$ rpki-client -vvf rpki.apnic.net/member_repository/A91E85C5/893C64F67E9A11ECA5AD676BC4F9AE02/dZpuA_DOfXwt2oBI-6gTPsxmPu0.mft File: dZpuA_DOfXwt2oBI-6gTPsxmPu0.mft (raw, json) Hash identifier: m6qrR0k5P7xsL5IB/KoPFJD9GvJbP/b8x5JhUNtpRuo= Subject key identifier: 16:54:FD:7B:BC:B4:16:C2:49:3B:D2:9E:D4:A9:2D:7A:A4:BA:E3:77 Authority key identifier: 75:9A:6E:03:F0:CE:7D:7C:2D:DA:80:48:FB:A8:13:3E:CC:66:3E:ED Certificate issuer: /CN=A91E85C5/serialNumber=759A6E03F0CE7D7C2DDA8048FBA8133ECC663EED Certificate serial: 03E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dZpuA_DOfXwt2oBI-6gTPsxmPu0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E85C5/893C64F67E9A11ECA5AD676BC4F9AE02/dZpuA_DOfXwt2oBI-6gTPsxmPu0.mft Manifest number: 03E4 Signing time: Sat 31 May 2025 00:43:18 +0000 Manifest this update: Sat 31 May 2025 00:43:18 +0000 Manifest next update: Sat 07 Jun 2025 00:43:18 +0000 Files and hashes: 1: dZpuA_DOfXwt2oBI-6gTPsxmPu0.crl (hash: ZCRiK6CCDztDPrZqPEHPM8hx3wAjK+hPNNzDv0b8HnQ=) 2: 14AD3D427E9D11EC914D4A6DC4F9AE02.roa (hash: 8BQNN/QNIWAJlkiQOUN0UFHd3tX4uQeluOnMm/rMf64=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E85C5/893C64F67E9A11ECA5AD676BC4F9AE02/dZpuA_DOfXwt2oBI-6gTPsxmPu0.crl rsync://rpki.apnic.net/member_repository/A91E85C5/893C64F67E9A11ECA5AD676BC4F9AE02/dZpuA_DOfXwt2oBI-6gTPsxmPu0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dZpuA_DOfXwt2oBI-6gTPsxmPu0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 00:43:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1001 (0x3e9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E85C5, serialNumber=759A6E03F0CE7D7C2DDA8048FBA8133ECC663EED Validity Not Before: May 31 00:43:18 2025 GMT Not After : Jun 7 00:43:18 2025 GMT Subject: CN=683a50a6-389e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:3b:a5:fb:0d:d0:bf:a3:b1:d6:ac:7c:85:d8: 31:cd:6c:21:4e:94:17:55:87:8a:8c:32:ee:fe:56: 2a:df:a9:be:0e:81:6a:85:77:44:33:2a:b6:cb:61: d7:89:68:c0:87:15:32:60:ee:20:80:d7:93:b2:f0: 31:9e:d7:32:f0:6e:c5:2c:e3:02:3f:0e:3d:14:e6: f7:92:fa:dd:21:77:4d:d3:a2:be:22:94:3c:bb:52: ac:c9:41:bf:24:a4:74:33:d5:ac:b9:ce:66:3b:49: 81:b7:58:21:40:9b:c7:b1:02:fe:69:50:18:11:db: b7:e8:55:b9:0e:62:62:20:0c:e6:0d:ec:45:77:18: 66:03:12:b2:e5:f2:7f:32:b6:2a:af:86:e3:65:f3: 2e:90:85:98:1f:47:89:8c:87:35:78:09:be:a9:bd: 4e:ac:f0:8b:c0:1f:e1:ad:3f:4a:84:5f:4a:0e:3f: 42:49:fd:a2:de:98:01:0e:c1:38:0d:e5:45:6b:63: 0e:49:ad:66:26:c4:45:a9:d1:10:4b:30:e2:e0:5d: 65:e5:64:be:b6:4c:73:46:a4:7d:06:d6:80:63:6c: e2:97:6e:f2:36:97:14:a7:b8:8c:44:e0:30:2e:c9: 68:82:81:e7:df:87:fa:a4:6d:50:44:c2:2e:1f:cc: c8:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:54:FD:7B:BC:B4:16:C2:49:3B:D2:9E:D4:A9:2D:7A:A4:BA:E3:77 X509v3 Authority Key Identifier: keyid:75:9A:6E:03:F0:CE:7D:7C:2D:DA:80:48:FB:A8:13:3E:CC:66:3E:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E85C5/893C64F67E9A11ECA5AD676BC4F9AE02/dZpuA_DOfXwt2oBI-6gTPsxmPu0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dZpuA_DOfXwt2oBI-6gTPsxmPu0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E85C5/893C64F67E9A11ECA5AD676BC4F9AE02/dZpuA_DOfXwt2oBI-6gTPsxmPu0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:38:9a:34:2e:bd:5c:80:cc:44:ca:84:d6:92:54:ea:b7:36: 62:09:f0:0d:d4:45:de:d5:59:4e:97:d1:bc:d7:9e:53:71:2c: 87:10:60:49:3b:b5:63:b9:81:71:6f:7d:8c:2b:ec:40:77:d1: 3d:9f:62:b2:3e:a1:d3:a7:bc:21:bc:21:73:de:08:66:10:4c: 1b:d8:de:bb:b9:a6:e5:19:d9:33:11:72:21:a3:82:7d:3a:b1: 8c:61:c7:25:56:08:aa:cd:5a:93:de:b2:03:ab:bc:02:2d:0a: 64:c1:54:e3:d5:45:1e:f8:0d:1e:11:2d:96:a0:4b:04:85:2a: 48:a5:c6:ec:dd:66:86:d3:19:87:9d:ab:0e:05:9a:66:8f:0b: b5:61:48:9a:d0:c0:37:f2:2e:9c:01:3b:65:1d:13:6f:86:7b: 1c:20:3b:ab:8b:91:e9:f2:ef:6f:1e:10:51:7e:ec:9c:b4:a1: c8:fa:8d:df:42:62:57:86:d9:d7:f5:59:6d:a4:bd:71:35:62: 37:ed:37:29:bf:14:00:5d:23:64:0e:d6:66:f1:17:fd:00:b5: 8b:e4:de:e0:98:72:1d:a6:24:56:1c:7b:0f:ee:01:90:6f:2a: d1:9d:65:dd:97:45:f2:f0:ab:fa:d3:d0:3b:ac:76:a5:a0:02: ae:36:ea:09 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA+kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTg1QzUxMTAvBgNVBAUTKDc1OUE2RTAzRjBDRTdEN0MyRERBODA0OEZCQTgxMzNF Q0M2NjNFRUQwHhcNMjUwNTMxMDA0MzE4WhcNMjUwNjA3MDA0MzE4WjAYMRYwFAYD VQQDEw02ODNhNTBhNi0zODllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAojul+w3Qv6Ox1qx8hdgxzWwhTpQXVYeKjDLu/lYq36m+DoFqhXdEMyq2y2HX iWjAhxUyYO4ggNeTsvAxntcy8G7FLOMCPw49FOb3kvrdIXdN06K+IpQ8u1KsyUG/ JKR0M9Wsuc5mO0mBt1ghQJvHsQL+aVAYEdu36FW5DmJiIAzmDexFdxhmAxKy5fJ/ MrYqr4bjZfMukIWYH0eJjIc1eAm+qb1OrPCLwB/hrT9KhF9KDj9CSf2i3pgBDsE4 DeVFa2MOSa1mJsRFqdEQSzDi4F1l5WS+tkxzRqR9BtaAY2zil27yNpcUp7iMROAw LslogoHn34f6pG1QRMIuH8zITwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBZU/Xu8 tBbCSTvSntSpLXqkuuN3MB8GA1UdIwQYMBaAFHWabgPwzn18LdqASPuoEz7MZj7t MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODVDNS84OTNDNjRGNjdF OUExMUVDQTVBRDY3NkJDNEY5QUUwMi9kWnB1QV9ET2ZYd3Qyb0JJLTZnVFBzeG1Q dTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RacHVBX0RPZlh3dDJvQkktNmdUUHN4bVB1MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF ODVDNS84OTNDNjRGNjdFOUExMUVDQTVBRDY3NkJDNEY5QUUwMi9kWnB1QV9ET2ZY d3Qyb0JJLTZnVFBzeG1QdTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCyOJo0Lr1cgMxEyoTWklTqtzZiCfAN1EXe1VlOl9G8155TcSyHEGBJ O7VjuYFxb32MK+xAd9E9n2KyPqHTp7whvCFz3ghmEEwb2N67uablGdkzEXIho4J9 OrGMYcclVgiqzVqT3rIDq7wCLQpkwVTj1UUe+A0eES2WoEsEhSpIpcbs3WaG0xmH nasOBZpmjwu1YUia0MA38i6cATtlHRNvhnscIDuri5Hp8u9vHhBRfuyctKHI+o3f QmJXhtnX9VltpL1xNWI37TcpvxQAXSNkDtZm8Rf9ALWL5N7gmHIdpiRWHHsP7gGQ byrRnWXdl0Xy8Kv609A7rHaloAKuNuoJ -----END CERTIFICATE-----Generated at Sat May 31 16:50:45 2025 by rpki-client