$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7175/E9A092B868FD11EFA9500187C4F9AE02/cleSPWdwxWeJGbB8vPqK-LnFBT8.mft File: cleSPWdwxWeJGbB8vPqK-LnFBT8.mft (raw, json) Hash identifier: DKWHqBRoruTXM96hMCIiqhmpJaUR/3eCRjAiWFK7Dbk= Subject key identifier: 0C:57:8B:C4:D0:C5:0E:D3:AA:27:C9:74:62:4B:18:9A:11:B3:53:1D Authority key identifier: 72:57:92:3D:67:70:C5:67:89:19:B0:7C:BC:FA:8A:F8:B9:C5:05:3F Certificate issuer: /CN=A91C7175/serialNumber=7257923D6770C5678919B07CBCFA8AF8B9C5053F Certificate serial: 8E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cleSPWdwxWeJGbB8vPqK-LnFBT8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7175/E9A092B868FD11EFA9500187C4F9AE02/cleSPWdwxWeJGbB8vPqK-LnFBT8.mft Manifest number: 8D Signing time: Tue 03 Jun 2025 06:15:54 +0000 Manifest this update: Tue 03 Jun 2025 06:15:54 +0000 Manifest next update: Tue 10 Jun 2025 06:15:54 +0000 Files and hashes: 1: cleSPWdwxWeJGbB8vPqK-LnFBT8.crl (hash: 9V4O1rPYaolv+XS0JzSicbEaMip/KpngIpoSJFQBB1w=) 2: 65783A3A68FE11EFB904E587C4F9AE02.roa (hash: W9AbIPs04msR2L8j2qpbp6FWBUlEN2nJFHSFxYkcZYc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7175/E9A092B868FD11EFA9500187C4F9AE02/cleSPWdwxWeJGbB8vPqK-LnFBT8.crl rsync://rpki.apnic.net/member_repository/A91C7175/E9A092B868FD11EFA9500187C4F9AE02/cleSPWdwxWeJGbB8vPqK-LnFBT8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cleSPWdwxWeJGbB8vPqK-LnFBT8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 06:15:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 142 (0x8e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7175, serialNumber=7257923D6770C5678919B07CBCFA8AF8B9C5053F Validity Not Before: Jun 3 06:15:54 2025 GMT Not After : Jun 10 06:15:54 2025 GMT Subject: CN=683e931a-a7d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:f8:09:ed:c0:a6:1c:1e:39:3f:6b:0f:1a:8d: 01:03:61:cb:43:27:71:7b:83:d0:f1:69:c6:c1:6e: 3d:e1:fc:32:c5:eb:69:5f:b6:41:70:e8:aa:07:0f: 69:ed:54:12:30:3e:fa:78:0e:4c:de:a2:0e:77:c7: 02:83:e3:d8:45:f5:e0:9c:92:9f:b1:48:15:e6:d2: 4a:5f:11:b8:9c:04:ff:66:b3:ba:13:df:c1:3f:f3: 25:e1:ee:c5:35:fa:d7:cd:7b:e5:f3:96:e4:cf:7e: be:19:29:51:cd:95:5e:31:0b:9c:55:24:03:01:d0: 22:ab:70:3b:5f:61:b0:fc:27:78:74:d5:b6:c5:5f: b5:d3:f9:b8:c3:8e:ca:64:83:ba:bc:f9:8f:58:a1: 79:94:0b:18:66:61:8c:1f:3f:9d:da:4a:f5:e9:b5: 61:68:dd:f2:8c:b4:d4:d9:3f:43:ca:6c:d8:82:fb: 7a:b5:58:d2:46:88:84:49:01:6b:f2:e2:6a:3a:83: 1b:c5:bd:dc:1b:fd:f0:25:fb:69:a1:85:84:97:d4: 07:3d:d5:08:83:89:60:58:62:23:63:9b:81:e0:74: 25:59:fc:a9:32:5e:24:08:da:8e:c3:9d:91:2c:ee: de:77:36:b0:6f:bd:62:1f:1e:e0:db:c3:e2:58:0a: c0:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:57:8B:C4:D0:C5:0E:D3:AA:27:C9:74:62:4B:18:9A:11:B3:53:1D X509v3 Authority Key Identifier: keyid:72:57:92:3D:67:70:C5:67:89:19:B0:7C:BC:FA:8A:F8:B9:C5:05:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7175/E9A092B868FD11EFA9500187C4F9AE02/cleSPWdwxWeJGbB8vPqK-LnFBT8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cleSPWdwxWeJGbB8vPqK-LnFBT8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7175/E9A092B868FD11EFA9500187C4F9AE02/cleSPWdwxWeJGbB8vPqK-LnFBT8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:8b:13:30:55:ba:5b:c0:fa:3f:0a:f4:ba:7a:f8:33:a3:9b: 51:9c:c7:51:16:d6:6a:0b:19:5a:b5:7a:be:91:f0:d1:39:b0: ae:6c:e0:08:34:62:c5:f0:70:f1:65:86:da:d3:c1:5e:50:8a: e5:9c:d2:1b:9b:37:27:d3:f1:99:32:1e:ea:3a:63:69:ee:32: 1a:80:c4:e7:bc:2e:ce:8b:88:8a:69:ea:e5:5b:e0:8a:e5:c5: ee:cd:88:1e:cf:e7:6a:86:c0:14:6e:50:65:d4:5c:16:52:e5: a8:c8:04:ff:89:00:c0:37:f5:7b:6b:83:44:4a:b5:cf:5e:9a: 90:30:92:93:b8:e5:b3:1c:d3:9f:94:db:ce:7a:e0:90:2c:ad: ae:12:06:a0:cc:e6:18:c6:a2:6e:97:bc:8d:f2:87:06:8e:33: cd:2a:ee:b5:ce:ce:f5:ab:c1:4e:70:a4:92:9d:a6:42:73:d4: 7e:df:44:e2:80:e7:bc:c4:ba:81:99:c2:5c:d6:d2:d6:9c:85: 38:b3:54:bb:48:af:d5:15:d2:d1:cd:1f:8e:e4:29:f2:ca:5d: 92:02:82:f4:d9:98:a2:92:30:7f:f6:6a:a5:3f:9b:79:91:61: d5:0e:36:10:44:a8:36:0b:4c:7a:ca:d0:cc:2b:39:8f:3e:fc: 6f:48:29:91 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAI4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzcxNzUxMTAvBgNVBAUTKDcyNTc5MjNENjc3MEM1Njc4OTE5QjA3Q0JDRkE4QUY4 QjlDNTA1M0YwHhcNMjUwNjAzMDYxNTU0WhcNMjUwNjEwMDYxNTU0WjAYMRYwFAYD VQQDEw02ODNlOTMxYS1hN2Q2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2fgJ7cCmHB45P2sPGo0BA2HLQydxe4PQ8WnGwW494fwyxetpX7ZBcOiqBw9p 7VQSMD76eA5M3qIOd8cCg+PYRfXgnJKfsUgV5tJKXxG4nAT/ZrO6E9/BP/Ml4e7F NfrXzXvl85bkz36+GSlRzZVeMQucVSQDAdAiq3A7X2Gw/Cd4dNW2xV+10/m4w47K ZIO6vPmPWKF5lAsYZmGMHz+d2kr16bVhaN3yjLTU2T9DymzYgvt6tVjSRoiESQFr 8uJqOoMbxb3cG/3wJftpoYWEl9QHPdUIg4lgWGIjY5uB4HQlWfypMl4kCNqOw52R LO7edzawb71iHx7g28PiWArALwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAxXi8TQ xQ7TqifJdGJLGJoRs1MdMB8GA1UdIwQYMBaAFHJXkj1ncMVniRmwfLz6ivi5xQU/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzE3NS9FOUEwOTJCODY4 RkQxMUVGQTk1MDAxODdDNEY5QUUwMi9jbGVTUFdkd3hXZUpHYkI4dlBxSy1MbkZC VDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2NsZVNQV2R3eFdlSkdiQjh2UHFLLUxuRkJUOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NzE3NS9FOUEwOTJCODY4RkQxMUVGQTk1MDAxODdDNEY5QUUwMi9jbGVTUFdkd3hX ZUpHYkI4dlBxSy1MbkZCVDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBzixMwVbpbwPo/CvS6evgzo5tRnMdRFtZqCxlatXq+kfDRObCubOAI NGLF8HDxZYba08FeUIrlnNIbmzcn0/GZMh7qOmNp7jIagMTnvC7Oi4iKaerlW+CK 5cXuzYgez+dqhsAUblBl1FwWUuWoyAT/iQDAN/V7a4NESrXPXpqQMJKTuOWzHNOf lNvOeuCQLK2uEgagzOYYxqJul7yN8ocGjjPNKu61zs71q8FOcKSSnaZCc9R+30Ti gOe8xLqBmcJc1tLWnIU4s1S7SK/VFdLRzR+O5Cnyyl2SAoL02ZiikjB/9mqlP5t5 kWHVDjYQRKg2C0x6ytDMKzmPPvxvSCmR -----END CERTIFICATE-----Generated at Tue Jun 3 23:47:03 2025 by rpki-client