$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE533/E8FD4FA4799F11E7B879101DC4F9AE02/CaPsxJ-Dp5iuE58dy8U27m9nzn4.mft File: CaPsxJ-Dp5iuE58dy8U27m9nzn4.mft (raw, json) Hash identifier: sRze5/W3mX3frXARV3rHssXZzQFQUVM3uvZENymyluw= Subject key identifier: C7:50:38:D9:6D:6C:E8:C0:DD:C9:AB:F2:EA:86:0C:58:75:FA:0C:F6 Authority key identifier: 09:A3:EC:C4:9F:83:A7:98:AE:13:9F:1D:CB:C5:36:EE:6F:67:CE:7E Certificate issuer: /CN=A91CE533/serialNumber=09A3ECC49F83A798AE139F1DCBC536EE6F67CE7E Certificate serial: 194C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CaPsxJ-Dp5iuE58dy8U27m9nzn4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE533/E8FD4FA4799F11E7B879101DC4F9AE02/CaPsxJ-Dp5iuE58dy8U27m9nzn4.mft Manifest number: 1940 Signing time: Fri 30 May 2025 16:36:16 +0000 Manifest this update: Fri 30 May 2025 16:36:16 +0000 Manifest next update: Fri 06 Jun 2025 16:36:16 +0000 Files and hashes: 1: CaPsxJ-Dp5iuE58dy8U27m9nzn4.crl (hash: pA9YJloM7AEGoufpjDpBqN72LQKo3YAByv7NFP6yxxM=) 2: 290732FC79A211E79F34D81FC4F9AE02.roa (hash: SR7eVnerj/ud7fW+5gtERIt5ClN7aXRbGYLPuzi6Nlc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE533/E8FD4FA4799F11E7B879101DC4F9AE02/CaPsxJ-Dp5iuE58dy8U27m9nzn4.crl rsync://rpki.apnic.net/member_repository/A91CE533/E8FD4FA4799F11E7B879101DC4F9AE02/CaPsxJ-Dp5iuE58dy8U27m9nzn4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CaPsxJ-Dp5iuE58dy8U27m9nzn4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 16:36:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6476 (0x194c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE533, serialNumber=09A3ECC49F83A798AE139F1DCBC536EE6F67CE7E Validity Not Before: May 30 16:36:16 2025 GMT Not After : Jun 6 16:36:16 2025 GMT Subject: CN=6839de80-b79c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:6f:0b:31:dd:9e:c6:28:5b:bc:da:32:6f:02: 32:06:e3:c8:6d:41:aa:9d:49:62:ec:b7:cb:a5:be: de:cf:14:fb:aa:69:ca:05:af:31:31:f1:ce:a2:53: 70:26:6c:1d:08:51:af:32:d8:31:cf:79:e7:10:c1: d0:d9:4d:53:52:2b:a8:f2:7b:68:63:73:c1:38:7e: 3b:2a:72:7a:85:c1:d0:bc:cc:ad:31:e0:73:08:a0: a5:35:94:6c:7a:04:63:0a:df:cb:f4:c7:64:61:52: 84:e7:ca:0f:35:fc:38:b5:52:eb:8c:ef:91:35:08: d8:e2:f3:69:93:02:bc:26:49:59:74:f4:23:29:29: 82:ec:20:c0:85:04:d5:f0:6b:4c:f1:05:a1:a4:86: fe:4c:e3:ec:ba:ca:34:a0:50:1a:b3:88:98:2c:54: 16:0d:7c:2c:1e:eb:a5:e8:af:d8:63:ae:49:ad:f9: a8:7e:a5:68:20:9a:9e:ca:00:82:1a:a6:f2:f2:5c: c6:74:5d:d0:b8:c0:71:25:d8:2b:64:6a:4c:68:e6: 14:72:8d:04:f9:da:1f:dd:ea:5d:d9:65:9a:af:e2: 7a:5a:c2:6d:7a:40:c4:21:bd:4f:9e:d9:cd:d4:4a: d0:84:57:75:d2:2d:85:48:9e:ce:7a:11:bc:dd:02: bb:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:50:38:D9:6D:6C:E8:C0:DD:C9:AB:F2:EA:86:0C:58:75:FA:0C:F6 X509v3 Authority Key Identifier: keyid:09:A3:EC:C4:9F:83:A7:98:AE:13:9F:1D:CB:C5:36:EE:6F:67:CE:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE533/E8FD4FA4799F11E7B879101DC4F9AE02/CaPsxJ-Dp5iuE58dy8U27m9nzn4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CaPsxJ-Dp5iuE58dy8U27m9nzn4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE533/E8FD4FA4799F11E7B879101DC4F9AE02/CaPsxJ-Dp5iuE58dy8U27m9nzn4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:76:aa:95:20:b8:a1:e3:97:e0:cf:4f:d1:43:f9:2a:6e:b4: 92:6b:b5:8b:f5:59:92:5d:ca:2d:5b:92:e9:4c:ac:da:b4:d6: f5:24:73:b0:49:85:fc:ed:9c:95:4f:da:c6:be:49:18:82:b6: b8:dc:89:60:65:ea:74:9b:75:6e:95:36:c8:bb:57:83:cb:0f: 10:a3:a9:52:c8:a6:ed:f6:8e:20:ba:f1:ef:8d:ec:34:6c:7f: 2e:19:42:db:a3:76:4c:81:26:73:a7:54:bb:1e:51:2d:10:52: 09:18:12:10:08:fb:ef:59:53:38:9d:ed:4f:43:c6:4f:f8:d0: 9c:9c:cd:0e:63:1c:4e:21:d6:5b:d2:5c:47:d4:96:83:fc:01: 89:b6:32:f0:0a:e2:20:07:20:b4:ed:4f:84:6d:ab:c7:71:09: 53:ce:78:34:cc:0f:a4:10:9c:cd:f1:4c:7e:bb:ac:b8:0a:4a: 4c:0c:c1:51:7c:41:92:b4:8a:05:17:a3:04:41:8a:fd:36:1d: 8c:9d:42:51:54:74:cb:ca:ce:7a:4e:e7:04:04:53:ed:9f:9a: bc:86:4d:c2:67:ae:06:f2:9c:7d:dd:1b:14:a1:35:29:8b:0b: 8e:b1:45:bc:c5:0e:46:df:b9:cc:c0:05:19:6c:d8:19:73:1d: 1f:cc:25:92 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGUwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U1MzMxMTAvBgNVBAUTKDA5QTNFQ0M0OUY4M0E3OThBRTEzOUYxRENCQzUzNkVF NkY2N0NFN0UwHhcNMjUwNTMwMTYzNjE2WhcNMjUwNjA2MTYzNjE2WjAYMRYwFAYD VQQDEw02ODM5ZGU4MC1iNzljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1G8LMd2exihbvNoybwIyBuPIbUGqnUli7LfLpb7ezxT7qmnKBa8xMfHOolNw JmwdCFGvMtgxz3nnEMHQ2U1TUiuo8ntoY3PBOH47KnJ6hcHQvMytMeBzCKClNZRs egRjCt/L9MdkYVKE58oPNfw4tVLrjO+RNQjY4vNpkwK8JklZdPQjKSmC7CDAhQTV 8GtM8QWhpIb+TOPsuso0oFAas4iYLFQWDXwsHuul6K/YY65JrfmofqVoIJqeygCC Gqby8lzGdF3QuMBxJdgrZGpMaOYUco0E+dof3epd2WWar+J6WsJtekDEIb1PntnN 1ErQhFd10i2FSJ7OehG83QK70wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMdQONlt bOjA3cmr8uqGDFh1+gz2MB8GA1UdIwQYMBaAFAmj7MSfg6eYrhOfHcvFNu5vZ85+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTUzMy9FOEZENEZBNDc5 OUYxMUU3Qjg3OTEwMURDNEY5QUUwMi9DYVBzeEotRHA1aXVFNThkeThVMjdtOW56 bjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NhUHN4Si1EcDVpdUU1OGR5OFUyN205bnpuNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTUzMy9FOEZENEZBNDc5OUYxMUU3Qjg3OTEwMURDNEY5QUUwMi9DYVBzeEotRHA1 aXVFNThkeThVMjdtOW56bjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA6dqqVILih45fgz0/RQ/kqbrSSa7WL9VmSXcotW5LpTKzatNb1JHOw SYX87ZyVT9rGvkkYgra43IlgZep0m3VulTbIu1eDyw8Qo6lSyKbt9o4guvHvjew0 bH8uGULbo3ZMgSZzp1S7HlEtEFIJGBIQCPvvWVM4ne1PQ8ZP+NCcnM0OYxxOIdZb 0lxH1JaD/AGJtjLwCuIgByC07U+EbavHcQlTzng0zA+kEJzN8Ux+u6y4CkpMDMFR fEGStIoFF6MEQYr9Nh2MnUJRVHTLys56TucEBFPtn5q8hk3CZ64G8px93RsUoTUp iwuOsUW8xQ5G37nMwAUZbNgZcx0fzCWS -----END CERTIFICATE-----Generated at Sat May 31 16:27:49 2025 by rpki-client