$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD75B/64A1DA4801DC11ED9EFE2A56C4F9AE02/64E_WXYcfGsa4oxHgWfiBhq1ys8.mft File: 64E_WXYcfGsa4oxHgWfiBhq1ys8.mft (raw, json) Hash identifier: DemMhnJ/Mwpgg0Qr0eKKC1dJCUFVe8luoCD3JqPnyAk= Subject key identifier: E2:2D:E5:A4:61:BA:04:F9:53:7F:76:14:09:C1:36:EF:0D:11:3F:CB Authority key identifier: EB:81:3F:59:76:1C:7C:6B:1A:E2:8C:47:81:67:E2:06:1A:B5:CA:CF Certificate issuer: /CN=A91DD75B/serialNumber=EB813F59761C7C6B1AE28C478167E2061AB5CACF Certificate serial: 029A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/64E_WXYcfGsa4oxHgWfiBhq1ys8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DD75B/64A1DA4801DC11ED9EFE2A56C4F9AE02/64E_WXYcfGsa4oxHgWfiBhq1ys8.mft Manifest number: 0296 Signing time: Sat 31 May 2025 01:44:21 +0000 Manifest this update: Sat 31 May 2025 01:44:21 +0000 Manifest next update: Sat 07 Jun 2025 01:44:21 +0000 Files and hashes: 1: 64E_WXYcfGsa4oxHgWfiBhq1ys8.crl (hash: Sus+gIHeztRpzjY5u7pRrrd0IsBgLM0+aTRPmF4iEHI=) 2: D6A658CE01DE11ED8236F073C4F9AE02.roa (hash: kmjWEDePak7RaIzaM2s6P+tZd0JsQcs5f1UxF22C33k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DD75B/64A1DA4801DC11ED9EFE2A56C4F9AE02/64E_WXYcfGsa4oxHgWfiBhq1ys8.crl rsync://rpki.apnic.net/member_repository/A91DD75B/64A1DA4801DC11ED9EFE2A56C4F9AE02/64E_WXYcfGsa4oxHgWfiBhq1ys8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/64E_WXYcfGsa4oxHgWfiBhq1ys8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 01:44:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 666 (0x29a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD75B, serialNumber=EB813F59761C7C6B1AE28C478167E2061AB5CACF Validity Not Before: May 31 01:44:21 2025 GMT Not After : Jun 7 01:44:21 2025 GMT Subject: CN=683a5ef5-daa5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:d3:f5:05:c1:90:ff:8d:7d:4e:07:f5:2e:b3: e2:d3:ac:91:57:0c:50:8b:1c:c6:28:7c:77:5e:84: 5d:cb:23:e0:95:3c:8a:da:be:03:58:fd:a1:bc:50: 6c:f0:37:de:2f:21:dc:76:ae:d8:1f:02:6e:5c:5f: bc:bd:bc:72:6c:9e:c2:c2:60:22:ac:70:e2:59:f0: 7d:34:f3:dc:af:f4:6e:a9:6f:eb:26:c1:d2:bb:e8: 51:2e:92:c9:4f:04:6c:1a:23:24:6a:be:46:cf:46: 09:80:b8:18:8d:81:5a:10:4f:52:c5:d8:7e:3e:9d: 98:a2:37:9e:30:8f:61:ee:7c:f9:36:f5:7c:85:ae: 31:f1:5e:ec:88:84:f7:be:a1:26:d6:e1:aa:38:c7: 0f:c8:f6:7e:4a:8f:46:68:54:9b:c8:35:d1:ac:4c: d8:84:09:83:83:36:e9:0a:e5:88:cc:75:db:a2:80: ff:90:8f:cd:6f:b3:37:fe:5e:5c:8b:df:bf:10:e3: 3a:8e:3a:21:45:f9:fd:f2:db:f7:d4:d8:56:d3:04: 84:40:79:32:11:00:13:d8:e8:70:f2:74:8a:31:cf: 62:8d:00:f0:07:b4:96:af:5e:6e:7f:53:69:7e:56: 12:d8:72:1a:c5:a9:3f:bd:c4:8f:6a:c4:62:ab:56: 6c:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:2D:E5:A4:61:BA:04:F9:53:7F:76:14:09:C1:36:EF:0D:11:3F:CB X509v3 Authority Key Identifier: