$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDB75/E6519A14BB7711EEAAD7B241C4F9AE02/e-mMeqrYfJ8lkpYwFkOjYQp7UYg.mft File: e-mMeqrYfJ8lkpYwFkOjYQp7UYg.mft (raw, json) Hash identifier: zgrve+2Z31ZAKOj58LLS9ioIhjQ8lHj5HE6yPwRW5Uk= Subject key identifier: 7A:01:FB:E8:20:E6:82:83:55:99:9D:3F:68:24:17:B2:A7:75:98:EA Authority key identifier: 7B:E9:8C:7A:AA:D8:7C:9F:25:92:96:30:16:43:A3:61:0A:7B:51:88 Certificate issuer: /CN=A91CDB75/serialNumber=7BE98C7AAAD87C9F259296301643A3610A7B5188 Certificate serial: FE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e-mMeqrYfJ8lkpYwFkOjYQp7UYg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CDB75/E6519A14BB7711EEAAD7B241C4F9AE02/e-mMeqrYfJ8lkpYwFkOjYQp7UYg.mft Manifest number: FC Signing time: Sat 31 May 2025 04:47:17 +0000 Manifest this update: Sat 31 May 2025 04:47:16 +0000 Manifest next update: Sat 07 Jun 2025 04:47:16 +0000 Files and hashes: 1: e-mMeqrYfJ8lkpYwFkOjYQp7UYg.crl (hash: QTZpuhM6fsdyf2PwPpK6dH07FFtwioRneYXc+ynm0g4=) 2: 4CC50DB2BB7811EE9416DD42C4F9AE02.roa (hash: zPBkBX8TSXO+DP7kaXxBDzxvo14LuZd67QJ/cyraKFg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CDB75/E6519A14BB7711EEAAD7B241C4F9AE02/e-mMeqrYfJ8lkpYwFkOjYQp7UYg.crl rsync://rpki.apnic.net/member_repository/A91CDB75/E6519A14BB7711EEAAD7B241C4F9AE02/e-mMeqrYfJ8lkpYwFkOjYQp7UYg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e-mMeqrYfJ8lkpYwFkOjYQp7UYg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 04:47:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 254 (0xfe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CDB75, serialNumber=7BE98C7AAAD87C9F259296301643A3610A7B5188 Validity Not Before: May 31 04:47:16 2025 GMT Not After : Jun 7 04:47:16 2025 GMT Subject: CN=683a89d4-3f61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:ba:4c:d3:04:ca:fc:82:6d:28:3b:20:ab:ae: 58:9c:3f:0d:b5:7f:13:76:76:d6:87:b6:e4:7e:4c: 09:0d:57:3e:3b:8f:f5:a2:47:c3:1c:8e:37:75:04: 41:11:7a:5d:94:32:5e:82:e5:68:40:d5:5a:ec:86: b1:ab:72:dc:4a:40:89:dc:d3:67:fd:a8:b0:e0:0a: ef:af:b5:10:61:ee:5d:ac:9e:bc:26:9a:ad:50:f2: 46:8f:1c:fa:e0:25:0a:79:e7:38:ff:eb:5f:8f:95: 2c:be:a1:8f:b2:ae:41:90:30:8d:95:54:b6:36:7c: 81:f7:f2:11:cc:7b:b6:fd:c0:87:ae:56:a5:d9:08: 92:c2:e8:ab:df:77:db:ab:08:87:7a:93:1f:30:e9: b4:85:c3:45:e9:30:2d:73:0e:13:55:b8:6f:74:c7: 3c:bc:5b:24:66:e1:31:d8:4b:28:aa:68:60:67:c2: 1d:d5:d8:72:79:5c:c1:d7:1b:27:42:13:ca:db:23: cf:fd:88:64:1a:51:21:e2:d8:38:3f:1f:83:a3:c2: a3:36:9b:73:6c:49:9f:fa:46:45:2b:30:ce:b5:83: 03:2d:14:20:89:66:8a:ad:3c:01:d0:ec:94:a7:c2: 8e:97:6b:56:d3:f4:e5:59:eb:36:fc:73:e5:6c:1b: 03:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:01:FB:E8:20:E6:82:83:55:99:9D:3F:68:24:17:B2:A7:75:98:EA X509v3 Authority Key Identifier: