$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8BEE/6E0627F83F0311EBBE75B44BC4F9AE02/aWnCC4aZpI0HLUowZ8_wDV9EfJg.mft File: aWnCC4aZpI0HLUowZ8_wDV9EfJg.mft (raw, json) Hash identifier: 00NhuI8GCALGxBAEj1wBCyNs3uDgLIz+kQvZWBmouIA= Subject key identifier: A8:E9:0E:42:94:61:E8:13:F6:6B:5E:DF:A7:1E:E4:16:97:BE:28:D5 Authority key identifier: 69:69:C2:0B:86:99:A4:8D:07:2D:4A:30:67:CF:F0:0D:5F:44:7C:98 Certificate issuer: /CN=A91C8BEE/serialNumber=6969C20B8699A48D072D4A3067CFF00D5F447C98 Certificate serial: 0710 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWnCC4aZpI0HLUowZ8_wDV9EfJg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C8BEE/6E0627F83F0311EBBE75B44BC4F9AE02/aWnCC4aZpI0HLUowZ8_wDV9EfJg.mft Manifest number: 070B Signing time: Fri 30 May 2025 22:06:32 +0000 Manifest this update: Fri 30 May 2025 22:06:31 +0000 Manifest next update: Fri 06 Jun 2025 22:06:31 +0000 Files and hashes: 1: aWnCC4aZpI0HLUowZ8_wDV9EfJg.crl (hash: CJR7BRW4H1RXy3OT/zJGe/NNG4zOHDzuK41dlDCAXuo=) 2: DE524D283F0511EBBB4C174FC4F9AE02.roa (hash: zWRikEivlVPteMMOfXpGEHZKMPXoa2S3XawXpPi4Aig=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C8BEE/6E0627F83F0311EBBE75B44BC4F9AE02/aWnCC4aZpI0HLUowZ8_wDV9EfJg.crl rsync://rpki.apnic.net/member_repository/A91C8BEE/6E0627F83F0311EBBE75B44BC4F9AE02/aWnCC4aZpI0HLUowZ8_wDV9EfJg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWnCC4aZpI0HLUowZ8_wDV9EfJg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 22:06:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1808 (0x710) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C8BEE, serialNumber=6969C20B8699A48D072D4A3067CFF00D5F447C98 Validity Not Before: May 30 22:06:31 2025 GMT Not After : Jun 6 22:06:31 2025 GMT Subject: CN=683a2be8-b88b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:2d:b2:ed:39:22:d0:c5:78:61:9b:fa:de:f7: e2:8e:dd:20:00:0c:e8:76:a4:9d:e7:aa:b7:a7:a5: 51:c7:75:3b:4a:27:55:ee:f9:c2:f1:35:f9:0a:f6: 32:6c:07:0f:64:30:16:3e:17:1a:18:49:7e:82:6d: 3a:87:8a:f6:57:00:d7:f4:c2:40:64:46:8f:f2:2b: 3a:81:54:08:89:9e:ac:1f:47:55:51:2b:38:37:ec: bf:2d:8d:22:4c:94:6b:2f:dd:e7:87:a3:08:b4:a4: 34:66:8b:25:87:59:9e:bf:bc:0b:1b:bf:40:66:b2: ed:b7:6a:cd:75:69:05:0c:16:f8:39:1e:bf:d2:cd: 5d:54:a7:02:d0:84:cd:34:57:6b:ec:0c:49:bc:c2: 5d:8f:ba:e4:aa:7b:76:e7:62:03:a5:fa:d3:c4:c5: ac:e1:cc:55:ab:86:a4:48:5c:07:f7:df:47:76:20: 63:2b:de:78:03:cf:4f:de:7a:44:81:78:0a:70:15: ce:44:cc:48:1d:5f:2d:80:5d:b8:36:de:0c:64:47: 3e:7b:91:df:a7:b3:e5:49:e7:58:0e:9c:18:2e:51: 07:db:0b:4b:ff:bf:8d:88:56:00:94:ed:66:38:45: 78:5b:30:12:b0:6e:34:9b:e7:d0:f0:df:d5:3e:7a: ad:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:E9:0E:42:94:61:E8:13:F6:6B:5E:DF:A7:1E:E4:16:97:BE:28:D5 X509v3 Authority Key Identifier: