$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0E19/7071464EEDEF11EB8E21DE2DC4F9AE02/71ABp1tYBZ2TpdMWOFS0atZqnsg.mft File: 71ABp1tYBZ2TpdMWOFS0atZqnsg.mft (raw, json) Hash identifier: PQQVKBwTCd14ZAg0gDO14KF8uu8RIDvhr+och5iDXKM= Subject key identifier: 5E:E1:E4:BB:63:0D:5E:24:A4:4B:3C:5A:1D:29:73:4F:3C:CA:BF:9E Authority key identifier: EF:50:01:A7:5B:58:05:9D:93:A5:D3:16:38:54:B4:6A:D6:6A:9E:C8 Certificate issuer: /CN=A91E0E19/serialNumber=EF5001A75B58059D93A5D3163854B46AD66A9EC8 Certificate serial: 0567 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/71ABp1tYBZ2TpdMWOFS0atZqnsg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E0E19/7071464EEDEF11EB8E21DE2DC4F9AE02/71ABp1tYBZ2TpdMWOFS0atZqnsg.mft Manifest number: 055C Signing time: Fri 30 May 2025 23:36:16 +0000 Manifest this update: Fri 30 May 2025 23:36:15 +0000 Manifest next update: Fri 06 Jun 2025 23:36:15 +0000 Files and hashes: 1: 71ABp1tYBZ2TpdMWOFS0atZqnsg.crl (hash: sANA5kbt9oabVno5JKSyKtdTpM0mgu6uhV2UQveD79s=) 2: AB22314C35C211ED8FD8923EC4F9AE02.roa (hash: MnGT95K1KMZ27Vz9GV0/eAka386Vq2ptFRht280ijWY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E0E19/7071464EEDEF11EB8E21DE2DC4F9AE02/71ABp1tYBZ2TpdMWOFS0atZqnsg.crl rsync://rpki.apnic.net/member_repository/A91E0E19/7071464EEDEF11EB8E21DE2DC4F9AE02/71ABp1tYBZ2TpdMWOFS0atZqnsg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/71ABp1tYBZ2TpdMWOFS0atZqnsg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 23:36:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1383 (0x567) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E0E19, serialNumber=EF5001A75B58059D93A5D3163854B46AD66A9EC8 Validity Not Before: May 30 23:36:15 2025 GMT Not After : Jun 6 23:36:15 2025 GMT Subject: CN=683a40ef-b6a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:6f:ca:00:52:21:12:41:05:e4:44:cb:4f:81: 4e:93:4f:b9:41:20:05:ec:2c:16:58:72:df:5b:91: d6:b3:f6:83:99:01:05:ca:bd:56:8f:cd:fc:4f:65: d2:f0:82:73:ec:e6:28:c4:fd:d5:54:90:1c:ae:f7: d2:7d:b7:6f:4b:a8:32:97:e9:89:7e:01:d7:cf:bc: db:89:eb:7e:9e:07:d4:46:62:65:dd:a4:1b:12:0a: 64:26:14:97:a4:3a:30:d7:23:21:0d:56:ed:0f:3d: 7b:41:4a:17:83:5c:54:f5:2c:08:3e:fa:e8:87:01: 51:4e:03:f8:87:d6:4f:25:48:9e:a5:ab:16:96:3f: 85:96:0f:7e:a0:16:b8:69:ed:50:3a:43:27:79:a5: db:57:29:0c:90:3e:cf:38:6a:7c:48:61:8a:85:c9: b3:df:ec:da:b9:eb:bd:68:b0:54:99:0c:17:10:69: 82:51:be:87:eb:52:cb:7e:58:4e:85:07:8d:0b:41: 4d:76:54:b7:bb:b3:97:73:49:a2:fa:33:db:cf:b9: 6f:71:af:83:09:54:85:93:55:5e:10:0b:4b:27:b1: a4:04:36:0d:ff:48:9c:6d:42:64:8c:f7:1d:55:52: 9a:c5:e8:f7:3a:9f:3d:a3:ea:aa:d7:54:f4:2e:aa: 0e:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:E1:E4:BB:63:0D:5E:24:A4:4B:3C:5A:1D:29:73:4F:3C:CA:BF:9E X509v3 Authority Key Identifier: keyid:EF:50:01:A7:5B:58:05:9D:93:A5:D3:16:38:54:B4:6A:D6:6A:9E:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E0E19/7071464EEDEF11EB8E21DE2DC4F9AE02/71ABp1tYBZ2TpdMWOFS0atZqnsg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/71ABp1tYBZ2TpdMWOFS0atZqnsg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0E19/7071464EEDEF11EB8E21DE2DC4F9AE02/71ABp1tYBZ2TpdMWOFS0atZqnsg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:1a:21:7e:66:9b:e3:49:1e:bc:e3:c5:28:12:0f:ae:1b:7c: b4:58:3e:20:c2:0c:ea:31:8d:32:5d:0b:93:80:4e:86:7c:05: ed:7f:7a:6a:d1:cf:25:3a:ee:e4:0b:da:b5:b9:67:9f:e7:08: 27:74:63:56:48:12:a8:d7:2e:27:43:94:46:70:cc:a3:b5:0b: 1e:a1:4d:d2:d3:b5:55:6e:9f:1e:e5:f7:2e:0a:56:9d:44:bb: 4d:d1:ed:96:72:6c:b0:c2:b7:6b:e3:26:0e:56:82:a3:18:d9: 74:6d:0d:03:1d:69:1f:68:79:d3:4f:db:b3:08:fd:6e:e8:67: 00:86:46:af:8e:6a:aa:5e:d1:72:04:80:72:48:e8:ed:d5:bd: ec:55:d6:19:68:48:28:83:7a:0a:d5:4b:f4:ce:b8:33:54:47: 3e:b7:cd:07:8b:64:d3:04:c1:43:37:6c:d3:ea:e3:10:76:45: f1:b0:bb:fb:68:cd:90:e6:2b:12:34:1e:4b:31:d5:20:d2:26: 13:97:1f:26:d9:ea:24:ce:c2:a3:09:a1:60:44:29:da:8f:fa: 15:58:23:95:5b:6e:ef:29:c4:cb:b9:71:3d:0d:b8:30:d2:80: 04:d6:7c:84:4f:bb:58:cf:d6:7e:8c:39:30:93:89:d3:fc:b1: cc:da:64:6b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBWcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTBFMTkxMTAvBgNVBAUTKEVGNTAwMUE3NUI1ODA1OUQ5M0E1RDMxNjM4NTRCNDZB RDY2QTlFQzgwHhcNMjUwNTMwMjMzNjE1WhcNMjUwNjA2MjMzNjE1WjAYMRYwFAYD VQQDEw02ODNhNDBlZi1iNmE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv2/KAFIhEkEF5ETLT4FOk0+5QSAF7CwWWHLfW5HWs/aDmQEFyr1Wj838T2XS 8IJz7OYoxP3VVJAcrvfSfbdvS6gyl+mJfgHXz7zbiet+ngfURmJl3aQbEgpkJhSX pDow1yMhDVbtDz17QUoXg1xU9SwIPvrohwFRTgP4h9ZPJUiepasWlj+Flg9+oBa4 ae1QOkMneaXbVykMkD7POGp8SGGKhcmz3+zaueu9aLBUmQwXEGmCUb6H61LLflhO hQeNC0FNdlS3u7OXc0mi+jPbz7lvca+DCVSFk1VeEAtLJ7GkBDYN/0icbUJkjPcd VVKaxej3Op89o+qq11T0LqoOQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF7h5Ltj DV4kpEs8Wh0pc088yr+eMB8GA1UdIwQYMBaAFO9QAadbWAWdk6XTFjhUtGrWap7I MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMEUxOS83MDcxNDY0RUVE RUYxMUVCOEUyMURFMkRDNEY5QUUwMi83MUFCcDF0WUJaMlRwZE1XT0ZTMGF0WnFu c2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzcxQUJwMXRZQloyVHBkTVdPRlMwYXRacW5zZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MEUxOS83MDcxNDY0RUVERUYxMUVCOEUyMURFMkRDNEY5QUUwMi83MUFCcDF0WUJa MlRwZE1XT0ZTMGF0WnFuc2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB3GiF+ZpvjSR6848UoEg+uG3y0WD4gwgzqMY0yXQuTgE6GfAXtf3pq 0c8lOu7kC9q1uWef5wgndGNWSBKo1y4nQ5RGcMyjtQseoU3S07VVbp8e5fcuClad RLtN0e2Wcmywwrdr4yYOVoKjGNl0bQ0DHWkfaHnTT9uzCP1u6GcAhkavjmqqXtFy BIBySOjt1b3sVdYZaEgog3oK1Uv0zrgzVEc+t80Hi2TTBMFDN2zT6uMQdkXxsLv7 aM2Q5isSNB5LMdUg0iYTlx8m2eokzsKjCaFgRCnaj/oVWCOVW27vKcTLuXE9Dbgw 0oAE1nyET7tYz9Z+jDkwk4nT/LHM2mRr -----END CERTIFICATE-----Generated at Sat May 31 17:46:22 2025 by rpki-client