$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE3A3/18823C8C050111EABD9B202CC4F9AE02/REDuIbNImmUKYWsSDY5b5Xku4Es.mft File: REDuIbNImmUKYWsSDY5b5Xku4Es.mft (raw, json) Hash identifier: vzZ1d/GZK0sqQlBBa8pbdZk5ET5WlEkC1LtfSpc+298= Subject key identifier: F9:AE:F6:FE:0E:95:B9:EE:E3:03:11:E5:00:6B:A1:47:B6:18:5B:BB Authority key identifier: 44:40:EE:21:B3:48:9A:65:0A:61:6B:12:0D:8E:5B:E5:79:2E:E0:4B Certificate issuer: /CN=A91CE3A3/serialNumber=4440EE21B3489A650A616B120D8E5BE5792EE04B Certificate serial: 0C4C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/REDuIbNImmUKYWsSDY5b5Xku4Es.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE3A3/18823C8C050111EABD9B202CC4F9AE02/REDuIbNImmUKYWsSDY5b5Xku4Es.mft Manifest number: 0C45 Signing time: Mon 02 Jun 2025 18:33:33 +0000 Manifest this update: Mon 02 Jun 2025 18:33:33 +0000 Manifest next update: Mon 09 Jun 2025 18:33:33 +0000 Files and hashes: 1: REDuIbNImmUKYWsSDY5b5Xku4Es.crl (hash: 4DQDF4U52nupsuoXl/j90yutOR9qrepvV9JkjBLO14E=) 2: 7155C8563E5E11EAB043A522C4F9AE02.roa (hash: kzRNRyDp5yy+6xuR6mT9mG0c89/n8LtjaHr1+0MkgX4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE3A3/18823C8C050111EABD9B202CC4F9AE02/REDuIbNImmUKYWsSDY5b5Xku4Es.crl rsync://rpki.apnic.net/member_repository/A91CE3A3/18823C8C050111EABD9B202CC4F9AE02/REDuIbNImmUKYWsSDY5b5Xku4Es.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/REDuIbNImmUKYWsSDY5b5Xku4Es.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 18:33:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3148 (0xc4c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE3A3, serialNumber=4440EE21B3489A650A616B120D8E5BE5792EE04B Validity Not Before: Jun 2 18:33:33 2025 GMT Not After : Jun 9 18:33:33 2025 GMT Subject: CN=683dee7d-4b8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:94:b3:c4:b8:60:a7:e6:b2:7e:09:14:e7:f5: 92:25:2b:4f:0a:f5:a5:2a:73:c2:96:5b:31:19:6b: df:c8:c3:1f:39:e3:18:b4:cd:ae:69:a4:59:75:5e: 49:ef:c2:8a:59:d4:83:92:be:c5:4e:73:fe:b3:4a: 26:e2:15:5f:b0:3d:c8:e9:4f:f9:52:f4:7f:44:de: 88:80:2f:90:fe:1e:3c:05:15:69:6e:5c:15:82:75: 64:81:ab:8a:79:27:1a:6b:1d:41:82:bd:a5:7a:67: a8:fe:e7:6a:5c:4b:f6:d2:5d:90:54:3e:95:c7:80: 60:0d:58:02:3b:35:e3:2e:1a:6d:17:a2:5f:28:54: 54:dc:21:b8:a0:87:68:a1:2c:da:5e:ef:d2:54:32: 7a:3a:d0:e4:e4:aa:27:cb:00:5d:82:e3:cd:4b:d8: c4:fc:ad:f5:5e:09:c1:6b:b7:23:89:e1:00:bc:9b: ed:91:3d:7b:71:a7:82:76:30:d1:71:18:f1:7e:b3: d1:89:a3:82:f8:0e:cb:46:bc:ff:ed:a0:2c:a8:0d: 29:6d:cc:c1:ef:88:e9:af:ee:7d:ec:b2:1e:a4:c6: 9f:45:35:0c:27:b1:ed:f2:b4:72:e2:50:48:10:82: ac:47:a2:06:5d:87:f8:18:a1:f8:df:5c:58:7c:81: ad:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:AE:F6:FE:0E:95:B9:EE:E3:03:11:E5:00:6B:A1:47:B6:18:5B:BB X509v3 Authority Key Identifier: keyid:44:40:EE:21:B3:48:9A:65:0A:61:6B:12:0D:8E:5B:E5:79:2E:E0:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE3A3/18823C8C050111EABD9B202CC4F9AE02/REDuIbNImmUKYWsSDY5b5Xku4Es.