$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4EE6/9570B2E6DCD911E48D789A54C4F9AE02/k1dEQbQWn1y-Mxwu7Vbog9zvRSM.mft File: k1dEQbQWn1y-Mxwu7Vbog9zvRSM.mft (raw, json) Hash identifier: 7MQ81AZnlNouamUcL2n77QhVQ1oTeouyvzWumMujTN0= Subject key identifier: 3B:AB:E3:CB:2F:3E:C4:50:60:F1:C7:E1:31:99:F1:96:E6:69:E8:C2 Authority key identifier: 93:57:44:41:B4:16:9F:5C:BE:33:1C:2E:ED:56:E8:83:DC:EF:45:23 Certificate issuer: /CN=A91C4EE6/serialNumber=93574441B4169F5CBE331C2EED56E883DCEF4523 Certificate serial: 268B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k1dEQbQWn1y-Mxwu7Vbog9zvRSM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C4EE6/9570B2E6DCD911E48D789A54C4F9AE02/k1dEQbQWn1y-Mxwu7Vbog9zvRSM.mft Manifest number: 2689 Signing time: Sat 31 May 2025 15:39:06 +0000 Manifest this update: Sat 31 May 2025 15:39:06 +0000 Manifest next update: Sat 07 Jun 2025 15:39:06 +0000 Files and hashes: 1: k1dEQbQWn1y-Mxwu7Vbog9zvRSM.crl (hash: DGikMDZQ9ib5DJ3C6ZUnpTv0p7LvmJAepD9s0d1ClPo=) 2: 2E078068008111F0AB00F337C4F9AE02.roa (hash: VJHoTPQ0jea+ijUJEtlYJDCyIW2/0tYaKWZJwfLhYW0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C4EE6/9570B2E6DCD911E48D789A54C4F9AE02/k1dEQbQWn1y-Mxwu7Vbog9zvRSM.crl rsync://rpki.apnic.net/member_repository/A91C4EE6/9570B2E6DCD911E48D789A54C4F9AE02/k1dEQbQWn1y-Mxwu7Vbog9zvRSM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k1dEQbQWn1y-Mxwu7Vbog9zvRSM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 15:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9867 (0x268b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C4EE6, serialNumber=93574441B4169F5CBE331C2EED56E883DCEF4523 Validity Not Before: May 31 15:39:06 2025 GMT Not After : Jun 7 15:39:06 2025 GMT Subject: CN=683b229a-04e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:bd:ae:e8:58:eb:57:da:38:09:85:f5:31:4e: dc:c1:53:0e:f6:69:1e:03:a7:43:21:5a:ff:40:06: 57:ff:cf:db:14:25:cf:ea:3b:8e:2d:46:93:e3:d6: 1e:5d:b8:e9:a0:41:6a:2e:3a:91:86:13:aa:cd:3f: 37:e0:21:d1:08:97:1f:fe:6a:86:bb:1c:2e:d4:6b: 8a:dc:58:9d:90:c3:6d:84:30:6c:e1:14:d1:73:52: 68:9e:d2:a7:a3:da:e4:af:10:bd:8d:13:96:15:7e: 0a:15:11:0e:d7:5a:25:51:b5:43:77:89:d7:88:24: 68:c2:dc:f0:fe:3c:32:cf:1d:5d:cd:cd:96:70:09: 4d:79:74:e1:ec:7d:c8:a8:be:32:d2:af:08:5c:36: 67:dc:ba:6b:75:df:4c:5c:ed:53:b3:78:e3:14:0c: a6:93:5a:3e:85:49:5c:a3:ae:67:06:d2:61:59:88: e9:55:2f:ef:e0:dd:da:fb:92:30:ea:cb:bc:b8:ef: 99:00:9e:7f:4c:9e:bb:68:2b:76:b5:cc:b1:34:40: 0e:64:17:02:0c:95:1f:f4:ae:15:49:df:59:03:9d: ad:2a:0e:73:5c:f9:a1:50:2c:a4:74:b8:0c:f5:2f: ef:18:9a:78:3e:97:f2:c9:a2:42:fd:29:fd:12:88: 65:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:AB:E3:CB:2F:3E:C4:50:60:F1:C7:E1:31:99:F1:96:E6:69:E8:C2 X509v3 Authority Key Identifier: keyid:93:57:44:41:B4:16:9F:5C:BE:33:1C:2E:ED:56:E8:83:DC:EF:45:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C4EE6/9570B2E6DCD911E48D789A54C4F9AE02/k1dEQbQWn1y-Mxwu7Vbog9zvRSM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k1dEQbQWn1y-Mxwu7Vbog9zvRSM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4EE6/9570B2E6DCD911E48D789A54C4F9AE02/k1dEQbQWn1y-Mxwu7Vbog9zvRSM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:51:fb:b2:1a:3e:1e:31:05:7e:97:0c:05:28:aa:97:c7:6c: b4:2e:ff:5c:e5:5e:ce:f3:a5:d5:54:49:c2:c3:2d:e7:6c:9d: f0:be:7f:c3:37:67:b7:22:4f:0f:f2:d2:b4:96:87:f4:6f:33: 4c:55:50:c4:b3:41:69:77:53:8e:87:16:d3:46:c9:db:66:cc: 34:f5:b2:4e:e1:22:41:bf:72:f7:1d:d4:16:16:ae:f9:79:8d: 5e:dd:c8:48:85:82:cc:52:9f:40:b4:56:f7:50:9f:83:29:ec: 39:bb:70:b0:f6:6d:f8:07:99:ef:f5:8c:4a:4f:bc:f4:cc:94: e3:49:01:95:91:bd:76:c6:f4:07:1c:5f:c5:09:55:52:a4:40: 02:d2:65:40:3f:f7:31:4b:11:aa:d8:5a:e8:01:16:11:46:2e: 69:dd:37:7d:29:9b:75:bb:9c:45:ce:5d:9a:cb:b0:78:1a:df: ac:77:94:c3:26:b4:05:de:38:16:e8:74:81:fd:fd:36:1f:99: da:f0:5b:82:51:71:e7:e0:4b:da:cd:38:a6:61:dc:59:69:94: 88:72:a1:bd:de:88:73:1f:29:3b:17:14:a3:19:ad:c4:07:a2: e4:4b:de:a4:e9:96:76:6c:f7:a8:ef:42:1b:3f:5e:ad:b2:73: d5:2e:e7:e9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJoswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzRFRTYxMTAvBgNVBAUTKDkzNTc0NDQxQjQxNjlGNUNCRTMzMUMyRUVENTZFODgz RENFRjQ1MjMwHhcNMjUwNTMxMTUzOTA2WhcNMjUwNjA3MTUzOTA2WjAYMRYwFAYD VQQDEw02ODNiMjI5YS0wNGUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAor2u6FjrV9o4CYX1MU7cwVMO9mkeA6dDIVr/QAZX/8/bFCXP6juOLUaT49Ye XbjpoEFqLjqRhhOqzT834CHRCJcf/mqGuxwu1GuK3FidkMNthDBs4RTRc1JontKn o9rkrxC9jROWFX4KFREO11olUbVDd4nXiCRowtzw/jwyzx1dzc2WcAlNeXTh7H3I qL4y0q8IXDZn3Lprdd9MXO1Ts3jjFAymk1o+hUlco65nBtJhWYjpVS/v4N3a+5Iw 6su8uO+ZAJ5/TJ67aCt2tcyxNEAOZBcCDJUf9K4VSd9ZA52tKg5zXPmhUCykdLgM 9S/vGJp4PpfyyaJC/Sn9EohlNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDur48sv PsRQYPHH4TGZ8ZbmaejCMB8GA1UdIwQYMBaAFJNXREG0Fp9cvjMcLu1W6IPc70Uj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNEVFNi85NTcwQjJFNkRD RDkxMUU0OEQ3ODlBNTRDNEY5QUUwMi9rMWRFUWJRV24xeS1NeHd1N1Zib2c5enZS U00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2sxZEVRYlFXbjF5LU14d3U3VmJvZzl6dlJTTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NEVFNi85NTcwQjJFNkRDRDkxMUU0OEQ3ODlBNTRDNEY5QUUwMi9rMWRFUWJRV24x eS1NeHd1N1Zib2c5enZSU00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB6UfuyGj4eMQV+lwwFKKqXx2y0Lv9c5V7O86XVVEnCwy3nbJ3wvn/D N2e3Ik8P8tK0lof0bzNMVVDEs0Fpd1OOhxbTRsnbZsw09bJO4SJBv3L3HdQWFq75 eY1e3chIhYLMUp9AtFb3UJ+DKew5u3Cw9m34B5nv9YxKT7z0zJTjSQGVkb12xvQH HF/FCVVSpEAC0mVAP/cxSxGq2FroARYRRi5p3Td9KZt1u5xFzl2ay7B4Gt+sd5TD JrQF3jgW6HSB/f02H5na8FuCUXHn4EvazTimYdxZaZSIcqG93ohzHyk7FxSjGa3E B6LkS96k6ZZ2bPeo70IbP16tsnPVLufp -----END CERTIFICATE-----Generated at Sat May 31 17:37:49 2025 by rpki-client