$ rpki-client -vvf rpki.apnic.net/member_repository/A91DAC6A/90662EB69C0A11EFAED65738C4F9AE02/RJ0H2pINoCY0K_biaJzH4PCjyvw.mft File: RJ0H2pINoCY0K_biaJzH4PCjyvw.mft (raw, json) Hash identifier: K/IPhqv6sLk9mlTzIiNcugiH1jIdn0jKiJu21cPowWY= Subject key identifier: F4:75:9C:F3:49:6B:CD:4F:B4:40:17:7D:66:47:D1:AA:0B:05:8A:E3 Authority key identifier: 44:9D:07:DA:92:0D:A0:26:34:2B:F6:E2:68:9C:C7:E0:F0:A3:CA:FC Certificate issuer: /CN=A91DAC6A/serialNumber=449D07DA920DA026342BF6E2689CC7E0F0A3CAFC Certificate serial: 6E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RJ0H2pINoCY0K_biaJzH4PCjyvw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DAC6A/90662EB69C0A11EFAED65738C4F9AE02/RJ0H2pINoCY0K_biaJzH4PCjyvw.mft Manifest number: 6C Signing time: Sat 31 May 2025 06:29:38 +0000 Manifest this update: Sat 31 May 2025 06:29:38 +0000 Manifest next update: Sat 07 Jun 2025 06:29:38 +0000 Files and hashes: 1: RJ0H2pINoCY0K_biaJzH4PCjyvw.crl (hash: HWaBZZBOB7IQXzHYA+h8PjVGmovPepmEs8gM8IGNGLU=) 2: 24E9EF3C9C0B11EFABD74439C4F9AE02.roa (hash: UxagGWZX5GRBTZt0jQYki52H3QWf9jW1QGZTQhh7RfI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DAC6A/90662EB69C0A11EFAED65738C4F9AE02/RJ0H2pINoCY0K_biaJzH4PCjyvw.crl rsync://rpki.apnic.net/member_repository/A91DAC6A/90662EB69C0A11EFAED65738C4F9AE02/RJ0H2pINoCY0K_biaJzH4PCjyvw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RJ0H2pINoCY0K_biaJzH4PCjyvw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 06:29:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 110 (0x6e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DAC6A, serialNumber=449D07DA920DA026342BF6E2689CC7E0F0A3CAFC Validity Not Before: May 31 06:29:38 2025 GMT Not After : Jun 7 06:29:38 2025 GMT Subject: CN=683aa1d2-00ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:36:97:c5:34:bb:a6:16:a7:3d:51:4d:93:a3: 25:bd:d3:d1:37:22:1b:75:aa:80:db:8c:b1:6b:a7: 8a:a0:d4:14:74:85:d9:00:38:83:20:af:db:05:61: 5b:79:87:f5:24:2c:8e:b6:81:98:b3:d5:24:15:28: 2a:bd:e4:8d:25:4f:bf:13:de:d2:3b:8c:3a:20:03: 1e:4b:55:ab:36:c5:1d:c4:70:1b:c1:dc:12:42:dd: 6c:3b:66:6a:0f:54:d4:a3:c7:b9:46:3e:34:47:bd: 69:1b:25:7e:bb:8f:27:3f:64:62:59:22:7f:83:92: d9:86:a9:6c:e4:b8:ae:4e:39:a4:cd:2b:29:49:4b: 2c:1a:f9:42:d8:42:74:4d:d5:1a:1c:e7:24:58:d4: 41:33:d6:24:c8:06:21:d8:03:6d:bf:b1:a2:d5:06: d6:bb:29:f0:52:3e:08:61:72:a9:83:3a:19:c6:ff: a3:a0:35:3e:b5:55:7d:5b:ea:c0:71:ba:ec:5a:e6: 60:ad:73:89:68:67:72:a2:74:26:29:7c:fd:20:b5: 34:2d:68:25:11:0a:28:96:05:ee:cd:a8:70:64:ea: 25:99:3b:a3:99:5d:5f:41:3d:37:39:5c:1e:98:5a: a6:d9:ea:b2:dd:59:f6:e1:01:b4:68:da:89:0f:2e: 4b:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:75:9C:F3:49:6B:CD:4F:B4:40:17:7D:66:47:D1:AA:0B:05:8A:E3 X509v3 Authority Key Identifier: