$ rpki-client -vvf rpki.apnic.net/member_repository/A91D73BB/7ED57586E18D11EE990FEC4FC4F9AE02/k3obX-sKKTNg6k6IRzUuf9Nsx6U.mft File: k3obX-sKKTNg6k6IRzUuf9Nsx6U.mft (raw, json) Hash identifier: aL5oPNtrX1riRBYFjWskDC3nK0JAdNSLdILWpVC7WaA= Subject key identifier: B7:5D:E7:59:C7:DA:AB:D3:06:62:E1:81:BA:48:94:A3:99:A9:7B:D4 Authority key identifier: 93:7A:1B:5F:EB:0A:29:33:60:EA:4E:88:47:35:2E:7F:D3:6C:C7:A5 Certificate issuer: /CN=A91D73BB/serialNumber=937A1B5FEB0A293360EA4E8847352E7FD36CC7A5 Certificate serial: F4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/k3obX-sKKTNg6k6IRzUuf9Nsx6U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D73BB/7ED57586E18D11EE990FEC4FC4F9AE02/k3obX-sKKTNg6k6IRzUuf9Nsx6U.mft Manifest number: EC Signing time: Sun 01 Jun 2025 05:05:36 +0000 Manifest this update: Sun 01 Jun 2025 05:05:36 +0000 Manifest next update: Sun 08 Jun 2025 05:05:36 +0000 Files and hashes: 1: k3obX-sKKTNg6k6IRzUuf9Nsx6U.crl (hash: dNSFokVY02Mxt7V7wePDLjS6z4bsE82BB47gxZ0y2Bo=) 2: CFE87CFEE74911EE9E36BA2AC4F9AE02.roa (hash: UKwsFEyPykSAjx1cUaIvhwF+WNkQjRemB2kUzANIKwE=) 3: F74BBA0E307C11F09D502B0DC4F9AE02.roa (hash: d3PjCVBRKgC1+JvdFEYaeqrj1baQnHcY98Ezzh8yqZU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D73BB/7ED57586E18D11EE990FEC4FC4F9AE02/k3obX-sKKTNg6k6IRzUuf9Nsx6U.crl rsync://rpki.apnic.net/member_repository/A91D73BB/7ED57586E18D11EE990FEC4FC4F9AE02/k3obX-sKKTNg6k6IRzUuf9Nsx6U.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/k3obX-sKKTNg6k6IRzUuf9Nsx6U.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 05:05:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 244 (0xf4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D73BB, serialNumber=937A1B5FEB0A293360EA4E8847352E7FD36CC7A5 Validity Not Before: Jun 1 05:05:36 2025 GMT Not After : Jun 8 05:05:36 2025 GMT Subject: CN=683bdfa0-7a1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:4c:df:b3:b0:84:d0:52:1c:f0:df:74:85:11: 10:d2:5e:85:4a:4c:ea:9d:90:c2:3c:b8:7a:66:fd: 59:0b:2f:8f:f0:cf:84:a9:94:42:5e:c4:db:ca:a3: 0f:ac:49:d2:ce:9f:08:29:83:c6:a6:f7:eb:bd:92: c6:14:9e:00:7b:ea:e9:3e:26:fc:9e:23:ce:03:a1: 8c:e4:f5:23:44:2e:a4:e0:28:db:08:c7:75:05:9e: 9f:4c:88:7e:4c:05:4e:39:04:5c:02:57:21:64:b6: c8:23:fa:e3:3e:30:7b:6a:0d:9b:a4:6a:0b:3e:7a: a9:51:76:66:36:50:e3:e8:3c:52:6b:1e:08:1e:a2: 53:87:7c:f9:54:03:f5:80:45:6e:30:dc:67:03:25: 1a:8f:31:ad:55:de:7a:a9:34:d6:b0:06:8c:c2:da: d4:3f:56:54:21:55:50:c6:6b:40:99:0f:12:58:9c: be:db:e7:6b:13:57:e7:80:58:35:c6:40:f7:6b:fa: 46:f8:9f:35:2d:0b:10:7a:2f:2a:88:3f:36:99:66: de:40:60:32:df:ee:14:6b:9d:f0:0c:2a:ee:5c:30: 82:20:7a:df:29:c1:a4:5c:d8:0e:df:b8:04:b2:d4: ee:18:6f:7f:4b:62:11:dd:78:95:6d:97:cc:5a:8a: 3d:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:5D:E7:59:C7:DA:AB:D3:06:62:E1:81:BA:48:94:A3:99:A9:7B:D4 X509v3 Authority Key