$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6833/F3D480EC83B311E69DD86730C4F9AE02/RcgIqKzeJKyWE-AaSVlhAO1ejPE.mft File: RcgIqKzeJKyWE-AaSVlhAO1ejPE.mft (raw, json) Hash identifier: MEsMvW5IyQAMs7Ter8tvXUlYs3Ontivx+fe8Ln6RSRU= Subject key identifier: 47:3B:28:49:BE:AC:4F:16:A5:97:F9:71:FD:AC:47:CC:92:8D:0C:AC Authority key identifier: 45:C8:08:A8:AC:DE:24:AC:96:13:E0:1A:49:59:61:00:ED:5E:8C:F1 Certificate issuer: /CN=A91C6833/serialNumber=45C808A8ACDE24AC9613E01A49596100ED5E8CF1 Certificate serial: 1E52 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RcgIqKzeJKyWE-AaSVlhAO1ejPE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6833/F3D480EC83B311E69DD86730C4F9AE02/RcgIqKzeJKyWE-AaSVlhAO1ejPE.mft Manifest number: 1E3D Signing time: Sat 31 May 2025 16:02:51 +0000 Manifest this update: Sat 31 May 2025 16:02:51 +0000 Manifest next update: Sat 07 Jun 2025 16:02:51 +0000 Files and hashes: 1: RcgIqKzeJKyWE-AaSVlhAO1ejPE.crl (hash: gIikid4aRwHEDACnQXOZOBGcZmskt782d0Y5BHe5xic=) 2: 3F1BB7A09BC011EF995CBB11C4F9AE02.roa (hash: ppVaHDx1dLxEzXzKs4B/Bei6naIiQDjP+g7Sivk4L7g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6833/F3D480EC83B311E69DD86730C4F9AE02/RcgIqKzeJKyWE-AaSVlhAO1ejPE.crl rsync://rpki.apnic.net/member_repository/A91C6833/F3D480EC83B311E69DD86730C4F9AE02/RcgIqKzeJKyWE-AaSVlhAO1ejPE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RcgIqKzeJKyWE-AaSVlhAO1ejPE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 16:02:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7762 (0x1e52) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6833, serialNumber=45C808A8ACDE24AC9613E01A49596100ED5E8CF1 Validity Not Before: May 31 16:02:51 2025 GMT Not After : Jun 7 16:02:51 2025 GMT Subject: CN=683b282b-d1aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:0c:36:c6:dd:d2:38:e0:92:dc:28:e6:2b:cc: 7e:ad:96:48:29:ec:e5:a7:65:1c:3c:4d:4e:91:b2: eb:4b:e1:0b:1c:3a:13:22:e5:47:36:89:15:d9:9d: d3:09:96:2b:f4:4b:7b:2d:6b:18:29:38:44:94:6b: 38:5a:5f:bb:e2:b0:6f:2a:91:ce:95:46:fa:50:1e: 9f:28:5d:ef:11:c3:df:73:94:db:c8:64:3d:c8:f8: 5c:e8:e9:c7:c7:8a:da:4d:39:19:39:fc:2d:0b:d5: 54:a9:7b:38:2c:62:cd:af:c1:23:86:93:e9:ed:4f: ca:70:01:59:14:f5:7d:1a:43:4a:c5:08:ca:45:b9: 20:f7:33:0e:92:d7:9f:58:63:54:86:90:92:dd:cd: 43:6c:bb:03:8d:9a:f3:af:7f:2f:64:8e:19:ff:df: 07:e7:e2:7c:c6:36:0f:87:0f:86:d9:c2:24:5c:46: 97:e8:6e:37:80:13:e0:31:de:06:77:69:14:87:8a: be:bb:79:02:6a:be:b5:db:6e:22:f4:36:52:56:60: 93:d0:c0:78:61:26:12:08:11:dc:a7:27:1d:f5:93: 53:eb:fa:ed:ef:c7:d7:da:d5:2a:1d:d7:d1:74:b0: cf:aa:ee:c1:82:e3:5a:1c:37:17:74:6b:5a:ea:f7: 03:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:3B:28:49:BE:AC:4F:16:A5:97:F9:71:FD:AC:47:CC:92:8D:0C:AC X509v3 Authority Key Identifier: keyid:45:C8:08:A8:AC:DE:24:AC:96:13:E0:1A:49:59:61:00:ED:5E:8C:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6833/F3D480EC83B311E69DD86730C4F9AE02/RcgIqKzeJKyWE-AaSVlhAO1ejPE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RcgIqKzeJKyWE-AaSVlhAO1ejPE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6833/F3D480EC83B311E69DD86730C4F9AE02/RcgIqKzeJKyWE-AaSVlhAO1ejPE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bc:1f:31:36:69:fa:b3:e6:cf:c3:7d:a0:50:2f:49:d3:39:3d: 21:4b:52:45:70:13:c2:8b:cf:32:52:40:21:d5:38:64:eb:64: 1a:af:59:76:61:1f:07:a4:3f:70:82:db:85:97:d1:5a:0d:ea: 52:dc:4d:52:ff:bf:6b:01:6e:a4:52:32:2c:03:d3:22:2b:7c: 1f:1e:eb:81:99:25:e5:5b:78:67:ec:4b:31:15:78:40:34:38: a9:f3:9a:b0:ca:c3:8c:eb:14:b1:0e:82:f5:46:dc:7a:97:55: f2:3a:ec:a8:6f:26:23:3f:8b:70:ca:8f:d9:8b:4f:a8:76:9a: 78:30:be:aa:8e:09:6f:e6:77:e8:47:c0:e2:9c:d0:72:ca:e5: a4:31:39:40:01:1a:ec:90:35:8c:dd:cd:09:d1:20:0e:85:14: a5:11:39:fe:94:10:e3:2a:2b:f6:f4:6e:85:65:34:a9:d7:53: 3d:7a:c3:3b:6b:c4:b6:4d:85:6b:d1:f3:2a:c9:ec:73:ad:e9: 11:8d:82:7c:6a:62:64:b2:18:40:f8:ba:40:8d:23:22:13:2d: d1:57:83:47:47:ad:8d:bb:18:96:b1:ac:dc:79:0c:85:40:c8: 93:04:22:6b:b3:e4:7e:07:19:f2:6c:a4:24:df:17:29:79:15: ad:8a:da:63 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHlIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzY4MzMxMTAvBgNVBAUTKDQ1QzgwOEE4QUNERTI0QUM5NjEzRTAxQTQ5NTk2MTAw RUQ1RThDRjEwHhcNMjUwNTMxMTYwMjUxWhcNMjUwNjA3MTYwMjUxWjAYMRYwFAYD VQQDEw02ODNiMjgyYi1kMWFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxAw2xt3SOOCS3CjmK8x+rZZIKezlp2UcPE1OkbLrS+ELHDoTIuVHNokV2Z3T CZYr9Et7LWsYKThElGs4Wl+74rBvKpHOlUb6UB6fKF3vEcPfc5TbyGQ9yPhc6OnH x4raTTkZOfwtC9VUqXs4LGLNr8EjhpPp7U/KcAFZFPV9GkNKxQjKRbkg9zMOktef WGNUhpCS3c1DbLsDjZrzr38vZI4Z/98H5+J8xjYPhw+G2cIkXEaX6G43gBPgMd4G d2kUh4q+u3kCar61224i9DZSVmCT0MB4YSYSCBHcpycd9ZNT6/rt78fX2tUqHdfR dLDPqu7BguNaHDcXdGta6vcDvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEc7KEm+ rE8WpZf5cf2sR8ySjQysMB8GA1UdIwQYMBaAFEXICKis3iSslhPgGklZYQDtXozx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjgzMy9GM0Q0ODBFQzgz QjMxMUU2OUREODY3MzBDNEY5QUUwMi9SY2dJcUt6ZUpLeVdFLUFhU1ZsaEFPMWVq UEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JjZ0lxS3plSkt5V0UtQWFTVmxoQU8xZWpQRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NjgzMy9GM0Q0ODBFQzgzQjMxMUU2OUREODY3MzBDNEY5QUUwMi9SY2dJcUt6ZUpL eVdFLUFhU1ZsaEFPMWVqUEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC8HzE2afqz5s/DfaBQL0nTOT0hS1JFcBPCi88yUkAh1Thk62Qar1l2 YR8HpD9wgtuFl9FaDepS3E1S/79rAW6kUjIsA9MiK3wfHuuBmSXlW3hn7EsxFXhA NDip85qwysOM6xSxDoL1Rtx6l1XyOuyobyYjP4twyo/Zi0+odpp4ML6qjglv5nfo R8DinNByyuWkMTlAARrskDWM3c0J0SAOhRSlETn+lBDjKiv29G6FZTSp11M9esM7 a8S2TYVr0fMqyexzrekRjYJ8amJkshhA+LpAjSMiEy3RV4NHR62NuxiWsazceQyF QMiTBCJrs+R+BxnybKQk3xcpeRWtitpj -----END CERTIFICATE-----Generated at Sat May 31 17:42:40 2025 by rpki-client