$ rpki-client -vvf rpki.apnic.net/member_repository/A91CAE04/9D8F772A5F9611EE83638F3EC4F9AE02/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.mft File: s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.mft (raw, json) Hash identifier: m3ZdSOxn/afJTYvgjOVU/PLJ0FR921FMJekabFUf2xk= Subject key identifier: 1B:25:AE:26:33:66:FB:A7:5A:05:A6:A3:2A:24:7F:E6:E6:38:A0:3B Authority key identifier: B3:62:43:7A:B6:7D:29:0C:5C:DF:EF:2F:62:B7:7E:DD:8A:9F:FA:44 Certificate issuer: /CN=A91CAE04/serialNumber=B362437AB67D290C5CDFEF2F62B77EDD8A9FFA44 Certificate serial: 014A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CAE04/9D8F772A5F9611EE83638F3EC4F9AE02/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.mft Manifest number: 0141 Signing time: Sat 31 May 2025 04:05:31 +0000 Manifest this update: Sat 31 May 2025 04:05:31 +0000 Manifest next update: Sat 07 Jun 2025 04:05:31 +0000 Files and hashes: 1: s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.crl (hash: Pu8XR0lkVoYiFq7CqVNmR3wi96KbJy7+apYskysbQjw=) 2: ABA6DCF0030F11EFB12D8A18C4F9AE02.roa (hash: HE0CwiBUoR42Ac8HkzfJLJ/ETIx9kfwRBCLdGKiPhXc=) 3: 7E40FBBA09EF11EFAA24237EC4F9AE02.roa (hash: OKWZlml7xUzPeJ1MZszk7oG4XbhbR85w9J1Q8mg/N3s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CAE04/9D8F772A5F9611EE83638F3EC4F9AE02/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.crl rsync://rpki.apnic.net/member_repository/A91CAE04/9D8F772A5F9611EE83638F3EC4F9AE02/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 04:05:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 330 (0x14a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CAE04, serialNumber=B362437AB67D290C5CDFEF2F62B77EDD8A9FFA44 Validity Not Before: May 31 04:05:31 2025 GMT Not After : Jun 7 04:05:31 2025 GMT Subject: CN=683a800b-c225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:cd:3c:54:48:25:1a:5e:a9:aa:14:de:cb:17: 46:01:7b:a3:8c:6d:67:75:74:b2:40:af:64:6f:05: 93:ea:22:81:7e:65:70:c1:c8:53:f2:53:db:21:be: 1b:99:89:c1:72:c6:4a:7d:a0:e6:19:34:60:b8:c5: 26:31:2e:a1:ec:53:64:5d:fb:fd:64:05:dc:4e:cb: 97:81:75:c0:e4:15:2b:46:cb:d6:ce:2f:bf:ea:b4: fc:aa:29:b5:bf:cc:1f:67:54:38:64:a9:f9:9d:87: 18:3b:f5:e9:c6:cb:61:07:3a:b3:a0:3b:0e:2b:da: af:77:63:fc:89:a0:42:46:a3:b2:ea:10:84:80:95: 04:bb:d7:ed:17:12:56:f8:ab:da:36:40:6a:75:a0: c7:d3:c4:c2:bf:97:69:ba:a8:ab:60:9c:bb:aa:61: c8:8b:8e:0a:f7:29:98:92:09:fb:17:62:bf:9a:45: 80:e7:36:17:81:66:cc:9c:80:3d:83:ec:2f:99:7d: 26:24:dc:95:78:87:a1:01:21:d8:68:ed:d2:32:41: 68:33:19:f6:8e:d0:5d:ea:00:d6:b0:5f:5a:d9:d7: 45:10:ca:70:55:d1:e1:c2:49:15:b0:31:fd:4c:67: 57:55:cf:de:c9:27:7e:5a:2d:4e:48:05:59:a0:30: 19:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:25:AE:26:33:66:FB:A7:5A:05:A6:A3:2A:24:7F:E6:E6:38:A0:3B