Identifier: keyid:93:7A:1B:5F:EB:0A:29:33:60:EA:4E:88:47:35:2E:7F:D3:6C:C7:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D73BB/7ED57586E18D11EE990FEC4FC4F9AE02/k3obX-sKKTNg6k6IRzUuf9Nsx6U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/k3obX-sKKTNg6k6IRzUuf9Nsx6U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D73BB/7ED57586E18D11EE990FEC4FC4F9AE02/k3obX-sKKTNg6k6IRzUuf9Nsx6U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:01:49:79:36:00:dc:6d:3d:ff:db:11:68:92:18:76:a6:0b: b1:55:ab:2e:f4:26:9d:2b:e6:1f:0a:7a:31:7f:9a:f7:21:35: e9:2a:70:8a:a8:70:29:2b:e1:8e:39:25:b4:27:84:b5:49:e7: 8a:ac:4e:85:d3:c8:4e:87:db:71:59:56:7f:b2:35:3c:4d:cf: 7d:ac:21:e0:bd:82:e5:ce:64:b7:ab:03:f3:ef:13:96:13:c9: a1:e5:c2:0e:b3:6e:35:5c:2b:2b:7d:60:01:32:25:91:42:9d: 97:ca:4a:6d:40:df:79:4c:ba:a0:77:f7:4d:d3:0a:47:48:e3: 41:30:a6:59:ec:e1:4f:84:8c:7c:d8:34:ec:74:8f:3f:6b:af: 53:26:06:65:2d:c6:a1:81:32:2b:6d:4e:f9:d0:36:8d:b7:0d: 09:a5:2e:ce:ac:e4:66:ca:46:08:65:d6:3c:42:56:89:ff:3f: 69:9b:c3:9a:e4:df:a2:c1:b2:66:b1:45:5f:2c:4a:82:9a:92: 8b:21:cd:e8:79:14:f9:87:e2:1e:f6:6e:dc:f2:23:06:30:09: b1:5e:89:0d:77:9c:1d:cd:86:d9:47:ea:c1:fe:08:f2:7e:c4: 00:ad:f5:87:43:4a:ac:b4:23:fa:2b:ba:9d:d2:d1:2d:4e:0c: 9f:37:9d:c0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDczQkIxMTAvBgNVBAUTKDkzN0ExQjVGRUIwQTI5MzM2MEVBNEU4ODQ3MzUyRTdG RDM2Q0M3QTUwHhcNMjUwNjAxMDUwNTM2WhcNMjUwNjA4MDUwNTM2WjAYMRYwFAYD VQQDEw02ODNiZGZhMC03YTFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq0zfs7CE0FIc8N90hREQ0l6FSkzqnZDCPLh6Zv1ZCy+P8M+EqZRCXsTbyqMP rEnSzp8IKYPGpvfrvZLGFJ4Ae+rpPib8niPOA6GM5PUjRC6k4CjbCMd1BZ6fTIh+ TAVOOQRcAlchZLbII/rjPjB7ag2bpGoLPnqpUXZmNlDj6DxSax4IHqJTh3z5VAP1 gEVuMNxnAyUajzGtVd56qTTWsAaMwtrUP1ZUIVVQxmtAmQ8SWJy+2+drE1fngFg1 xkD3a/pG+J81LQsQei8qiD82mWbeQGAy3+4Ua53wDCruXDCCIHrfKcGkXNgO37gE stTuGG9/S2IR3XiVbZfMWoo9uwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLdd51nH 2qvTBmLhgbpIlKOZqXvUMB8GA1UdIwQYMBaAFJN6G1/rCikzYOpOiEc1Ln/TbMel MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENzNCQi83RUQ1NzU4NkUx OEQxMUVFOTkwRkVDNEZDNEY5QUUwMi9rM29iWC1zS0tUTmc2azZJUnpVdWY5TnN4 NlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2szb2JYLXNLS1ROZzZrNklSelV1ZjlOc3g2VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NzNCQi83RUQ1NzU4NkUxOEQxMUVFOTkwRkVDNEZDNEY5QUUwMi9rM29iWC1zS0tU Tmc2azZJUnpVdWY5TnN4NlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBwAUl5NgDcbT3/2xFokhh2pguxVasu9CadK+YfCnoxf5r3ITXpKnCK qHApK+GOOSW0J4S1SeeKrE6F08hOh9txWVZ/sjU8Tc99rCHgvYLlzmS3qwPz7xOW E8mh5cIOs241XCsrfWABMiWRQp2XykptQN95TLqgd/dN0wpHSONBMKZZ7OFPhIx8 2DTsdI8/a69TJgZlLcahgTIrbU750DaNtw0JpS7OrORmykYIZdY8QlaJ/z9pm8Oa 5N+iwbJmsUVfLEqCmpKLIc3oeRT5h+Ie9m7c8iMGMAmxXokNd5wdzYbZR+rB/gjy fsQArfWHQ0qstCP6K7qd0tEtTgyfN53A -----END CERTIFICATE-----Generated at Mon Jun 2 20:37:44 2025 by rpki-client