$ rpki-client -vvf rpki.apnic.net/member_repository/A91D72CC/4330AC9CB36D11E98246ED0AC4F9AE02/23jZ-TWOVn0wbuO9Hqx0jpYGv48.mft File: 23jZ-TWOVn0wbuO9Hqx0jpYGv48.mft (raw, json) Hash identifier: RHmeh/nu2LRiYZEI9IpsSIyNNroBiPpu41wVTHM/5TQ= Subject key identifier: AA:15:D5:0D:EF:FA:A0:B1:62:F2:63:F6:C2:66:8D:58:65:84:94:DA Authority key identifier: DB:78:D9:F9:35:8E:56:7D:30:6E:E3:BD:1E:AC:74:8E:96:06:BF:8F Certificate issuer: /CN=A91D72CC/serialNumber=DB78D9F9358E567D306EE3BD1EAC748E9606BF8F Certificate serial: 4E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/23jZ-TWOVn0wbuO9Hqx0jpYGv48.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D72CC/4330AC9CB36D11E98246ED0AC4F9AE02/23jZ-TWOVn0wbuO9Hqx0jpYGv48.mft Manifest number: 0E36 Signing time: Fri 30 May 2025 18:02:49 +0000 Manifest this update: Fri 30 May 2025 18:02:48 +0000 Manifest next update: Fri 06 Jun 2025 18:02:48 +0000 Files and hashes: 1: 23jZ-TWOVn0wbuO9Hqx0jpYGv48.crl (hash: kEkq/of1XNYz3hJ3RiTAjFXeIi4B8qzsX2TavfAxQ5g=) 2: DEDE6B3CC8A911EFB805FB63C4F9AE02.roa (hash: vEfRiQNE3h/B834WLq9GOeXPVajCjfh3DLWpODG+4Jw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D72CC/4330AC9CB36D11E98246ED0AC4F9AE02/23jZ-TWOVn0wbuO9Hqx0jpYGv48.crl rsync://rpki.apnic.net/member_repository/A91D72CC/4330AC9CB36D11E98246ED0AC4F9AE02/23jZ-TWOVn0wbuO9Hqx0jpYGv48.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/23jZ-TWOVn0wbuO9Hqx0jpYGv48.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 18:02:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78 (0x4e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D72CC, serialNumber=DB78D9F9358E567D306EE3BD1EAC748E9606BF8F Validity Not Before: May 30 18:02:48 2025 GMT Not After : Jun 6 18:02:48 2025 GMT Subject: CN=6839f2c9-b4a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:97:19:f5:ef:c6:62:12:e0:2c:bd:4f:78:14: 94:d4:83:95:0b:77:56:12:fd:03:94:8b:a9:96:1f: 3c:fd:55:67:ad:91:fe:e3:74:20:a5:e1:ce:27:49: 63:a6:83:13:1a:a5:3e:60:7d:0a:4c:d0:fc:94:4e: fe:41:8f:5e:65:ee:a3:38:62:a5:8d:3c:ef:04:b9: ec:db:14:44:4e:4b:b0:4b:8b:e4:1c:91:4b:ac:cd: 37:b9:ca:b5:99:c1:57:39:56:e2:d8:dd:29:b9:2b: 90:a5:98:fd:b0:d2:25:b4:1a:85:58:c1:ad:ef:1d: 0f:77:80:47:41:07:b4:ef:e7:84:b5:37:a6:0f:00: 65:d2:85:4b:cc:54:d5:3e:1a:00:52:b1:c9:87:4f: f3:4f:6d:8b:a1:60:60:eb:0c:0f:e6:22:69:27:75: 25:f9:17:cb:95:3e:51:dc:d4:3b:47:20:68:48:60: 0e:68:43:9d:41:53:ab:37:36:90:35:bb:8b:ca:87: a3:71:6c:7b:d0:08:d3:9e:19:27:63:ab:cd:c7:a0: 33:b0:d2:82:dc:81:07:87:88:13:7f:96:b0:58:db: cb:72:18:c3:d2:30:fc:24:ba:eb:42:e7:69:09:39: 74:83:f1:cf:6c:21:11:6c:92:d2:d5:a9:18:31:1b: 0c:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:15:D5:0D:EF:FA:A0:B1:62:F2:63:F6:C2:66:8D:58:65:84:94:DA X509v3 Authority Key Identifier: keyid:DB:78:D9:F9:35:8E:56:7D:30:6E:E3:BD:1E:AC:74:8E:96:06:BF:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D72CC/4330AC9CB36D11E98246ED0AC4F9AE02/23jZ-TWOVn0wbuO9Hqx0jpYGv48.