$ rpki-client -vvf rpki.apnic.net/member_repository/A91C278B/06B0B62A0A4811ECBC573D5FC4F9AE02/PEM7ZOZMRt_VjmPBFShEhYFSMf8.mft File: PEM7ZOZMRt_VjmPBFShEhYFSMf8.mft (raw, json) Hash identifier: pUZmzmvPnBaAY5dsJyKJGN4Y2esBBoJW0mDfAG62OTU= Subject key identifier: 39:AF:C0:3F:E3:8D:85:B7:1E:41:23:0D:DA:15:8D:7D:3E:80:F8:90 Authority key identifier: 3C:43:3B:64:E6:4C:46:DF:D5:8E:63:C1:15:28:44:85:81:52:31:FF Certificate issuer: /CN=A91C278B/serialNumber=3C433B64E64C46DFD58E63C115284485815231FF Certificate serial: 0522 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PEM7ZOZMRt_VjmPBFShEhYFSMf8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C278B/06B0B62A0A4811ECBC573D5FC4F9AE02/PEM7ZOZMRt_VjmPBFShEhYFSMf8.mft Manifest number: 0512 Signing time: Fri 30 May 2025 23:50:25 +0000 Manifest this update: Fri 30 May 2025 23:50:25 +0000 Manifest next update: Fri 06 Jun 2025 23:50:25 +0000 Files and hashes: 1: PEM7ZOZMRt_VjmPBFShEhYFSMf8.crl (hash: t7nyQoH/Tw3meiCezbT4zhXE7PA0h8+gI+indtw2fXk=) 2: 9D752204479111ECA77ED34DC4F9AE02.roa (hash: XDKnImKrROyw/ip89561zvYG5bmwAM7xctdHrkfLbGA=) 3: 9BB673AA479111ECA77ED34DC4F9AE02.roa (hash: /DuM5c/5hK0oho9BwTuJNF7dRpHoa2sPJXkyJddg5oQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C278B/06B0B62A0A4811ECBC573D5FC4F9AE02/PEM7ZOZMRt_VjmPBFShEhYFSMf8.crl rsync://rpki.apnic.net/member_repository/A91C278B/06B0B62A0A4811ECBC573D5FC4F9AE02/PEM7ZOZMRt_VjmPBFShEhYFSMf8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PEM7ZOZMRt_VjmPBFShEhYFSMf8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 23:50:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1314 (0x522) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C278B, serialNumber=3C433B64E64C46DFD58E63C115284485815231FF Validity Not Before: May 30 23:50:25 2025 GMT Not After : Jun 6 23:50:25 2025 GMT Subject: CN=683a4441-7ec8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:90:28:86:32:95:89:a7:8a:96:09:8d:ff:b6: 31:31:e9:df:01:3f:d8:d8:3d:d8:00:cf:76:78:1c: 64:be:c6:36:8a:9e:7c:6a:29:95:53:bb:6b:1c:90: 6e:fd:a0:87:eb:a4:8a:07:a4:5d:db:fb:e8:bf:2c: c0:16:ca:88:bd:81:6f:94:ac:79:c2:f9:f3:09:4d: b8:fb:e8:ab:12:94:a0:df:37:e5:05:a1:40:bc:2d: 34:3e:02:bd:c2:e8:fd:13:67:21:24:12:7e:75:42: 0f:55:62:88:8c:ac:2d:1a:da:ab:0c:9d:ec:50:29: f0:41:ed:c2:c1:27:de:37:2b:48:ee:2d:49:f4:9b: a5:c2:54:e4:77:16:52:2b:37:4a:87:59:bb:e7:3a: f9:f7:b4:fa:6c:ce:0b:a6:8a:53:3b:4f:5c:4c:77: 4d:57:95:e4:19:c9:5a:4e:3a:96:38:87:ab:a0:c2: 16:63:67:ab:a2:60:eb:51:45:fd:87:ff:5c:8d:3d: 7a:6c:a0:8a:16:8d:8e:e3:d4:b3:dd:4d:46:a5:23: d6:3c:06:d3:25:4c:08:68:da:de:24:97:d3:99:6d: e2:15:31:b7:fa:cb:40:5b:f2:ae:46:d8:e2:93:65: 28:87:35:e7:d5:27:16:54:50:22:d4:ed:2c:94:b4: 9b:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:AF:C0:3F:E3:8D:85:B7:1E:41:23:0D:DA:15:8D:7D:3E:80:F8:90 X509v3 Authority Key Identifier: