$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA8C2/95A69BE2005311F08E73E14AC4F9AE02/0k_MrTrOf_5b8Cpqj2jAYC4cG1E.mft File: 0k_MrTrOf_5b8Cpqj2jAYC4cG1E.mft (raw, json) Hash identifier: WGpVsE9AcyAu041V+CV1ndI9cD6WJpW7n1HoaGy0ZeY= Subject key identifier: E5:CD:96:9B:A5:6C:09:6B:E9:88:8E:80:88:4A:59:03:05:48:80:2D Authority key identifier: D2:4F:CC:AD:3A:CE:7F:FE:5B:F0:2A:6A:8F:68:C0:60:2E:1C:1B:51 Certificate issuer: /CN=A91DA8C2/serialNumber=D24FCCAD3ACE7FFE5BF02A6A8F68C0602E1C1B51 Certificate serial: 2A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0k_MrTrOf_5b8Cpqj2jAYC4cG1E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DA8C2/95A69BE2005311F08E73E14AC4F9AE02/0k_MrTrOf_5b8Cpqj2jAYC4cG1E.mft Manifest number: 29 Signing time: Sat 31 May 2025 07:20:27 +0000 Manifest this update: Sat 31 May 2025 07:20:27 +0000 Manifest next update: Sat 07 Jun 2025 07:20:27 +0000 Files and hashes: 1: 0k_MrTrOf_5b8Cpqj2jAYC4cG1E.crl (hash: J6yij9UnYTh0UnJu7jgXk+nZTcrCttyTaklYow5vsYQ=) 2: 32EE2B68005411F08A6FEB4BC4F9AE02.roa (hash: wwcr+8+DOyZmloRteEL56x1j3vM+7vfdbP5INKVgy7U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DA8C2/95A69BE2005311F08E73E14AC4F9AE02/0k_MrTrOf_5b8Cpqj2jAYC4cG1E.crl rsync://rpki.apnic.net/member_repository/A91DA8C2/95A69BE2005311F08E73E14AC4F9AE02/0k_MrTrOf_5b8Cpqj2jAYC4cG1E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0k_MrTrOf_5b8Cpqj2jAYC4cG1E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 07:20:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42 (0x2a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DA8C2, serialNumber=D24FCCAD3ACE7FFE5BF02A6A8F68C0602E1C1B51 Validity Not Before: May 31 07:20:27 2025 GMT Not After : Jun 7 07:20:27 2025 GMT Subject: CN=683aadbb-618b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:b3:6b:3f:4c:bd:55:bc:13:a4:fd:97:3b:36: cb:c6:1e:11:36:20:b1:b1:a5:f8:87:e1:67:5c:4d: de:e7:3d:b7:7d:c9:0a:5a:ad:42:e1:0a:57:66:10: 41:eb:ef:f2:d1:de:8a:8b:b8:35:51:23:4b:ce:e6: 91:cd:19:d0:16:8f:ce:72:e2:b6:ab:9a:0c:1e:83: 9f:90:08:42:60:44:2a:7a:a8:3f:07:22:27:d4:ec: a1:45:e5:ce:6d:8c:ab:39:e1:d2:94:cb:e5:b8:6a: 99:d1:f3:13:21:6b:3c:50:43:de:15:3d:c2:9e:ee: 09:a8:d1:0c:69:f5:13:59:75:86:4f:4a:0a:a0:60: a8:41:f9:5c:25:c5:5d:7c:0a:60:10:3a:ef:77:fe: 2f:ee:ec:37:d1:08:83:8e:7c:8f:87:31:3d:d6:f7: d6:2a:d5:55:0b:6b:bb:cb:42:29:7a:00:61:dc:04: 5a:ed:9f:bd:e2:5d:8b:31:b9:8f:c0:2b:fc:61:e4: 89:5e:eb:3c:76:eb:c3:ac:71:a4:34:98:eb:e3:9a: 18:87:14:ae:58:a0:71:21:20:7c:b6:8e:82:06:40: 7c:ba:47:32:95:0e:0c:67:a7:0d:32:49:e0:fc:ba: be:4f:c8:15:18:12:5d:f6:cc:d3:8f:5d:60:bc:06: ee:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:CD:96:9B:A5:6C:09:6B:E9:88:8E:80:88:4A:59:03:05:48:80:2D X509v3 Authority Key Identifier: keyid:D2:4F:CC:AD:3A:CE:7F:FE:5B:F0:2A:6A:8F:68:C0:60:2E:1C:1B:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DA8C2/95A69BE2005311F08E73E14AC4F9AE02/0k_MrTrOf_5b8Cpqj2jAYC4cG1E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0k_MrTrOf_5b8Cpqj2jAYC4cG1E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA8C2/95A69BE2005311F08E73E14AC4F9AE02/0k_MrTrOf_5b8Cpqj2jAYC4cG1E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:04:a0:3c:d2:3c:b5:23:e9:ef:6b:10:f1:0b:21:cf:46:ef: 4e:d5:0e:b2:3f:d2:0c:8f:83:24:40:df:00:a5:63:60:65:6e: fc:60:24:21:43:22:6d:4c:c1:3c:13:bd:a7:07:2a:40:cd:71: fb:f6:97:98:39:40:25:b7:17:7a:ec:2e:86:70:e9:bb:33:de: bf:cb:56:7b:77:45:3c:d2:eb:ac:38:c5:b4:a1:08:db:de:3a: bc:8e:85:d3:12:ba:c1:cb:16:d5:b9:e5:95:ef:b2:fd:f0:b8: b7:c9:39:ae:f8:92:44:32:8d:f8:78:25:17:62:31:f7:26:4a: 6a:0c:75:0e:33:fd:6f:2e:82:38:fe:1d:35:86:eb:74:68:a3: 40:e3:5b:17:01:39:c4:6a:61:27:72:97:47:19:6a:89:07:e8: 13:f6:ea:3e:8f:79:75:3b:3d:f8:79:09:e7:83:d0:42:2d:cc: 87:6e:24:18:13:7a:9b:4c:10:04:92:10:bb:8e:db:99:77:3d: 2e:cf:b4:a0:9b:18:c4:17:fd:0c:93:43:90:a0:f9:36:0d:8e: 51:d5:35:80:4d:89:8a:19:32:11:e3:e9:08:93:8a:57:8c:63: 84:2f:d7:0e:a3:9d:24:b6:d6:ef:d5:4d:dd:14:38:18:9e:fb: 7f:f3:d5:6d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE QThDMjExMC8GA1UEBRMoRDI0RkNDQUQzQUNFN0ZGRTVCRjAyQTZBOEY2OEMwNjAy RTFDMUI1MTAeFw0yNTA1MzEwNzIwMjdaFw0yNTA2MDcwNzIwMjdaMBgxFjAUBgNV BAMTDTY4M2FhZGJiLTYxOGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQChs2s/TL1VvBOk/Zc7NsvGHhE2ILGxpfiH4WdcTd7nPbd9yQparULhCldmEEHr 7/LR3oqLuDVRI0vO5pHNGdAWj85y4rarmgweg5+QCEJgRCp6qD8HIifU7KFF5c5t jKs54dKUy+W4apnR8xMhazxQQ94VPcKe7gmo0Qxp9RNZdYZPSgqgYKhB+VwlxV18 CmAQOu93/i/u7DfRCIOOfI+HMT3W99Yq1VULa7vLQil6AGHcBFrtn73iXYsxuY/A K/xh5Ile6zx268OscaQ0mOvjmhiHFK5YoHEhIHy2joIGQHy6RzKVDgxnpw0ySeD8 ur5PyBUYEl32zNOPXWC8Bu6tAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU5c2Wm6Vs CWvpiI6AiEpZAwVIgC0wHwYDVR0jBBgwFoAU0k/MrTrOf/5b8Cpqj2jAYC4cG1Ew DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURBOEMyLzk1QTY5QkUyMDA1 MzExRjA4RTczRTE0QUM0RjlBRTAyLzBrX01yVHJPZl81YjhDcHFqMmpBWUM0Y0cx RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMGtfTXJUck9mXzViOENwcWoyakFZQzRjRzFFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURB OEMyLzk1QTY5QkUyMDA1MzExRjA4RTczRTE0QUM0RjlBRTAyLzBrX01yVHJPZl81 YjhDcHFqMmpBWUM0Y0cxRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAwEoDzSPLUj6e9rEPELIc9G707VDrI/0gyPgyRA3wClY2BlbvxgJCFD Im1MwTwTvacHKkDNcfv2l5g5QCW3F3rsLoZw6bsz3r/LVnt3RTzS66w4xbShCNve OryOhdMSusHLFtW55ZXvsv3wuLfJOa74kkQyjfh4JRdiMfcmSmoMdQ4z/W8ugjj+ HTWG63Roo0DjWxcBOcRqYSdyl0cZaokH6BP26j6PeXU7Pfh5CeeD0EItzIduJBgT eptMEASSELuO25l3PS7PtKCbGMQX/QyTQ5Cg+TYNjlHVNYBNiYoZMhHj6QiTileM Y4Qv1w6jnSS21u/VTd0UOBie+3/z1W0= -----END CERTIFICATE-----Generated at Sat May 31 16:34:02 2025 by rpki-client