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/23jZ-TWOVn0wbuO9Hqx0jpYGv48.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D72CC/4330AC9CB36D11E98246ED0AC4F9AE02/23jZ-TWOVn0wbuO9Hqx0jpYGv48.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:1a:0a:90:05:01:99:6d:d5:de:09:78:ba:a0:53:1d:e5:d8: 6b:1b:36:20:e8:cd:5b:c5:62:f6:c1:cc:d6:7c:68:0a:a1:70: a5:c1:07:52:17:8a:23:e3:2d:2a:ae:c2:4d:7a:89:37:4a:c6: 01:fe:b2:09:a8:bc:19:cd:2b:b9:ec:e5:b6:b6:65:31:d5:7e: 5f:d1:40:00:3d:3d:4b:3b:fd:b3:35:0a:60:eb:71:ca:e6:62: 54:9a:dc:f0:56:2d:85:f1:30:64:5c:e1:8e:36:1e:56:4c:9e: 20:4c:fb:cc:af:a0:a0:98:a6:93:0c:fd:68:5b:7d:9c:5b:6d: 5b:a7:75:e4:bd:7b:2c:96:6e:03:f8:77:c6:44:e7:4c:9c:92: 48:60:b9:d4:c8:67:39:08:8e:ec:a5:b1:72:10:0c:7f:03:02: 58:fc:a7:4e:37:e1:76:a4:92:0a:ae:70:4c:7f:52:41:0d:f4: 0b:a2:e0:62:46:e3:e2:11:2b:b7:86:5c:0a:3f:87:2c:1d:33: 2f:35:18:e0:f8:df:d8:75:1f:a0:6c:1c:92:ac:69:9c:42:6e: f9:7f:11:9b:44:bb:d2:11:dc:c3:33:a3:73:46:f1:4c:20:fe: 73:15:ce:78:30:27:45:ea:65:ac:48:6e:02:fa:08:70:54:1c: 91:cf:13:d9 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE NzJDQzExMC8GA1UEBRMoREI3OEQ5RjkzNThFNTY3RDMwNkVFM0JEMUVBQzc0OEU5 NjA2QkY4RjAeFw0yNTA1MzAxODAyNDhaFw0yNTA2MDYxODAyNDhaMBgxFjAUBgNV BAMTDTY4MzlmMmM5LWI0YTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDklxn178ZiEuAsvU94FJTUg5ULd1YS/QOUi6mWHzz9VWetkf7jdCCl4c4nSWOm gxMapT5gfQpM0PyUTv5Bj15l7qM4YqWNPO8EuezbFEROS7BLi+QckUuszTe5yrWZ wVc5VuLY3Sm5K5ClmP2w0iW0GoVYwa3vHQ93gEdBB7Tv54S1N6YPAGXShUvMVNU+ GgBSscmHT/NPbYuhYGDrDA/mImkndSX5F8uVPlHc1DtHIGhIYA5oQ51BU6s3NpA1 u4vKh6NxbHvQCNOeGSdjq83HoDOw0oLcgQeHiBN/lrBY28tyGMPSMPwkuutC52kJ OXSD8c9sIRFsktLVqRgxGwyJAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUqhXVDe/6 oLFi8mP2wmaNWGWElNowHwYDVR0jBBgwFoAU23jZ+TWOVn0wbuO9Hqx0jpYGv48w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ3MkNDLzQzMzBBQzlDQjM2 RDExRTk4MjQ2RUQwQUM0RjlBRTAyLzIzalotVFdPVm4wd2J1TzlIcXgwanBZR3Y0 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMjNqWi1UV09WbjB3YnVPOUhxeDBqcFlHdjQ4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ3 MkNDLzQzMzBBQzlDQjM2RDExRTk4MjQ2RUQwQUM0RjlBRTAyLzIzalotVFdPVm4w d2J1TzlIcXgwanBZR3Y0OC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAC0aCpAFAZlt1d4JeLqgUx3l2GsbNiDozVvFYvbBzNZ8aAqhcKXBB1IX iiPjLSquwk16iTdKxgH+sgmovBnNK7ns5ba2ZTHVfl/RQAA9PUs7/bM1CmDrccrm YlSa3PBWLYXxMGRc4Y42HlZMniBM+8yvoKCYppMM/WhbfZxbbVundeS9eyyWbgP4 d8ZE50yckkhgudTIZzkIjuylsXIQDH8DAlj8p0434XakkgqucEx/UkEN9Aui4GJG 4+IRK7eGXAo/hywdMy81GOD439h1H6BsHJKsaZxCbvl/EZtEu9IR3MMzo3NG8Uwg /nMVzngwJ0XqZaxIbgL6CHBUHJHPE9k= -----END CERTIFICATE-----Generated at Sat May 31 17:26:19 2025 by rpki-client