$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.mft File: pLUL7Ni7ooVYcSjVkZKD2-FpCRg.mft (raw, json) Hash identifier: d294voTwj6hVgqbBvwmikNJqLb+kF1Bw1U4nDH+ULkc= Subject key identifier: 76:2A:4D:3C:9B:02:88:CF:80:03:E0:0A:00:EA:87:09:07:8F:AC:FB Authority key identifier: A4:B5:0B:EC:D8:BB:A2:85:58:71:28:D5:91:92:83:DB:E1:69:09:18 Certificate issuer: /CN=A91C0BDE/serialNumber=A4B50BECD8BBA285587128D5919283DBE1690918 Certificate serial: 0916 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.mft Manifest number: 1275 Signing time: Fri 30 May 2025 20:57:15 +0000 Manifest this update: Fri 30 May 2025 20:57:14 +0000 Manifest next update: Fri 06 Jun 2025 20:57:14 +0000 Files and hashes: 1: pLUL7Ni7ooVYcSjVkZKD2-FpCRg.crl (hash: vWUAXk+Y4v8uEQ7B0b82xQ9tPUSqiVblVeXlFpFO2kk=) 2: 38548A62EDC011EF82A1C85BC4F9AE02.roa (hash: g2E4jSisOfC94b2LIkUdb1xy65J/wZeDocvKlFIsfdI=) 3: 214232EC4FD311EF90027A63C4F9AE02.roa (hash: FTbrrJwavqP08/0mEs3AawfzqRid/QkcdkFOFXsnwUI=) 4: 2944DC90B57E11EFB31B630FC4F9AE02.roa (hash: hMlK5beSnbzjTvo8LjY0imDaQxKAnq81eWaRAt3rAlA=) 5: F585B320A4ED11EFBA65C13CC4F9AE02.roa (hash: SIPjhCdz0Zmm6RS8ib8g9TJ4IJCqMFvTR5HVH5hTjJk=) 6: 2921D24E067C11ED882FC127C4F9AE02.roa (hash: X9FUZvXw3xYym+gKphnPApVeFORX8RZUTOXm3OpSzcU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.crl rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 20:57:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2326 (0x916) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C0BDE, serialNumber=A4B50BECD8BBA285587128D5919283DBE1690918 Validity Not Before: May 30 20:57:14 2025 GMT Not After : Jun 6 20:57:14 2025 GMT Subject: CN=683a1bab-e71c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:3d:9d:56:d8:47:03:c9:8e:f3:a6:e7:9c:86: 0b:dc:1a:33:15:62:a9:e1:f5:fc:7f:16:a8:f9:38: 1a:b7:2f:c3:e6:c8:51:0c:16:6f:e8:0b:0e:5a:66: 5e:9a:a2:58:e1:3d:ae:4b:0a:02:2e:ec:48:77:8f: 5f:d6:d1:c7:5d:51:b5:d1:dd:b8:b3:f1:a6:9f:ca: 51:2a:c1:43:58:b7:db:af:b4:bb:69:da:9c:fc:b7: 95:15:f7:ba:ec:90:de:db:03:2e:1b:2c:4e:6f:33: 1f:c0:b7:a4:45:40:26:f3:5d:5a:76:1c:08:44:44: e4:9a:f8:15:ce:9d:1f:80:29:fd:51:62:18:86:69: b1:75:cc:ea:95:67:b8:ae:e9:7d:69:a4:cc:3f:8a: 73:d8:4e:21:21:62:2e:96:60:d1:8f:83:4c:35:2e: 1a:5d:ac:ec:cd:dd:09:04:8a:22:39:ed:0c:ab:0a: b6:0d:97:7c:bd:22:1b:31:4a:1c:b6:03:d6:83:f7: 87:b8:1c:60:b1:ba:01:5c:ad:07:d0:d9:64:d7:b4: 4a:d7:e9:d7:d9:3c:92:7a:30:61:e1:a0:dc:b8:d7: 7d:38:34:8c:32:be:b2:90:5d:6e:5a:70:a6:95:39: a7:2a:ea:a1:88:96:dd:bf:7e:05:bd:14:d3:0c:a8: 95:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:2A:4D:3C:9B:02:88:CF:80:03:E0:0A:00:EA:87:09:07:8F:AC:FB