$ rpki-client -vvf rpki.apnic.net/member_repository/A91E46E8/D4B8DA16B15A11EC8240B820C4F9AE02/CEz6nrwGwNaBBUiw7RzEfPjuDzE.mft File: CEz6nrwGwNaBBUiw7RzEfPjuDzE.mft (raw, json) Hash identifier: +/pq/BzBmOwGDUxEbUrvZSCjcLUeUC9u+E3Fa4ZqML0= Subject key identifier: D7:98:71:81:85:A2:79:55:54:10:D5:9A:F3:53:F1:5A:F2:E6:AF:48 Authority key identifier: 08:4C:FA:9E:BC:06:C0:D6:81:05:48:B0:ED:1C:C4:7C:F8:EE:0F:31 Certificate issuer: /CN=A91E46E8/serialNumber=084CFA9EBC06C0D6810548B0ED1CC47CF8EE0F31 Certificate serial: 0369 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CEz6nrwGwNaBBUiw7RzEfPjuDzE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E46E8/D4B8DA16B15A11EC8240B820C4F9AE02/CEz6nrwGwNaBBUiw7RzEfPjuDzE.mft Manifest number: 0364 Signing time: Sat 31 May 2025 01:09:05 +0000 Manifest this update: Sat 31 May 2025 01:09:04 +0000 Manifest next update: Sat 07 Jun 2025 01:09:04 +0000 Files and hashes: 1: CEz6nrwGwNaBBUiw7RzEfPjuDzE.crl (hash: HaH1h9OVoqWjWxml6S5DiFxemqgqXwGJv+vuxynV3BY=) 2: 97E05E58B15E11ECB6B31625C4F9AE02.roa (hash: 814gK30vRsw3f3GeLBYUI3A+K0FBKsWqCyMte+6ZS3M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E46E8/D4B8DA16B15A11EC8240B820C4F9AE02/CEz6nrwGwNaBBUiw7RzEfPjuDzE.crl rsync://rpki.apnic.net/member_repository/A91E46E8/D4B8DA16B15A11EC8240B820C4F9AE02/CEz6nrwGwNaBBUiw7RzEfPjuDzE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CEz6nrwGwNaBBUiw7RzEfPjuDzE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 01:09:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 873 (0x369) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E46E8, serialNumber=084CFA9EBC06C0D6810548B0ED1CC47CF8EE0F31 Validity Not Before: May 31 01:09:04 2025 GMT Not After : Jun 7 01:09:04 2025 GMT Subject: CN=683a56b1-5df2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:c0:fd:d0:5f:77:de:e3:a9:42:67:1b:64:1a: 51:d1:6c:2c:9b:a6:d5:97:ec:b8:5b:4a:5e:ff:4f: 6c:30:83:fa:96:27:8b:2b:26:f1:1b:75:bf:75:43: 76:3d:74:8c:a9:89:90:78:75:3c:42:ab:9c:bf:67: 04:a0:b3:5d:7e:89:09:94:54:83:35:a4:0b:69:10: ec:07:37:8d:47:93:66:d7:b6:d1:c1:32:cf:2d:58: 30:16:4d:dc:da:29:89:3f:fc:94:96:c9:e3:32:a3: 96:a7:cd:c6:9a:23:40:6a:4e:f6:1e:cf:c5:04:63: bf:e3:fe:56:dc:ca:bd:95:95:3d:0a:fa:01:27:cd: 5f:2e:e0:93:3a:44:32:f1:87:6b:37:f9:3a:82:81: 94:2e:4a:ee:f4:82:32:2a:20:e9:1a:d8:dd:1e:8b: b4:39:98:f3:8f:5c:13:0c:97:75:7e:3f:70:80:2b: 90:13:22:53:57:f7:e9:25:29:ee:22:11:ab:96:d7: 22:53:d5:e4:fa:2c:e4:80:f8:a5:fa:21:d7:6b:6d: bb:b7:53:77:9f:cf:35:94:ca:cb:19:3b:bf:db:0e: d2:c7:68:5f:fa:92:6b:21:86:d1:23:94:14:93:61: b6:37:fc:29:f5:b7:11:2b:59:46:f3:26:37:8f:6b: 1c:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:98:71:81:85:A2:79:55:54:10:D5:9A:F3:53:F1:5A:F2:E6:AF:48 X509v3 Authority Key Identifier: keyid:08:4C:FA:9E:BC:06:C0:D6:81:05:48:B0:ED:1C:C4:7C:F8:EE:0F:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E46E8/D4B8DA16B15A11EC8240B820C4F9AE02/CEz6nrwGwNaBBUiw7RzEfPjuDzE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CEz6nrwGwNaBBUiw7RzEfPjuDzE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E46E8/D4B8DA16B15A11EC8240B820C4F9AE02/CEz6nrwGwNaBBUiw7RzEfPjuDzE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:11:9b:5a:e6:3f:7f:5b:99:0b:ca:3e:ca:1a:a2:50:06:8b: 8e:c2:30:c6:c1:84:8e:22:1d:cd:fc:6a:7b:58:4c:60:d2:15: 36:36:53:ce:f7:8a:c1:39:cf:82:9f:16:61:6a:f6:19:c3:42: c9:f4:5e:6c:5a:b9:92:45:38:7a:10:67:ef:c7:80:b9:57:26: ff:47:89:5e:44:a0:16:9d:48:b2:09:d4:4f:5d:0f:6b:16:74: 76:a9:72:56:ec:98:9f:fd:0b:41:c4:77:4d:e4:80:ed:d5:7b: 0b:45:b1:1f:20:87:c3:c3:bb:02:f7:22:34:5d:18:4e:bc:96: d9:cb:5f:be:ef:88:54:2c:41:71:a8:b6:80:1e:58:7b:55:8d: 57:b2:54:d6:c6:7e:2a:82:ac:ef:88:53:3d:be:3a:69:dd:05: 41:b4:1a:6a:c0:33:f6:9a:de:08:09:ea:60:e3:31:17:71:38: 54:9d:bb:34:a7:99:63:3e:7b:ed:3b:88:de:08:a4:8c:71:91: b5:e1:06:e7:5a:d0:46:15:9b:17:a4:b1:d5:cb:e9:55:e6:aa: df:ce:27:b3:a7:04:28:f1:1c:f7:9a:0d:12:47:0c:7d:f9:cf: 6b:80:62:2f:b9:70:c3:00:0c:b4:1c:bc:85:41:e0:44:01:27: 52:6e:92:48 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA2kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTQ2RTgxMTAvBgNVBAUTKDA4NENGQTlFQkMwNkMwRDY4MTA1NDhCMEVEMUNDNDdD RjhFRTBGMzEwHhcNMjUwNTMxMDEwOTA0WhcNMjUwNjA3MDEwOTA0WjAYMRYwFAYD VQQDEw02ODNhNTZiMS01ZGYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0sD90F933uOpQmcbZBpR0Wwsm6bVl+y4W0pe/09sMIP6lieLKybxG3W/dUN2 PXSMqYmQeHU8Qqucv2cEoLNdfokJlFSDNaQLaRDsBzeNR5Nm17bRwTLPLVgwFk3c 2imJP/yUlsnjMqOWp83GmiNAak72Hs/FBGO/4/5W3Mq9lZU9CvoBJ81fLuCTOkQy 8YdrN/k6goGULkru9IIyKiDpGtjdHou0OZjzj1wTDJd1fj9wgCuQEyJTV/fpJSnu IhGrltciU9Xk+izkgPil+iHXa227t1N3n881lMrLGTu/2w7Sx2hf+pJrIYbRI5QU k2G2N/wp9bcRK1lG8yY3j2scrwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNeYcYGF onlVVBDVmvNT8Vry5q9IMB8GA1UdIwQYMBaAFAhM+p68BsDWgQVIsO0cxHz47g8x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNDZFOC9ENEI4REExNkIx NUExMUVDODI0MEI4MjBDNEY5QUUwMi9DRXo2bnJ3R3dOYUJCVWl3N1J6RWZQanVE ekUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NFejZucndHd05hQkJVaXc3UnpFZlBqdUR6RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NDZFOC9ENEI4REExNkIxNUExMUVDODI0MEI4MjBDNEY5QUUwMi9DRXo2bnJ3R3dO YUJCVWl3N1J6RWZQanVEekUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCpEZta5j9/W5kLyj7KGqJQBouOwjDGwYSOIh3N/Gp7WExg0hU2NlPO 94rBOc+CnxZhavYZw0LJ9F5sWrmSRTh6EGfvx4C5Vyb/R4leRKAWnUiyCdRPXQ9r FnR2qXJW7Jif/QtBxHdN5IDt1XsLRbEfIIfDw7sC9yI0XRhOvJbZy1++74hULEFx qLaAHlh7VY1XslTWxn4qgqzviFM9vjpp3QVBtBpqwDP2mt4ICepg4zEXcThUnbs0 p5ljPnvtO4jeCKSMcZG14QbnWtBGFZsXpLHVy+lV5qrfziezpwQo8Rz3mg0SRwx9 +c9rgGIvuXDDAAy0HLyFQeBEASdSbpJI -----END CERTIFICATE-----Generated at Sat May 31 17:51:40 2025 by rpki-client