$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1B48/66F57644927411EFBF864A3DC4F9AE02/pOaGeeZ7phon9Pib0JKu5cH3ITk.mft File: pOaGeeZ7phon9Pib0JKu5cH3ITk.mft (raw, json) Hash identifier: hFKPc0xtX30JnseYQYEC5F40o8Y1Se5sXoUdVym+gr0= Subject key identifier: 64:C6:D1:5F:78:EA:89:19:1B:C3:6E:5D:C3:D0:E2:9E:7E:34:64:E1 Authority key identifier: A4:E6:86:79:E6:7B:A6:1A:27:F4:F8:9B:D0:92:AE:E5:C1:F7:21:39 Certificate issuer: /CN=A91E1B48/serialNumber=A4E68679E67BA61A27F4F89BD092AEE5C1F72139 Certificate serial: 71 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pOaGeeZ7phon9Pib0JKu5cH3ITk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E1B48/66F57644927411EFBF864A3DC4F9AE02/pOaGeeZ7phon9Pib0JKu5cH3ITk.mft Manifest number: 70 Signing time: Sat 31 May 2025 06:26:20 +0000 Manifest this update: Sat 31 May 2025 06:26:19 +0000 Manifest next update: Sat 07 Jun 2025 06:26:19 +0000 Files and hashes: 1: pOaGeeZ7phon9Pib0JKu5cH3ITk.crl (hash: XdAkwe5VxbvWdG4mD6vPWUjpIf1DjldTecNMbwmtHmI=) 2: FB03B42C927411EF870E655AC4F9AE02.roa (hash: u4w+Qp27Y9kvTk+tCZ+0s7VTT7TtAcdJXuu92GYJlRA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E1B48/66F57644927411EFBF864A3DC4F9AE02/pOaGeeZ7phon9Pib0JKu5cH3ITk.crl rsync://rpki.apnic.net/member_repository/A91E1B48/66F57644927411EFBF864A3DC4F9AE02/pOaGeeZ7phon9Pib0JKu5cH3ITk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pOaGeeZ7phon9Pib0JKu5cH3ITk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 06:26:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 113 (0x71) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E1B48, serialNumber=A4E68679E67BA61A27F4F89BD092AEE5C1F72139 Validity Not Before: May 31 06:26:19 2025 GMT Not After : Jun 7 06:26:19 2025 GMT Subject: CN=683aa10c-f5d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:96:ce:8d:a0:6d:1e:af:ed:59:49:61:70:f5: 44:4d:fb:c2:30:b0:cc:bf:05:b0:53:ad:9b:73:ef: 2e:6b:f7:74:cb:5d:fb:38:2b:86:88:b9:11:c5:6f: be:97:a2:b5:92:6f:36:ef:c7:c2:6b:38:a5:dc:93: a8:29:46:e5:b3:bc:f4:f2:84:e8:09:9d:16:7b:22: 14:f2:e2:d8:73:c6:4a:be:6d:90:48:9b:10:8a:fd: 36:ed:fc:9e:ce:a2:71:1e:61:a3:c7:45:40:f5:d6: b1:1e:26:0a:e3:35:cc:c8:3e:26:85:0d:de:03:5b: 86:2e:26:9a:26:8f:e3:04:66:76:17:5d:3d:92:ca: 41:99:06:41:3d:fc:c1:e0:41:78:42:ac:a1:32:2e: 1c:d4:6f:53:99:41:9c:fe:ea:4e:7d:f0:1a:9c:58: ae:7d:56:64:2a:4b:a7:b6:dc:20:7e:3b:db:85:9d: 48:e4:3d:7f:16:5f:d3:e2:45:66:3d:db:5c:69:a2: 98:d7:46:e8:4e:2f:0f:fd:03:c4:c9:5b:61:76:f8: f1:3e:2a:ba:b9:cc:16:8a:10:9e:75:21:ee:27:56: 6b:88:6b:e7:77:a2:0b:d9:83:b5:94:50:d9:b5:29: c1:04:60:ea:67:56:79:8f:ca:c5:36:b1:62:29:1e: dc:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:C6:D1:5F:78:EA:89:19:1B:C3:6E:5D:C3:D0:E2:9E:7E:34:64:E1 X509v3 Authority Key Identifier: keyid:A4:E6:86:79:E6:7B:A6:1A:27:F4:F8:9B:D0:92:AE:E5:C1:F7:21:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E1B48/66F57644927411EFBF864A3DC4F9AE02/pOaGeeZ7phon9Pib0JKu5cH3ITk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pOaGeeZ7phon9Pib0JKu5cH3ITk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1B48/66F57644927411EFBF864A3DC4F9AE02/pOaGeeZ7phon9Pib0JKu5cH3ITk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:b2:dd:fd:b0:ab:bd:ab:98:ed:8d:dd:d3:e4:4f:39:cf:a1: ab:67:58:52:49:ba:c9:57:2b:ef:c1:4b:72:fa:0b:29:c8:bd: 0e:b4:06:e5:b5:54:48:9e:c3:56:dd:c4:56:f2:eb:54:87:d4: d6:4c:a1:dc:7e:84:e2:46:f2:87:f9:91:ad:63:9c:a5:d9:e6: 2d:48:55:a0:ab:5a:86:26:37:08:dc:65:6b:ac:92:86:23:ec: a2:e4:dc:49:3b:a2:94:39:64:1b:c4:02:86:ba:9b:53:dc:83: 2a:5a:28:9c:c8:e4:f9:a5:20:9c:2b:dd:c1:81:0b:02:64:40: d4:7f:c3:88:0d:c1:b1:01:e5:e0:13:a0:12:19:a3:58:de:db: f0:3b:c5:3c:19:50:60:84:2e:78:66:81:98:9d:2e:7b:ff:c6: 5b:df:68:21:31:a9:1e:af:02:2b:19:f2:c7:1b:1b:0e:0e:c1: 48:6a:32:e3:00:7a:1e:60:e8:96:1e:9e:ac:59:64:00:6f:b2: 33:e7:4f:51:f1:ae:3a:18:4b:18:fe:8d:2b:be:00:26:23:41: bc:05:ec:a1:1d:91:d7:44:29:ba:45:27:c7:98:31:81:41:24: 36:8c:98:f7:67:09:de:ab:c1:18:49:87:e6:5b:1a:f8:c8:d1: 2f:c9:ca:10 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBcTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF MUI0ODExMC8GA1UEBRMoQTRFNjg2NzlFNjdCQTYxQTI3RjRGODlCRDA5MkFFRTVD MUY3MjEzOTAeFw0yNTA1MzEwNjI2MTlaFw0yNTA2MDcwNjI2MTlaMBgxFjAUBgNV BAMTDTY4M2FhMTBjLWY1ZDkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDels6NoG0er+1ZSWFw9URN+8IwsMy/BbBTrZtz7y5r93TLXfs4K4aIuRHFb76X orWSbzbvx8JrOKXck6gpRuWzvPTyhOgJnRZ7IhTy4thzxkq+bZBImxCK/Tbt/J7O onEeYaPHRUD11rEeJgrjNczIPiaFDd4DW4YuJpomj+MEZnYXXT2SykGZBkE9/MHg QXhCrKEyLhzUb1OZQZz+6k598BqcWK59VmQqS6e23CB+O9uFnUjkPX8WX9PiRWY9 21xpopjXRuhOLw/9A8TJW2F2+PE+Krq5zBaKEJ51Ie4nVmuIa+d3ogvZg7WUUNm1 KcEEYOpnVnmPysU2sWIpHtyxAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUZMbRX3jq iRkbw25dw9Dinn40ZOEwHwYDVR0jBBgwFoAUpOaGeeZ7phon9Pib0JKu5cH3ITkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUxQjQ4LzY2RjU3NjQ0OTI3 NDExRUZCRjg2NEEzREM0RjlBRTAyL3BPYUdlZVo3cGhvbjlQaWIwSkt1NWNIM0lU ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcE9hR2VlWjdwaG9uOVBpYjBKS3U1Y0gzSVRrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUx QjQ4LzY2RjU3NjQ0OTI3NDExRUZCRjg2NEEzREM0RjlBRTAyL3BPYUdlZVo3cGhv bjlQaWIwSkt1NWNIM0lUay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAC6y3f2wq72rmO2N3dPkTznPoatnWFJJuslXK+/BS3L6CynIvQ60BuW1 VEiew1bdxFby61SH1NZModx+hOJG8of5ka1jnKXZ5i1IVaCrWoYmNwjcZWuskoYj 7KLk3Ek7opQ5ZBvEAoa6m1PcgypaKJzI5PmlIJwr3cGBCwJkQNR/w4gNwbEB5eAT oBIZo1je2/A7xTwZUGCELnhmgZidLnv/xlvfaCExqR6vAisZ8scbGw4OwUhqMuMA eh5g6JYenqxZZABvsjPnT1HxrjoYSxj+jSu+ACYjQbwF7KEdkddEKbpFJ8eYMYFB JDaMmPdnCd6rwRhJh+ZbGvjI0S/JyhA= -----END CERTIFICATE-----Generated at Sat May 31 17:12:58 2025 by rpki-client