$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3D4D/ED6A19929AE711EB8A045626C4F9AE02/30PPMfEc2OafGltFHUP2ixRHa0c.mft File: 30PPMfEc2OafGltFHUP2ixRHa0c.mft (raw, json) Hash identifier: jN51IDZeut2tFKS043FwQFZOdZbgaIe79UvMHDcEb5c= Subject key identifier: E2:D5:83:EE:8F:B5:95:91:96:3C:2D:D4:22:1E:42:60:05:D1:9A:CC Authority key identifier: DF:43:CF:31:F1:1C:D8:E6:9F:1A:5B:45:1D:43:F6:8B:14:47:6B:47 Certificate issuer: /CN=A91E3D4D/serialNumber=DF43CF31F11CD8E69F1A5B451D43F68B14476B47 Certificate serial: 0652 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/30PPMfEc2OafGltFHUP2ixRHa0c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3D4D/ED6A19929AE711EB8A045626C4F9AE02/30PPMfEc2OafGltFHUP2ixRHa0c.mft Manifest number: 063F Signing time: Fri 06 Jun 2025 22:47:41 +0000 Manifest this update: Fri 06 Jun 2025 22:47:41 +0000 Manifest next update: Fri 13 Jun 2025 22:47:41 +0000 Files and hashes: 1: 30PPMfEc2OafGltFHUP2ixRHa0c.crl (hash: uNA4Zsqmv5ucNjYFLQaL5AKfmabRgRiiQ2ayFr5UGEg=) 2: 8B5C69BACD5211EBBF89483BC4F9AE02.roa (hash: cxAlue1WNdAlWSTsMFe7GMpFY2WGX2iSM6nZwYbzjpY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3D4D/ED6A19929AE711EB8A045626C4F9AE02/30PPMfEc2OafGltFHUP2ixRHa0c.crl rsync://rpki.apnic.net/member_repository/A91E3D4D/ED6A19929AE711EB8A045626C4F9AE02/30PPMfEc2OafGltFHUP2ixRHa0c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/30PPMfEc2OafGltFHUP2ixRHa0c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 13 Jun 2025 22:47:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1618 (0x652) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3D4D, serialNumber=DF43CF31F11CD8E69F1A5B451D43F68B14476B47 Validity Not Before: Jun 6 22:47:41 2025 GMT Not After : Jun 13 22:47:41 2025 GMT Subject: CN=6843700d-54f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:cc:c2:99:34:2c:74:33:51:5f:63:0d:42:1b: f1:0b:a2:1a:40:60:c3:88:29:48:aa:9e:df:4a:c7: 45:4f:f0:6d:51:20:4d:c6:0c:5b:08:b0:3a:e9:e0: 2c:d0:0e:fd:c6:d4:55:0b:42:9e:97:b8:be:0a:33: f6:0b:e3:65:f7:cd:fd:d2:d3:79:11:68:3a:6d:7c: ac:40:4a:f6:69:d5:b3:70:5f:eb:e9:a9:83:a0:50: 08:2f:c7:b3:1d:4a:7f:5e:86:f1:d2:7e:49:df:ac: 15:8b:b4:7b:56:3d:c9:6d:eb:07:b3:df:2c:31:83: a0:77:1d:3a:b8:42:c4:a2:f6:c4:3e:08:b8:ba:86: d9:13:c5:3b:e5:3e:86:ea:93:e8:44:00:0a:6a:d6: 7e:c7:8a:39:97:f5:0e:44:ab:fd:d2:44:0e:01:2b: 7a:a2:89:5d:0b:4e:94:ba:36:22:11:4a:b3:ab:45: 21:27:c5:39:81:86:27:01:22:fb:f4:9f:ab:1c:51: bc:05:e5:4f:84:b4:b9:b4:67:c8:ba:1f:cd:3c:02: 75:55:ca:6a:dc:f4:49:df:b7:97:86:c9:19:30:a9: 03:95:70:12:33:0b:e7:e5:24:35:93:81:79:0b:0f: b9:51:85:db:7e:00:40:0b:fc:1e:13:2b:29:2e:ec: 77:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:D5:83:EE:8F:B5:95:91:96:3C:2D:D4:22:1E:42:60:05:D1:9A:CC X509v3 Authority Key Identifier: keyid:DF:43:CF:31:F1:1C:D8:E6:9F:1A:5B:45:1D:43:F6:8B:14:47:6B:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3D4D/ED6A19929AE711EB8A045626C4F9AE02/30PPMfEc2OafGltFHUP2ixRHa0c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/30PPMfEc2OafGltFHUP2ixRHa0c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3D4D/ED6A19929AE711EB8A045626C4F9AE02/30PPMfEc2OafGltFHUP2ixRHa0c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:fc:c9:34:3e:21:ca:19:d0:d9:34:80:d7:19:ec:13:0a:a5: 29:b9:b6:30:99:95:68:69:75:32:26:d4:87:94:c7:dd:c2:38: fc:15:8b:9e:53:11:c2:f5:38:cb:4c:2d:c7:7f:34:0b:a1:d1: ec:29:13:55:6f:8e:fd:9b:a7:ba:07:5a:ef:1e:9f:1f:b8:02: 3a:5a:30:d9:0f:01:90:4a:43:b0:c9:f2:af:f2:66:bd:70:20: e2:18:a0:49:87:40:08:e3:a6:be:6b:44:04:b2:fd:e7:61:5a: ce:68:9b:0d:f3:33:58:ac:53:39:ce:05:da:50:ab:f9:bf:50: 69:e2:88:22:b5:98:66:3e:98:6f:17:1b:2b:2b:ad:25:15:50: af:c4:5c:90:e7:9d:39:de:ad:ab:b0:5e:b6:23:16:4f:6a:c0: 5b:fc:18:bd:cd:e6:5f:59:84:60:3d:91:da:f1:98:aa:68:c0: 42:c7:f7:67:a9:d6:4c:6a:57:50:61:e5:14:bb:93:ce:38:fd: 84:da:91:48:10:5a:f8:ae:f9:c6:e2:cc:51:bd:bc:04:b1:2f: 1e:d9:7a:96:8d:84:ff:c6:d4:0b:93:bb:49:f4:70:39:ed:47: 29:42:b9:d3:a4:1d:1f:23:60:07:25:1d:7a:f6:4a:dc:dc:94: 4c:97:62:be -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBlIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTNENEQxMTAvBgNVBAUTKERGNDNDRjMxRjExQ0Q4RTY5RjFBNUI0NTFENDNGNjhC MTQ0NzZCNDcwHhcNMjUwNjA2MjI0NzQxWhcNMjUwNjEzMjI0NzQxWjAYMRYwFAYD VQQDEw02ODQzNzAwZC01NGY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqMzCmTQsdDNRX2MNQhvxC6IaQGDDiClIqp7fSsdFT/BtUSBNxgxbCLA66eAs 0A79xtRVC0Kel7i+CjP2C+Nl98390tN5EWg6bXysQEr2adWzcF/r6amDoFAIL8ez HUp/Xobx0n5J36wVi7R7Vj3JbesHs98sMYOgdx06uELEovbEPgi4uobZE8U75T6G 6pPoRAAKatZ+x4o5l/UORKv90kQOASt6ooldC06UujYiEUqzq0UhJ8U5gYYnASL7 9J+rHFG8BeVPhLS5tGfIuh/NPAJ1Vcpq3PRJ37eXhskZMKkDlXASMwvn5SQ1k4F5 Cw+5UYXbfgBAC/weEyspLux3owIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOLVg+6P tZWRljwt1CIeQmAF0ZrMMB8GA1UdIwQYMBaAFN9DzzHxHNjmnxpbRR1D9osUR2tH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFM0Q0RC9FRDZBMTk5MjlB RTcxMUVCOEEwNDU2MjZDNEY5QUUwMi8zMFBQTWZFYzJPYWZHbHRGSFVQMml4Ukhh MGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzMwUFBNZkVjMk9hZkdsdEZIVVAyaXhSSGEwYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF M0Q0RC9FRDZBMTk5MjlBRTcxMUVCOEEwNDU2MjZDNEY5QUUwMi8zMFBQTWZFYzJP YWZHbHRGSFVQMml4UkhhMGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAK/Mk0PiHKGdDZNIDXGewTCqUpubYwmZVoaXUyJtSHlMfdwjj8FYue UxHC9TjLTC3HfzQLodHsKRNVb479m6e6B1rvHp8fuAI6WjDZDwGQSkOwyfKv8ma9 cCDiGKBJh0AI46a+a0QEsv3nYVrOaJsN8zNYrFM5zgXaUKv5v1Bp4ogitZhmPphv FxsrK60lFVCvxFyQ55053q2rsF62IxZPasBb/Bi9zeZfWYRgPZHa8ZiqaMBCx/dn qdZMaldQYeUUu5POOP2E2pFIEFr4rvnG4sxRvbwEsS8e2XqWjYT/xtQLk7tJ9HA5 7UcpQrnTpB0fI2AHJR169krc3JRMl2K+ -----END CERTIFICATE-----Generated at Sat Jun 7 22:40:26 2025 by rpki-client