$ rpki-client -vvf rpki.apnic.net/member_repository/A91C72E6/E6E6FB32F2EA11ED9099004AC4F9AE02/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.mft File: dSUzsYUvfSrG5w3N6_1UfdxDj5Q.mft (raw, json) Hash identifier: idH7jKlvFSz8HhNfiQCsrYmZu2qOOvUazPfvwlaLxjk= Subject key identifier: 6D:1B:11:19:19:BC:21:3A:06:B1:03:DB:78:3C:FF:6C:C3:17:8C:91 Authority key identifier: 75:25:33:B1:85:2F:7D:2A:C6:E7:0D:CD:EB:FD:54:7D:DC:43:8F:94 Certificate issuer: /CN=A91C72E6/serialNumber=752533B1852F7D2AC6E70DCDEBFD547DDC438F94 Certificate serial: 0181 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C72E6/E6E6FB32F2EA11ED9099004AC4F9AE02/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.mft Manifest number: 017D Signing time: Sat 31 May 2025 03:20:57 +0000 Manifest this update: Sat 31 May 2025 03:20:57 +0000 Manifest next update: Sat 07 Jun 2025 03:20:57 +0000 Files and hashes: 1: dSUzsYUvfSrG5w3N6_1UfdxDj5Q.crl (hash: sBHFsdt6pNwrZTUHQgNuwatzgzDElmOLsO7AvkNSfiA=) 2: 2340D07AF2F111ED91F08A4FC4F9AE02.roa (hash: RN4BzBKzm6DEJmTceToRMZocfmFw/tmq9npppNN/f6I=) 3: 23EE2B76F2F111ED91F08A4FC4F9AE02.roa (hash: R4MOqPNazPvSSKVGkQoTvV/niZowhUllvkAn/iWShNw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C72E6/E6E6FB32F2EA11ED9099004AC4F9AE02/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.crl rsync://rpki.apnic.net/member_repository/A91C72E6/E6E6FB32F2EA11ED9099004AC4F9AE02/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 03:20:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 385 (0x181) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C72E6, serialNumber=752533B1852F7D2AC6E70DCDEBFD547DDC438F94 Validity Not Before: May 31 03:20:57 2025 GMT Not After : Jun 7 03:20:57 2025 GMT Subject: CN=683a7599-a659 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:e6:33:a5:e7:fa:97:82:c8:0a:fd:8b:06:8e: bc:e0:ac:e5:d8:5a:72:b3:55:94:e8:62:29:b4:2f: 68:15:c2:ad:7f:21:d9:d3:0a:88:50:46:96:c1:2b: db:eb:69:57:f4:89:fc:f6:eb:42:0a:43:7a:6a:ff: 5f:27:ca:dc:80:bd:62:63:63:4c:ce:e1:d0:d5:39: dc:3b:98:b3:7a:87:c3:8b:41:4a:17:e5:32:ff:c2: 12:45:01:1f:a4:36:79:04:df:43:30:7b:fa:42:7e: 64:e1:c0:b0:ea:e8:06:14:f7:4a:4a:be:3c:7e:48: 67:12:d2:04:39:c3:bd:42:2f:a0:32:9a:32:ee:fe: 72:0d:3c:6d:29:19:fa:6e:c8:c0:5f:d5:1f:97:c7: 7c:d0:c3:8b:04:52:d3:ab:7e:09:6c:93:52:05:a8: d8:d0:79:c0:e2:ff:44:31:5c:7a:d4:c7:ed:7b:5e: 9f:59:ff:7b:f7:c4:1e:ad:ba:58:31:79:f1:92:c9: 44:2e:16:85:d8:f3:b7:07:74:34:69:28:52:82:df: 13:b5:50:2c:07:9d:5c:7f:5d:aa:5d:27:ff:9e:6a: 9a:64:89:e9:85:a7:71:f3:3d:77:eb:35:ac:68:6a: 28:98:d2:34:32:d2:0a:80:f0:e3:c6:b4:20:be:a2: 79:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:1B:11:19:19:BC:21:3A:06:B1:03:DB:78:3C:FF:6C:C3:17:8C:91 X509v3 