$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9EA9/E646BF1E968011EBAA64FA56C4F9AE02/mU2bLZfLzLXVJE3gp-U5dB-IiiM.mft File: mU2bLZfLzLXVJE3gp-U5dB-IiiM.mft (raw, json) Hash identifier: pLRZXwtw4yz5AiZIazyBN5FPng86+CGzi+7TRs0kJZE= Subject key identifier: 1F:00:05:2A:E6:0D:DB:F7:66:5D:03:BC:60:A7:C2:20:54:9D:DE:18 Authority key identifier: 99:4D:9B:2D:97:CB:CC:B5:D5:24:4D:E0:A7:E5:39:74:1F:88:8A:23 Certificate issuer: /CN=A91E9EA9/serialNumber=994D9B2D97CBCCB5D5244DE0A7E539741F888A23 Certificate serial: 0637 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mU2bLZfLzLXVJE3gp-U5dB-IiiM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9EA9/E646BF1E968011EBAA64FA56C4F9AE02/mU2bLZfLzLXVJE3gp-U5dB-IiiM.mft Manifest number: 0630 Signing time: Fri 30 May 2025 22:54:48 +0000 Manifest this update: Fri 30 May 2025 22:54:47 +0000 Manifest next update: Fri 06 Jun 2025 22:54:47 +0000 Files and hashes: 1: mU2bLZfLzLXVJE3gp-U5dB-IiiM.crl (hash: LdQBpVYJnzW5UsAAK5X5jrNZ2C7747vA75SwitxBwZU=) 2: 1B4DA20CD46711ECA1A27035C4F9AE02.roa (hash: ztzKFXpjSxYM8wd4nThJ1BsK2ipsW271bSfHzk4YREM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9EA9/E646BF1E968011EBAA64FA56C4F9AE02/mU2bLZfLzLXVJE3gp-U5dB-IiiM.crl rsync://rpki.apnic.net/member_repository/A91E9EA9/E646BF1E968011EBAA64FA56C4F9AE02/mU2bLZfLzLXVJE3gp-U5dB-IiiM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mU2bLZfLzLXVJE3gp-U5dB-IiiM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 22:54:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1591 (0x637) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9EA9, serialNumber=994D9B2D97CBCCB5D5244DE0A7E539741F888A23 Validity Not Before: May 30 22:54:47 2025 GMT Not After : Jun 6 22:54:47 2025 GMT Subject: CN=683a3737-8ec1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:d6:cc:85:f8:90:13:33:4f:09:8f:89:42:03: f6:45:0c:bc:28:78:19:29:64:f2:c3:6c:0d:25:02: 3f:43:9b:98:9b:41:bb:07:b4:42:4e:0b:23:91:d0: f2:ab:fa:39:06:92:fa:9c:10:07:9e:96:27:86:71: 24:b9:41:2c:6c:0e:19:13:6d:0c:3b:79:97:c7:b4: 53:70:73:6f:fa:91:b6:e3:c5:4b:30:50:4c:51:04: e1:eb:ae:8a:fb:5a:3c:55:64:da:df:2c:9f:6e:9b: 8c:16:36:72:71:75:68:81:01:4e:46:b5:43:5e:4b: c1:a4:3e:89:83:db:60:67:49:55:4f:d5:f3:c8:2e: 97:32:42:cd:0c:b0:33:65:ec:3f:86:72:14:55:88: 78:91:d3:cf:92:7e:6d:dc:08:b5:db:ce:6e:99:de: ae:e5:6a:92:e3:ab:69:1e:51:b6:4d:9f:1d:df:67: ea:c5:f4:cb:94:14:37:9a:c5:cd:71:f2:b1:76:af: a8:49:89:ee:8a:84:b3:73:a1:51:4f:60:3c:69:8a: 60:65:6a:ca:59:eb:5f:9c:27:c8:88:36:c1:ee:65: 96:3f:07:32:a4:ac:f2:e7:8e:d7:33:ae:1c:fd:a4: ef:d1:2a:34:a3:7c:f0:db:9a:7f:c9:46:2e:9d:48: 17:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:00:05:2A:E6:0D:DB:F7:66:5D:03:BC:60:A7:C2:20:54:9D:DE:18 X509v3 Authority Key Identifier: keyid:99:4D:9B:2D:97:CB:CC:B5:D5:24:4D:E0:A7:E5:39:74:1F:88:8A:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9EA9/E646BF1E968011EBAA64FA56C4F9AE02/mU2bLZfLzLXVJE3gp-U5dB-IiiM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mU2bLZfLzLXVJE3gp-U5dB-IiiM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9EA9/E646BF1E968011EBAA64FA56C4F9AE02/mU2bLZfLzLXVJE3gp-U5dB-IiiM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:39:34:4b:6a:86:eb:9c:97:44:4a:3a:c1:12:0c:21:eb:09: 35:ed:6e:dd:9c:40:23:0d:12:d3:be:ed:b8:a9:f9:f4:bd:8c: c3:0b:95:9e:7c:9d:ba:16:3a:f3:71:0f:5d:28:64:99:82:ab: fe:6a:82:c6:ad:af:c2:cd:6a:20:42:62:c4:7a:8e:ef:04:94: d1:5c:7c:e3:f3:43:1c:68:20:c4:bd:c6:7c:26:ce:c2:ae:bb: 81:9a:04:52:b7:53:73:9f:64:13:7d:a6:6a:8b:8f:40:16:9a: c8:ad:66:3f:51:b6:a7:37:43:9d:57:b9:b4:d8:7f:a2:3d:a7: ac:41:bd:53:4a:dd:77:7a:cd:91:73:b6:42:eb:fb:d2:78:f4: 0c:1b:38:1b:c1:6f:77:04:2e:c8:24:7f:50:0c:7a:15:37:22: e8:d7:ee:cb:3f:d3:8f:10:04:5e:de:11:57:07:93:71:4f:57: ba:d2:00:95:f3:99:a9:da:7e:16:05:56:91:05:fc:54:39:9f: e6:ef:cf:95:fa:dd:7e:af:37:e6:2f:2f:d5:ac:20:5c:b2:d4: 94:5c:ae:fb:0a:15:8f:92:0b:cc:af:c0:fd:3c:f5:07:b0:9e: d0:2b:74:f8:27:28:aa:5a:e3:23:8c:cf:14:ba:d9:d7:80:83: ea:dc:a4:6f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBjcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTlFQTkxMTAvBgNVBAUTKDk5NEQ5QjJEOTdDQkNDQjVENTI0NERFMEE3RTUzOTc0 MUY4ODhBMjMwHhcNMjUwNTMwMjI1NDQ3WhcNMjUwNjA2MjI1NDQ3WjAYMRYwFAYD VQQDEw02ODNhMzczNy04ZWMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy9bMhfiQEzNPCY+JQgP2RQy8KHgZKWTyw2wNJQI/Q5uYm0G7B7RCTgsjkdDy q/o5BpL6nBAHnpYnhnEkuUEsbA4ZE20MO3mXx7RTcHNv+pG248VLMFBMUQTh666K +1o8VWTa3yyfbpuMFjZycXVogQFORrVDXkvBpD6Jg9tgZ0lVT9XzyC6XMkLNDLAz Zew/hnIUVYh4kdPPkn5t3Ai1285umd6u5WqS46tpHlG2TZ8d32fqxfTLlBQ3msXN cfKxdq+oSYnuioSzc6FRT2A8aYpgZWrKWetfnCfIiDbB7mWWPwcypKzy547XM64c /aTv0So0o3zw25p/yUYunUgX2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB8ABSrm Ddv3Zl0DvGCnwiBUnd4YMB8GA1UdIwQYMBaAFJlNmy2Xy8y11SRN4KflOXQfiIoj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOUVBOS9FNjQ2QkYxRTk2 ODAxMUVCQUE2NEZBNTZDNEY5QUUwMi9tVTJiTFpmTHpMWFZKRTNncC1VNWRCLUlp aU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21VMmJMWmZMekxYVkpFM2dwLVU1ZEItSWlpTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OUVBOS9FNjQ2QkYxRTk2ODAxMUVCQUE2NEZBNTZDNEY5QUUwMi9tVTJiTFpmTHpM WFZKRTNncC1VNWRCLUlpaU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAqOTRLaobrnJdESjrBEgwh6wk17W7dnEAjDRLTvu24qfn0vYzDC5We fJ26FjrzcQ9dKGSZgqv+aoLGra/CzWogQmLEeo7vBJTRXHzj80McaCDEvcZ8Js7C rruBmgRSt1Nzn2QTfaZqi49AFprIrWY/UbanN0OdV7m02H+iPaesQb1TSt13es2R c7ZC6/vSePQMGzgbwW93BC7IJH9QDHoVNyLo1+7LP9OPEARe3hFXB5NxT1e60gCV 85mp2n4WBVaRBfxUOZ/m78+V+t1+rzfmLy/VrCBcstSUXK77ChWPkgvMr8D9PPUH sJ7QK3T4JyiqWuMjjM8UutnXgIPq3KRv -----END CERTIFICATE-----Generated at Sat May 31 16:38:07 2025 by rpki-client