$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8DD1/25DD59F8E1C911EEBE1F5068C4F9AE02/BtYseoQHbhxklAQGJYkZ1n0Vq-E.mft File: BtYseoQHbhxklAQGJYkZ1n0Vq-E.mft (raw, json) Hash identifier: fXERomWCp4MQfneeAQwmUreqyXTP/SDT2bOUbUYIews= Subject key identifier: 53:AF:00:E4:71:01:4F:08:7F:19:F4:2B:0E:F2:A4:E3:F1:A1:CF:AA Authority key identifier: 06:D6:2C:7A:84:07:6E:1C:64:94:04:06:25:89:19:D6:7D:15:AB:E1 Certificate issuer: /CN=A91C8DD1/serialNumber=06D62C7A84076E1C64940406258919D67D15ABE1 Certificate serial: F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtYseoQHbhxklAQGJYkZ1n0Vq-E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C8DD1/25DD59F8E1C911EEBE1F5068C4F9AE02/BtYseoQHbhxklAQGJYkZ1n0Vq-E.mft Manifest number: EA Signing time: Sat 31 May 2025 05:03:00 +0000 Manifest this update: Sat 31 May 2025 05:03:00 +0000 Manifest next update: Sat 07 Jun 2025 05:03:00 +0000 Files and hashes: 1: BtYseoQHbhxklAQGJYkZ1n0Vq-E.crl (hash: neuGwW+zbphxRjNw0xSePV+rrJHmoTzC7kcSJsLsNAw=) 2: 81D7045C0F5511EFA55FC44EC4F9AE02.roa (hash: /wi8tgvE4O56j6aStHMPLW1czedgDux+3mSXV2uL2Wc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C8DD1/25DD59F8E1C911EEBE1F5068C4F9AE02/BtYseoQHbhxklAQGJYkZ1n0Vq-E.crl rsync://rpki.apnic.net/member_repository/A91C8DD1/25DD59F8E1C911EEBE1F5068C4F9AE02/BtYseoQHbhxklAQGJYkZ1n0Vq-E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtYseoQHbhxklAQGJYkZ1n0Vq-E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 05:02:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 241 (0xf1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C8DD1, serialNumber=06D62C7A84076E1C64940406258919D67D15ABE1 Validity Not Before: May 31 05:03:00 2025 GMT Not After : Jun 7 05:03:00 2025 GMT Subject: CN=683a8d84-2201 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:e2:12:ab:4a:8f:d8:1c:ba:f5:93:29:2a:2b: 65:5d:84:50:3b:6d:1a:de:40:f0:b5:0f:e8:66:b5: 50:5b:d9:f5:2f:c9:37:07:0d:46:e3:e7:f4:d2:31: 7f:2e:e6:52:98:ed:73:16:32:8c:44:5e:a4:00:a1: cf:14:d4:14:f1:0c:f3:bf:fd:05:92:a7:78:b7:66: 63:c1:e2:38:e4:42:aa:0d:47:97:3b:49:b3:8d:97: 2f:b8:4c:01:b8:97:ff:0c:d2:f0:be:d4:45:5d:aa: ed:db:ed:8d:8f:e5:d5:79:ef:a1:d3:36:6d:27:68: 43:6c:2d:7a:68:f6:08:7a:d0:93:ec:e5:10:e3:ae: a7:d5:e9:44:e6:85:28:bc:70:ef:53:22:60:c4:28: 7b:d7:7c:4a:b4:c7:76:89:ec:4c:60:21:b9:85:bc: 47:71:64:e4:24:93:67:82:f9:c5:69:89:44:30:b1: 46:a5:c6:80:1e:90:6d:21:e3:75:75:bb:c3:35:b4: ab:82:aa:71:a5:05:bd:ee:85:d8:41:dc:ff:98:21: 54:fa:4d:37:64:16:f1:1c:93:95:7a:3e:3e:77:1a: 27:80:84:e5:ad:c6:4e:63:d0:3c:16:be:8a:53:51: 82:1d:29:c4:0a:ec:1f:46:d1:fb:7f:6c:36:f2:07: 7e:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:AF:00:E4:71:01:4F:08:7F:19:F4:2B:0E:F2:A4:E3:F1:A1:CF:AA X509v3 Authority Key Identifier: