$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8704/5655AC98BC0C11EA91E09B68C4F9AE02/AwfvDynPItsJcPUIPAI8KqDW9Rc.mft File: AwfvDynPItsJcPUIPAI8KqDW9Rc.mft (raw, json) Hash identifier: 9O8mmSNv/yhAyCjgRU26/3+Kbfm4Y3EceXYilM8qM48= Subject key identifier: 7E:B4:93:D9:3D:60:FA:AC:68:0C:B8:5E:B8:91:42:22:AC:19:BB:7B Authority key identifier: 03:07:EF:0F:29:CF:22:DB:09:70:F5:08:3C:02:3C:2A:A0:D6:F5:17 Certificate issuer: /CN=A91D8704/serialNumber=0307EF0F29CF22DB0970F5083C023C2AA0D6F517 Certificate serial: 089E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AwfvDynPItsJcPUIPAI8KqDW9Rc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D8704/5655AC98BC0C11EA91E09B68C4F9AE02/AwfvDynPItsJcPUIPAI8KqDW9Rc.mft Manifest number: 0897 Signing time: Fri 30 May 2025 20:46:29 +0000 Manifest this update: Fri 30 May 2025 20:46:29 +0000 Manifest next update: Fri 06 Jun 2025 20:46:29 +0000 Files and hashes: 1: AwfvDynPItsJcPUIPAI8KqDW9Rc.crl (hash: yqoqQBEzisusLwNIlVNdQZrrT0XtbM7VyMghxH4EIPo=) 2: B1AAC5B2BC4111EA9A5B2786C4F9AE02.roa (hash: RBbk8UhQUJAo0+DivNUUdglkSzsFknX4rSnxZW8gCTk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D8704/5655AC98BC0C11EA91E09B68C4F9AE02/AwfvDynPItsJcPUIPAI8KqDW9Rc.crl rsync://rpki.apnic.net/member_repository/A91D8704/5655AC98BC0C11EA91E09B68C4F9AE02/AwfvDynPItsJcPUIPAI8KqDW9Rc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AwfvDynPItsJcPUIPAI8KqDW9Rc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 20:46:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2206 (0x89e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D8704, serialNumber=0307EF0F29CF22DB0970F5083C023C2AA0D6F517 Validity Not Before: May 30 20:46:29 2025 GMT Not After : Jun 6 20:46:29 2025 GMT Subject: CN=683a1925-9d40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:3c:44:26:4e:15:50:99:6a:19:85:5d:2d:d2: a6:9d:3f:ee:d6:b0:8f:3b:27:d5:e5:75:91:34:0f: e8:07:6b:90:e8:86:8b:bf:f6:50:f3:60:e6:4e:87: d5:37:a8:ec:85:fc:5f:ac:ae:9e:42:5c:2f:96:bf: df:4e:fe:3c:0c:5e:af:0d:f1:d0:81:d5:6c:a2:d5: 61:67:b9:0b:46:01:1b:88:b8:7c:11:29:eb:cf:7b: 3b:59:59:c1:a5:bd:2b:68:1a:20:e0:e2:9a:29:b6: cc:f0:09:b1:7f:34:1a:3a:0e:6a:ec:79:30:5b:e7: a0:0e:b6:61:0b:d7:df:af:9b:60:c3:27:67:04:47: 28:b8:4c:aa:64:b4:ef:3e:af:4f:dc:4c:77:d5:b7: ae:ff:db:41:f7:50:7e:d9:33:8a:6f:c9:8a:36:5d: d4:8c:38:13:24:00:92:99:58:8c:8c:ef:ea:0c:3b: a5:b8:51:a8:1c:bc:2d:3f:d3:65:82:42:61:1a:4c: b7:9b:6d:83:e6:61:85:a3:0e:c0:c8:a0:b8:9a:b5: 7c:59:98:2c:de:80:64:40:c2:5d:46:3d:c3:b8:4c: 41:a2:b7:52:ff:7f:49:63:44:4e:f0:4a:a7:25:7a: 16:35:72:83:1b:ed:55:93:ef:a0:42:6e:98:58:56: 5d:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:B4:93:D9:3D:60:FA:AC:68:0C:B8:5E:B8:91:42:22:AC:19:BB:7B X509v3 Authority Key Identifier: keyid:03:07:EF:0F:29:CF:22:DB:09:70:F5:08:3C:02:3C:2A:A0:D6:F5:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D8704/5655AC98BC0C11EA91E09B68C4F9AE02/AwfvDynPItsJcPUIPAI8KqDW9Rc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AwfvDynPItsJcPUIPAI8KqDW9Rc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8704/5655AC98BC0C11EA91E09B68C4F9AE02/AwfvDynPItsJcPUIPAI8KqDW9Rc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:56:ca:93:6c:6d:5f:31:04:d8:26:61:68:8e:8e:31:cf:50: cd:7f:58:2b:97:28:92:fe:28:84:91:17:1c:48:fa:03:63:d4: e8:bf:66:e4:f0:14:2a:0b:5d:b1:cd:2b:77:07:ec:29:00:9c: 4f:fd:19:01:d0:d5:d4:df:30:11:76:5c:5f:f2:6d:94:ac:52: 76:0a:a8:ff:99:3b:76:0f:1e:49:d3:ee:33:8d:91:53:38:3a: 3b:7f:99:0d:0d:64:7c:45:ac:72:ac:a9:42:73:f7:fa:45:7a: cf:d7:52:a8:c7:5b:61:4b:f9:60:aa:99:47:36:15:78:1b:03: f6:c5:1b:a6:3c:ce:ff:70:ed:bd:4f:c1:f5:34:fc:ad:5c:3b: 02:ab:f8:4b:b7:c3:da:d0:d9:fb:4a:71:b3:e1:1a:f9:c3:39: 86:75:e0:5b:17:96:5b:f4:43:1e:ee:73:6c:2a:8a:14:e8:10: c6:4f:d8:de:65:a9:91:c4:07:7e:71:13:0a:66:ba:f6:14:cf: a2:b7:d3:a7:b9:2d:a7:56:d9:ce:a9:58:7a:b6:74:4a:80:4f: f2:f3:0f:67:56:0f:58:3c:a8:62:a1:45:ee:26:38:b4:51:01: 74:9e:df:67:b8:14:44:0c:c1:3e:dd:57:fd:0d:7c:f1:3f:d7: 32:72:57:59 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCJ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDg3MDQxMTAvBgNVBAUTKDAzMDdFRjBGMjlDRjIyREIwOTcwRjUwODNDMDIzQzJB QTBENkY1MTcwHhcNMjUwNTMwMjA0NjI5WhcNMjUwNjA2MjA0NjI5WjAYMRYwFAYD VQQDEw02ODNhMTkyNS05ZDQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6TxEJk4VUJlqGYVdLdKmnT/u1rCPOyfV5XWRNA/oB2uQ6IaLv/ZQ82DmTofV N6jshfxfrK6eQlwvlr/fTv48DF6vDfHQgdVsotVhZ7kLRgEbiLh8ESnrz3s7WVnB pb0raBog4OKaKbbM8AmxfzQaOg5q7HkwW+egDrZhC9ffr5tgwydnBEcouEyqZLTv Pq9P3Ex31beu/9tB91B+2TOKb8mKNl3UjDgTJACSmViMjO/qDDuluFGoHLwtP9Nl gkJhGky3m22D5mGFow7AyKC4mrV8WZgs3oBkQMJdRj3DuExBordS/39JY0RO8Eqn JXoWNXKDG+1Vk++gQm6YWFZdEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH60k9k9 YPqsaAy4XriRQiKsGbt7MB8GA1UdIwQYMBaAFAMH7w8pzyLbCXD1CDwCPCqg1vUX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODcwNC81NjU1QUM5OEJD MEMxMUVBOTFFMDlCNjhDNEY5QUUwMi9Bd2Z2RHluUEl0c0pjUFVJUEFJOEtxRFc5 UmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0F3ZnZEeW5QSXRzSmNQVUlQQUk4S3FEVzlSYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE ODcwNC81NjU1QUM5OEJDMEMxMUVBOTFFMDlCNjhDNEY5QUUwMi9Bd2Z2RHluUEl0 c0pjUFVJUEFJOEtxRFc5UmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBTVsqTbG1fMQTYJmFojo4xz1DNf1grlyiS/iiEkRccSPoDY9Tov2bk 8BQqC12xzSt3B+wpAJxP/RkB0NXU3zARdlxf8m2UrFJ2Cqj/mTt2Dx5J0+4zjZFT ODo7f5kNDWR8RaxyrKlCc/f6RXrP11Kox1thS/lgqplHNhV4GwP2xRumPM7/cO29 T8H1NPytXDsCq/hLt8Pa0Nn7SnGz4Rr5wzmGdeBbF5Zb9EMe7nNsKooU6BDGT9je ZamRxAd+cRMKZrr2FM+it9OnuS2nVtnOqVh6tnRKgE/y8w9nVg9YPKhioUXuJji0 UQF0nt9nuBREDME+3Vf9DXzxP9cycldZ -----END CERTIFICATE-----Generated at Sat May 31 16:29:41 2025 by rpki-client