$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA198/AD629222B52511E6AF6C895EC4F9AE02/X-7enTglQ_BRUn-lM9R6kXB35jI.mft File: X-7enTglQ_BRUn-lM9R6kXB35jI.mft (raw, json) Hash identifier: VVw68vtsN0YZuvqYPRBHKZyEC0aXnuTPavMcWmlcm4c= Subject key identifier: 14:1F:DE:C4:06:E3:F5:B0:88:7A:D5:DE:34:C1:0D:47:EF:58:29:35 Authority key identifier: 5F:EE:DE:9D:38:25:43:F0:51:52:7F:A5:33:D4:7A:91:70:77:E6:32 Certificate issuer: /CN=A91EA198/serialNumber=5FEEDE9D382543F051527FA533D47A917077E632 Certificate serial: 1E20 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/X-7enTglQ_BRUn-lM9R6kXB35jI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA198/AD629222B52511E6AF6C895EC4F9AE02/X-7enTglQ_BRUn-lM9R6kXB35jI.mft Manifest number: 1D9E Signing time: Mon 02 Jun 2025 16:18:56 +0000 Manifest this update: Mon 02 Jun 2025 16:18:55 +0000 Manifest next update: Mon 09 Jun 2025 16:18:55 +0000 Files and hashes: 1: X-7enTglQ_BRUn-lM9R6kXB35jI.crl (hash: ourCL7eWc05nffItBJvdg8WRjsIQ6zd3cfzdwFvAuLg=) 2: 1A0D44FA3B5411EABAC6EE18C4F9AE02.roa (hash: ErQUIZBQOuclNYifsKsmx5/Jnr/1hpU5xKibhIO600k=) 3: B8BA4E603B5211EAA0D53F12C4F9AE02.roa (hash: JDAGe4IksOtjrzlmQZ9zVBIzM1ZKwteeQYN9TBrAsPk=) 4: DF730482A32311EFBE77BA2EC4F9AE02.roa (hash: nvySfMAS7TN3zTFr4mHSPK7RJZZnC8NIvHsh40VIoNk=) 5: 4EA15AE44FD811ED8AEB0282C4F9AE02.roa (hash: KptRM9OhZOY+IAnuIj6dKpgRtL+UG95HSLHK6SbwluY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA198/AD629222B52511E6AF6C895EC4F9AE02/X-7enTglQ_BRUn-lM9R6kXB35jI.crl rsync://rpki.apnic.net/member_repository/A91EA198/AD629222B52511E6AF6C895EC4F9AE02/X-7enTglQ_BRUn-lM9R6kXB35jI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/X-7enTglQ_BRUn-lM9R6kXB35jI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 05:53:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7712 (0x1e20) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA198, serialNumber=5FEEDE9D382543F051527FA533D47A917077E632 Validity Not Before: Jun 2 16:18:55 2025 GMT Not After : Jun 9 16:18:55 2025 GMT Subject: CN=683dcef0-f75f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:fc:c8:5b:bc:e7:a4:0f:1a:f2:2e:93:92:c9: a5:3f:27:58:37:63:e1:3b:d1:8a:85:ee:0d:6b:c6: 28:7b:cc:d3:b9:55:25:3a:1f:5c:ef:44:cc:44:6f: df:81:63:dc:bb:1d:08:73:aa:5f:b5:25:8b:54:98: b2:f3:4d:c5:c9:2e:c1:6c:eb:d2:cb:66:67:29:c3: 21:52:55:96:01:3e:eb:19:56:1a:01:ee:b5:00:4a: d6:67:82:60:4e:66:ca:b7:06:c2:d2:bd:e9:fe:14: ee:91:a4:e0:a6:7f:2b:4e:23:4e:01:09:36:3d:6a: 23:cd:e4:87:8e:50:64:a8:90:ee:b7:40:b6:7c:66: fd:ba:16:3c:b7:12:6b:66:54:f9:0e:a3:f2:a5:56: 37:06:40:55:bd:f5:9a:b2:9d:dd:1f:25:6e:9e:f2: 6d:ea:8d:0b:f6:a3:49:21:18:96:ab:3d:53:9a:2c: ae:48:35:ae:8c:5b:1f:06:c8:4e:60:62:76:c2:d3: 31:cd:f3:ce:4d:19:0a:e5:de:6f:f0:60:f8:72:82: a7:09:87:45:6b:6b:7a:ed:fe:75:b7:f0:94:2c:31: 0b:7c:ef:db:a3:5b:4d:1e:cf:89:88:45:1f:e3:db: c2:90:72:8a:2c:e8:58:e7:03:1c:6c:d5:26:ef:72: e3:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:1F:DE:C4:06:E3:F5:B0:88:7A:D5:DE:34:C1:0D:47:EF:58:29:35 