keyid:06:D6:2C:7A:84:07:6E:1C:64:94:04:06:25:89:19:D6:7D:15:AB:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C8DD1/25DD59F8E1C911EEBE1F5068C4F9AE02/BtYseoQHbhxklAQGJYkZ1n0Vq-E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtYseoQHbhxklAQGJYkZ1n0Vq-E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8DD1/25DD59F8E1C911EEBE1F5068C4F9AE02/BtYseoQHbhxklAQGJYkZ1n0Vq-E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:11:d9:83:32:3f:c4:46:57:29:21:69:a4:4a:d3:ca:45:93: d1:1a:86:d0:0e:f1:42:4a:fe:f7:24:40:26:15:40:4c:f5:26: 0c:36:03:a7:79:a2:1e:b7:2e:e2:bd:6f:40:ce:d2:8b:ab:aa: 10:3e:65:d7:60:19:c3:79:16:5d:57:5d:22:ff:f1:94:df:0f: b3:e7:0d:e3:87:4b:d7:10:0c:62:89:8d:a5:9c:fd:1d:ee:70: 64:96:c6:47:82:52:65:20:48:8a:8d:dc:84:0f:06:ef:9c:f8: 7c:34:51:3c:7b:31:85:e9:07:00:12:44:d7:0a:b9:b8:47:e7: b0:b8:c7:a5:f6:6d:6b:c5:87:c2:f7:56:d6:61:74:80:cf:41: 8f:52:76:61:6f:ad:02:43:73:0b:d0:1c:18:5c:ef:4d:29:91: 70:a4:6b:78:96:e4:0f:f6:12:b0:c3:83:64:3c:ab:61:51:89: 2b:aa:75:28:1a:2a:ff:6e:a4:ba:36:d5:1f:ef:7f:47:04:91: f5:66:3b:1f:44:ec:ce:4e:22:fe:95:d6:8d:e4:a8:b9:a3:0b: 40:ed:46:92:3a:83:84:22:6c:e0:48:64:5d:26:b9:1f:35:91: 3a:40:7e:86:dc:20:2f:10:db:56:1b:78:d4:5f:78:95:f7:79: f0:f0:bd:03 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzhERDExMTAvBgNVBAUTKDA2RDYyQzdBODQwNzZFMUM2NDk0MDQwNjI1ODkxOUQ2 N0QxNUFCRTEwHhcNMjUwNTMxMDUwMzAwWhcNMjUwNjA3MDUwMzAwWjAYMRYwFAYD VQQDEw02ODNhOGQ4NC0yMjAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtOISq0qP2By69ZMpKitlXYRQO20a3kDwtQ/oZrVQW9n1L8k3Bw1G4+f00jF/ LuZSmO1zFjKMRF6kAKHPFNQU8Qzzv/0Fkqd4t2ZjweI45EKqDUeXO0mzjZcvuEwB uJf/DNLwvtRFXart2+2Nj+XVee+h0zZtJ2hDbC16aPYIetCT7OUQ466n1elE5oUo vHDvUyJgxCh713xKtMd2iexMYCG5hbxHcWTkJJNngvnFaYlEMLFGpcaAHpBtIeN1 dbvDNbSrgqpxpQW97oXYQdz/mCFU+k03ZBbxHJOVej4+dxongITlrcZOY9A8Fr6K U1GCHSnECuwfRtH7f2w28gd+UwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFOvAORx AU8Ifxn0Kw7ypOPxoc+qMB8GA1UdIwQYMBaAFAbWLHqEB24cZJQEBiWJGdZ9Favh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOEREMS8yNURENTlGOEUx QzkxMUVFQkUxRjUwNjhDNEY5QUUwMi9CdFlzZW9RSGJoeGtsQVFHSllrWjFuMFZx LUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0J0WXNlb1FIYmh4a2xBUUdKWWtaMW4wVnEtRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OEREMS8yNURENTlGOEUxQzkxMUVFQkUxRjUwNjhDNEY5QUUwMi9CdFlzZW9RSGJo eGtsQVFHSllrWjFuMFZxLUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCuEdmDMj/ERlcpIWmkStPKRZPRGobQDvFCSv73JEAmFUBM9SYMNgOn eaIety7ivW9AztKLq6oQPmXXYBnDeRZdV10i//GU3w+z5w3jh0vXEAxiiY2lnP0d 7nBklsZHglJlIEiKjdyEDwbvnPh8NFE8ezGF6QcAEkTXCrm4R+ewuMel9m1rxYfC 91bWYXSAz0GPUnZhb60CQ3ML0BwYXO9NKZFwpGt4luQP9hKww4NkPKthUYkrqnUo Gir/bqS6NtUf739HBJH1ZjsfROzOTiL+ldaN5Ki5owtA7UaSOoOEImzgSGRdJrkf NZE6QH6G3CAvENtWG3jUX3iV93nw8L0D -----END CERTIFICATE-----Generated at Sat May 31 17:57:51 2025 by rpki-client