$ rpki-client -vvf rpki.apnic.net/member_repository/A91BFD87/DDE73B2824C011EBBD47050DC4F9AE02/rJ-Vt9R46YKFz0S_xX2BWVU0Vm8.mft File: rJ-Vt9R46YKFz0S_xX2BWVU0Vm8.mft (raw, json) Hash identifier: aYC9bMATVD/E9paApqvGpi7bF76QpK1uwxuxYNBtYGs= Subject key identifier: 8C:1C:60:95:61:BF:1B:E4:9D:7F:E5:74:82:97:B6:54:1E:AE:BE:A4 Authority key identifier: AC:9F:95:B7:D4:78:E9:82:85:CF:44:BF:C5:7D:81:59:55:34:56:6F Certificate issuer: /CN=A91BFD87/serialNumber=AC9F95B7D478E98285CF44BFC57D81595534566F Certificate serial: 0758 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rJ-Vt9R46YKFz0S_xX2BWVU0Vm8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BFD87/DDE73B2824C011EBBD47050DC4F9AE02/rJ-Vt9R46YKFz0S_xX2BWVU0Vm8.mft Manifest number: 0752 Signing time: Fri 30 May 2025 21:52:14 +0000 Manifest this update: Fri 30 May 2025 21:52:13 +0000 Manifest next update: Fri 06 Jun 2025 21:52:13 +0000 Files and hashes: 1: rJ-Vt9R46YKFz0S_xX2BWVU0Vm8.crl (hash: Y1UucN9Da5lQ5QM4A+VY5pJZNda85YlfD9vcLGCPG0k=) 2: 304D6C7E24C211EBAC07F90DC4F9AE02.roa (hash: +D5t0JaGGAIaMSUF5Xtfhf6hKiTtvz6mrzsQbqX1HTs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BFD87/DDE73B2824C011EBBD47050DC4F9AE02/rJ-Vt9R46YKFz0S_xX2BWVU0Vm8.crl rsync://rpki.apnic.net/member_repository/A91BFD87/DDE73B2824C011EBBD47050DC4F9AE02/rJ-Vt9R46YKFz0S_xX2BWVU0Vm8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rJ-Vt9R46YKFz0S_xX2BWVU0Vm8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 21:52:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1880 (0x758) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BFD87, serialNumber=AC9F95B7D478E98285CF44BFC57D81595534566F Validity Not Before: May 30 21:52:13 2025 GMT Not After : Jun 6 21:52:13 2025 GMT Subject: CN=683a288d-bb46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:7f:18:37:f1:52:48:77:a0:e4:78:42:a3:c7: 24:1d:c3:72:1e:b3:91:7d:86:df:62:f9:40:ed:f8: 4f:b7:2e:8c:df:81:6c:c2:70:4e:86:88:5c:14:43: a6:a0:37:e1:57:08:0b:57:78:02:6c:ae:40:e9:e6: fd:d3:37:fb:fe:f9:4f:bf:18:80:63:14:a6:c4:71: 76:e4:f0:9c:1e:6d:67:c6:bb:84:80:ce:55:d8:61: 6c:18:f9:dd:43:5d:a3:ca:26:4f:44:d0:9a:f5:dd: fa:ab:07:89:87:99:ff:48:90:93:5c:1c:a9:23:44: d6:76:33:6b:42:16:32:bf:2e:8a:d9:34:66:71:40: 4e:5a:ae:a9:cf:d3:ca:f1:37:e4:04:6d:d9:1f:d1: 25:63:82:10:22:77:bd:22:b3:12:4d:3c:27:d4:6f: 4e:c7:1a:e9:03:df:0a:9e:c3:f1:d6:1d:6f:95:c1: 06:46:84:f2:9f:b1:f0:71:e4:a9:e7:be:f4:61:fb: e8:c5:11:71:c7:6a:21:59:68:7a:cb:2d:76:0c:c4: e6:0d:ec:a4:ef:e1:18:56:fa:6b:a9:1f:18:19:a8: 5d:8f:b9:be:cc:21:7e:76:63:83:29:65:d0:23:07: 66:a6:84:d4:41:79:7b:4f:90:86:cb:3f:9d:74:e5: c5:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:1C:60:95:61:BF:1B:E4:9D:7F:E5:74:82:97:B6:54:1E:AE:BE:A4 X509v3 Authority Key Identifier: keyid:AC:9F:95:B7:D4:78:E9:82:85:CF:44:BF:C5:7D:81:59:55:34:56:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BFD87/DDE73B2824C011EBBD47050DC4F9AE02/rJ-Vt9R46YKFz0S_xX2BWVU0Vm8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rJ-Vt9R46YKFz0S_xX2BWVU0Vm8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BFD87/DDE73B2824C011EBBD47050DC4F9AE02/rJ-Vt9R46YKFz0S_xX2BWVU0Vm8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:8a:8b:bf:94:96:cb:ce:d6:73:83:2d:29:ae:1f:7f:45:86: a6:a8:44:93:56:27:d6:f4:ed:97:42:89:56:e1:21:cb:03:c5: 79:5b:36:b7:61:80:fc:53:1b:89:6b:ee:d0:f3:b0:4b:75:7e: f1:8b:57:41:75:cb:0e:af:0d:98:54:28:1a:58:46:41:df:a0: 3d:26:81:a1:e1:52:3e:1c:52:1a:e7:4f:8d:d7:5f:56:a7:bb: b5:7f:dd:64:f6:cf:81:30:a7:c9:8f:d9:c2:71:b7:80:c3:b0: d1:11:84:e1:9a:e0:46:e4:8d:9a:cd:75:93:1c:2e:9f:5f:25: 71:3e:3d:64:23:1d:6a:cd:1e:a5:cc:a4:67:63:78:ac:82:66: 65:45:20:87:17:43:a7:9f:11:33:36:8c:af:3e:a8:77:5b:58: 59:2c:65:d0:f4:e8:5e:e3:79:e2:3a:67:83:2d:55:b1:19:ef: ef:b0:87:e2:67:5d:32:31:23:a1:e0:7a:34:85:53:fa:6a:83: 52:d0:ce:cf:60:be:33:b6:54:e5:ef:14:92:69:0c:9d:b2:fe: 8a:15:c3:08:1b:6c:d3:d1:fc:6c:f0:7e:b1:38:24:e9:83:a7: 2b:39:10:e5:f8:e5:ee:38:fa:41:7f:3e:9e:b8:2b:35:15:7d: ee:9f:69:ff -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB1gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkZEODcxMTAvBgNVBAUTKEFDOUY5NUI3RDQ3OEU5ODI4NUNGNDRCRkM1N0Q4MTU5 NTUzNDU2NkYwHhcNMjUwNTMwMjE1MjEzWhcNMjUwNjA2MjE1MjEzWjAYMRYwFAYD VQQDEw02ODNhMjg4ZC1iYjQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoH8YN/FSSHeg5HhCo8ckHcNyHrORfYbfYvlA7fhPty6M34FswnBOhohcFEOm oDfhVwgLV3gCbK5A6eb90zf7/vlPvxiAYxSmxHF25PCcHm1nxruEgM5V2GFsGPnd Q12jyiZPRNCa9d36qweJh5n/SJCTXBypI0TWdjNrQhYyvy6K2TRmcUBOWq6pz9PK 8TfkBG3ZH9ElY4IQIne9IrMSTTwn1G9OxxrpA98KnsPx1h1vlcEGRoTyn7HwceSp 5770YfvoxRFxx2ohWWh6yy12DMTmDeyk7+EYVvprqR8YGahdj7m+zCF+dmODKWXQ IwdmpoTUQXl7T5CGyz+ddOXFzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIwcYJVh vxvknX/ldIKXtlQerr6kMB8GA1UdIwQYMBaAFKyflbfUeOmChc9Ev8V9gVlVNFZv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRkQ4Ny9EREU3M0IyODI0 QzAxMUVCQkQ0NzA1MERDNEY5QUUwMi9ySi1WdDlSNDZZS0Z6MFNfeFgyQldWVTBW bTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JKLVZ0OVI0NllLRnowU194WDJCV1ZVMFZtOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RkQ4Ny9EREU3M0IyODI0QzAxMUVCQkQ0NzA1MERDNEY5QUUwMi9ySi1WdDlSNDZZ S0Z6MFNfeFgyQldWVTBWbTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAWiou/lJbLztZzgy0prh9/RYamqESTVifW9O2XQolW4SHLA8V5Wza3 YYD8UxuJa+7Q87BLdX7xi1dBdcsOrw2YVCgaWEZB36A9JoGh4VI+HFIa50+N119W p7u1f91k9s+BMKfJj9nCcbeAw7DREYThmuBG5I2azXWTHC6fXyVxPj1kIx1qzR6l zKRnY3isgmZlRSCHF0OnnxEzNoyvPqh3W1hZLGXQ9Ohe43niOmeDLVWxGe/vsIfi Z10yMSOh4Ho0hVP6aoNS0M7PYL4ztlTl7xSSaQydsv6KFcMIG2zT0fxs8H6xOCTp g6crORDl+OXuOPpBfz6euCs1FX3un2n/ -----END CERTIFICATE-----Generated at Sat May 31 17:39:16 2025 by rpki-client