$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2659/C468E9C6F0C311E9926CCD0EC4F9AE02/anyGILARkTWk4pZxECAuepIQ_XY.mft File: anyGILARkTWk4pZxECAuepIQ_XY.mft (raw, json) Hash identifier: Qxro2QF4++QtBT4ZNOveXCq+yOaSBSeSwO87zeJOE8U= Subject key identifier: A1:EE:5C:09:5D:7E:C7:47:E4:4F:42:D0:8A:86:0E:6D:76:01:31:94 Authority key identifier: 6A:7C:86:20:B0:11:91:35:A4:E2:96:71:10:20:2E:7A:92:10:FD:76 Certificate issuer: /CN=A91D2659/serialNumber=6A7C8620B0119135A4E2967110202E7A9210FD76 Certificate serial: 0CAE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/anyGILARkTWk4pZxECAuepIQ_XY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D2659/C468E9C6F0C311E9926CCD0EC4F9AE02/anyGILARkTWk4pZxECAuepIQ_XY.mft Manifest number: 0CA8 Signing time: Fri 30 May 2025 18:20:29 +0000 Manifest this update: Fri 30 May 2025 18:20:28 +0000 Manifest next update: Fri 06 Jun 2025 18:20:28 +0000 Files and hashes: 1: anyGILARkTWk4pZxECAuepIQ_XY.crl (hash: AiGP8rgYwWNqv+6pYB20YKL25Hyhu1cq2K2x4laru/M=) 2: 3ED2E738F0C511E9AD7DCC11C4F9AE02.roa (hash: sDU0CzCwuoT0jsGzITGNqVvjEqL0/qHnbm4MS2vPAPc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D2659/C468E9C6F0C311E9926CCD0EC4F9AE02/anyGILARkTWk4pZxECAuepIQ_XY.crl rsync://rpki.apnic.net/member_repository/A91D2659/C468E9C6F0C311E9926CCD0EC4F9AE02/anyGILARkTWk4pZxECAuepIQ_XY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/anyGILARkTWk4pZxECAuepIQ_XY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 18:20:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3246 (0xcae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D2659, serialNumber=6A7C8620B0119135A4E2967110202E7A9210FD76 Validity Not Before: May 30 18:20:28 2025 GMT Not After : Jun 6 18:20:28 2025 GMT Subject: CN=6839f6ed-ff50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:d4:a8:40:2d:dc:20:53:1b:b7:99:79:b4:0d: c4:98:b1:0a:5f:70:63:e6:39:79:57:fb:64:82:67: 53:41:fd:45:a4:34:3e:e9:ef:06:52:16:22:2a:0e: 8e:5e:71:a0:b7:84:b3:0c:de:02:64:70:a7:63:f1: a5:9c:81:0c:b2:a1:35:55:51:cd:41:2f:31:0a:31: 59:cc:ee:00:8b:5f:c8:31:8e:a7:71:35:66:f5:63: cf:46:98:48:32:6b:6b:2d:7e:5b:64:57:b1:3d:e6: 77:14:0b:20:f3:ef:fd:1a:44:ee:9b:03:ac:41:6b: 26:16:59:a7:30:f7:83:e0:65:6b:3e:01:82:27:bd: 89:2d:fb:fb:d0:a5:c6:46:7e:e6:47:a9:79:55:f6: dc:ab:df:94:01:c9:1e:e9:2b:74:18:54:88:df:c2: 38:5f:4e:64:94:01:ff:13:a3:47:cd:25:7b:5a:34: 59:9d:87:09:6a:5e:c2:2b:0f:4c:df:ea:f9:31:d2: 45:65:23:9c:b4:b3:d1:6f:e3:67:3f:04:17:6c:a0: d3:fd:0b:d8:f3:e8:15:84:27:33:8a:51:2d:cd:e0: e2:42:5c:89:fb:ae:9e:cb:45:ce:79:d9:d8:c5:24: b5:b5:57:b3:c3:9d:83:1a:7e:09:89:07:25:5d:cb: 34:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:EE:5C:09:5D:7E:C7:47:E4:4F:42:D0:8A:86:0E:6D:76:01:31:94 X509v3 Authority Key Identifier: keyid:6A:7C:86:20:B0:11:91:35:A4:E2:96:71:10:20:2E:7A:92:10:FD:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D2659/C468E9C6F0C311E9926CCD0EC4F9AE02/anyGILARkTWk4pZxECAuepIQ_XY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/anyGILARkTWk4pZxECAuepIQ_XY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2659/C468E9C6F0C311E9926CCD0EC4F9AE02/anyGILARkTWk4pZxECAuepIQ_XY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:e3:fc:b4:09:d9:0c:5d:24:e2:3b:7b:4d:7a:60:74:d7:ee: 04:d5:fd:9b:7c:18:19:0e:25:bc:99:ae:e5:c3:fe:a1:a7:16: f9:16:dd:ba:ba:bf:d6:f3:a4:db:b1:f7:34:9a:ea:db:77:92: 27:39:ae:ad:e1:7f:e4:f4:a6:b1:88:1f:a1:1a:e2:50:ba:bb: f1:54:4e:8e:32:5d:15:f4:9b:bb:1a:87:70:42:93:a1:93:f9: 9d:6e:30:e3:cc:1e:74:57:ea:f0:06:25:0a:a7:1a:a7:2c:46: b4:25:44:f9:97:7f:71:22:c0:85:76:48:5c:62:c3:ec:e8:fc: f9:2f:ba:a2:a1:55:9b:db:28:3e:d6:94:b6:21:d6:6e:a4:1e: c1:a1:59:61:31:b4:cd:d8:38:82:da:a5:60:ec:ca:13:3f:ea: 17:54:96:b6:e3:7d:96:4d:54:a1:29:a5:dc:7e:c7:40:5e:2e: fb:98:71:ff:04:ca:76:8c:85:6b:1a:1a:2d:b0:02:c3:f1:94: 39:16:f2:95:a7:9b:b3:ac:0c:b7:1c:b3:d5:bf:8c:a5:c6:43: d7:91:b1:75:f3:d1:18:f1:1d:37:5b:e9:09:01:3c:89:07:3d: cc:67:e9:fb:fd:44:e2:2f:4f:14:01:b0:ec:d4:b1:d9:5f:57: 8d:47:e4:cb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDK4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDI2NTkxMTAvBgNVBAUTKDZBN0M4NjIwQjAxMTkxMzVBNEUyOTY3MTEwMjAyRTdB OTIxMEZENzYwHhcNMjUwNTMwMTgyMDI4WhcNMjUwNjA2MTgyMDI4WjAYMRYwFAYD VQQDEw02ODM5ZjZlZC1mZjUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr9SoQC3cIFMbt5l5tA3EmLEKX3Bj5jl5V/tkgmdTQf1FpDQ+6e8GUhYiKg6O XnGgt4SzDN4CZHCnY/GlnIEMsqE1VVHNQS8xCjFZzO4Ai1/IMY6ncTVm9WPPRphI MmtrLX5bZFexPeZ3FAsg8+/9GkTumwOsQWsmFlmnMPeD4GVrPgGCJ72JLfv70KXG Rn7mR6l5Vfbcq9+UAcke6St0GFSI38I4X05klAH/E6NHzSV7WjRZnYcJal7CKw9M 3+r5MdJFZSOctLPRb+NnPwQXbKDT/QvY8+gVhCczilEtzeDiQlyJ+66ey0XOednY xSS1tVezw52DGn4JiQclXcs0gwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKHuXAld fsdH5E9C0IqGDm12ATGUMB8GA1UdIwQYMBaAFGp8hiCwEZE1pOKWcRAgLnqSEP12 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMjY1OS9DNDY4RTlDNkYw QzMxMUU5OTI2Q0NEMEVDNEY5QUUwMi9hbnlHSUxBUmtUV2s0cFp4RUNBdWVwSVFf WFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FueUdJTEFSa1RXazRwWnhFQ0F1ZXBJUV9YWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MjY1OS9DNDY4RTlDNkYwQzMxMUU5OTI2Q0NEMEVDNEY5QUUwMi9hbnlHSUxBUmtU V2s0cFp4RUNBdWVwSVFfWFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZ4/y0CdkMXSTiO3tNemB01+4E1f2bfBgZDiW8ma7lw/6hpxb5Ft26 ur/W86Tbsfc0murbd5InOa6t4X/k9KaxiB+hGuJQurvxVE6OMl0V9Ju7GodwQpOh k/mdbjDjzB50V+rwBiUKpxqnLEa0JUT5l39xIsCFdkhcYsPs6Pz5L7qioVWb2yg+ 1pS2IdZupB7BoVlhMbTN2DiC2qVg7MoTP+oXVJa2432WTVShKaXcfsdAXi77mHH/ BMp2jIVrGhotsALD8ZQ5FvKVp5uzrAy3HLPVv4ylxkPXkbF189EY8R03W+kJATyJ Bz3MZ+n7/UTiL08UAbDs1LHZX1eNR+TL -----END CERTIFICATE-----Generated at Sat May 31 17:08:51 2025 by rpki-client