$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC7AA/D22EDA342A8811F0A30D9159C4F9AE02/df43qD7agAphAmCFh-30CJ2CQOA.mft File: df43qD7agAphAmCFh-30CJ2CQOA.mft (raw, json) Hash identifier: Wm7TM7htEOLkpow8gsQEaamZTJWtKre++Aer9voY3lU= Subject key identifier: B2:39:BC:B3:DF:D8:85:76:C7:B0:7F:C0:53:66:03:59:D6:29:C4:B3 Authority key identifier: 75:FE:37:A8:3E:DA:80:0A:61:02:60:85:87:ED:F4:08:9D:82:40:E0 Certificate issuer: /CN=A91DC7AA/serialNumber=75FE37A83EDA800A6102608587EDF4089D8240E0 Certificate serial: 10 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/df43qD7agAphAmCFh-30CJ2CQOA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC7AA/D22EDA342A8811F0A30D9159C4F9AE02/df43qD7agAphAmCFh-30CJ2CQOA.mft Manifest number: 0E Signing time: Sat 31 May 2025 07:38:22 +0000 Manifest this update: Sat 31 May 2025 07:38:22 +0000 Manifest next update: Sat 07 Jun 2025 07:38:22 +0000 Files and hashes: 1: df43qD7agAphAmCFh-30CJ2CQOA.crl (hash: u1F1cuX9xd25YMjYnWFLoGLRcVhgQD5e3IOjEOMhgUA=) 2: A7C7EF962A8911F09526D35BC4F9AE02.roa (hash: q6DsrTnHuS/+1sVBywXv85oiJzaT3sKc0CSqiWHXn5c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC7AA/D22EDA342A8811F0A30D9159C4F9AE02/df43qD7agAphAmCFh-30CJ2CQOA.crl rsync://rpki.apnic.net/member_repository/A91DC7AA/D22EDA342A8811F0A30D9159C4F9AE02/df43qD7agAphAmCFh-30CJ2CQOA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/df43qD7agAphAmCFh-30CJ2CQOA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 07:38:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16 (0x10) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC7AA, serialNumber=75FE37A83EDA800A6102608587EDF4089D8240E0 Validity Not Before: May 31 07:38:22 2025 GMT Not After : Jun 7 07:38:22 2025 GMT Subject: CN=683ab1ee-f424 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:d1:a5:e7:3a:73:ec:77:4f:69:d2:af:48:d4: c7:c9:f3:74:ff:5b:2e:a8:1e:06:3b:f7:41:38:d7: 4c:31:9a:4b:69:90:87:ca:91:08:a2:13:a1:e8:3f: 99:85:94:b7:67:fe:04:c8:00:12:33:9f:07:84:1d: 89:10:15:e2:4d:28:82:18:10:d6:e6:1a:b3:4f:c7: f3:52:3f:d6:d7:7c:36:27:65:cc:d9:ef:10:4f:9c: 22:b3:e3:d4:ab:fa:93:7c:6a:22:4d:32:03:9b:6a: 12:ea:56:d1:93:17:2b:14:12:94:86:03:30:4b:4a: fb:59:80:31:72:e5:ce:cf:87:d2:4c:0e:fe:a2:29: 1a:a6:b2:28:78:a5:19:ec:c0:fe:8d:f5:7c:35:83: be:9a:37:f9:c4:35:67:65:65:aa:1d:94:f1:60:c5: 16:99:66:ca:21:89:3f:61:49:38:ef:79:11:8c:30: 4e:37:0b:de:0c:82:43:9c:94:c2:25:8d:bb:dd:92: 67:29:d5:b7:4a:e6:25:e8:14:9a:ff:e5:1e:7b:1c: 19:4e:8a:87:94:35:e6:2e:bd:86:0f:dc:15:66:ae: 7f:a1:9c:cc:52:2d:2e:53:16:d7:c8:ac:61:51:c3: c1:19:1f:e6:cd:a6:64:8b:63:ff:ef:67:93:66:9e: 1c:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:39:BC:B3:DF:D8:85:76:C7:B0:7F:C0:53:66:03:59:D6:29:C4:B3 X509v3 Authority Key Identifier: keyid:75:FE:37:A8:3E:DA:80:0A:61:02:60:85:87:ED:F4:08:9D:82:40:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC7AA/D22EDA342A8811F0A30D9159C4F9AE02/df43qD7agAphAmCFh-30CJ2CQOA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/df43qD7agAphAmCFh-30CJ2CQOA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC7AA/D22EDA342A8811F0A30D9159C4F9AE02/df43qD7agAphAmCFh-30CJ2CQOA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ca:a0:4b:64:ed:69:66:4b:e1:fc:ea:c2:3e:d4:ed:6a:5f:3a: f1:60:4d:3b:0e:32:c6:e1:33:82:d1:f3:fe:39:2d:93:92:61: 91:1c:13:ef:7f:ad:f0:17:fb:f9:ec:3d:26:f7:11:97:b1:12: 51:09:41:4b:08:22:0f:6a:6c:46:36:b5:04:68:9d:98:76:9e: 1b:7c:fe:b0:5b:58:87:e7:3d:cc:53:fa:fa:97:a5:ae:1c:58: 56:60:b9:66:7e:49:0b:21:3c:ab:fd:67:bc:63:8e:b8:00:2a: 27:02:dc:64:f9:1e:05:f5:75:0f:6d:68:76:1e:6a:10:a0:fb: eb:0e:72:49:24:0c:a7:74:d1:47:24:7c:0a:4e:6f:82:a1:f8: 05:66:aa:4e:3d:c4:71:46:d9:19:3c:33:c2:18:4e:fe:d5:7c: a5:72:fd:68:3f:22:47:2f:17:ef:ca:7e:f1:9a:a3:e7:d0:b7: 19:a7:54:e0:0f:7a:da:f6:d1:90:52:ee:ba:2b:d4:3f:f0:78: bc:32:51:ac:b3:b7:49:ed:b6:e2:9e:ed:09:42:68:a9:a1:a7: 88:02:39:5e:7a:45:a2:79:cc:8c:14:ea:14:4f:55:c2:c6:c9: 7b:f5:b5:93:06:81:47:3d:86:74:80:98:e8:3a:6a:c8:7b:08: 26:0a:b7:71 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBEDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE QzdBQTExMC8GA1UEBRMoNzVGRTM3QTgzRURBODAwQTYxMDI2MDg1ODdFREY0MDg5 RDgyNDBFMDAeFw0yNTA1MzEwNzM4MjJaFw0yNTA2MDcwNzM4MjJaMBgxFjAUBgNV BAMTDTY4M2FiMWVlLWY0MjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCv0aXnOnPsd09p0q9I1MfJ83T/Wy6oHgY790E410wxmktpkIfKkQiiE6HoP5mF lLdn/gTIABIznweEHYkQFeJNKIIYENbmGrNPx/NSP9bXfDYnZczZ7xBPnCKz49Sr +pN8aiJNMgObahLqVtGTFysUEpSGAzBLSvtZgDFy5c7Ph9JMDv6iKRqmsih4pRns wP6N9Xw1g76aN/nENWdlZaodlPFgxRaZZsohiT9hSTjveRGMME43C94MgkOclMIl jbvdkmcp1bdK5iXoFJr/5R57HBlOioeUNeYuvYYP3BVmrn+hnMxSLS5TFtfIrGFR w8EZH+bNpmSLY//vZ5NmnhwHAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUsjm8s9/Y hXbHsH/AU2YDWdYpxLMwHwYDVR0jBBgwFoAUdf43qD7agAphAmCFh+30CJ2CQOAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURDN0FBL0QyMkVEQTM0MkE4 ODExRjBBMzBEOTE1OUM0RjlBRTAyL2RmNDNxRDdhZ0FwaEFtQ0ZoLTMwQ0oyQ1FP QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZGY0M3FEN2FnQXBoQW1DRmgtMzBDSjJDUU9BLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURD N0FBL0QyMkVEQTM0MkE4ODExRjBBMzBEOTE1OUM0RjlBRTAyL2RmNDNxRDdhZ0Fw aEFtQ0ZoLTMwQ0oyQ1FPQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAMqgS2TtaWZL4fzqwj7U7WpfOvFgTTsOMsbhM4LR8/45LZOSYZEcE+9/ rfAX+/nsPSb3EZexElEJQUsIIg9qbEY2tQRonZh2nht8/rBbWIfnPcxT+vqXpa4c WFZguWZ+SQshPKv9Z7xjjrgAKicC3GT5HgX1dQ9taHYeahCg++sOckkkDKd00Uck fApOb4Kh+AVmqk49xHFG2Rk8M8IYTv7VfKVy/Wg/IkcvF+/KfvGao+fQtxmnVOAP etr20ZBS7ror1D/weLwyUayzt0nttuKe7QlCaKmhp4gCOV56RaJ5zIwU6hRPVcLG yXv1tZMGgUc9hnSAmOg6ash7CCYKt3E= -----END CERTIFICATE-----Generated at Sat May 31 16:49:07 2025 by rpki-client