$ rpki-client -vvf rpki.apnic.net/member_repository/A91C21C7/54222FD08FAB11E39362EF355911EA32/0rwrzA84njpcUzzEc6fENrsbdNk.mft File: 0rwrzA84njpcUzzEc6fENrsbdNk.mft (raw, json) Hash identifier: Wg1fIhUG3JKd4c2fo6SLpdwwhua2QQV8jt9iij2j23g= Subject key identifier: 30:07:FE:E7:90:1B:65:F7:3C:01:9B:F0:C1:28:DC:2F:34:2C:89:40 Authority key identifier: D2:BC:2B:CC:0F:38:9E:3A:5C:53:3C:C4:73:A7:C4:36:BB:1B:74:D9 Certificate issuer: /CN=A91C21C7/serialNumber=D2BC2BCC0F389E3A5C533CC473A7C436BB1B74D9 Certificate serial: 2D6C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0rwrzA84njpcUzzEc6fENrsbdNk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C21C7/54222FD08FAB11E39362EF355911EA32/0rwrzA84njpcUzzEc6fENrsbdNk.mft Manifest number: 2D47 Signing time: Sat 31 May 2025 15:29:45 +0000 Manifest this update: Sat 31 May 2025 15:29:45 +0000 Manifest next update: Sat 07 Jun 2025 15:29:45 +0000 Files and hashes: 1: 0rwrzA84njpcUzzEc6fENrsbdNk.crl (hash: 2Ts81mm/zkyGuZeFKeEI2a35N0PCq74XTZq98nwrF38=) 2: E2AD90E813E811E9B287C144C4F9AE02.roa (hash: CwjqOoJS53tpi81tzFuwu956lUr2HE8GT6aAkGCmQ3k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C21C7/54222FD08FAB11E39362EF355911EA32/0rwrzA84njpcUzzEc6fENrsbdNk.crl rsync://rpki.apnic.net/member_repository/A91C21C7/54222FD08FAB11E39362EF355911EA32/0rwrzA84njpcUzzEc6fENrsbdNk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0rwrzA84njpcUzzEc6fENrsbdNk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 15:29:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11628 (0x2d6c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C21C7, serialNumber=D2BC2BCC0F389E3A5C533CC473A7C436BB1B74D9 Validity Not Before: May 31 15:29:45 2025 GMT Not After : Jun 7 15:29:45 2025 GMT Subject: CN=683b2069-3975 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:ae:30:18:30:f2:27:f3:81:5c:7f:8f:5b:e3: df:4e:5d:6f:6a:5b:6c:c1:09:9c:b3:d8:ce:d3:2e: 64:d1:78:cf:24:4a:98:bc:bd:f4:0e:db:bd:23:2e: 5b:77:71:87:f4:31:d5:ab:d8:47:3a:d8:06:7d:bf: da:66:52:ea:3e:f8:1a:1a:02:5e:1e:f1:54:98:ab: 49:1e:e2:14:79:95:0a:ed:91:42:39:6c:b0:97:e0: 19:ed:c5:36:68:e6:d7:8e:a5:92:cd:28:5e:d6:1c: ea:9d:c4:5e:ac:27:2b:06:cb:c0:4f:80:58:1a:6b: 1d:41:e3:b4:5e:c0:dc:46:65:a4:83:16:77:77:47: 0a:2a:4b:d6:63:b3:34:41:23:33:e0:d7:2e:68:1f: 15:f1:c9:06:a1:1f:80:0d:00:da:8c:b3:c4:73:49: da:4a:70:9b:3f:f5:03:f6:3d:95:6c:cf:2b:cd:dd: 4b:59:7f:e8:a3:20:e9:d4:94:ec:b8:02:10:55:eb: bf:21:c6:15:0a:84:83:a6:34:2e:5f:b6:77:8f:c0: 88:1c:0b:ea:99:67:8f:d1:0d:61:5c:57:62:da:a9: b2:3f:c1:e6:b0:13:2c:8c:e4:68:da:31:5f:9d:97: a9:53:e7:e2:dc:6d:90:a2:84:90:41:55:cb:2f:8e: 96:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:07:FE:E7:90:1B:65:F7:3C:01:9B:F0:C1:28:DC:2F:34:2C:89:40 X509v3 Authority Key Identifier: keyid:D2:BC:2B:CC:0F:38:9E:3A:5C:53:3C:C4:73:A7:C4:36:BB:1B:74:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C21C7/54222FD08FAB11E39362EF355911EA32/0rwrzA84njpcUzzEc6fENrsbdNk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0rwrzA84njpcUzzEc6fENrsbdNk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C21C7/54222FD08FAB11E39362EF355911EA32/0rwrzA84njpcUzzEc6fENrsbdNk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:42:de:e1:b3:9b:98:10:02:2e:36:90:22:09:95:2c:c7:96: 39:3d:66:a2:0a:16:00:84:bc:fd:e7:60:2e:f6:d3:ff:ec:11: f8:50:20:b7:d6:58:82:a5:72:b5:bf:fb:76:3f:47:69:37:dc: 7d:1f:af:9d:b1:fb:b8:b1:05:ab:79:ea:55:6d:ef:93:71:b6: cc:a8:56:9c:6c:62:fb:2b:23:eb:70:a4:8d:ea:3b:94:7d:66: 9b:a1:2c:04:51:86:0f:86:79:8c:bc:a7:a9:18:92:ea:c7:e9: 12:c7:ca:ee:f3:a0:dc:3a:e9:27:2f:bc:c7:54:4d:41:d1:64: 75:96:94:11:f0:f2:34:e9:b7:54:54:32:e9:58:e9:a3:af:19: 47:81:3b:ee:4c:b4:4e:59:5e:af:93:03:4b:36:3d:fb:ac:c6: 24:37:d1:a9:6b:64:6d:47:69:31:63:6f:c4:18:c7:7e:b2:05: ec:6c:ef:98:5c:f6:5b:fc:3f:a9:64:f6:c5:00:1e:03:58:32: 0f:b4:6d:0f:a6:2a:e9:6b:09:83:0f:e7:d0:ea:21:84:07:b7: 19:83:27:c4:bd:95:2b:6a:70:41:3d:e9:02:21:0d:26:62:69: a6:02:17:a2:fb:f9:bc:50:8b:ad:f9:03:69:16:9f:e7:3c:27: 36:30:24:13 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICLWwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzIxQzcxMTAvBgNVBAUTKEQyQkMyQkNDMEYzODlFM0E1QzUzM0NDNDczQTdDNDM2 QkIxQjc0RDkwHhcNMjUwNTMxMTUyOTQ1WhcNMjUwNjA3MTUyOTQ1WjAYMRYwFAYD VQQDEw02ODNiMjA2OS0zOTc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAra4wGDDyJ/OBXH+PW+PfTl1valtswQmcs9jO0y5k0XjPJEqYvL30Dtu9Iy5b d3GH9DHVq9hHOtgGfb/aZlLqPvgaGgJeHvFUmKtJHuIUeZUK7ZFCOWywl+AZ7cU2 aObXjqWSzShe1hzqncRerCcrBsvAT4BYGmsdQeO0XsDcRmWkgxZ3d0cKKkvWY7M0 QSMz4NcuaB8V8ckGoR+ADQDajLPEc0naSnCbP/UD9j2VbM8rzd1LWX/ooyDp1JTs uAIQVeu/IcYVCoSDpjQuX7Z3j8CIHAvqmWeP0Q1hXFdi2qmyP8HmsBMsjORo2jFf nZepU+fi3G2QooSQQVXLL46WrwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDAH/ueQ G2X3PAGb8MEo3C80LIlAMB8GA1UdIwQYMBaAFNK8K8wPOJ46XFM8xHOnxDa7G3TZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMjFDNy81NDIyMkZEMDhG QUIxMUUzOTM2MkVGMzU1OTExRUEzMi8wcndyekE4NG5qcGNVenpFYzZmRU5yc2Jk TmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzByd3J6QTg0bmpwY1V6ekVjNmZFTnJzYmROay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MjFDNy81NDIyMkZEMDhGQUIxMUUzOTM2MkVGMzU1OTExRUEzMi8wcndyekE4NG5q cGNVenpFYzZmRU5yc2JkTmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQACQt7hs5uYEAIuNpAiCZUsx5Y5PWaiChYAhLz952Au9tP/7BH4UCC3 1liCpXK1v/t2P0dpN9x9H6+dsfu4sQWreepVbe+TcbbMqFacbGL7KyPrcKSN6juU fWaboSwEUYYPhnmMvKepGJLqx+kSx8ru86DcOuknL7zHVE1B0WR1lpQR8PI06bdU VDLpWOmjrxlHgTvuTLROWV6vkwNLNj37rMYkN9Gpa2RtR2kxY2/EGMd+sgXsbO+Y XPZb/D+pZPbFAB4DWDIPtG0PpirpawmDD+fQ6iGEB7cZgyfEvZUranBBPekCIQ0m YmmmAhei+/m8UIut+QNpFp/nPCc2MCQT -----END CERTIFICATE-----Generated at Sat May 31 17:27:52 2025 by rpki-client