keyid:EB:81:3F:59:76:1C:7C:6B:1A:E2:8C:47:81:67:E2:06:1A:B5:CA:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DD75B/64A1DA4801DC11ED9EFE2A56C4F9AE02/64E_WXYcfGsa4oxHgWfiBhq1ys8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/64E_WXYcfGsa4oxHgWfiBhq1ys8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD75B/64A1DA4801DC11ED9EFE2A56C4F9AE02/64E_WXYcfGsa4oxHgWfiBhq1ys8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:5a:c5:cd:ac:84:73:65:ae:04:0d:b4:c0:90:38:78:01:5a: 39:4f:e3:77:ff:c1:51:dd:8f:39:06:e0:e6:e5:b9:d8:ea:58: 2f:6a:73:e6:38:59:42:fd:59:86:fe:12:3d:8a:03:c6:13:2c: e8:ce:1b:c3:b2:81:76:e7:71:4c:9b:c2:3f:9c:32:23:86:04: f3:7d:cb:e5:8d:1b:9e:20:7f:a3:72:e8:fc:86:bf:c6:f6:b2: c2:f9:86:4b:af:bf:1e:d6:de:84:df:fe:f9:b0:d9:9d:52:99: b4:c3:03:03:ef:0f:30:1c:c7:ed:4d:ae:42:46:0b:e1:ca:4e: 2a:21:b8:57:2b:f5:a9:7b:b0:78:9f:a5:b1:c2:3b:f8:a4:f0: 4b:ba:dc:4d:68:34:f0:70:72:8f:f2:22:b6:cc:dd:49:8a:e4: 2c:97:f7:f6:f1:b0:18:e0:05:8c:48:22:49:5b:08:b2:f9:8c: ed:0d:75:eb:3b:d9:5d:07:c8:41:a5:2f:51:14:a4:e8:4d:9f: d3:84:03:fd:30:20:51:59:ca:9d:75:a1:b4:70:8a:ef:66:13: 9d:5a:c6:68:ac:ef:94:c6:78:73:1c:bc:0d:97:72:af:ef:3a: d7:82:50:cd:2e:9a:93:0c:4f:fb:37:33:52:3e:29:33:93:00: ee:af:88:b0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICApowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REQ3NUIxMTAvBgNVBAUTKEVCODEzRjU5NzYxQzdDNkIxQUUyOEM0NzgxNjdFMjA2 MUFCNUNBQ0YwHhcNMjUwNTMxMDE0NDIxWhcNMjUwNjA3MDE0NDIxWjAYMRYwFAYD VQQDEw02ODNhNWVmNS1kYWE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAydP1BcGQ/419Tgf1LrPi06yRVwxQixzGKHx3XoRdyyPglTyK2r4DWP2hvFBs 8DfeLyHcdq7YHwJuXF+8vbxybJ7CwmAirHDiWfB9NPPcr/RuqW/rJsHSu+hRLpLJ TwRsGiMkar5Gz0YJgLgYjYFaEE9Sxdh+Pp2YojeeMI9h7nz5NvV8ha4x8V7siIT3 vqEm1uGqOMcPyPZ+So9GaFSbyDXRrEzYhAmDgzbpCuWIzHXbooD/kI/Nb7M3/l5c i9+/EOM6jjohRfn98tv31NhW0wSEQHkyEQAT2Ohw8nSKMc9ijQDwB7SWr15uf1Np flYS2HIaxak/vcSPasRiq1ZsywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOIt5aRh ugT5U392FAnBNu8NET/LMB8GA1UdIwQYMBaAFOuBP1l2HHxrGuKMR4Fn4gYatcrP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERDc1Qi82NEExREE0ODAx REMxMUVEOUVGRTJBNTZDNEY5QUUwMi82NEVfV1hZY2ZHc2E0b3hIZ1dmaUJocTF5 czguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzY0RV9XWFljZkdzYTRveEhnV2ZpQmhxMXlzOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RDc1Qi82NEExREE0ODAxREMxMUVEOUVGRTJBNTZDNEY5QUUwMi82NEVfV1hZY2ZH c2E0b3hIZ1dmaUJocTF5czgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB2WsXNrIRzZa4EDbTAkDh4AVo5T+N3/8FR3Y85BuDm5bnY6lgvanPm OFlC/VmG/hI9igPGEyzozhvDsoF253FMm8I/nDIjhgTzfcvljRueIH+jcuj8hr/G 9rLC+YZLr78e1t6E3/75sNmdUpm0wwMD7w8wHMftTa5CRgvhyk4qIbhXK/Wpe7B4 n6Wxwjv4pPBLutxNaDTwcHKP8iK2zN1JiuQsl/f28bAY4AWMSCJJWwiy+YztDXXr O9ldB8hBpS9RFKToTZ/ThAP9MCBRWcqddaG0cIrvZhOdWsZorO+UxnhzHLwNl3Kv 7zrXglDNLpqTDE/7NzNSPikzkwDur4iw -----END CERTIFICATE-----Generated at Sat May 31 16:40:47 2025 by rpki-client