$ rpki-client -vvf rpki.apnic.net/member_repository/A91E268B/426F57C08D3911EBB9F4CB17C4F9AE02/RisW0yeXLqdxImoBWItSBe_qRJY.mft File: RisW0yeXLqdxImoBWItSBe_qRJY.mft (raw, json) Hash identifier: xpy/w17iItvMtdBxjoSXbsDGYtsjC6PuVgcAYSY0FMM= Subject key identifier: 37:0A:A6:BA:29:AB:FD:D1:FC:6B:83:4F:F1:D3:51:0A:35:43:1B:6D Authority key identifier: 46:2B:16:D3:27:97:2E:A7:71:22:6A:01:58:8B:52:05:EF:EA:44:96 Certificate issuer: /CN=A91E268B/serialNumber=462B16D327972EA771226A01588B5205EFEA4496 Certificate serial: 0664 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RisW0yeXLqdxImoBWItSBe_qRJY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E268B/426F57C08D3911EBB9F4CB17C4F9AE02/RisW0yeXLqdxImoBWItSBe_qRJY.mft Manifest number: 0653 Signing time: Fri 30 May 2025 22:48:11 +0000 Manifest this update: Fri 30 May 2025 22:48:10 +0000 Manifest next update: Fri 06 Jun 2025 22:48:10 +0000 Files and hashes: 1: RisW0yeXLqdxImoBWItSBe_qRJY.crl (hash: Pc0Vgh0x/Q51vmqJG//DXQUjihU8PctvsQnAvu/PvXc=) 2: 7549B6D2744A11EDA8F69509C4F9AE02.roa (hash: Qanq6NRaIr7kIyU/FtT70GBfspNN2MElYD/z614Bqk8=) 3: 3F4ECBD2744D11EDB5D08682C4F9AE02.roa (hash: g6OgdDZKbwzC3zinj7MpaUKQ1NJe0hr5+U2aIYgw2E0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E268B/426F57C08D3911EBB9F4CB17C4F9AE02/RisW0yeXLqdxImoBWItSBe_qRJY.crl rsync://rpki.apnic.net/member_repository/A91E268B/426F57C08D3911EBB9F4CB17C4F9AE02/RisW0yeXLqdxImoBWItSBe_qRJY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RisW0yeXLqdxImoBWItSBe_qRJY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 22:48:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1636 (0x664) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E268B, serialNumber=462B16D327972EA771226A01588B5205EFEA4496 Validity Not Before: May 30 22:48:10 2025 GMT Not After : Jun 6 22:48:10 2025 GMT Subject: CN=683a35ab-06b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:59:c3:1d:26:15:8f:67:9c:7b:bb:75:7f:25: 9b:ea:2c:27:c7:34:b0:81:a1:4b:b2:ad:b9:46:c6: ff:d6:9c:2d:79:bc:43:1a:f4:5f:9d:f2:3f:21:b9: 2b:e0:82:bd:80:cb:b3:58:13:d7:a8:a6:0d:ac:4c: f7:be:a4:90:ac:f4:91:fa:5c:d4:13:46:a5:a1:00: 43:b6:cb:6c:d3:0e:4d:49:dc:ac:5e:4e:72:e9:bf: 0e:e4:3c:63:2e:d7:1a:1b:73:4d:27:36:da:26:fd: 8e:99:31:72:38:0f:0e:43:38:1f:17:28:3f:6c:4f: bd:2b:ae:57:e1:3f:2c:60:91:ed:32:75:57:31:81: fb:20:86:69:ba:84:ff:97:42:c5:9f:ee:8c:23:4b: d1:e0:f8:13:49:91:a0:08:13:8c:99:f8:0f:7f:1b: fb:38:16:73:ca:1e:3c:a5:d2:15:1c:7d:f6:df:33: 34:fb:d7:40:a7:3f:1d:ab:77:2c:80:8a:17:5f:26: d6:b4:c2:46:43:c4:54:59:fd:cd:04:5b:1b:a5:e3: 83:22:bd:8e:bc:ba:e4:57:56:f2:27:b9:ad:f9:55: ae:e7:78:91:b3:53:99:b6:ff:17:06:bb:dd:b2:44: b0:12:83:63:8e:5b:f8:bb:1d:56:e8:7e:e9:53:71: ce:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:0A:A6:BA:29:AB:FD:D1:FC:6B:83:4F:F1:D3:51:0A:35:43:1B:6D X509v3 Authority Key Identifier: keyid:46:2B:16:D3:27:97:2E:A7:71:22:6A:01:58:8B:52:05:EF:EA:44:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E268B/426F57C08D3911EBB9F4CB17C4F9AE02/RisW0yeXLqdxImoBWItSBe_qRJY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RisW0yeXLqdxImoBWItSBe_qRJY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E268B/426F57C08D3911EBB9F4CB17C4F9AE02/RisW0yeXLqdxImoBWItSBe_qRJY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:b9:7f:42:5d:96:5f:28:9f:bb:c0:96:d8:d3:51:51:8c:4c: 95:a8:04:ac:6e:c5:e1:e5:ab:17:c2:28:ee:91:63:1a:43:8f: bb:6c:27:92:27:a7:06:cd:58:a1:98:32:c7:5b:eb:5e:2a:a2: 42:82:f5:55:f2:d1:ee:89:35:be:f2:35:bc:00:b2:ba:9f:a3: ef:08:03:26:fd:b7:00:a2:7c:9e:1e:50:5a:2c:c8:ec:45:49: 00:31:fd:20:e4:7a:6d:1a:61:c6:de:fa:6e:df:b5:82:ab:e4: 7a:16:86:24:16:73:23:92:3b:50:f6:e8:cf:ac:28:a6:5e:cc: 8f:48:a2:3f:7c:e4:e7:fa:b5:0f:aa:94:38:1a:63:72:55:e1: 02:53:69:74:22:63:76:d3:69:43:a5:39:fe:f4:36:9b:63:f7: 9a:e5:95:e9:f3:9f:16:85:ca:59:de:15:15:50:a1:0a:ff:d7: 77:51:02:da:9e:7e:38:63:34:26:07:1e:3d:c9:21:a8:fc:54: 14:ba:a0:85:75:79:47:cd:2b:63:d1:db:a3:84:da:ee:5a:e9: bc:02:2f:5b:f9:10:24:c3:2d:9e:eb:85:53:b0:af:8b:70:81: ac:8f:87:76:6a:28:b2:4f:41:06:89:b3:e8:49:b1:26:ea:55: 61:5c:b4:81 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBmQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTI2OEIxMTAvBgNVBAUTKDQ2MkIxNkQzMjc5NzJFQTc3MTIyNkEwMTU4OEI1MjA1 RUZFQTQ0OTYwHhcNMjUwNTMwMjI0ODEwWhcNMjUwNjA2MjI0ODEwWjAYMRYwFAYD VQQDEw02ODNhMzVhYi0wNmI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxlnDHSYVj2ece7t1fyWb6iwnxzSwgaFLsq25Rsb/1pwtebxDGvRfnfI/Ibkr 4IK9gMuzWBPXqKYNrEz3vqSQrPSR+lzUE0aloQBDtsts0w5NSdysXk5y6b8O5Dxj LtcaG3NNJzbaJv2OmTFyOA8OQzgfFyg/bE+9K65X4T8sYJHtMnVXMYH7IIZpuoT/ l0LFn+6MI0vR4PgTSZGgCBOMmfgPfxv7OBZzyh48pdIVHH323zM0+9dApz8dq3cs gIoXXybWtMJGQ8RUWf3NBFsbpeODIr2OvLrkV1byJ7mt+VWu53iRs1OZtv8XBrvd skSwEoNjjlv4ux1W6H7pU3HO+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDcKprop q/3R/GuDT/HTUQo1QxttMB8GA1UdIwQYMBaAFEYrFtMnly6ncSJqAViLUgXv6kSW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjY4Qi80MjZGNTdDMDhE MzkxMUVCQjlGNENCMTdDNEY5QUUwMi9SaXNXMHllWExxZHhJbW9CV0l0U0JlX3FS SlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Jpc1cweWVYTHFkeEltb0JXSXRTQmVfcVJKWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MjY4Qi80MjZGNTdDMDhEMzkxMUVCQjlGNENCMTdDNEY5QUUwMi9SaXNXMHllWExx ZHhJbW9CV0l0U0JlX3FSSlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQABuX9CXZZfKJ+7wJbY01FRjEyVqASsbsXh5asXwijukWMaQ4+7bCeS J6cGzVihmDLHW+teKqJCgvVV8tHuiTW+8jW8ALK6n6PvCAMm/bcAonyeHlBaLMjs RUkAMf0g5HptGmHG3vpu37WCq+R6FoYkFnMjkjtQ9ujPrCimXsyPSKI/fOTn+rUP qpQ4GmNyVeECU2l0ImN202lDpTn+9DabY/ea5ZXp858WhcpZ3hUVUKEK/9d3UQLa nn44YzQmBx49ySGo/FQUuqCFdXlHzStj0dujhNruWum8Ai9b+RAkwy2e64VTsK+L cIGsj4d2aiiyT0EGibPoSbEm6lVhXLSB -----END CERTIFICATE-----Generated at Sat May 31 17:39:15 2025 by rpki-client