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/REDuIbNImmUKYWsSDY5b5Xku4Es.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE3A3/18823C8C050111EABD9B202CC4F9AE02/REDuIbNImmUKYWsSDY5b5Xku4Es.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:d8:24:85:ce:9f:ad:db:bb:92:54:6e:b9:0f:7c:6f:f8:ec: 85:d4:0e:1e:ef:2a:b2:75:f5:17:65:b7:fb:04:79:5a:f5:0a: 12:31:06:44:e7:90:3d:09:31:f6:52:d7:11:20:8c:34:c2:9b: 70:a4:c2:f9:e1:f9:3a:d4:ee:15:cd:47:63:17:1e:5f:93:fd: 04:de:cf:45:2b:96:bb:c5:40:44:71:97:96:56:5a:61:56:8f: a2:91:ec:4d:88:18:60:2c:25:a6:af:be:32:df:21:98:a1:51: aa:cc:ff:63:f7:02:bb:3b:83:9e:13:32:df:1d:59:7b:14:95: 5a:0e:ba:1c:4e:85:69:ce:b3:28:c4:1c:89:33:ea:c2:e2:22: bf:ff:25:82:23:8c:60:3d:0b:44:04:04:0d:bb:b0:1a:59:81: a2:9b:67:84:5e:dc:6b:b2:68:51:49:f6:6c:b8:78:4c:fb:2b: f6:40:ba:fd:8f:ad:c9:14:92:bc:d2:89:91:8c:2c:f7:93:3a: 4b:4c:97:1a:a1:b4:ef:ee:be:df:ff:7d:f2:53:48:77:d1:04: ff:58:77:45:20:b4:a0:76:28:b4:02:2b:35:91:57:82:32:a1: 2b:d1:d8:0e:dd:cf:92:1a:48:73:ea:8e:8f:e7:59:2a:48:fe: be:75:d3:49 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDEwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0UzQTMxMTAvBgNVBAUTKDQ0NDBFRTIxQjM0ODlBNjUwQTYxNkIxMjBEOEU1QkU1 NzkyRUUwNEIwHhcNMjUwNjAyMTgzMzMzWhcNMjUwNjA5MTgzMzMzWjAYMRYwFAYD VQQDEw02ODNkZWU3ZC00YjhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu5SzxLhgp+ayfgkU5/WSJStPCvWlKnPCllsxGWvfyMMfOeMYtM2uaaRZdV5J 78KKWdSDkr7FTnP+s0om4hVfsD3I6U/5UvR/RN6IgC+Q/h48BRVpblwVgnVkgauK eScaax1Bgr2lemeo/udqXEv20l2QVD6Vx4BgDVgCOzXjLhptF6JfKFRU3CG4oIdo oSzaXu/SVDJ6OtDk5KonywBdguPNS9jE/K31XgnBa7cjieEAvJvtkT17caeCdjDR cRjxfrPRiaOC+A7LRrz/7aAsqA0pbczB74jpr+597LIepMafRTUMJ7Ht8rRy4lBI EIKsR6IGXYf4GKH431xYfIGttwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPmu9v4O lbnu4wMR5QBroUe2GFu7MB8GA1UdIwQYMBaAFERA7iGzSJplCmFrEg2OW+V5LuBL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTNBMy8xODgyM0M4QzA1 MDExMUVBQkQ5QjIwMkNDNEY5QUUwMi9SRUR1SWJOSW1tVUtZV3NTRFk1YjVYa3U0 RXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1JFRHVJYk5JbW1VS1lXc1NEWTViNVhrdTRFcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTNBMy8xODgyM0M4QzA1MDExMUVBQkQ5QjIwMkNDNEY5QUUwMi9SRUR1SWJOSW1t VUtZV3NTRFk1YjVYa3U0RXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBD2CSFzp+t27uSVG65D3xv+OyF1A4e7yqydfUXZbf7BHla9QoSMQZE 55A9CTH2UtcRIIw0wptwpML54fk61O4VzUdjFx5fk/0E3s9FK5a7xUBEcZeWVlph Vo+ikexNiBhgLCWmr74y3yGYoVGqzP9j9wK7O4OeEzLfHVl7FJVaDrocToVpzrMo xByJM+rC4iK//yWCI4xgPQtEBAQNu7AaWYGim2eEXtxrsmhRSfZsuHhM+yv2QLr9 j63JFJK80omRjCz3kzpLTJcaobTv7r7f/33yU0h30QT/WHdFILSgdii0Ais1kVeC MqEr0dgO3c+SGkhz6o6P51kqSP6+ddNJ -----END CERTIFICATE-----Generated at Tue Jun 3 23:57:14 2025 by rpki-client