b3:55: 0a:c2:93:0b:63:ed:88:63:c2:4d:3b:d5:27:cf:59:73:d1:44: 26:fb:75:44:4e:30:c7:e0:bc:60:ea:eb:41:ad:9f:23:1d:d1: 04:de:a4:8b:a4:1a:b4:90:80:23:e7:78:22:c7:36:0f:60:e6: aa:57:29:af:76:14:92:c3:c8:6e:e1:95:0b:68:ae:3f:74:17: 14:8c:c4:57:20:a5:c0:8e:11:df:9d:a7:36:3d:ff:e3:44:27: 39:1d:64:ff:e6:e8:e5:d5:f5:d6:11:80:7a:fd:ab:b6:a9:2c: 82:fc:80:e1:53:83:fe:16:bd:42:89:f6:26:2b:f6:08:d6:c2: 85:a5:6f:f8:d3:13:6f:9a:a2:0c:a2:ac:83:76:9d:85:f0:3e: 6c:e1:06:80:9a:20:68:05:19:df:70:8f:0f:ac:36:3f:fb:fc: 80:cb:41:ea:cb:23:8f:fd:e4:d2:ab:09:c0:fd:62:37:53:bf: ca:a6:73:ea:3a:a4:d0:6d:42:ec:32:a8:7f:63:f8:ea:cb:5d: 15:13:6c:12:a9:1b:57:39:89:e7:9b:8a:a0:a2:97:2d:48:04: 8b:f0:4c:07:59:c0:3a:d2:c9:f8:7a:f3:a3:58:62:71:d7:92: 3c:36:e1:c0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD3MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkZDQjExMTAvBgNVBAUTKDdCMTEyRjlFQkVDMzQyREZDQUM3NzRFQjVDMjY4MTEy NUM2NUUwQ0YwHhcNMjUwNTMwMTc0NDUwWhcNMjUwNjA2MTc0NDUwWjAYMRYwFAYD VQQDEw02ODM5ZWU5Mi1kYjQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxq+7D3PJ98CKTU+dFGgKHzMSbcBMSk78uV2ymv9z/dvg1iis4xwCIsbQbcVV iC+7N4xW4O45Ugh4xVYnmfOIIkFRU1caGRk9Ghz8zUIKe0mVLgx0ptm4VyHnZMjU h7y/gX+nLodPJHRZfLk928U9I2U+Wj5iEAi19GPD2cMo/JtxQjH0HzkYwJDgkxsV 1x/YRZenIzn1wem5Io3P//yl9dt+8fZ+Wktb826g/8MjzeFj7kALLp061WOMAap4 qxWfRT2RuimwH3YNWEnPNhl3E1Lzxn9TI4n4KAkr96+lT3VnB9/ZKbxrobOP/hfy lwO9gOLCXSAKAqftcBjl5JHrvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEYJnEDh Khih1jFptfXKoTL+TC2mMB8GA1UdIwQYMBaAFHsRL56+w0Lfysd061wmgRJcZeDP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRkNCMS82RTg3MkQ1RTY1 NkYxMUU5QkJFOEY3MjRDNEY5QUUwMi9leEV2bnI3RFF0X0t4M1RyWENhQkVseGw0 TTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2V4RXZucjdEUXRfS3gzVHJYQ2FCRWx4bDRNOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RkNCMS82RTg3MkQ1RTY1NkYxMUU5QkJFOEY3MjRDNEY5QUUwMi9leEV2bnI3RFF0 X0t4M1RyWENhQkVseGw0TTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBLMvl8OwmkbGS011908oa9s1UKwpMLY+2IY8JNO9Unz1lz0UQm+3VE TjDH4Lxg6utBrZ8jHdEE3qSLpBq0kIAj53gixzYPYOaqVymvdhSSw8hu4ZULaK4/ dBcUjMRXIKXAjhHfnac2Pf/jRCc5HWT/5ujl1fXWEYB6/au2qSyC/IDhU4P+Fr1C ifYmK/YI1sKFpW/40xNvmqIMoqyDdp2F8D5s4QaAmiBoBRnfcI8PrDY/+/yAy0Hq yyOP/eTSqwnA/WI3U7/KpnPqOqTQbULsMqh/Y/jqy10VE2wSqRtXOYnnm4qgopct SASL8EwHWcA60sn4evOjWGJx15I8NuHA -----END CERTIFICATE-----Generated at Sat May 31 16:38:48 2025 by rpki-client