keyid:3C:43:3B:64:E6:4C:46:DF:D5:8E:63:C1:15:28:44:85:81:52:31:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C278B/06B0B62A0A4811ECBC573D5FC4F9AE02/PEM7ZOZMRt_VjmPBFShEhYFSMf8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PEM7ZOZMRt_VjmPBFShEhYFSMf8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C278B/06B0B62A0A4811ECBC573D5FC4F9AE02/PEM7ZOZMRt_VjmPBFShEhYFSMf8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:b6:e8:9f:9b:49:19:e4:8c:ec:04:7f:a3:2c:ad:66:b4:d8: 41:08:c9:f9:39:67:be:82:06:11:5b:9e:7a:59:3b:e4:60:ce: e4:f0:c3:cd:43:b6:93:ef:e9:8a:8f:83:fb:15:dc:72:63:1c: ce:48:38:aa:22:91:b4:21:d9:30:33:39:f4:e9:2a:33:4e:78: 9b:11:08:7b:e3:0c:65:e8:9e:94:d4:5a:ba:fa:b6:80:cc:e5: 7c:7a:4f:03:a4:62:06:e7:5a:43:27:54:05:a3:6a:b5:51:88: 43:25:a7:f3:1c:e3:57:54:7e:07:7d:16:33:92:7e:72:7c:07: 3a:4c:df:8d:fd:5a:6e:4e:dc:f9:05:de:b0:d8:c7:fe:85:6a: 82:ef:68:a4:9c:77:62:16:cf:ef:0f:38:23:f7:a8:6b:99:66: de:79:85:d4:08:7d:7d:6a:cd:92:83:92:a5:51:4a:8a:80:7b: a4:eb:f3:38:5c:ed:c7:1b:1e:1d:99:c7:54:6e:8c:46:a4:bd: de:e7:64:d1:4d:95:4f:31:68:21:17:0a:d5:3f:8d:14:cb:45: 12:1a:da:96:f0:ba:41:92:be:f6:8f:67:83:d3:ba:19:3a:c8: f6:d4:f8:e8:53:2b:d1:b1:06:89:1a:be:72:7a:ac:4f:09:9e: 72:25:1e:49 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBSIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzI3OEIxMTAvBgNVBAUTKDNDNDMzQjY0RTY0QzQ2REZENThFNjNDMTE1Mjg0NDg1 ODE1MjMxRkYwHhcNMjUwNTMwMjM1MDI1WhcNMjUwNjA2MjM1MDI1WjAYMRYwFAYD VQQDEw02ODNhNDQ0MS03ZWM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnpAohjKViaeKlgmN/7YxMenfAT/Y2D3YAM92eBxkvsY2ip58aimVU7trHJBu /aCH66SKB6Rd2/vovyzAFsqIvYFvlKx5wvnzCU24++irEpSg3zflBaFAvC00PgK9 wuj9E2chJBJ+dUIPVWKIjKwtGtqrDJ3sUCnwQe3CwSfeNytI7i1J9JulwlTkdxZS KzdKh1m75zr597T6bM4LpopTO09cTHdNV5XkGclaTjqWOIeroMIWY2eromDrUUX9 h/9cjT16bKCKFo2O49Sz3U1GpSPWPAbTJUwIaNreJJfTmW3iFTG3+stAW/KuRtji k2UohzXn1ScWVFAi1O0slLSbYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDmvwD/j jYW3HkEjDdoVjX0+gPiQMB8GA1UdIwQYMBaAFDxDO2TmTEbf1Y5jwRUoRIWBUjH/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMjc4Qi8wNkIwQjYyQTBB NDgxMUVDQkM1NzNENUZDNEY5QUUwMi9QRU03Wk9aTVJ0X1ZqbVBCRlNoRWhZRlNN ZjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BFTTdaT1pNUnRfVmptUEJGU2hFaFlGU01mOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Mjc4Qi8wNkIwQjYyQTBBNDgxMUVDQkM1NzNENUZDNEY5QUUwMi9QRU03Wk9aTVJ0 X1ZqbVBCRlNoRWhZRlNNZjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCTtuifm0kZ5IzsBH+jLK1mtNhBCMn5OWe+ggYRW556WTvkYM7k8MPN Q7aT7+mKj4P7FdxyYxzOSDiqIpG0IdkwMzn06SozTnibEQh74wxl6J6U1Fq6+raA zOV8ek8DpGIG51pDJ1QFo2q1UYhDJafzHONXVH4HfRYzkn5yfAc6TN+N/VpuTtz5 Bd6w2Mf+hWqC72iknHdiFs/vDzgj96hrmWbeeYXUCH19as2Sg5KlUUqKgHuk6/M4 XO3HGx4dmcdUboxGpL3e52TRTZVPMWghFwrVP40Uy0USGtqW8LpBkr72j2eD07oZ Osj21PjoUyvRsQaJGr5yeqxPCZ5yJR5J -----END CERTIFICATE-----Generated at Sat May 31 16:29:40 2025 by rpki-client