$ rpki-client -vvf rpki.apnic.net/member_repository/A91DBB7D/3017096E2BB911ECB2B3674FC4F9AE02/379fgwtQs7_B5TULnGBbt1YSLhE.mft File: 379fgwtQs7_B5TULnGBbt1YSLhE.mft (raw, json) Hash identifier: OECS52oT4tsVPXOw61iSrjxOI787dRD6OoGwfuJBqP0= Subject key identifier: 2C:86:57:45:97:C3:18:0D:B7:7C:D3:0A:B5:3D:2E:CC:62:34:18:BC Authority key identifier: DF:BF:5F:83:0B:50:B3:BF:C1:E5:35:0B:9C:60:5B:B7:56:12:2E:11 Certificate issuer: /CN=A91DBB7D/serialNumber=DFBF5F830B50B3BFC1E5350B9C605BB756122E11 Certificate serial: 04C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/379fgwtQs7_B5TULnGBbt1YSLhE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DBB7D/3017096E2BB911ECB2B3674FC4F9AE02/379fgwtQs7_B5TULnGBbt1YSLhE.mft Manifest number: 04C0 Signing time: Sat 31 May 2025 00:03:56 +0000 Manifest this update: Sat 31 May 2025 00:03:56 +0000 Manifest next update: Sat 07 Jun 2025 00:03:56 +0000 Files and hashes: 1: 379fgwtQs7_B5TULnGBbt1YSLhE.crl (hash: grcFtq9QZKb6D3EnzS6OARUy+u8PkXBubhD5im9pvgs=) 2: D5C4A54A617B11EC82058668C4F9AE02.roa (hash: lRFgE9XZ6iDD+G2GlIBwvnuaHaRG9VvqEjSSiJJQVDA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DBB7D/3017096E2BB911ECB2B3674FC4F9AE02/379fgwtQs7_B5TULnGBbt1YSLhE.crl rsync://rpki.apnic.net/member_repository/A91DBB7D/3017096E2BB911ECB2B3674FC4F9AE02/379fgwtQs7_B5TULnGBbt1YSLhE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/379fgwtQs7_B5TULnGBbt1YSLhE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 00:03:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1223 (0x4c7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DBB7D, serialNumber=DFBF5F830B50B3BFC1E5350B9C605BB756122E11 Validity Not Before: May 31 00:03:56 2025 GMT Not After : Jun 7 00:03:56 2025 GMT Subject: CN=683a476c-c42f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:7f:6c:b2:9d:68:91:39:95:b7:8b:f5:15:a9: c6:48:64:5d:40:81:ee:82:cc:70:69:be:60:64:c7: 30:4e:f2:52:8a:c8:03:e7:b9:03:74:89:06:c7:1b: e0:20:d7:b7:52:ed:8a:07:87:3d:ba:82:71:ec:85: a0:fe:af:3d:09:bd:5a:0b:52:d7:ce:f8:58:a8:88: 34:fb:51:86:49:4b:01:47:75:2c:30:32:84:fb:98: 7b:a1:ee:1f:dc:07:e0:60:b5:09:a3:79:e7:cd:4b: 16:55:53:84:63:a4:e9:8d:eb:70:42:7b:40:c9:6a: 69:93:20:6f:1e:71:6f:75:37:46:7e:bf:e4:37:27: 67:41:b7:26:c6:51:fb:29:60:eb:59:33:45:9f:f9: 4b:5d:58:4b:0f:33:2a:db:88:4c:ab:50:94:c1:b1: eb:73:45:9e:11:b0:8f:1a:85:6d:02:9a:e0:3a:24: 9b:91:21:4e:f5:60:eb:7c:f1:5d:9b:2f:96:ae:a9: 8e:d5:72:44:f7:b6:75:9b:6d:95:1c:68:c1:5d:1d: a7:d3:f5:7d:ea:f1:03:60:34:ee:0b:98:a6:ee:5b: 87:5d:52:15:6a:90:4a:fb:f2:44:1e:ca:ee:81:6f: a1:ae:ce:c6:6f:89:0e:1d:10:1e:76:14:bd:8f:03: 3f:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:86:57:45:97:C3:18:0D:B7:7C:D3:0A:B5:3D:2E:CC:62:34:18:BC X509v3 Authority Key Identifier: keyid:DF:BF:5F:83:0B:50:B3:BF:C1:E5:35:0B:9C:60:5B:B7:56:12:2E:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DBB7D/3017096E2BB911ECB2B3674FC4F9AE02/379fgwtQs7_B5TULnGBbt1YSLhE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/379fgwtQs7_B5TULnGBbt1YSLhE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBB7D/3017096E2BB911ECB2B3674FC4F9AE02/379fgwtQs7_B5TULnGBbt1YSLhE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:a4:da:38:68:94:08:74:58:87:a3:c5:93:c1:9d:94:27:f2: d4:07:71:9d:97:19:d6:d3:7a:f0:2e:ac:86:e8:75:f9:94:9a: b7:e7:04:39:61:13:77:d4:b8:17:44:5b:34:5f:80:23:66:10: da:2f:de:7f:5d:af:ad:14:cd:2b:21:4d:13:6d:47:04:91:2a: 72:7f:44:13:ca:48:11:78:ab:06:49:cc:a5:d5:ac:57:70:91: c1:7f:80:57:4b:dd:3d:73:7b:06:83:c0:d1:e0:e7:61:ce:4e: df:b5:99:05:33:b4:54:7d:d3:10:2d:b2:3d:dd:6c:20:3a:bb: 9b:fc:3b:c4:9e:1d:b8:83:a4:35:d7:1e:2b:6a:ec:b5:b4:c0: 45:f9:e8:c9:e2:6c:ec:52:4b:17:e4:c1:17:e9:29:67:ea:f3: 71:b6:78:11:d0:0f:9d:73:3a:d2:d9:0e:72:44:ce:10:4b:d6: c4:b6:ae:54:87:38:86:8d:34:7b:09:a6:a4:92:dd:45:78:54: 1e:14:0b:11:3f:1a:c1:ca:da:8a:96:34:c5:74:7b:5f:f3:f1: 26:36:84:dd:87:9b:e3:a5:30:46:ce:3e:4f:6a:c6:61:ec:9e: 9f:c6:4d:5e:93:8e:e6:33:e7:54:25:b6:66:1a:86:e1:46:20: 7b:fb:92:84 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBMcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REJCN0QxMTAvBgNVBAUTKERGQkY1RjgzMEI1MEIzQkZDMUU1MzUwQjlDNjA1QkI3 NTYxMjJFMTEwHhcNMjUwNTMxMDAwMzU2WhcNMjUwNjA3MDAwMzU2WjAYMRYwFAYD VQQDEw02ODNhNDc2Yy1jNDJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApX9ssp1okTmVt4v1FanGSGRdQIHugsxwab5gZMcwTvJSisgD57kDdIkGxxvg INe3Uu2KB4c9uoJx7IWg/q89Cb1aC1LXzvhYqIg0+1GGSUsBR3UsMDKE+5h7oe4f 3AfgYLUJo3nnzUsWVVOEY6TpjetwQntAyWppkyBvHnFvdTdGfr/kNydnQbcmxlH7 KWDrWTNFn/lLXVhLDzMq24hMq1CUwbHrc0WeEbCPGoVtAprgOiSbkSFO9WDrfPFd my+WrqmO1XJE97Z1m22VHGjBXR2n0/V96vEDYDTuC5im7luHXVIVapBK+/JEHsru gW+hrs7Gb4kOHRAedhS9jwM/1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCyGV0WX wxgNt3zTCrU9LsxiNBi8MB8GA1UdIwQYMBaAFN+/X4MLULO/weU1C5xgW7dWEi4R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQkI3RC8zMDE3MDk2RTJC QjkxMUVDQjJCMzY3NEZDNEY5QUUwMi8zNzlmZ3d0UXM3X0I1VFVMbkdCYnQxWVNM aEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzM3OWZnd3RRczdfQjVUVUxuR0JidDFZU0xoRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QkI3RC8zMDE3MDk2RTJCQjkxMUVDQjJCMzY3NEZDNEY5QUUwMi8zNzlmZ3d0UXM3 X0I1VFVMbkdCYnQxWVNMaEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBypNo4aJQIdFiHo8WTwZ2UJ/LUB3GdlxnW03rwLqyG6HX5lJq35wQ5 YRN31LgXRFs0X4AjZhDaL95/Xa+tFM0rIU0TbUcEkSpyf0QTykgReKsGScyl1axX cJHBf4BXS909c3sGg8DR4Odhzk7ftZkFM7RUfdMQLbI93WwgOrub/DvEnh24g6Q1 1x4rauy1tMBF+ejJ4mzsUksX5MEX6Sln6vNxtngR0A+dczrS2Q5yRM4QS9bEtq5U hziGjTR7Caakkt1FeFQeFAsRPxrBytqKljTFdHtf8/EmNoTdh5vjpTBGzj5PasZh 7J6fxk1ek47mM+dUJbZmGobhRiB7+5KE -----END CERTIFICATE-----Generated at Sat May 31 16:50:44 2025 by rpki-client