$ rpki-client -vvf rpki.apnic.net/member_repository/A91C46FC/0E8505F0620511EABAFFE16BC4F9AE02/baE3ApweGgauD6j3W7iPLKV4-Fo.mft File: baE3ApweGgauD6j3W7iPLKV4-Fo.mft (raw, json) Hash identifier: L0Ya99l4zs9JhqMttyljNKLHc1CuNRhxI7PjiXyWZZo= Subject key identifier: A3:74:79:83:34:7F:A1:9E:7E:B9:6A:42:75:0F:09:EC:84:49:B8:4B Authority key identifier: 6D:A1:37:02:9C:1E:1A:06:AE:0F:A8:F7:5B:B8:8F:2C:A5:78:F8:5A Certificate issuer: /CN=A91C46FC/serialNumber=6DA137029C1E1A06AE0FA8F75BB88F2CA578F85A Certificate serial: 0A7F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/baE3ApweGgauD6j3W7iPLKV4-Fo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C46FC/0E8505F0620511EABAFFE16BC4F9AE02/baE3ApweGgauD6j3W7iPLKV4-Fo.mft Manifest number: 0A6A Signing time: Fri 30 May 2025 19:49:48 +0000 Manifest this update: Fri 30 May 2025 19:49:47 +0000 Manifest next update: Fri 06 Jun 2025 19:49:47 +0000 Files and hashes: 1: baE3ApweGgauD6j3W7iPLKV4-Fo.crl (hash: 1H/CMEOhY1EfsF0ZktDSRkOeXxSNXQK/uHCf3IWNJrM=) 2: F450F110AAFE11EAAF572C5EC4F9AE02.roa (hash: z5ES9QnxCtUmMGb5rTePskEShI6wqlkuHRSuLJa+HEo=) 3: FB648B80F9DD11EC85C44880C4F9AE02.roa (hash: Sq5YLnrI6niWLMeWLjro3RFtUrBz6mhWVJH2BrDvMPI=) 4: 04D48448620C11EA9F85A781C4F9AE02.roa (hash: QgJRfFH6YN7lRNZNVoON5AcD6zI0xlKC/pPKsOyjCXg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C46FC/0E8505F0620511EABAFFE16BC4F9AE02/baE3ApweGgauD6j3W7iPLKV4-Fo.crl rsync://rpki.apnic.net/member_repository/A91C46FC/0E8505F0620511EABAFFE16BC4F9AE02/baE3ApweGgauD6j3W7iPLKV4-Fo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/baE3ApweGgauD6j3W7iPLKV4-Fo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 19:49:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2687 (0xa7f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C46FC, serialNumber=6DA137029C1E1A06AE0FA8F75BB88F2CA578F85A Validity Not Before: May 30 19:49:47 2025 GMT Not After : Jun 6 19:49:47 2025 GMT Subject: CN=683a0bdc-10d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:ca:d4:8e:31:ad:57:a8:22:53:ac:b9:da:71: 58:8c:5c:b2:4e:d8:52:83:a2:d4:14:34:85:77:48: b6:f8:a0:ec:36:1e:32:44:a4:c9:1a:d7:7a:00:db: 7a:90:3f:6f:9f:dd:e8:ff:19:39:1d:44:bd:18:38: eb:ca:18:82:e8:6c:e1:53:be:39:fa:b7:79:46:bd: 04:cf:80:60:52:92:dd:88:09:16:7b:58:60:b3:e1: 67:ab:be:ce:0f:fd:19:2a:df:5d:4d:b7:81:e8:0d: 4d:5d:61:77:f3:68:a1:cc:f8:34:ad:fa:b7:6f:ee: 1c:7b:9a:b8:3d:cb:61:48:dc:fe:78:c5:be:64:52: f0:63:23:6b:8f:6c:ec:35:20:f8:03:13:84:c7:00: ca:bc:a5:40:af:38:c6:ab:26:44:28:1d:11:4a:24: a1:22:64:1e:9e:81:a2:d9:59:bc:7d:8b:7e:fe:ce: 9d:bd:02:34:9c:14:cf:95:4d:a1:72:44:4b:5a:0f: 96:34:63:4d:df:87:e2:c9:9d:19:1c:eb:ff:57:d4: 3c:3d:7a:01:e3:59:b2:b2:81:25:62:a6:30:10:42: a0:92:d9:4f:d8:00:0e:92:ae:fd:f4:68:cf:d7:b1: 8a:ad:8a:3e:d4:92:32:25:bf:a7:24:2b:48:8b:23: 93:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:74:79:83:34:7F:A1:9E:7E:B9:6A:42:75:0F:09:EC:84:49:B8:4B