$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE1A3/8B9DBBCE689F11EDAD177667C4F9AE02/-5w6kNDNa5K-MWAyXafCbH9OWQA.mft File: -5w6kNDNa5K-MWAyXafCbH9OWQA.mft (raw, json) Hash identifier: 0A3hkTg/GJn8GQw3GLPtt8my/Xz19DDFz5Qf9ekvI/g= Subject key identifier: 64:31:6E:ED:64:41:E6:93:76:1A:9D:5E:2E:54:48:B2:97:83:07:AB Authority key identifier: FB:9C:3A:90:D0:CD:6B:92:BE:31:60:32:5D:A7:C2:6C:7F:4E:59:00 Certificate issuer: /CN=A91DE1A3/serialNumber=FB9C3A90D0CD6B92BE3160325DA7C26C7F4E5900 Certificate serial: 01E0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-5w6kNDNa5K-MWAyXafCbH9OWQA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE1A3/8B9DBBCE689F11EDAD177667C4F9AE02/-5w6kNDNa5K-MWAyXafCbH9OWQA.mft Manifest number: 01DD Signing time: Mon 09 Jun 2025 01:50:30 +0000 Manifest this update: Mon 09 Jun 2025 01:50:29 +0000 Manifest next update: Mon 16 Jun 2025 01:50:29 +0000 Files and hashes: 1: -5w6kNDNa5K-MWAyXafCbH9OWQA.crl (hash: t0nnGIaLsSWtZyNdE6MO7EVf/bSrv0yZ7YZp2iFpTHQ=) 2: F396DA1468A211ED9525A86CC4F9AE02.roa (hash: mfCo7xBHkX9UIyrOsrP0XEhPqQke0cTzgybKkz4msYM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE1A3/8B9DBBCE689F11EDAD177667C4F9AE02/-5w6kNDNa5K-MWAyXafCbH9OWQA.crl rsync://rpki.apnic.net/member_repository/A91DE1A3/8B9DBBCE689F11EDAD177667C4F9AE02/-5w6kNDNa5K-MWAyXafCbH9OWQA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-5w6kNDNa5K-MWAyXafCbH9OWQA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Jun 2025 01:50:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 480 (0x1e0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE1A3, serialNumber=FB9C3A90D0CD6B92BE3160325DA7C26C7F4E5900 Validity Not Before: Jun 9 01:50:29 2025 GMT Not After : Jun 16 01:50:29 2025 GMT Subject: CN=68463de6-6b5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:29:92:03:f6:0d:b2:12:24:05:83:05:a2:bc: dd:9a:89:d3:25:a9:62:b2:b7:7f:82:8c:47:a4:00: fc:42:6c:cf:87:ad:c4:03:bd:9d:16:1c:37:e6:ce: a7:85:90:07:04:ea:ac:76:ad:bd:92:7f:8d:5f:b5: 92:cc:00:1b:8e:1a:db:c8:8f:b0:75:76:92:78:44: 02:94:57:4d:13:1e:5d:95:2d:c3:1d:55:0b:c2:c7: 9e:39:40:a3:b3:31:fa:b7:11:31:ca:a9:3b:8a:80: 42:d9:eb:d6:2d:dc:28:ee:91:d3:91:5e:f6:99:35: f8:cc:d3:49:ff:c0:d8:f7:d0:95:9a:05:5b:5b:84: 6d:c9:d1:6d:34:fb:fb:29:6c:fc:85:c8:89:16:48: 88:c8:f7:1d:14:a9:21:18:8c:06:92:8a:85:52:75: 6f:a7:e9:4d:99:75:cf:6e:ce:07:b7:7f:a5:04:be: 5a:c6:42:d8:c7:ef:74:68:07:88:56:4c:6f:70:63: ff:f1:bf:bd:da:90:2e:06:c2:e6:34:f5:e1:52:78: 67:c1:77:40:1b:35:bc:0b:59:84:bb:e5:9f:2f:26: 5a:9a:18:a3:a9:f7:76:79:81:d7:90:05:8a:3b:8c: b9:13:a0:d4:74:b1:d6:1d:e4:82:82:91:63:35:d9: 67:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:31:6E:ED:64:41:E6:93:76:1A:9D:5E:2E:54:48:B2:97:83:07:AB X509v3 Authority Key Identifier: keyid:FB:9C:3A:90:D0:CD:6B:92:BE:31:60:32:5D:A7:C2:6C:7F:4E:59:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE1A3/8B9DBBCE689F11EDAD177667C4F9AE02/-5w6kNDNa5K-MWAyXafCbH9OWQA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-5w6kNDNa5K-MWAyXafCbH9OWQA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE1A3/8B9DBBCE689F11EDAD177667C4F9AE02/-5w6kNDNa5K-MWAyXafCbH9OWQA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:3c:30:4d:ce:dd:6a:de:d3:85:1a:4f:4c:a9:e6:40:4f:c3: 32:22:f9:25:17:71:40:dd:08:76:da:92:71:4e:1d:d0:6e:26: 8a:83:0d:d4:1e:14:38:34:bd:23:0b:16:a9:99:e8:ac:37:5a: e1:e6:60:6f:f7:70:6d:c5:b0:2c:b3:91:05:3f:53:ee:81:59: 88:c5:b9:c5:ee:d1:ac:90:be:ab:1d:cc:7b:72:44:d8:67:66: f5:d0:51:05:78:45:0e:1a:a0:62:95:bb:8d:9e:87:8d:e7:bc: c6:66:55:66:50:84:36:5f:93:35:15:2a:15:3a:46:48:82:78: 20:1e:34:d8:c1:3f:b5:42:64:11:b8:7f:ba:5f:bf:49:c6:7f: 0b:62:02:35:db:6f:13:77:ff:d0:17:ff:46:7c:51:b1:1f:87: be:fa:b2:20:0d:6b:05:19:8f:07:99:d9:41:a0:15:a8:d6:f6: 00:86:c8:9b:e0:be:86:6f:46:07:dc:61:d1:78:70:78:ed:af: 0b:ec:e8:df:7c:e1:8b:9f:b7:88:4a:18:58:fb:7a:b3:fe:8b: be:ff:c5:68:62:16:c4:19:6e:72:16:63:94:8e:67:aa:8e:66: d8:c4:79:ea:ac:68:13:36:e0:eb:41:0a:4d:06:2b:de:f4:a7: b9:be:30:8e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAeAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REUxQTMxMTAvBgNVBAUTKEZCOUMzQTkwRDBDRDZCOTJCRTMxNjAzMjVEQTdDMjZD N0Y0RTU5MDAwHhcNMjUwNjA5MDE1MDI5WhcNMjUwNjE2MDE1MDI5WjAYMRYwFAYD VQQDEw02ODQ2M2RlNi02YjVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtCmSA/YNshIkBYMForzdmonTJalisrd/goxHpAD8QmzPh63EA72dFhw35s6n hZAHBOqsdq29kn+NX7WSzAAbjhrbyI+wdXaSeEQClFdNEx5dlS3DHVULwseeOUCj szH6txExyqk7ioBC2evWLdwo7pHTkV72mTX4zNNJ/8DY99CVmgVbW4RtydFtNPv7 KWz8hciJFkiIyPcdFKkhGIwGkoqFUnVvp+lNmXXPbs4Ht3+lBL5axkLYx+90aAeI VkxvcGP/8b+92pAuBsLmNPXhUnhnwXdAGzW8C1mEu+WfLyZamhijqfd2eYHXkAWK O4y5E6DUdLHWHeSCgpFjNdlndwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGQxbu1k QeaTdhqdXi5USLKXgwerMB8GA1UdIwQYMBaAFPucOpDQzWuSvjFgMl2nwmx/TlkA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERTFBMy84QjlEQkJDRTY4 OUYxMUVEQUQxNzc2NjdDNEY5QUUwMi8tNXc2a05ETmE1Sy1NV0F5WGFmQ2JIOU9X UUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy01dzZrTkROYTVLLU1XQXlYYWZDYkg5T1dRQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RTFBMy84QjlEQkJDRTY4OUYxMUVEQUQxNzc2NjdDNEY5QUUwMi8tNXc2a05ETmE1 Sy1NV0F5WGFmQ2JIOU9XUUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBlPDBNzt1q3tOFGk9MqeZAT8MyIvklF3FA3Qh22pJxTh3QbiaKgw3U HhQ4NL0jCxapmeisN1rh5mBv93BtxbAss5EFP1PugVmIxbnF7tGskL6rHcx7ckTY Z2b10FEFeEUOGqBilbuNnoeN57zGZlVmUIQ2X5M1FSoVOkZIgnggHjTYwT+1QmQR uH+6X79Jxn8LYgI1228Td//QF/9GfFGxH4e++rIgDWsFGY8HmdlBoBWo1vYAhsib 4L6Gb0YH3GHReHB47a8L7OjffOGLn7eIShhY+3qz/ou+/8VoYhbEGW5yFmOUjmeq jmbYxHnqrGgTNuDrQQpNBive9Ke5vjCO -----END CERTIFICATE-----Generated at Tue Jun 10 06:43:49 2025 by rpki-client