X509v3 Authority Key Identifier: keyid:5F:EE:DE:9D:38:25:43:F0:51:52:7F:A5:33:D4:7A:91:70:77:E6:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA198/AD629222B52511E6AF6C895EC4F9AE02/X-7enTglQ_BRUn-lM9R6kXB35jI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/X-7enTglQ_BRUn-lM9R6kXB35jI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA198/AD629222B52511E6AF6C895EC4F9AE02/X-7enTglQ_BRUn-lM9R6kXB35jI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c7:5a:02:8f:66:de:52:aa:a2:c0:f4:e5:13:c9:85:03:ca:94: ca:44:32:84:91:78:8d:8b:7b:fe:c8:93:24:01:e9:51:8e:1b: aa:81:01:3b:ba:a8:7c:5b:a6:bd:b6:af:e0:92:ce:5a:22:49: 2c:67:a4:4a:99:2a:03:42:19:b3:d1:98:88:43:0d:8d:dd:65: 7c:ff:20:56:57:16:fb:b3:7c:9d:ee:2d:92:f7:fd:cf:9d:4a: 17:0f:38:15:67:e8:85:51:86:0c:6a:16:bf:04:84:30:a8:70: 21:9a:7d:ed:ec:28:0b:ad:af:39:d4:51:24:57:2f:61:98:83: 30:36:36:32:bb:49:24:b5:7c:07:a8:67:15:70:47:80:6e:70: 99:d2:ff:d8:79:b1:f2:9c:fc:41:cb:a4:3e:b2:5f:85:b9:af: e0:b5:eb:2e:10:9c:d8:44:c2:91:44:eb:2e:b1:ed:c5:19:80: 5c:d9:01:1e:cf:42:a7:a5:28:63:1d:19:de:7c:f5:69:8b:cf: 9d:2f:ef:d7:31:bc:24:3e:60:17:ec:54:2a:4e:de:9d:38:46: 02:c5:3d:ff:13:50:fb:01:ef:3c:75:04:5d:09:e3:11:cb:9d: fb:37:7c:13:95:71:59:76:0b:76:c7:b8:a8:87:96:de:ed:1e: a7:1f:37:09 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHiAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUExOTgxMTAvBgNVBAUTKDVGRUVERTlEMzgyNTQzRjA1MTUyN0ZBNTMzRDQ3QTkx NzA3N0U2MzIwHhcNMjUwNjAyMTYxODU1WhcNMjUwNjA5MTYxODU1WjAYMRYwFAYD VQQDEw02ODNkY2VmMC1mNzVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApPzIW7znpA8a8i6TksmlPydYN2PhO9GKhe4Na8Yoe8zTuVUlOh9c70TMRG/f gWPcux0Ic6pftSWLVJiy803FyS7BbOvSy2ZnKcMhUlWWAT7rGVYaAe61AErWZ4Jg TmbKtwbC0r3p/hTukaTgpn8rTiNOAQk2PWojzeSHjlBkqJDut0C2fGb9uhY8txJr ZlT5DqPypVY3BkBVvfWasp3dHyVunvJt6o0L9qNJIRiWqz1TmiyuSDWujFsfBshO YGJ2wtMxzfPOTRkK5d5v8GD4coKnCYdFa2t67f51t/CULDELfO/bo1tNHs+JiEUf 49vCkHKKLOhY5wMcbNUm73LjnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBQf3sQG 4/WwiHrV3jTBDUfvWCk1MB8GA1UdIwQYMBaAFF/u3p04JUPwUVJ/pTPUepFwd+Yy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTE5OC9BRDYyOTIyMkI1 MjUxMUU2QUY2Qzg5NUVDNEY5QUUwMi9YLTdlblRnbFFfQlJVbi1sTTlSNmtYQjM1 akkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1gtN2VuVGdsUV9CUlVuLWxNOVI2a1hCMzVqSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTE5OC9BRDYyOTIyMkI1MjUxMUU2QUY2Qzg5NUVDNEY5QUUwMi9YLTdlblRnbFFf QlJVbi1sTTlSNmtYQjM1akkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDHWgKPZt5SqqLA9OUTyYUDypTKRDKEkXiNi3v+yJMkAelRjhuqgQE7 uqh8W6a9tq/gks5aIkksZ6RKmSoDQhmz0ZiIQw2N3WV8/yBWVxb7s3yd7i2S9/3P nUoXDzgVZ+iFUYYMaha/BIQwqHAhmn3t7CgLra851FEkVy9hmIMwNjYyu0kktXwH qGcVcEeAbnCZ0v/YebHynPxBy6Q+sl+Fua/gtesuEJzYRMKRROsuse3FGYBc2QEe z0KnpShjHRnefPVpi8+dL+/XMbwkPmAX7FQqTt6dOEYCxT3/E1D7Ae88dQRdCeMR y537N3wTlXFZdgt2x7ioh5be7R6nHzcJ -----END CERTIFICATE-----Generated at Mon Jun 2 20:56:50 2025 by rpki-client