$ rpki-client -vvf rpki.apnic.net/member_repository/A91D415B/5C543684F1CD11EC9339B95FC4F9AE02/asTBtLaRvs8S3fcmX5Ym1ZrHZsw.mft File: asTBtLaRvs8S3fcmX5Ym1ZrHZsw.mft (raw, json) Hash identifier: iYpnxcVLZrGpmIskCgF2IUfJC0EbZXuIgcbR72m11Yk= Subject key identifier: 5C:F1:22:80:B7:A6:E4:56:B9:2D:62:FB:25:69:CD:36:04:23:E1:5C Authority key identifier: 6A:C4:C1:B4:B6:91:BE:CF:12:DD:F7:26:5F:96:26:D5:9A:C7:66:CC Certificate issuer: /CN=A91D415B/serialNumber=6AC4C1B4B691BECF12DDF7265F9626D59AC766CC Certificate serial: 02C3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/asTBtLaRvs8S3fcmX5Ym1ZrHZsw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D415B/5C543684F1CD11EC9339B95FC4F9AE02/asTBtLaRvs8S3fcmX5Ym1ZrHZsw.mft Manifest number: 02BF Signing time: Sat 31 May 2025 01:37:35 +0000 Manifest this update: Sat 31 May 2025 01:37:34 +0000 Manifest next update: Sat 07 Jun 2025 01:37:34 +0000 Files and hashes: 1: asTBtLaRvs8S3fcmX5Ym1ZrHZsw.crl (hash: mGdqEW5FOgfhrouhXQVjt010xn81K1ASEuiSRyVEYkQ=) 2: A98754E2F1D011ECA4B56760C4F9AE02.roa (hash: dMqJTsYzp1pmPIaM1/eJLOhl+l3EGAIHqHSSCk8rEN0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D415B/5C543684F1CD11EC9339B95FC4F9AE02/asTBtLaRvs8S3fcmX5Ym1ZrHZsw.crl rsync://rpki.apnic.net/member_repository/A91D415B/5C543684F1CD11EC9339B95FC4F9AE02/asTBtLaRvs8S3fcmX5Ym1ZrHZsw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/asTBtLaRvs8S3fcmX5Ym1ZrHZsw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 01:37:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 707 (0x2c3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D415B, serialNumber=6AC4C1B4B691BECF12DDF7265F9626D59AC766CC Validity Not Before: May 31 01:37:34 2025 GMT Not After : Jun 7 01:37:34 2025 GMT Subject: CN=683a5d5f-410e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:75:31:4d:17:36:b5:8e:3b:eb:16:82:f0:f7: 16:48:3a:53:b0:70:c5:3c:11:c5:6a:2d:94:2c:a2: ba:2f:a9:9d:6e:b3:00:29:f1:3f:26:43:0c:fb:f2: 30:4b:10:91:0c:72:eb:8f:f3:a5:f5:a8:60:79:01: 50:99:07:bc:e1:79:10:16:c8:2b:20:0e:6d:4b:5a: 6a:0e:b0:fe:32:21:47:30:fd:5f:7e:6c:54:bb:2a: 3a:15:5a:e1:0b:30:b0:d0:aa:64:ce:4d:9d:e6:78: 3d:01:47:80:c7:86:f5:68:66:11:71:bb:bf:64:3a: 6b:c7:a3:dc:f4:56:c0:be:a0:0a:72:e9:ec:ce:a8: e8:a6:e6:14:f3:b3:f2:93:fd:b3:e7:00:3a:30:e2: 53:aa:1d:8f:5f:22:41:a5:92:aa:41:6e:ed:57:9c: fd:e0:53:ea:e6:47:87:08:a2:a3:cf:a1:41:fb:3d: c6:74:09:2f:ab:8c:77:0a:fa:38:4a:cc:ca:39:f9: 1b:0b:0d:6b:71:64:ae:78:0f:42:a7:ee:0c:00:c2: 97:32:39:40:d8:df:65:d0:ef:fd:ca:bc:21:47:63: 13:0b:7e:c5:74:e2:18:0f:29:8a:6d:2b:9f:07:9f: 52:5d:ae:15:3b:6d:62:34:49:66:21:4c:4e:64:bc: 6a:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:F1:22:80:B7:A6:E4:56:B9:2D:62:FB:25:69:CD:36:04:23:E1:5C X509v3 Authority Key Identifier: keyid:6A:C4:C1:B4:B6:91:BE:CF:12:DD:F7:26:5F:96:26:D5:9A:C7:66:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D415B/5C543684F1CD11EC9339B95FC4F9AE02/asTBtLaRvs8S3fcmX5Ym1ZrHZsw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/asTBtLaRvs8S3fcmX5Ym1ZrHZsw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D415B/5C543684F1CD11EC9339B95FC4F9AE02/asTBtLaRvs8S3fcmX5Ym1ZrHZsw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:af:df:7b:2f:51:21:1b:c4:5b:26:5c:b3:49:0b:05:0f:ef: 7d:d3:d7:f8:7a:a9:81:2e:a1:13:5d:c0:1b:a0:fa:ce:b2:2e: e4:49:f5:1f:b0:0a:a3:ba:00:75:52:3d:88:23:fc:b8:d9:d2: e6:2f:ca:1c:10:34:13:ee:6e:bc:59:cd:26:3a:e5:1f:ed:fe: ad:9e:4b:cd:72:7e:48:2c:25:20:43:cd:64:9d:e2:dc:4b:34: ea:2f:74:70:7c:48:dc:da:0b:0d:8d:d1:57:7e:3e:64:9d:9f: e6:03:42:57:11:d1:7d:e2:bd:6a:15:4e:b8:04:de:54:79:5a: e0:8d:67:c6:df:3c:c7:06:53:b7:8b:b6:f4:ec:7d:46:89:26: 7a:bd:83:29:72:da:c1:fc:47:62:18:fd:9d:14:61:76:b1:7d: 30:57:5c:54:ae:44:d1:64:f3:f2:e3:09:86:35:e6:d8:48:0c: 3f:df:45:bf:52:ec:16:25:00:c5:4f:d7:89:80:8e:69:a7:43: 53:bd:70:ca:ed:3f:52:c0:0b:ce:18:b7:53:7f:12:97:41:d5: a3:3b:3b:b3:71:86:3d:2b:a5:a2:f9:10:e0:d9:fe:c7:8b:51: 01:72:45:cb:1d:cb:7c:8c:ed:3f:ec:cb:80:01:8a:ea:57:20: 04:0a:a5:13 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAsMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDQxNUIxMTAvBgNVBAUTKDZBQzRDMUI0QjY5MUJFQ0YxMkRERjcyNjVGOTYyNkQ1 OUFDNzY2Q0MwHhcNMjUwNTMxMDEzNzM0WhcNMjUwNjA3MDEzNzM0WjAYMRYwFAYD VQQDEw02ODNhNWQ1Zi00MTBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxXUxTRc2tY476xaC8PcWSDpTsHDFPBHFai2ULKK6L6mdbrMAKfE/JkMM+/Iw SxCRDHLrj/Ol9ahgeQFQmQe84XkQFsgrIA5tS1pqDrD+MiFHMP1ffmxUuyo6FVrh CzCw0Kpkzk2d5ng9AUeAx4b1aGYRcbu/ZDprx6Pc9FbAvqAKcunszqjopuYU87Py k/2z5wA6MOJTqh2PXyJBpZKqQW7tV5z94FPq5keHCKKjz6FB+z3GdAkvq4x3Cvo4 SszKOfkbCw1rcWSueA9Cp+4MAMKXMjlA2N9l0O/9yrwhR2MTC37FdOIYDymKbSuf B59SXa4VO21iNElmIUxOZLxqnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFzxIoC3 puRWuS1i+yVpzTYEI+FcMB8GA1UdIwQYMBaAFGrEwbS2kb7PEt33Jl+WJtWax2bM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDE1Qi81QzU0MzY4NEYx Q0QxMUVDOTMzOUI5NUZDNEY5QUUwMi9hc1RCdExhUnZzOFMzZmNtWDVZbTFackha c3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FzVEJ0TGFSdnM4UzNmY21YNVltMVpySFpzdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NDE1Qi81QzU0MzY4NEYxQ0QxMUVDOTMzOUI5NUZDNEY5QUUwMi9hc1RCdExhUnZz OFMzZmNtWDVZbTFackhac3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCcr997L1EhG8RbJlyzSQsFD+9909f4eqmBLqETXcAboPrOsi7kSfUf sAqjugB1Uj2II/y42dLmL8ocEDQT7m68Wc0mOuUf7f6tnkvNcn5ILCUgQ81kneLc SzTqL3RwfEjc2gsNjdFXfj5knZ/mA0JXEdF94r1qFU64BN5UeVrgjWfG3zzHBlO3 i7b07H1GiSZ6vYMpctrB/EdiGP2dFGF2sX0wV1xUrkTRZPPy4wmGNebYSAw/30W/ UuwWJQDFT9eJgI5pp0NTvXDK7T9SwAvOGLdTfxKXQdWjOzuzcYY9K6Wi+RDg2f7H i1EBckXLHct8jO0/7MuAAYrqVyAECqUT -----END CERTIFICATE-----Generated at Sat May 31 16:38:48 2025 by rpki-client