$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2FC0/2A815A08475011EA8CD9761FC4F9AE02/Ap-CEkMKjdfnlU_sMT8V2kfLRN0.mft File: Ap-CEkMKjdfnlU_sMT8V2kfLRN0.mft (raw, json) Hash identifier: rj/bTMQtwuF0qDLwEgNxjmLkUDp9oRLVAsc8fsrDL/8= Subject key identifier: AD:57:18:F5:77:0A:D8:14:07:E8:66:AB:9D:29:0A:5C:35:AF:BC:0E Authority key identifier: 02:9F:82:12:43:0A:8D:D7:E7:95:4F:EC:31:3F:15:DA:47:CB:44:DD Certificate issuer: /CN=A91D2FC0/serialNumber=029F8212430A8DD7E7954FEC313F15DA47CB44DD Certificate serial: 0AFB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ap-CEkMKjdfnlU_sMT8V2kfLRN0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D2FC0/2A815A08475011EA8CD9761FC4F9AE02/Ap-CEkMKjdfnlU_sMT8V2kfLRN0.mft Manifest number: 0AF2 Signing time: Fri 30 May 2025 19:34:55 +0000 Manifest this update: Fri 30 May 2025 19:34:55 +0000 Manifest next update: Fri 06 Jun 2025 19:34:55 +0000 Files and hashes: 1: Ap-CEkMKjdfnlU_sMT8V2kfLRN0.crl (hash: b6Rb+gNIoTkR4lOTRlLtYPaVQ6OuDboswxcpBAal8/k=) 2: 81D0374C475111EA82F8B821C4F9AE02.roa (hash: H58uLnLgtQRXxjwDdpgj46LQrUNsRnsgJgSttmaA0KA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D2FC0/2A815A08475011EA8CD9761FC4F9AE02/Ap-CEkMKjdfnlU_sMT8V2kfLRN0.crl rsync://rpki.apnic.net/member_repository/A91D2FC0/2A815A08475011EA8CD9761FC4F9AE02/Ap-CEkMKjdfnlU_sMT8V2kfLRN0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ap-CEkMKjdfnlU_sMT8V2kfLRN0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 19:34:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2811 (0xafb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D2FC0, serialNumber=029F8212430A8DD7E7954FEC313F15DA47CB44DD Validity Not Before: May 30 19:34:55 2025 GMT Not After : Jun 6 19:34:55 2025 GMT Subject: CN=683a085f-d527 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:8f:af:69:43:3e:1b:15:eb:a7:c3:cf:a2:a3: a4:d3:18:66:d1:d2:3e:db:b1:8a:f2:76:ea:75:84: 7a:5f:da:93:e0:ed:67:d7:e6:44:32:7a:37:1f:b8: 00:40:b0:0f:eb:09:6e:73:83:f1:16:72:86:0d:a1: 50:35:38:c9:d1:cd:f0:9b:87:d0:d9:1b:93:03:7c: 48:70:5b:47:4b:78:1a:bd:65:7d:cf:35:0a:4c:71: 7b:18:37:5e:9b:8c:d6:20:26:57:00:b7:a5:ef:00: 1b:f9:9c:d3:92:82:ea:65:a0:03:2f:7a:a1:28:69: 67:3c:e4:53:46:03:ad:7a:49:b7:55:f2:ef:9e:bf: 47:b6:4e:51:a6:72:72:ea:80:f8:82:81:50:0d:c4: 32:a2:a4:22:5f:2e:75:1e:fe:21:d1:ef:11:c0:ef: 43:30:c2:d0:89:76:b2:92:b6:aa:1a:7d:bc:7e:4d: b3:b0:2e:05:23:ad:6e:d4:96:40:df:eb:94:d8:63: 8e:c0:10:1d:1a:60:82:b1:1d:bf:4a:9f:9d:a8:83: 06:2b:3a:73:7c:dc:38:4a:d3:64:5b:e4:59:88:0e: 1d:e0:ad:ea:97:11:a8:bc:54:c7:d5:8b:76:69:ae: 4e:ca:56:ae:c7:86:03:31:4e:63:e5:e0:be:3f:82: 8c:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:57:18:F5:77:0A:D8:14:07:E8:66:AB:9D:29:0A:5C:35:AF:BC:0E X509v3 Authority Key Identifier: keyid:02:9F:82:12:43:0A:8D:D7:E7:95:4F:EC:31:3F:15:DA:47:CB:44:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D2FC0/2A815A08475011EA8CD9761FC4F9AE02/Ap-CEkMKjdfnlU_sMT8V2kfLRN0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ap-CEkMKjdfnlU_sMT8V2kfLRN0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2FC0/2A815A08475011EA8CD9761FC4F9AE02/Ap-CEkMKjdfnlU_sMT8V2kfLRN0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:9d:40:39:4c:db:23:6e:53:2f:87:05:4a:7a:36:47:cd:76: 4c:ba:f9:b6:9b:20:b2:c9:1b:71:3a:52:8a:34:66:8a:69:94: 91:06:db:fe:2c:a8:1a:4b:1d:b1:93:e2:87:dc:06:bb:72:d8: 93:4e:38:21:db:bc:fc:7e:4b:31:6c:62:d4:41:45:4e:3b:30: c8:93:ae:c7:60:4f:64:24:37:f1:76:40:d3:85:5e:c8:68:f0: d7:75:23:87:29:04:4e:e1:7c:17:4a:ae:ec:d2:3e:3a:fd:2b: 19:d4:3f:48:17:69:31:54:9b:6c:b0:96:a3:4c:76:9f:6e:8e: 0a:35:e3:33:81:95:04:28:39:a1:91:0a:a3:7f:69:bb:15:74: 77:e9:ca:f5:32:3a:9a:40:21:72:a2:c5:c7:0b:e5:46:11:84: 3f:0f:f9:c4:fd:05:db:26:dc:c4:21:ad:db:38:9b:bb:dd:69: f9:2a:96:75:fe:22:34:0c:a9:00:4b:bd:23:40:4b:48:e4:97: a6:e8:04:ea:ba:8f:d1:bd:a7:11:fb:79:f0:33:e1:05:4a:4d: e4:7b:87:37:d8:69:ce:96:13:28:b7:36:56:aa:13:d4:ef:54: 25:6f:15:d5:0c:ae:e0:f0:e2:79:af:76:f9:82:62:1e:16:b4: aa:ef:61:d7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCvswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDJGQzAxMTAvBgNVBAUTKDAyOUY4MjEyNDMwQThERDdFNzk1NEZFQzMxM0YxNURB NDdDQjQ0REQwHhcNMjUwNTMwMTkzNDU1WhcNMjUwNjA2MTkzNDU1WjAYMRYwFAYD VQQDEw02ODNhMDg1Zi1kNTI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2o+vaUM+GxXrp8PPoqOk0xhm0dI+27GK8nbqdYR6X9qT4O1n1+ZEMno3H7gA QLAP6wluc4PxFnKGDaFQNTjJ0c3wm4fQ2RuTA3xIcFtHS3gavWV9zzUKTHF7GDde m4zWICZXALel7wAb+ZzTkoLqZaADL3qhKGlnPORTRgOtekm3VfLvnr9Htk5RpnJy 6oD4goFQDcQyoqQiXy51Hv4h0e8RwO9DMMLQiXaykraqGn28fk2zsC4FI61u1JZA 3+uU2GOOwBAdGmCCsR2/Sp+dqIMGKzpzfNw4StNkW+RZiA4d4K3qlxGovFTH1Yt2 aa5Oylaux4YDMU5j5eC+P4KMWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK1XGPV3 CtgUB+hmq50pClw1r7wOMB8GA1UdIwQYMBaAFAKfghJDCo3X55VP7DE/FdpHy0Td MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMkZDMC8yQTgxNUEwODQ3 NTAxMUVBOENEOTc2MUZDNEY5QUUwMi9BcC1DRWtNS2pkZm5sVV9zTVQ4VjJrZkxS TjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FwLUNFa01LamRmbmxVX3NNVDhWMmtmTFJOMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MkZDMC8yQTgxNUEwODQ3NTAxMUVBOENEOTc2MUZDNEY5QUUwMi9BcC1DRWtNS2pk Zm5sVV9zTVQ4VjJrZkxSTjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBTnUA5TNsjblMvhwVKejZHzXZMuvm2myCyyRtxOlKKNGaKaZSRBtv+ LKgaSx2xk+KH3Aa7ctiTTjgh27z8fksxbGLUQUVOOzDIk67HYE9kJDfxdkDThV7I aPDXdSOHKQRO4XwXSq7s0j46/SsZ1D9IF2kxVJtssJajTHafbo4KNeMzgZUEKDmh kQqjf2m7FXR36cr1MjqaQCFyosXHC+VGEYQ/D/nE/QXbJtzEIa3bOJu73Wn5KpZ1 /iI0DKkAS70jQEtI5Jem6ATquo/RvacR+3nwM+EFSk3ke4c32GnOlhMotzZWqhPU 71QlbxXVDK7g8OJ5r3b5gmIeFrSq72HX -----END CERTIFICATE-----Generated at Sat May 31 16:27:51 2025 by rpki-client