$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6552/887D75121D9911E2BA5F258608B02CD2/pW4EM664sPzFnv6R8Or1Bhtw0Rg.mft File: pW4EM664sPzFnv6R8Or1Bhtw0Rg.mft (raw, json) Hash identifier: cx9+HKA4S+NlA5tYxqLVgVt0a74CvZ3/9AcJdyVmNZ0= Subject key identifier: 85:A3:4E:39:64:CC:83:8A:76:64:59:A5:E2:62:6E:26:69:4D:2A:7D Authority key identifier: A5:6E:04:33:AE:B8:B0:FC:C5:9E:FE:91:F0:EA:F5:06:1B:70:D1:18 Certificate issuer: /CN=A91D6552/serialNumber=A56E0433AEB8B0FCC59EFE91F0EAF5061B70D118 Certificate serial: 3482 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW4EM664sPzFnv6R8Or1Bhtw0Rg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D6552/887D75121D9911E2BA5F258608B02CD2/pW4EM664sPzFnv6R8Or1Bhtw0Rg.mft Manifest number: 3482 Signing time: Fri 30 May 2025 14:57:52 +0000 Manifest this update: Fri 30 May 2025 14:57:51 +0000 Manifest next update: Fri 06 Jun 2025 14:57:51 +0000 Files and hashes: 1: pW4EM664sPzFnv6R8Or1Bhtw0Rg.crl (hash: 1wHFHkiTzbHEKBRLcAIHwOpWRYky1CwZV5VzqwWUEfQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D6552/887D75121D9911E2BA5F258608B02CD2/pW4EM664sPzFnv6R8Or1Bhtw0Rg.crl rsync://rpki.apnic.net/member_repository/A91D6552/887D75121D9911E2BA5F258608B02CD2/pW4EM664sPzFnv6R8Or1Bhtw0Rg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW4EM664sPzFnv6R8Or1Bhtw0Rg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 14:57:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13442 (0x3482) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D6552, serialNumber=A56E0433AEB8B0FCC59EFE91F0EAF5061B70D118 Validity Not Before: May 30 14:57:51 2025 GMT Not After : Jun 6 14:57:51 2025 GMT Subject: CN=6839c770-54d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:12:46:90:0d:48:b7:eb:83:e0:44:56:d0:0e: d4:81:19:cb:bc:d3:52:da:7c:f1:79:2b:6e:ea:36: 54:d1:79:02:7a:8c:88:85:f6:ba:61:5e:a7:d2:40: b1:97:08:68:e5:49:c6:5a:fa:ad:66:27:27:03:3c: 9f:28:a5:93:43:09:e8:e6:29:8d:24:49:d3:7a:f1: bf:2f:d7:db:ce:c4:01:7a:33:70:ec:2e:5b:7d:73: ba:ce:fb:57:61:b9:71:b8:6f:64:9d:31:b7:a5:06: c0:c0:09:0b:72:63:85:b6:aa:e7:37:34:15:c6:77: e8:66:9c:d0:71:ed:ec:a4:22:b3:b6:cd:6f:79:72: 30:eb:a0:ed:b4:ee:6c:88:41:7a:6b:0a:32:61:67: c3:b5:6a:28:db:ae:aa:93:87:8d:bb:6b:e4:71:6f: a6:d8:35:27:23:1a:3c:ee:72:32:71:61:91:30:03: 3f:d5:b8:3a:fa:0f:de:ea:6e:10:05:0d:b1:c1:52: 96:14:9f:65:d3:c6:5e:54:96:60:6e:b0:6b:02:73: ab:88:a5:8f:48:8e:1e:83:b1:92:e4:25:3e:10:3e: c1:34:bd:6f:f0:89:05:6f:58:d0:cb:26:f0:5e:e2: 18:2e:af:f4:bd:34:0a:11:39:fa:a0:58:c2:62:02: fe:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:A3:4E:39:64:CC:83:8A:76:64:59:A5:E2:62:6E:26:69:4D:2A:7D X509v3 Authority Key Identifier: keyid:A5:6E:04:33:AE:B8:B0:FC:C5:9E:FE:91:F0:EA:F5:06:1B:70:D1:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D6552/887D75121D9911E2BA5F258608B02CD2/pW4EM664sPzFnv6R8Or1Bhtw0Rg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW4EM664sPzFnv6R8Or1Bhtw0Rg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6552/887D75121D9911E2BA5F258608B02CD2/pW4EM664sPzFnv6R8Or1Bhtw0Rg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:d6:03:e6:6c:7d:5b:d8:03:a4:00:18:ad:c7:e9:71:0f:44: a8:b8:3a:55:3c:c2:3e:fa:25:4a:0e:53:76:ac:7f:9a:fc:99: 30:a9:35:37:a0:18:2c:2a:48:7a:de:09:43:2f:f0:59:ac:bd: b3:e8:15:5e:43:d1:f7:7a:8e:03:01:f5:7b:e5:d8:42:e6:5d: 87:34:73:3c:f9:26:b5:10:2b:5b:fa:22:c4:5d:fe:9d:d2:b0: 00:ec:58:a3:3f:4d:b8:bc:49:23:cc:7e:52:bd:39:16:45:df: ff:59:c5:3f:55:cf:89:2a:f2:83:cb:3d:6e:63:09:39:e6:44: 87:55:fd:31:3b:a8:1a:19:ee:2a:5c:53:0b:cf:4b:d6:c1:1b: e2:cf:7a:e9:f3:1b:9e:6a:68:29:a7:4b:a7:90:01:77:e3:b0: 23:5e:44:6f:ed:3a:a2:3a:84:21:3c:9d:5d:ce:26:be:3c:85: 6d:c3:7a:c2:f1:5d:ca:23:91:15:31:b9:99:69:f2:94:0a:93: af:6f:c6:8b:c2:97:d8:6b:82:65:19:ed:5d:79:1f:98:27:90: 77:d1:e2:ee:74:3d:f6:06:15:b7:d3:08:17:0c:7b:1b:20:eb: 13:6b:72:f1:c0:1e:58:bb:e4:32:f5:d3:93:be:e0:db:87:1c: 65:00:ae:85 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNIIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDY1NTIxMTAvBgNVBAUTKEE1NkUwNDMzQUVCOEIwRkNDNTlFRkU5MUYwRUFGNTA2 MUI3MEQxMTgwHhcNMjUwNTMwMTQ1NzUxWhcNMjUwNjA2MTQ1NzUxWjAYMRYwFAYD VQQDEw02ODM5Yzc3MC01NGQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzhJGkA1It+uD4ERW0A7UgRnLvNNS2nzxeStu6jZU0XkCeoyIhfa6YV6n0kCx lwho5UnGWvqtZicnAzyfKKWTQwno5imNJEnTevG/L9fbzsQBejNw7C5bfXO6zvtX YblxuG9knTG3pQbAwAkLcmOFtqrnNzQVxnfoZpzQce3spCKzts1veXIw66DttO5s iEF6awoyYWfDtWoo266qk4eNu2vkcW+m2DUnIxo87nIycWGRMAM/1bg6+g/e6m4Q BQ2xwVKWFJ9l08ZeVJZgbrBrAnOriKWPSI4eg7GS5CU+ED7BNL1v8IkFb1jQyybw XuIYLq/0vTQKETn6oFjCYgL+kwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIWjTjlk zIOKdmRZpeJibiZpTSp9MB8GA1UdIwQYMBaAFKVuBDOuuLD8xZ7+kfDq9QYbcNEY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjU1Mi84ODdENzUxMjFE OTkxMUUyQkE1RjI1ODYwOEIwMkNEMi9wVzRFTTY2NHNQekZudjZSOE9yMUJodHcw UmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BXNEVNNjY0c1B6Rm52NlI4T3IxQmh0dzBSZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NjU1Mi84ODdENzUxMjFEOTkxMUUyQkE1RjI1ODYwOEIwMkNEMi9wVzRFTTY2NHNQ ekZudjZSOE9yMUJodHcwUmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBz1gPmbH1b2AOkABitx+lxD0SouDpVPMI++iVKDlN2rH+a/JkwqTU3 oBgsKkh63glDL/BZrL2z6BVeQ9H3eo4DAfV75dhC5l2HNHM8+Sa1ECtb+iLEXf6d 0rAA7FijP024vEkjzH5SvTkWRd//WcU/Vc+JKvKDyz1uYwk55kSHVf0xO6gaGe4q XFMLz0vWwRviz3rp8xueamgpp0unkAF347AjXkRv7TqiOoQhPJ1dzia+PIVtw3rC 8V3KI5EVMbmZafKUCpOvb8aLwpfYa4JlGe1deR+YJ5B30eLudD32BhW30wgXDHsb IOsTa3LxwB5Yu+Qy9dOTvuDbhxxlAK6F -----END CERTIFICATE-----Generated at Sat May 31 14:46:33 2025 by rpki-client