keyid:69:69:C2:0B:86:99:A4:8D:07:2D:4A:30:67:CF:F0:0D:5F:44:7C:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C8BEE/6E0627F83F0311EBBE75B44BC4F9AE02/aWnCC4aZpI0HLUowZ8_wDV9EfJg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWnCC4aZpI0HLUowZ8_wDV9EfJg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8BEE/6E0627F83F0311EBBE75B44BC4F9AE02/aWnCC4aZpI0HLUowZ8_wDV9EfJg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:e7:fa:fd:f0:82:99:96:3d:b3:6e:92:d1:ae:e6:86:3f:75: bb:22:83:09:d4:08:c9:63:f3:98:d5:31:7b:8e:20:82:b3:6d: 30:e8:f9:52:74:9c:c7:b8:8a:27:ba:a0:8e:19:67:66:0d:e9: 6d:a2:02:c6:e1:56:5a:67:05:f0:ed:c4:e2:38:2f:b7:de:5d: ea:33:3e:c2:c3:da:df:da:ec:19:b5:31:5f:52:45:5d:a3:fb: 22:02:87:bb:e0:44:1b:e9:35:41:b0:47:4c:f8:73:ab:9b:78: 35:c3:21:86:d3:9a:98:3b:07:a0:4a:c8:95:e7:25:ff:6b:fc: b0:bc:15:0d:35:dd:03:3a:aa:17:68:b4:20:a2:f7:4b:7c:c5: fe:21:e8:b8:cb:c4:9a:69:25:83:d2:65:b1:32:07:05:cb:fd: 1d:2d:1b:89:d7:09:8d:af:2e:9a:38:2e:4b:6c:41:72:16:78: ad:30:5d:f9:20:ca:58:b2:8d:05:78:41:d6:39:34:1c:44:79: 7d:08:b4:18:e5:d6:5f:73:59:19:2b:29:4c:59:e9:89:3a:17: 9f:5d:f9:c6:fe:72:7e:f9:c1:3c:3c:86:0a:d2:03:4c:f1:0e: 79:27:5b:62:db:4a:98:76:93:b7:b1:0b:45:4b:79:26:9e:4a: 0f:e1:b1:1b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBxAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzhCRUUxMTAvBgNVBAUTKDY5NjlDMjBCODY5OUE0OEQwNzJENEEzMDY3Q0ZGMDBE NUY0NDdDOTgwHhcNMjUwNTMwMjIwNjMxWhcNMjUwNjA2MjIwNjMxWjAYMRYwFAYD VQQDEw02ODNhMmJlOC1iODhiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7y2y7Tki0MV4YZv63vfijt0gAAzodqSd56q3p6VRx3U7SidV7vnC8TX5CvYy bAcPZDAWPhcaGEl+gm06h4r2VwDX9MJAZEaP8is6gVQIiZ6sH0dVUSs4N+y/LY0i TJRrL93nh6MItKQ0Zoslh1mev7wLG79AZrLtt2rNdWkFDBb4OR6/0s1dVKcC0ITN NFdr7AxJvMJdj7rkqnt252IDpfrTxMWs4cxVq4akSFwH999HdiBjK954A89P3npE gXgKcBXORMxIHV8tgF24Nt4MZEc+e5Hfp7PlSedYDpwYLlEH2wtL/7+NiFYAlO1m OEV4WzASsG40m+fQ8N/VPnqtEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKjpDkKU YegT9mte36ce5BaXvijVMB8GA1UdIwQYMBaAFGlpwguGmaSNBy1KMGfP8A1fRHyY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOEJFRS82RTA2MjdGODNG MDMxMUVCQkU3NUI0NEJDNEY5QUUwMi9hV25DQzRhWnBJMEhMVW93Wjhfd0RWOUVm SmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FXbkNDNGFacEkwSExVb3daOF93RFY5RWZKZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OEJFRS82RTA2MjdGODNGMDMxMUVCQkU3NUI0NEJDNEY5QUUwMi9hV25DQzRhWnBJ MEhMVW93Wjhfd0RWOUVmSmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/5/r98IKZlj2zbpLRruaGP3W7IoMJ1AjJY/OY1TF7jiCCs20w6PlS dJzHuIonuqCOGWdmDeltogLG4VZaZwXw7cTiOC+33l3qMz7Cw9rf2uwZtTFfUkVd o/siAoe74EQb6TVBsEdM+HOrm3g1wyGG05qYOwegSsiV5yX/a/ywvBUNNd0DOqoX aLQgovdLfMX+Iei4y8SaaSWD0mWxMgcFy/0dLRuJ1wmNry6aOC5LbEFyFnitMF35 IMpYso0FeEHWOTQcRHl9CLQY5dZfc1kZKylMWemJOhefXfnG/nJ++cE8PIYK0gNM 8Q55J1ti20qYdpO3sQtFS3kmnkoP4bEb -----END CERTIFICATE-----Generated at Sat May 31 17:20:36 2025 by rpki-client