X509v3 Authority Key Identifier: keyid:6D:A1:37:02:9C:1E:1A:06:AE:0F:A8:F7:5B:B8:8F:2C:A5:78:F8:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C46FC/0E8505F0620511EABAFFE16BC4F9AE02/baE3ApweGgauD6j3W7iPLKV4-Fo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/baE3ApweGgauD6j3W7iPLKV4-Fo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C46FC/0E8505F0620511EABAFFE16BC4F9AE02/baE3ApweGgauD6j3W7iPLKV4-Fo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:84:d8:24:91:bb:07:11:f4:a5:17:ac:7b:00:c2:10:1d:bf: 15:1b:32:ad:27:e9:87:90:6e:8d:24:85:cd:9c:9e:e2:36:16: b0:e7:4f:cc:6f:6c:7e:5a:21:e4:79:6b:e4:8e:a0:ab:1b:66: e4:f4:27:75:c0:a4:36:95:6d:44:25:b9:97:f7:8e:e1:36:58: e2:4f:ed:54:d5:03:58:42:6d:73:1d:4c:be:2b:0c:fd:6f:c3: 26:46:4e:26:43:f8:29:e9:9f:67:1e:b8:a8:82:df:35:84:32: e7:10:de:ef:7a:cb:21:2d:2d:64:8e:f3:62:0f:6a:8a:e5:23: 1e:35:ba:f2:65:cc:a7:d1:39:de:38:d5:a5:7f:30:30:e8:47: 0f:7e:2b:e4:51:f1:13:50:d4:f5:7d:ac:1d:55:5f:cd:f4:65: 4d:85:2b:aa:f0:63:ce:4c:92:c7:82:e7:09:23:ec:18:88:a7: 8b:ee:cd:1b:55:ad:29:dc:02:05:a6:c7:4d:56:8a:5e:ff:13: 6d:f7:db:20:96:12:c4:4b:a2:da:04:5e:ab:4f:cb:6a:bd:29: c6:af:b5:52:9c:f6:2f:d7:e5:b0:75:64:89:ad:d0:2e:ba:8d: a2:4a:4c:2d:c3:15:b7:25:e6:df:97:88:f5:9b:ee:56:aa:3f: 73:e0:b2:76 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCn8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzQ2RkMxMTAvBgNVBAUTKDZEQTEzNzAyOUMxRTFBMDZBRTBGQThGNzVCQjg4RjJD QTU3OEY4NUEwHhcNMjUwNTMwMTk0OTQ3WhcNMjUwNjA2MTk0OTQ3WjAYMRYwFAYD VQQDEw02ODNhMGJkYy0xMGQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2MrUjjGtV6giU6y52nFYjFyyTthSg6LUFDSFd0i2+KDsNh4yRKTJGtd6ANt6 kD9vn93o/xk5HUS9GDjryhiC6GzhU745+rd5Rr0Ez4BgUpLdiAkWe1hgs+Fnq77O D/0ZKt9dTbeB6A1NXWF382ihzPg0rfq3b+4ce5q4PcthSNz+eMW+ZFLwYyNrj2zs NSD4AxOExwDKvKVArzjGqyZEKB0RSiShImQenoGi2Vm8fYt+/s6dvQI0nBTPlU2h ckRLWg+WNGNN34fiyZ0ZHOv/V9Q8PXoB41mysoElYqYwEEKgktlP2AAOkq799GjP 17GKrYo+1JIyJb+nJCtIiyOT8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKN0eYM0 f6GefrlqQnUPCeyESbhLMB8GA1UdIwQYMBaAFG2hNwKcHhoGrg+o91u4jyylePha MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNDZGQy8wRTg1MDVGMDYy MDUxMUVBQkFGRkUxNkJDNEY5QUUwMi9iYUUzQXB3ZUdnYXVENmozVzdpUExLVjQt Rm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JhRTNBcHdlR2dhdUQ2ajNXN2lQTEtWNC1Gby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NDZGQy8wRTg1MDVGMDYyMDUxMUVBQkFGRkUxNkJDNEY5QUUwMi9iYUUzQXB3ZUdn YXVENmozVzdpUExLVjQtRm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAWhNgkkbsHEfSlF6x7AMIQHb8VGzKtJ+mHkG6NJIXNnJ7iNhaw50/M b2x+WiHkeWvkjqCrG2bk9Cd1wKQ2lW1EJbmX947hNljiT+1U1QNYQm1zHUy+Kwz9 b8MmRk4mQ/gp6Z9nHriogt81hDLnEN7vesshLS1kjvNiD2qK5SMeNbryZcyn0Tne ONWlfzAw6EcPfivkUfETUNT1fawdVV/N9GVNhSuq8GPOTJLHgucJI+wYiKeL7s0b Va0p3AIFpsdNVope/xNt99sglhLES6LaBF6rT8tqvSnGr7VSnPYv1+WwdWSJrdAu uo2iSkwtwxW3Jebfl4j1m+5Wqj9z4LJ2 -----END CERTIFICATE-----Generated at Sat May 31 15:36:55 2025 by rpki-client