$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC8C8/9945FDA4503F11EDB25DF66AC4F9AE02/67Vu9aQ9Hla4rmw179-QarhdJ1U.mft File: 67Vu9aQ9Hla4rmw179-QarhdJ1U.mft (raw, json) Hash identifier: n51pgVgRg8TC4gst2Nxv8Hv37SFss/gvQpcF0/hFqow= Subject key identifier: 87:01:08:CA:32:E8:88:5E:22:87:4B:52:9C:34:41:90:02:15:15:A8 Authority key identifier: EB:B5:6E:F5:A4:3D:1E:56:B8:AE:6C:35:EF:DF:90:6A:B8:5D:27:55 Certificate issuer: /CN=A91DC8C8/serialNumber=EBB56EF5A43D1E56B8AE6C35EFDF906AB85D2755 Certificate serial: 01EF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67Vu9aQ9Hla4rmw179-QarhdJ1U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC8C8/9945FDA4503F11EDB25DF66AC4F9AE02/67Vu9aQ9Hla4rmw179-QarhdJ1U.mft Manifest number: 01EA Signing time: Sat 31 May 2025 02:19:46 +0000 Manifest this update: Sat 31 May 2025 02:19:45 +0000 Manifest next update: Sat 07 Jun 2025 02:19:45 +0000 Files and hashes: 1: 67Vu9aQ9Hla4rmw179-QarhdJ1U.crl (hash: rG2l6qnOtrWIIZtxVrcezgbiHklQFvGlvgZwQD8yurA=) 2: 376CBBEA504411ED83277887C4F9AE02.roa (hash: T+4lg8d9jLKTS/9QxB/dn+qV3gmWtO4Nms49RgwAEAs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC8C8/9945FDA4503F11EDB25DF66AC4F9AE02/67Vu9aQ9Hla4rmw179-QarhdJ1U.crl rsync://rpki.apnic.net/member_repository/A91DC8C8/9945FDA4503F11EDB25DF66AC4F9AE02/67Vu9aQ9Hla4rmw179-QarhdJ1U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67Vu9aQ9Hla4rmw179-QarhdJ1U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 02:19:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 495 (0x1ef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC8C8, serialNumber=EBB56EF5A43D1E56B8AE6C35EFDF906AB85D2755 Validity Not Before: May 31 02:19:45 2025 GMT Not After : Jun 7 02:19:45 2025 GMT Subject: CN=683a6742-916f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:52:bc:ba:4c:88:9a:b9:5c:66:c5:42:02:60: 1c:7b:e8:fd:30:f6:8a:70:82:28:99:be:73:ae:88: df:26:2a:7f:e9:63:d8:28:1d:b9:92:62:f5:57:21: 98:a2:35:c0:0b:48:76:ff:6e:25:05:cd:30:94:66: f3:f5:6a:e8:00:28:13:8a:58:2c:66:a2:76:89:6d: 73:16:d0:1d:0b:8d:20:a8:0b:c1:6e:95:a2:63:87: 5f:1f:df:d2:6e:b5:5d:c9:80:7d:ae:fd:5c:8c:eb: 7c:bf:72:2d:fc:f7:d3:18:93:0e:70:bc:c1:b0:78: c0:c2:f2:6b:c9:2a:a1:f8:e9:4b:f1:c5:76:a5:0a: 44:e9:85:0f:12:6a:96:e4:10:94:5d:15:80:fc:1b: 58:f1:7c:d6:83:ee:14:ea:fc:16:a3:f2:06:6c:2e: a2:eb:54:df:e9:34:b0:95:99:1b:07:40:f2:6d:04: 8c:a2:a9:ac:10:f7:03:d3:05:7c:1b:49:a5:44:32: af:d1:a9:6e:21:86:c7:e4:c2:6a:e2:80:06:a4:f5: 15:fb:ad:45:af:7d:05:e3:41:ec:7a:56:34:d0:0d: 75:02:40:ea:3e:72:4e:8c:76:f2:a2:2e:04:a9:69: 10:13:fd:87:00:04:9f:3c:87:d3:8b:b8:6a:4b:d7: 3f:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:01:08:CA:32:E8:88:5E:22:87:4B:52:9C:34:41:90:02:15:15:A8 X509v3 Authority Key Identifier: keyid:EB:B5:6E:F5:A4:3D:1E:56:B8:AE:6C:35:EF:DF:90:6A:B8:5D:27:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC8C8/9945FDA4503F11EDB25DF66AC4F9AE02/67Vu9aQ9Hla4rmw179-QarhdJ1U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67Vu9aQ9Hla4rmw179-QarhdJ1U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC8C8/9945FDA4503F11EDB25DF66AC4F9AE02/67Vu9aQ9Hla4rmw179-QarhdJ1U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:12:fe:f7:0e:63:d1:d2:93:6b:6c:21:ca:f1:ca:18:96:aa: 71:05:c6:6a:20:ad:62:2f:9c:dc:11:95:fe:27:57:52:61:56: 76:e1:78:38:b2:87:40:8d:32:e3:14:13:30:2c:69:df:f5:0f: c3:3c:89:fc:a0:1d:23:27:3e:ac:79:2a:9d:c2:3a:09:31:16: 82:cb:a6:2e:95:dc:82:a9:3a:e3:d1:7d:85:37:f2:07:e1:1b: 85:34:37:4f:f2:0a:5e:62:12:af:ff:f7:c5:0b:86:c6:41:5f: 92:72:e7:a3:7b:0a:32:ee:ab:1c:53:13:ba:48:36:43:be:20: 1c:2c:cd:97:a8:03:b8:f6:d6:27:ac:60:2f:99:69:12:d7:f2: f9:4f:77:54:41:6f:c9:4f:00:a2:a8:dd:74:b8:c9:4d:64:bd: 6a:d9:d4:a0:07:ba:ec:0a:e6:70:57:97:33:e5:02:b8:56:90: da:83:30:53:ca:fa:b0:c1:83:a3:1c:39:5d:74:5b:21:2e:e4: 8b:01:43:51:aa:c2:18:9d:8a:d8:d2:c1:36:ea:fb:fa:82:dd: 7b:73:59:b3:f3:ad:36:df:eb:3a:4a:53:ca:be:e1:77:15:5f: 0c:89:b6:f6:40:03:a5:e1:5e:53:6e:31:5c:d6:e8:26:d1:37: c3:4d:0e:ae -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAe8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REM4QzgxMTAvBgNVBAUTKEVCQjU2RUY1QTQzRDFFNTZCOEFFNkMzNUVGREY5MDZB Qjg1RDI3NTUwHhcNMjUwNTMxMDIxOTQ1WhcNMjUwNjA3MDIxOTQ1WjAYMRYwFAYD VQQDEw02ODNhNjc0Mi05MTZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7FK8ukyImrlcZsVCAmAce+j9MPaKcIIomb5zrojfJip/6WPYKB25kmL1VyGY ojXAC0h2/24lBc0wlGbz9WroACgTilgsZqJ2iW1zFtAdC40gqAvBbpWiY4dfH9/S brVdyYB9rv1cjOt8v3It/PfTGJMOcLzBsHjAwvJrySqh+OlL8cV2pQpE6YUPEmqW 5BCUXRWA/BtY8XzWg+4U6vwWo/IGbC6i61Tf6TSwlZkbB0DybQSMoqmsEPcD0wV8 G0mlRDKv0aluIYbH5MJq4oAGpPUV+61Fr30F40HselY00A11AkDqPnJOjHbyoi4E qWkQE/2HAASfPIfTi7hqS9c/7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIcBCMoy 6IheIodLUpw0QZACFRWoMB8GA1UdIwQYMBaAFOu1bvWkPR5WuK5sNe/fkGq4XSdV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzhDOC85OTQ1RkRBNDUw M0YxMUVEQjI1REY2NkFDNEY5QUUwMi82N1Z1OWFROUhsYTRybXcxNzktUWFyaGRK MVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzY3VnU5YVE5SGxhNHJtdzE3OS1RYXJoZEoxVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QzhDOC85OTQ1RkRBNDUwM0YxMUVEQjI1REY2NkFDNEY5QUUwMi82N1Z1OWFROUhs YTRybXcxNzktUWFyaGRKMVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAwEv73DmPR0pNrbCHK8coYlqpxBcZqIK1iL5zcEZX+J1dSYVZ24Xg4 sodAjTLjFBMwLGnf9Q/DPIn8oB0jJz6seSqdwjoJMRaCy6YuldyCqTrj0X2FN/IH 4RuFNDdP8gpeYhKv//fFC4bGQV+Scuejewoy7qscUxO6SDZDviAcLM2XqAO49tYn rGAvmWkS1/L5T3dUQW/JTwCiqN10uMlNZL1q2dSgB7rsCuZwV5cz5QK4VpDagzBT yvqwwYOjHDlddFshLuSLAUNRqsIYnYrY0sE26vv6gt17c1mz86023+s6SlPKvuF3 FV8Mibb2QAOl4V5TbjFc1ugm0TfDTQ6u -----END CERTIFICATE-----Generated at Sat May 31 17:04:57 2025 by rpki-client