$ rpki-client -vvf rpki.apnic.net/member_repository/A91D50A2/E4C88512D02711EEBF5B693CC4F9AE02/_rhjYz3rcT99klaMcXmFhLC61mY.mft File: _rhjYz3rcT99klaMcXmFhLC61mY.mft (raw, json) Hash identifier: mzwb6NouMgjC8aNzbyYlKUXmlLZqRJuBGk8SXzQt4RY= Subject key identifier: 3E:F1:95:D6:26:35:DD:40:EF:13:7B:9A:EA:46:AC:37:82:2F:CE:24 Authority key identifier: FE:B8:63:63:3D:EB:71:3F:7D:92:56:8C:71:79:85:84:B0:BA:D6:66 Certificate issuer: /CN=A91D50A2/serialNumber=FEB863633DEB713F7D92568C71798584B0BAD666 Certificate serial: F2 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_rhjYz3rcT99klaMcXmFhLC61mY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D50A2/E4C88512D02711EEBF5B693CC4F9AE02/_rhjYz3rcT99klaMcXmFhLC61mY.mft Manifest number: F0 Signing time: Sun 01 Jun 2025 04:59:10 +0000 Manifest this update: Sun 01 Jun 2025 04:59:10 +0000 Manifest next update: Sun 08 Jun 2025 04:59:10 +0000 Files and hashes: 1: _rhjYz3rcT99klaMcXmFhLC61mY.crl (hash: dl4zSpOwqkPVU+1HcoZgYN0yGw6fi+yCx6D3vwbtEJ4=) 2: 249FA95E9D4111EFA3DA7F75C4F9AE02.roa (hash: SAKcVkUSU/ZcJXpgMJhIHN2SX2uP3Z2m9YsmC8MIfhA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D50A2/E4C88512D02711EEBF5B693CC4F9AE02/_rhjYz3rcT99klaMcXmFhLC61mY.crl rsync://rpki.apnic.net/member_repository/A91D50A2/E4C88512D02711EEBF5B693CC4F9AE02/_rhjYz3rcT99klaMcXmFhLC61mY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_rhjYz3rcT99klaMcXmFhLC61mY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 04:59:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 242 (0xf2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D50A2, serialNumber=FEB863633DEB713F7D92568C71798584B0BAD666 Validity Not Before: Jun 1 04:59:10 2025 GMT Not After : Jun 8 04:59:10 2025 GMT Subject: CN=683bde1e-7904 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:fc:2c:2f:84:33:05:5f:d1:e3:89:02:85:35: b7:4a:24:c9:2a:f8:d5:50:71:ec:97:a3:91:2b:01: b6:67:20:b3:25:ef:89:94:b9:b9:06:15:40:a7:ba: b4:e4:38:1a:1e:82:97:95:f0:5d:5b:c2:7b:44:cf: c1:c4:2f:36:b6:88:4f:3d:3b:f5:19:86:52:6c:dc: 39:cf:05:22:d2:77:47:a9:fe:57:3d:d4:2b:1b:a6: 3b:cc:8d:76:65:29:05:a5:fb:db:da:ba:73:7f:51: 90:14:fa:c5:45:04:56:cf:71:88:54:79:db:df:62: 1b:49:c0:ce:1e:cf:de:f6:3d:c9:be:d6:ee:d7:50: 80:d4:d0:5e:51:1c:76:31:98:db:b5:85:45:cb:d6: 54:38:98:9e:25:22:88:ea:fb:78:22:fa:48:1a:20: 6a:0b:f5:ab:02:93:ab:36:94:f9:c0:0a:21:6c:1a: c5:21:68:a0:a9:92:2f:1b:80:a3:64:d7:48:1d:c6: a0:45:af:f0:e5:41:bb:e6:16:25:b6:ce:79:9e:87: d0:6e:48:9f:75:a8:4e:b7:df:06:82:d2:44:ed:39: b8:25:6e:87:a2:ef:4a:dd:53:19:54:6d:68:5f:14: fa:9f:e6:dd:a9:93:ef:e6:d3:f6:f7:1a:19:84:93: bd:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:F1:95:D6:26:35:DD:40:EF:13:7B:9A:EA:46:AC:37:82:2F:CE:24 X509v3 Authority Key Identifier: keyid:FE:B8:63:63:3D:EB:71:3F:7D:92:56:8C:71:79:85:84:B0:BA:D6:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D50A2/E4C88512D02711EEBF5B693CC4F9AE02/_rhjYz3rcT99klaMcXmFhLC61mY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_rhjYz3rcT99klaMcXmFhLC61mY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D50A2/E4C88512D02711EEBF5B693CC4F9AE02/_rhjYz3rcT99klaMcXmFhLC61mY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:38:5b:f4:c3:eb:82:a0:eb:77:c9:54:08:3b:f0:5b:23:9b: b4:cb:02:29:38:03:4b:4d:62:37:d4:de:d4:fe:8a:da:20:89: ad:f6:91:39:7f:8e:09:c2:25:23:8a:4c:42:68:22:b3:4e:17: e3:e4:a3:9b:81:e8:f1:17:a0:f1:27:d8:b5:b7:71:f0:c3:e2: 3c:62:4c:17:8c:18:99:c9:a3:00:07:d6:70:6a:17:eb:67:f9: bc:cc:15:98:6f:cb:f7:50:7e:55:d7:72:72:7f:09:b6:bf:13: bf:20:50:61:e7:3b:81:07:33:0b:9e:e4:25:44:40:78:c4:be: 9d:2c:51:0f:38:16:f9:7e:77:d8:bd:b1:87:f5:d7:ca:09:bd: 83:2c:e2:53:d6:d0:f8:1b:f8:6c:53:96:da:47:a9:42:a0:73: 6e:b5:0b:72:4f:e9:ee:7f:7e:98:16:0a:3b:5d:9a:4d:12:a2: fa:1b:38:62:f5:f2:b8:c1:04:11:c6:56:b3:0f:6e:4c:aa:cc: b6:47:56:8b:6b:2f:45:8b:0c:56:ec:46:8f:36:d3:e3:e8:cc: ed:a4:cf:48:ec:d9:93:13:16:30:41:a1:e9:a9:dc:4a:6b:a5: b4:96:5a:c3:a6:87:09:af:e9:35:64:43:0e:dd:f8:ad:f5:55: 72:5a:13:c1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDUwQTIxMTAvBgNVBAUTKEZFQjg2MzYzM0RFQjcxM0Y3RDkyNTY4QzcxNzk4NTg0 QjBCQUQ2NjYwHhcNMjUwNjAxMDQ1OTEwWhcNMjUwNjA4MDQ1OTEwWjAYMRYwFAYD VQQDEw02ODNiZGUxZS03OTA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0vwsL4QzBV/R44kChTW3SiTJKvjVUHHsl6ORKwG2ZyCzJe+JlLm5BhVAp7q0 5DgaHoKXlfBdW8J7RM/BxC82tohPPTv1GYZSbNw5zwUi0ndHqf5XPdQrG6Y7zI12 ZSkFpfvb2rpzf1GQFPrFRQRWz3GIVHnb32IbScDOHs/e9j3Jvtbu11CA1NBeURx2 MZjbtYVFy9ZUOJieJSKI6vt4IvpIGiBqC/WrApOrNpT5wAohbBrFIWigqZIvG4Cj ZNdIHcagRa/w5UG75hYlts55nofQbkifdahOt98GgtJE7Tm4JW6Hou9K3VMZVG1o XxT6n+bdqZPv5tP29xoZhJO9XQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD7xldYm Nd1A7xN7mupGrDeCL84kMB8GA1UdIwQYMBaAFP64Y2M963E/fZJWjHF5hYSwutZm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENTBBMi9FNEM4ODUxMkQw MjcxMUVFQkY1QjY5M0NDNEY5QUUwMi9fcmhqWXozcmNUOTlrbGFNY1htRmhMQzYx bVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL19yaGpZejNyY1Q5OWtsYU1jWG1GaExDNjFtWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NTBBMi9FNEM4ODUxMkQwMjcxMUVFQkY1QjY5M0NDNEY5QUUwMi9fcmhqWXozcmNU OTlrbGFNY1htRmhMQzYxbVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAkOFv0w+uCoOt3yVQIO/BbI5u0ywIpOANLTWI31N7U/oraIImt9pE5 f44JwiUjikxCaCKzThfj5KObgejxF6DxJ9i1t3Hww+I8YkwXjBiZyaMAB9Zwahfr Z/m8zBWYb8v3UH5V13Jyfwm2vxO/IFBh5zuBBzMLnuQlREB4xL6dLFEPOBb5fnfY vbGH9dfKCb2DLOJT1tD4G/hsU5baR6lCoHNutQtyT+nuf36YFgo7XZpNEqL6Gzhi 9fK4wQQRxlazD25Mqsy2R1aLay9FiwxW7EaPNtPj6MztpM9I7NmTExYwQaHpqdxK a6W0llrDpocJr+k1ZEMO3fit9VVyWhPB -----END CERTIFICATE-----Generated at Mon Jun 2 21:56:50 2025 by rpki-client