$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA6C6/2CAEAD04B33A11ED9FBD0E5CC4F9AE02/cVRgc70JJ-vrhQ8G2nanJ2nnE2s.mft File: cVRgc70JJ-vrhQ8G2nanJ2nnE2s.mft (raw, json) Hash identifier: Ntb2IJ5GRpEvHR/Hp9faSYFBW82Xh2YYBR42m27ykj4= Subject key identifier: F2:C1:2E:E4:20:02:83:51:25:81:FC:F6:66:B3:71:C0:0F:51:3C:5E Authority key identifier: 71:54:60:73:BD:09:27:EB:EB:85:0F:06:DA:76:A7:27:69:E7:13:6B Certificate issuer: /CN=A91EA6C6/serialNumber=71546073BD0927EBEB850F06DA76A72769E7136B Certificate serial: 01AE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cVRgc70JJ-vrhQ8G2nanJ2nnE2s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA6C6/2CAEAD04B33A11ED9FBD0E5CC4F9AE02/cVRgc70JJ-vrhQ8G2nanJ2nnE2s.mft Manifest number: 01AA Signing time: Sat 31 May 2025 02:56:28 +0000 Manifest this update: Sat 31 May 2025 02:56:27 +0000 Manifest next update: Sat 07 Jun 2025 02:56:27 +0000 Files and hashes: 1: cVRgc70JJ-vrhQ8G2nanJ2nnE2s.crl (hash: tCrxrBP0pr2HrvklvS/jfC9a5jxD6jbuTVx7EyKb47I=) 2: BC69DF32B33E11EDAA6D117BC4F9AE02.roa (hash: db2NWeg4HG/QWHWjQkMvsucOm2s5WuaDwiakb3D08Rk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA6C6/2CAEAD04B33A11ED9FBD0E5CC4F9AE02/cVRgc70JJ-vrhQ8G2nanJ2nnE2s.crl rsync://rpki.apnic.net/member_repository/A91EA6C6/2CAEAD04B33A11ED9FBD0E5CC4F9AE02/cVRgc70JJ-vrhQ8G2nanJ2nnE2s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cVRgc70JJ-vrhQ8G2nanJ2nnE2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 02:56:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 430 (0x1ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA6C6, serialNumber=71546073BD0927EBEB850F06DA76A72769E7136B Validity Not Before: May 31 02:56:27 2025 GMT Not After : Jun 7 02:56:27 2025 GMT Subject: CN=683a6fdb-ef03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:2e:f2:b8:a1:5c:dd:6d:6e:e9:21:f0:e5:9b: 72:c9:36:02:b4:3e:f0:e8:03:a4:51:c4:a9:d0:5c: c5:04:3d:6d:ad:1e:54:9c:63:a1:f7:60:b3:77:de: ac:aa:9a:df:04:ea:b3:06:52:bd:a5:24:02:be:cd: 30:77:1d:30:55:b8:35:84:c8:f9:68:09:5f:e6:ea: 2e:4e:e8:b8:8f:e2:c5:e2:29:36:b2:1f:56:c0:c5: b5:89:5c:9d:90:f2:57:d1:d2:68:de:c1:00:81:94: 46:5d:74:69:52:70:9f:8b:dc:66:10:21:b8:96:dd: 2b:d6:72:a3:c6:8d:55:e2:5d:f9:15:66:48:14:5c: 13:e9:49:45:ea:c9:2f:ea:94:f1:d1:22:17:a1:ae: f1:78:3e:95:f2:47:b3:68:d2:84:77:8d:94:55:8b: 43:ec:1f:2b:41:1e:e2:ba:7f:1c:50:c2:e8:ee:c4: 4d:34:80:37:bb:c8:08:e8:44:0a:13:00:50:50:89: da:4d:70:17:00:5b:5d:83:84:20:d3:36:f4:0a:1a: 37:06:4a:ef:4a:56:40:ee:fc:8d:ad:6e:c1:df:b3: 6d:57:71:40:ca:48:06:0c:0c:87:f0:c0:99:4a:4c: 90:c0:7e:41:5b:2a:4d:7d:62:c7:1a:f2:48:13:c4: 26:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:C1:2E:E4:20:02:83:51:25:81:FC:F6:66:B3:71:C0:0F:51:3C:5E X509v3 Authority Key Identifier: keyid:71:54:60:73:BD:09:27:EB:EB:85:0F:06:DA:76:A7:27:69:E7:13:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA6C6/2CAEAD04B33A11ED9FBD0E5CC4F9AE02/cVRgc70JJ-vrhQ8G2nanJ2nnE2s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cVRgc70JJ-vrhQ8G2nanJ2nnE2s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA6C6/2CAEAD04B33A11ED9FBD0E5CC4F9AE02/cVRgc70JJ-vrhQ8G2nanJ2nnE2s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:4c:58:ae:15:4c:2f:4b:33:bf:f6:f0:21:c3:31:87:88:e9: 6a:73:5c:6f:48:cd:89:0e:c3:ff:5f:0c:74:73:a6:10:42:bd: 2d:a3:75:3f:e4:93:36:86:53:e8:5e:8a:d7:c3:69:16:e5:39: fe:6b:93:88:02:64:99:e9:5a:70:3c:e6:fb:f8:2c:b1:cf:8a: d0:8f:3b:9e:c3:10:7d:99:3f:4b:d1:bb:a2:12:3a:7e:ad:fb: 7f:6e:66:87:15:5a:b8:73:29:6f:85:66:cd:fb:3c:c8:21:cd: 28:03:d9:93:3f:25:23:83:3e:d3:29:ae:d3:f5:45:fb:ac:6e: bf:2d:1f:a9:cc:0c:18:59:af:81:db:7d:63:15:d0:fd:85:6f: a7:1d:85:ec:b2:82:b2:34:ae:90:fe:87:ae:dd:30:9f:62:3f: 3f:b0:b9:56:01:b2:93:ee:52:a5:74:4b:8b:99:f0:bc:dd:ab: 82:16:dd:c8:34:34:eb:a8:e5:2c:50:83:42:d4:a6:5a:26:9a: 67:8a:47:1a:e9:08:20:77:ce:84:14:65:19:08:99:eb:62:7a: a9:38:74:c7:16:5a:d4:e9:67:98:37:eb:33:65:d7:b8:04:b4: 21:61:57:74:32:82:a9:e2:8e:26:00:f0:ac:81:39:41:92:eb: 55:f3:7d:33 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAa4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUE2QzYxMTAvBgNVBAUTKDcxNTQ2MDczQkQwOTI3RUJFQjg1MEYwNkRBNzZBNzI3 NjlFNzEzNkIwHhcNMjUwNTMxMDI1NjI3WhcNMjUwNjA3MDI1NjI3WjAYMRYwFAYD VQQDEw02ODNhNmZkYi1lZjAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyy7yuKFc3W1u6SHw5ZtyyTYCtD7w6AOkUcSp0FzFBD1trR5UnGOh92Czd96s qprfBOqzBlK9pSQCvs0wdx0wVbg1hMj5aAlf5uouTui4j+LF4ik2sh9WwMW1iVyd kPJX0dJo3sEAgZRGXXRpUnCfi9xmECG4lt0r1nKjxo1V4l35FWZIFFwT6UlF6skv 6pTx0SIXoa7xeD6V8kezaNKEd42UVYtD7B8rQR7iun8cUMLo7sRNNIA3u8gI6EQK EwBQUInaTXAXAFtdg4Qg0zb0Cho3BkrvSlZA7vyNrW7B37NtV3FAykgGDAyH8MCZ SkyQwH5BWypNfWLHGvJIE8QmQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPLBLuQg AoNRJYH89mazccAPUTxeMB8GA1UdIwQYMBaAFHFUYHO9CSfr64UPBtp2pydp5xNr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTZDNi8yQ0FFQUQwNEIz M0ExMUVEOUZCRDBFNUNDNEY5QUUwMi9jVlJnYzcwSkotdnJoUThHMm5hbkoybm5F MnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NWUmdjNzBKSi12cmhROEcybmFuSjJubkUycy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTZDNi8yQ0FFQUQwNEIzM0ExMUVEOUZCRDBFNUNDNEY5QUUwMi9jVlJnYzcwSkot dnJoUThHMm5hbkoybm5FMnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAbTFiuFUwvSzO/9vAhwzGHiOlqc1xvSM2JDsP/Xwx0c6YQQr0to3U/ 5JM2hlPoXorXw2kW5Tn+a5OIAmSZ6VpwPOb7+Cyxz4rQjzuewxB9mT9L0buiEjp+ rft/bmaHFVq4cylvhWbN+zzIIc0oA9mTPyUjgz7TKa7T9UX7rG6/LR+pzAwYWa+B 231jFdD9hW+nHYXssoKyNK6Q/oeu3TCfYj8/sLlWAbKT7lKldEuLmfC83auCFt3I NDTrqOUsUINC1KZaJppnikca6Qggd86EFGUZCJnrYnqpOHTHFlrU6WeYN+szZde4 BLQhYVd0MoKp4o4mAPCsgTlBkutV830z -----END CERTIFICATE-----Generated at Sat May 31 16:38:51 2025 by rpki-client