Authority Key Identifier: keyid:75:25:33:B1:85:2F:7D:2A:C6:E7:0D:CD:EB:FD:54:7D:DC:43:8F:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C72E6/E6E6FB32F2EA11ED9099004AC4F9AE02/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C72E6/E6E6FB32F2EA11ED9099004AC4F9AE02/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:89:9c:30:7e:ed:64:36:fb:12:38:8c:14:5d:92:bd:6c:64: c4:03:16:8a:cf:4c:6b:3a:57:7c:6a:17:4a:fa:5e:f6:33:12: ef:a2:23:73:a2:87:7f:fd:93:cf:5b:a4:33:27:0e:85:25:40: b0:c0:03:51:d2:d2:50:28:e6:47:7a:13:6b:81:0a:ad:71:0c: 81:bd:1c:ba:ad:47:a9:7f:6e:b6:f8:64:d6:db:c9:f6:4e:65: b5:33:ed:56:f3:e2:ec:eb:3e:03:af:d3:e3:b9:aa:d4:d4:5f: fe:be:b9:4a:ca:74:3e:b2:ab:07:60:8c:c4:4e:56:e3:5e:06: 68:93:a9:40:ee:2c:f7:16:75:0c:ed:3f:c7:eb:49:ae:98:71: 0c:84:1a:f3:08:eb:3d:aa:9c:4f:da:7b:27:86:a0:2e:a7:3e: 07:65:95:ea:ed:4a:88:c2:45:fa:8f:c0:37:3b:77:ff:99:9d: bc:f1:2e:76:29:60:57:f1:6b:82:01:5b:07:2b:87:e6:94:c5: d6:76:d2:14:87:57:f0:14:9e:b1:3e:a8:f5:9a:18:10:4e:e2: 29:9b:b0:3d:cc:01:7e:71:b0:27:9b:fe:ca:7b:2d:d2:b5:84: 17:57:64:28:74:07:65:ef:54:87:b5:5c:36:17:bf:a3:bd:e4: f0:19:02:61 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzcyRTYxMTAvBgNVBAUTKDc1MjUzM0IxODUyRjdEMkFDNkU3MERDREVCRkQ1NDdE REM0MzhGOTQwHhcNMjUwNTMxMDMyMDU3WhcNMjUwNjA3MDMyMDU3WjAYMRYwFAYD VQQDEw02ODNhNzU5OS1hNjU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1OYzpef6l4LICv2LBo684Kzl2Fpys1WU6GIptC9oFcKtfyHZ0wqIUEaWwSvb 62lX9In89utCCkN6av9fJ8rcgL1iY2NMzuHQ1TncO5izeofDi0FKF+Uy/8ISRQEf pDZ5BN9DMHv6Qn5k4cCw6ugGFPdKSr48fkhnEtIEOcO9Qi+gMpoy7v5yDTxtKRn6 bsjAX9Ufl8d80MOLBFLTq34JbJNSBajY0HnA4v9EMVx61Mfte16fWf9798QerbpY MXnxkslELhaF2PO3B3Q0aShSgt8TtVAsB51cf12qXSf/nmqaZInphadx8z136zWs aGoomNI0MtIKgPDjxrQgvqJ58wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG0bERkZ vCE6BrED23g8/2zDF4yRMB8GA1UdIwQYMBaAFHUlM7GFL30qxucNzev9VH3cQ4+U MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzJFNi9FNkU2RkIzMkYy RUExMUVEOTA5OTAwNEFDNEY5QUUwMi9kU1V6c1lVdmZTckc1dzNONl8xVWZkeERq NVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RTVXpzWVV2ZlNyRzV3M042XzFVZmR4RGo1US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NzJFNi9FNkU2RkIzMkYyRUExMUVEOTA5OTAwNEFDNEY5QUUwMi9kU1V6c1lVdmZT ckc1dzNONl8xVWZkeERqNVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB4iZwwfu1kNvsSOIwUXZK9bGTEAxaKz0xrOld8ahdK+l72MxLvoiNz ood//ZPPW6QzJw6FJUCwwANR0tJQKOZHehNrgQqtcQyBvRy6rUepf262+GTW28n2 TmW1M+1W8+Ls6z4Dr9PjuarU1F/+vrlKynQ+sqsHYIzETlbjXgZok6lA7iz3FnUM 7T/H60mumHEMhBrzCOs9qpxP2nsnhqAupz4HZZXq7UqIwkX6j8A3O3f/mZ288S52 KWBX8WuCAVsHK4fmlMXWdtIUh1fwFJ6xPqj1mhgQTuIpm7A9zAF+cbAnm/7Key3S tYQXV2QodAdl71SHtVw2F7+jveTwGQJh -----END CERTIFICATE-----Generated at Sat May 31 14:38:09 2025 by rpki-client