keyid:7B:E9:8C:7A:AA:D8:7C:9F:25:92:96:30:16:43:A3:61:0A:7B:51:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CDB75/E6519A14BB7711EEAAD7B241C4F9AE02/e-mMeqrYfJ8lkpYwFkOjYQp7UYg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e-mMeqrYfJ8lkpYwFkOjYQp7UYg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDB75/E6519A14BB7711EEAAD7B241C4F9AE02/e-mMeqrYfJ8lkpYwFkOjYQp7UYg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:9a:70:fc:3a:e8:97:e5:9d:4e:2e:e9:f5:43:f8:5b:7e:90: d7:70:a6:51:13:c9:18:29:56:17:1d:87:71:60:9b:a1:7c:6b: b9:8e:7f:21:09:ef:cd:12:56:60:b7:cd:b2:27:37:f7:30:0e: a4:7c:8a:f9:df:c9:9e:55:ae:8d:58:ee:d3:77:4e:d3:13:48: bc:af:bd:4a:79:c3:c7:b3:4d:4e:de:4b:1c:07:63:d0:89:6a: 6c:7a:bc:39:b2:53:70:fd:8b:fb:57:9f:24:b3:4d:ea:72:39: 6c:74:5e:11:a5:b5:45:5a:ae:0e:8a:3b:b5:3c:71:90:8a:1b: 57:30:e3:a3:1b:28:7c:08:7a:94:1c:8e:90:b6:9b:e1:cd:fe: 95:f9:b2:0d:f1:58:e9:af:e4:81:3b:a4:c9:1f:61:9f:66:85: da:cc:2b:69:18:3c:a6:ae:55:13:e2:c4:ed:f4:82:a6:51:9a: 42:de:ec:89:11:b9:88:5d:97:69:2b:34:bf:64:d5:3e:0f:7a: 4b:89:7f:83:2c:fd:05:66:3b:42:5e:e3:85:62:21:79:21:e8: e8:be:ec:45:2e:a0:85:98:4d:45:0f:2e:cf:c3:bb:31:8a:c0: b9:ab:62:7c:d9:73:57:1f:fb:67:a3:d2:92:30:3c:3a:ce:8e: 20:c9:d8:03 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAP4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0RCNzUxMTAvBgNVBAUTKDdCRTk4QzdBQUFEODdDOUYyNTkyOTYzMDE2NDNBMzYx MEE3QjUxODgwHhcNMjUwNTMxMDQ0NzE2WhcNMjUwNjA3MDQ0NzE2WjAYMRYwFAYD VQQDEw02ODNhODlkNC0zZjYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA07pM0wTK/IJtKDsgq65YnD8NtX8TdnbWh7bkfkwJDVc+O4/1okfDHI43dQRB EXpdlDJeguVoQNVa7Iaxq3LcSkCJ3NNn/aiw4Arvr7UQYe5drJ68JpqtUPJGjxz6 4CUKeec4/+tfj5UsvqGPsq5BkDCNlVS2NnyB9/IRzHu2/cCHrlal2QiSwuir33fb qwiHepMfMOm0hcNF6TAtcw4TVbhvdMc8vFskZuEx2EsoqmhgZ8Id1dhyeVzB1xsn QhPK2yPP/YhkGlEh4tg4Px+Do8KjNptzbEmf+kZFKzDOtYMDLRQgiWaKrTwB0OyU p8KOl2tW0/TlWes2/HPlbBsDQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHoB++gg 5oKDVZmdP2gkF7KndZjqMB8GA1UdIwQYMBaAFHvpjHqq2HyfJZKWMBZDo2EKe1GI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDREI3NS9FNjUxOUExNEJC NzcxMUVFQUFEN0IyNDFDNEY5QUUwMi9lLW1NZXFyWWZKOGxrcFl3RmtPallRcDdV WWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2UtbU1lcXJZZko4bGtwWXdGa09qWVFwN1VZZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD REI3NS9FNjUxOUExNEJCNzcxMUVFQUFEN0IyNDFDNEY5QUUwMi9lLW1NZXFyWWZK OGxrcFl3RmtPallRcDdVWWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBvmnD8OuiX5Z1OLun1Q/hbfpDXcKZRE8kYKVYXHYdxYJuhfGu5jn8h Ce/NElZgt82yJzf3MA6kfIr538meVa6NWO7Td07TE0i8r71KecPHs01O3kscB2PQ iWpserw5slNw/Yv7V58ks03qcjlsdF4RpbVFWq4Oiju1PHGQihtXMOOjGyh8CHqU HI6Qtpvhzf6V+bIN8Vjpr+SBO6TJH2GfZoXazCtpGDymrlUT4sTt9IKmUZpC3uyJ EbmIXZdpKzS/ZNU+D3pLiX+DLP0FZjtCXuOFYiF5IejovuxFLqCFmE1FDy7Pw7sx isC5q2J82XNXH/tno9KSMDw6zo4gydgD -----END CERTIFICATE-----Generated at Sat May 31 17:42:37 2025 by rpki-client