keyid:44:9D:07:DA:92:0D:A0:26:34:2B:F6:E2:68:9C:C7:E0:F0:A3:CA:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DAC6A/90662EB69C0A11EFAED65738C4F9AE02/RJ0H2pINoCY0K_biaJzH4PCjyvw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RJ0H2pINoCY0K_biaJzH4PCjyvw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DAC6A/90662EB69C0A11EFAED65738C4F9AE02/RJ0H2pINoCY0K_biaJzH4PCjyvw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:cf:df:65:55:ab:8d:c5:57:89:70:f6:87:7f:7a:e8:19:b2: af:f5:c3:9b:9c:c8:37:24:14:f3:e7:e1:5b:69:87:22:85:15: 78:38:dd:8e:c3:4f:2e:6d:bb:93:f7:1f:1f:4a:70:2b:12:67: a5:8e:da:21:f1:81:9b:ab:03:16:ab:9e:eb:18:cd:a6:36:44: 27:09:66:29:5e:ac:44:f8:28:47:a5:66:1e:03:5a:eb:8b:7c: 06:77:a6:29:a2:e2:c8:3c:78:ec:2e:24:ed:72:22:5f:63:21: b2:59:21:da:2c:47:71:92:83:96:30:c5:f3:c8:09:76:3e:08: 40:6b:2d:15:67:1f:f6:22:9a:3c:59:0b:42:1b:a8:aa:37:e4: 29:9d:d4:1a:49:4e:fc:c7:4b:de:d7:25:28:f6:1b:8c:4a:ab: a5:e2:69:98:9c:ea:98:dc:75:26:c3:a2:b8:d0:e7:19:30:56: fa:76:18:c8:d1:a0:d3:38:51:4a:e1:83:d9:a4:80:9d:42:68: 42:4c:b0:df:ee:2c:88:54:fc:47:ab:26:2d:71:8e:63:48:4d: 7e:1a:4b:de:89:0c:48:12:a5:77:16:0a:d5:af:b1:cb:78:5a: be:ce:89:9a:4b:9b:3f:b7:28:b1:b1:1c:96:be:0c:c4:93:c8: f7:66:1e:7b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBbjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE QUM2QTExMC8GA1UEBRMoNDQ5RDA3REE5MjBEQTAyNjM0MkJGNkUyNjg5Q0M3RTBG MEEzQ0FGQzAeFw0yNTA1MzEwNjI5MzhaFw0yNTA2MDcwNjI5MzhaMBgxFjAUBgNV BAMTDTY4M2FhMWQyLTAwYWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDfNpfFNLumFqc9UU2ToyW909E3Iht1qoDbjLFrp4qg1BR0hdkAOIMgr9sFYVt5 h/UkLI62gZiz1SQVKCq95I0lT78T3tI7jDogAx5LVas2xR3EcBvB3BJC3Ww7ZmoP VNSjx7lGPjRHvWkbJX67jyc/ZGJZIn+DktmGqWzkuK5OOaTNKylJSywa+ULYQnRN 1Roc5yRY1EEz1iTIBiHYA22/saLVBta7KfBSPghhcqmDOhnG/6OgNT61VX1b6sBx uuxa5mCtc4loZ3KidCYpfP0gtTQtaCURCiiWBe7NqHBk6iWZO6OZXV9BPTc5XB6Y WqbZ6rLdWfbhAbRo2okPLksVAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU9HWc80lr zU+0QBd9ZkfRqgsFiuMwHwYDVR0jBBgwFoAURJ0H2pINoCY0K/biaJzH4PCjyvww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURBQzZBLzkwNjYyRUI2OUMw QTExRUZBRUQ2NTczOEM0RjlBRTAyL1JKMEgycElOb0NZMEtfYmlhSnpINFBDanl2 dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUkowSDJwSU5vQ1kwS19iaWFKekg0UENqeXZ3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURB QzZBLzkwNjYyRUI2OUMwQTExRUZBRUQ2NTczOEM0RjlBRTAyL1JKMEgycElOb0NZ MEtfYmlhSnpINFBDanl2dy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGPP32VVq43FV4lw9od/eugZsq/1w5ucyDckFPPn4VtphyKFFXg43Y7D Ty5tu5P3Hx9KcCsSZ6WO2iHxgZurAxarnusYzaY2RCcJZilerET4KEelZh4DWuuL fAZ3pimi4sg8eOwuJO1yIl9jIbJZIdosR3GSg5YwxfPICXY+CEBrLRVnH/YimjxZ C0IbqKo35Cmd1BpJTvzHS97XJSj2G4xKq6XiaZic6pjcdSbDorjQ5xkwVvp2GMjR oNM4UUrhg9mkgJ1CaEJMsN/uLIhU/EerJi1xjmNITX4aS96JDEgSpXcWCtWvsct4 Wr7OiZpLmz+3KLGxHJa+DMSTyPdmHns= -----END CERTIFICATE-----Generated at Sat May 31 17:04:57 2025 by rpki-client