X509v3 Authority Key Identifier: keyid:B3:62:43:7A:B6:7D:29:0C:5C:DF:EF:2F:62:B7:7E:DD:8A:9F:FA:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CAE04/9D8F772A5F9611EE83638F3EC4F9AE02/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CAE04/9D8F772A5F9611EE83638F3EC4F9AE02/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:bc:b0:2c:b3:dd:67:79:89:85:56:b0:80:00:78:e8:5a:e2: c9:b9:98:21:5d:78:9f:a1:38:28:09:e1:58:b2:d5:d6:50:21: 47:35:91:9f:d8:e4:3f:ff:7d:64:ce:63:f5:cb:a2:5e:64:a4: 11:76:fc:4c:3e:05:c2:5a:7c:8d:64:27:3e:db:b9:d0:75:be: 13:fe:08:95:a0:c0:a3:2e:f7:fc:41:be:83:72:84:f8:9d:ee: 48:52:1f:c0:e2:53:8b:e8:1e:7b:11:3b:6b:3c:fd:2b:a4:9e: 53:6d:75:a5:91:ee:c2:fd:17:a7:a4:1d:69:30:cc:3b:e4:20: cb:38:70:cf:71:f5:7b:86:ad:89:d2:72:8c:35:a3:03:45:ef: 55:d9:4c:02:71:6f:c1:8d:50:fd:22:48:5f:8c:cc:50:86:14: d2:3c:b7:38:5b:e3:c6:66:94:1c:37:25:1d:3e:94:09:2f:3b: 0a:a0:41:7c:d0:84:f9:5b:99:83:a1:c4:7d:99:af:71:7b:32: a5:e2:b6:3a:7a:a2:c0:91:70:56:24:24:7a:c8:d2:cf:c3:29: de:dd:50:9d:bb:99:30:ca:87:61:95:7a:38:a0:c3:cd:c6:dd: ca:91:75:1f:75:12:d1:4a:88:12:34:ff:70:32:60:7b:24:41: d8:d8:8b:93 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0FFMDQxMTAvBgNVBAUTKEIzNjI0MzdBQjY3RDI5MEM1Q0RGRUYyRjYyQjc3RURE OEE5RkZBNDQwHhcNMjUwNTMxMDQwNTMxWhcNMjUwNjA3MDQwNTMxWjAYMRYwFAYD VQQDEw02ODNhODAwYi1jMjI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1c08VEglGl6pqhTeyxdGAXujjG1ndXSyQK9kbwWT6iKBfmVwwchT8lPbIb4b mYnBcsZKfaDmGTRguMUmMS6h7FNkXfv9ZAXcTsuXgXXA5BUrRsvWzi+/6rT8qim1 v8wfZ1Q4ZKn5nYcYO/XpxsthBzqzoDsOK9qvd2P8iaBCRqOy6hCEgJUEu9ftFxJW +KvaNkBqdaDH08TCv5dpuqirYJy7qmHIi44K9ymYkgn7F2K/mkWA5zYXgWbMnIA9 g+wvmX0mJNyVeIehASHYaO3SMkFoMxn2jtBd6gDWsF9a2ddFEMpwVdHhwkkVsDH9 TGdXVc/eySd+Wi1OSAVZoDAZ9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBslriYz ZvunWgWmoyokf+bmOKA7MB8GA1UdIwQYMBaAFLNiQ3q2fSkMXN/vL2K3ft2Kn/pE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQUUwNC85RDhGNzcyQTVG OTYxMUVFODM2MzhGM0VDNEY5QUUwMi9zMkpEZXJaOUtReGMzLTh2WXJkLTNZcWYt a1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3MySkRlclo5S1F4YzMtOHZZcmQtM1lxZi1rUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QUUwNC85RDhGNzcyQTVGOTYxMUVFODM2MzhGM0VDNEY5QUUwMi9zMkpEZXJaOUtR eGMzLTh2WXJkLTNZcWYta1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBcvLAss91neYmFVrCAAHjoWuLJuZghXXifoTgoCeFYstXWUCFHNZGf 2OQ//31kzmP1y6JeZKQRdvxMPgXCWnyNZCc+27nQdb4T/giVoMCjLvf8Qb6DcoT4 ne5IUh/A4lOL6B57ETtrPP0rpJ5TbXWlke7C/RenpB1pMMw75CDLOHDPcfV7hq2J 0nKMNaMDRe9V2UwCcW/BjVD9IkhfjMxQhhTSPLc4W+PGZpQcNyUdPpQJLzsKoEF8 0IT5W5mDocR9ma9xezKl4rY6eqLAkXBWJCR6yNLPwyne3VCdu5kwyodhlXo4oMPN xt3KkXUfdRLRSogSNP9wMmB7JEHY2IuT -----END CERTIFICATE-----Generated at Sat May 31 17:45:06 2025 by rpki-client