X509v3 Authority Key Identifier: keyid:A4:B5:0B:EC:D8:BB:A2:85:58:71:28:D5:91:92:83:DB:E1:69:09:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:46:5d:7e:5c:ee:c1:fb:f0:5f:6b:63:53:d4:7c:b7:91:87: 02:cb:dc:88:84:0c:d7:48:62:54:56:83:c0:c8:de:ad:26:8d: 20:6b:c2:f9:93:c1:e0:7c:12:4f:73:e5:11:a5:65:ea:57:83: f6:f2:43:0b:ca:f2:a7:d7:34:5c:f9:b4:eb:f9:bf:68:c5:41: 12:90:e4:83:29:77:f0:79:a6:d6:c9:a6:1a:e2:f1:c3:1d:e0: b3:15:a3:1f:83:ff:b1:d9:ce:61:0b:3c:b9:e0:76:99:f0:e5: 1a:c8:61:02:b8:bb:d7:d2:87:65:ad:d9:f7:dd:29:a5:a7:6e: 94:b5:de:74:83:74:d8:62:ef:2a:c4:c7:db:94:08:23:fc:70: 65:c1:e4:42:05:b9:3f:07:dd:b4:fb:a6:ae:75:de:64:cd:04: 85:49:8a:1e:c4:0a:2a:8d:f0:2a:34:f5:cd:a6:33:c9:e0:a3: b7:d7:74:4a:a3:1a:00:f3:8f:d8:e5:52:bb:09:b9:b6:ec:09: 25:63:98:bf:6c:15:33:d3:47:5c:4e:bb:44:ee:54:ea:bc:e3: 08:92:a7:05:0b:14:df:9e:f9:66:58:64:28:1c:31:71:61:82: d8:f0:91:0e:27:94:17:38:bc:9d:a5:dc:b8:6a:46:b0:78:cc: d8:9c:b3:d7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCRYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzBCREUxMTAvBgNVBAUTKEE0QjUwQkVDRDhCQkEyODU1ODcxMjhENTkxOTI4M0RC RTE2OTA5MTgwHhcNMjUwNTMwMjA1NzE0WhcNMjUwNjA2MjA1NzE0WjAYMRYwFAYD VQQDEw02ODNhMWJhYi1lNzFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqz2dVthHA8mO86bnnIYL3BozFWKp4fX8fxao+Tgaty/D5shRDBZv6AsOWmZe mqJY4T2uSwoCLuxId49f1tHHXVG10d24s/Gmn8pRKsFDWLfbr7S7adqc/LeVFfe6 7JDe2wMuGyxObzMfwLekRUAm811adhwIRETkmvgVzp0fgCn9UWIYhmmxdczqlWe4 rul9aaTMP4pz2E4hIWIulmDRj4NMNS4aXazszd0JBIoiOe0Mqwq2DZd8vSIbMUoc tgPWg/eHuBxgsboBXK0H0Nlk17RK1+nX2TySejBh4aDcuNd9ODSMMr6ykF1uWnCm lTmnKuqhiJbdv34FvRTTDKiV1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHYqTTyb AojPgAPgCgDqhwkHj6z7MB8GA1UdIwQYMBaAFKS1C+zYu6KFWHEo1ZGSg9vhaQkY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMEJERS83RTVBQzNFMDg5 NzExMUVBOTI0MDJBMEFDNEY5QUUwMi9wTFVMN05pN29vVlljU2pWa1pLRDItRnBD UmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BMVUw3Tmk3b29WWWNTalZrWktEMi1GcENSZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MEJERS83RTVBQzNFMDg5NzExMUVBOTI0MDJBMEFDNEY5QUUwMi9wTFVMN05pN29v VlljU2pWa1pLRDItRnBDUmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCaRl1+XO7B+/Bfa2NT1Hy3kYcCy9yIhAzXSGJUVoPAyN6tJo0ga8L5 k8HgfBJPc+URpWXqV4P28kMLyvKn1zRc+bTr+b9oxUESkOSDKXfweabWyaYa4vHD HeCzFaMfg/+x2c5hCzy54HaZ8OUayGECuLvX0odlrdn33Smlp26Utd50g3TYYu8q xMfblAgj/HBlweRCBbk/B920+6audd5kzQSFSYoexAoqjfAqNPXNpjPJ4KO313RK oxoA84/Y5VK7Cbm27AklY5i/bBUz00dcTrtE7lTqvOMIkqcFCxTfnvlmWGQoHDFx YYLY8JEOJ5QXOLydpdy4akaweMzYnLPX -----END CERTIFICATE-----Generated at Sat May 31 17:04:49 2025 by rpki-client