$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBF27/F1D3E326ABE711EBB85D5147C4F9AE02/0DacIB93rzjycCn7IkbEOF0njKI.mft File: 0DacIB93rzjycCn7IkbEOF0njKI.mft (raw, json) Hash identifier: sEFGP7+q062DJyDvaY9A6YgE14wVqxxVq1l5cE4oCXk= Subject key identifier: 55:58:D2:65:CB:F2:62:7F:6D:54:87:70:98:23:E6:C1:88:F8:6D:F3 Authority key identifier: D0:36:9C:20:1F:77:AF:38:F2:70:29:FB:22:46:C4:38:5D:27:8C:A2 Certificate issuer: /CN=A91EBF27/serialNumber=D0369C201F77AF38F27029FB2246C4385D278CA2 Certificate serial: 05F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0DacIB93rzjycCn7IkbEOF0njKI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EBF27/F1D3E326ABE711EBB85D5147C4F9AE02/0DacIB93rzjycCn7IkbEOF0njKI.mft Manifest number: 05F2 Signing time: Fri 30 May 2025 23:06:18 +0000 Manifest this update: Fri 30 May 2025 23:06:17 +0000 Manifest next update: Fri 06 Jun 2025 23:06:17 +0000 Files and hashes: 1: 0DacIB93rzjycCn7IkbEOF0njKI.crl (hash: fm8gCg7z7LyHtTBW1isLUyrcKldTRCgFjegaIhn42Dc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EBF27/F1D3E326ABE711EBB85D5147C4F9AE02/0DacIB93rzjycCn7IkbEOF0njKI.crl rsync://rpki.apnic.net/member_repository/A91EBF27/F1D3E326ABE711EBB85D5147C4F9AE02/0DacIB93rzjycCn7IkbEOF0njKI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0DacIB93rzjycCn7IkbEOF0njKI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 23:06:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1522 (0x5f2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EBF27, serialNumber=D0369C201F77AF38F27029FB2246C4385D278CA2 Validity Not Before: May 30 23:06:17 2025 GMT Not After : Jun 6 23:06:17 2025 GMT Subject: CN=683a39ea-6c08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:02:22:13:85:08:f7:f9:26:d3:e3:ad:d2:6a: 88:81:44:0e:1d:30:84:16:7e:7a:67:5b:42:67:09: f4:bd:98:e0:14:11:a0:64:85:12:3a:30:aa:7b:1d: b4:7d:d6:d1:19:52:86:1f:87:be:f9:83:d0:b5:63: 9e:c0:63:42:47:55:0d:8d:da:79:0b:3b:5d:47:a2: 88:07:ce:9d:a4:6a:3e:f1:15:6c:68:2f:97:f6:69: 9e:68:02:34:11:db:73:4b:49:8d:2d:a9:69:a0:ca: 78:ea:2e:79:53:ad:ec:92:e8:08:9e:e1:88:93:e2: a2:be:e7:f7:eb:1c:18:b5:8d:f8:03:55:24:04:26: c4:ab:9a:bf:aa:b0:47:49:bb:40:70:1e:c5:9e:05: 05:68:96:6e:83:a6:aa:85:97:4d:ba:d5:20:c7:e3: a4:23:7e:a5:63:cf:e6:55:7d:56:e4:af:84:e6:32: 84:e2:4f:a2:01:49:84:d5:e5:31:94:60:bf:95:ca: 9d:f7:e5:0e:e4:8c:fc:e6:9a:e8:db:91:8d:d9:e2: b7:2c:23:ee:b4:a8:77:db:fa:a9:fc:e0:73:c2:37: be:3e:d4:a5:55:1e:e6:d7:9e:c1:f0:2b:00:66:89: f3:a0:6d:22:e9:80:ad:34:ff:fb:61:7e:38:0a:69: da:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:58:D2:65:CB:F2:62:7F:6D:54:87:70:98:23:E6:C1:88:F8:6D:F3 X509v3 Authority Key Identifier: keyid:D0:36:9C:20:1F:77:AF:38:F2:70:29:FB:22:46:C4:38:5D:27:8C:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EBF27/F1D3E326ABE711EBB85D5147C4F9AE02/0DacIB93rzjycCn7IkbEOF0njKI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0DacIB93rzjycCn7IkbEOF0njKI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBF27/F1D3E326ABE711EBB85D5147C4F9AE02/0DacIB93rzjycCn7IkbEOF0njKI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:a7:ae:4e:e3:9b:35:a1:26:b7:13:a3:1c:02:45:30:dc:5c: 1b:b4:ab:c4:7b:e8:fb:b7:91:f1:09:bb:d2:23:12:0c:b9:45: 9c:4a:72:f7:9b:52:a4:00:2c:52:bc:36:42:ea:13:13:bf:ab: f1:87:b1:3f:bf:e0:8e:ab:cd:3d:a7:eb:dc:71:26:20:71:5c: 6c:cf:bd:69:4c:93:2e:d5:a3:97:bd:d1:ba:fc:1c:dd:9a:25: 3b:5a:0a:eb:d6:64:e6:a0:87:21:a7:05:d3:d2:54:1e:a0:f2: c5:c5:a8:33:d5:d2:95:75:19:86:28:18:10:06:38:14:b5:d7: b2:66:91:8c:05:1f:8a:ac:3e:17:cd:7f:63:0b:be:4b:44:57: bb:27:69:40:55:2c:67:ae:f0:0e:74:38:e8:91:23:15:a2:a7: 9a:2b:50:25:82:fe:ea:98:c9:1d:ca:d0:a9:ee:5b:5b:1a:8c: 98:83:92:19:fc:6d:14:bf:52:c4:17:04:d0:72:eb:e6:04:48: 09:d8:28:76:b8:b3:e1:c2:33:df:c8:16:8d:e3:2d:a0:7b:18: 3e:d8:14:e2:f0:41:da:59:a9:6d:ca:0d:d1:05:e3:32:e4:4f: b5:f1:77:16:32:a0:be:91:11:b5:3e:e0:9d:67:04:3e:bd:12: 37:3d:e9:8d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBfIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUJGMjcxMTAvBgNVBAUTKEQwMzY5QzIwMUY3N0FGMzhGMjcwMjlGQjIyNDZDNDM4 NUQyNzhDQTIwHhcNMjUwNTMwMjMwNjE3WhcNMjUwNjA2MjMwNjE3WjAYMRYwFAYD VQQDEw02ODNhMzllYS02YzA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwAIiE4UI9/km0+Ot0mqIgUQOHTCEFn56Z1tCZwn0vZjgFBGgZIUSOjCqex20 fdbRGVKGH4e++YPQtWOewGNCR1UNjdp5CztdR6KIB86dpGo+8RVsaC+X9mmeaAI0 EdtzS0mNLalpoMp46i55U63skugInuGIk+Kivuf36xwYtY34A1UkBCbEq5q/qrBH SbtAcB7FngUFaJZug6aqhZdNutUgx+OkI36lY8/mVX1W5K+E5jKE4k+iAUmE1eUx lGC/lcqd9+UO5Iz85pro25GN2eK3LCPutKh32/qp/OBzwje+PtSlVR7m157B8CsA ZonzoG0i6YCtNP/7YX44Cmna1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFVY0mXL 8mJ/bVSHcJgj5sGI+G3zMB8GA1UdIwQYMBaAFNA2nCAfd6848nAp+yJGxDhdJ4yi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQkYyNy9GMUQzRTMyNkFC RTcxMUVCQjg1RDUxNDdDNEY5QUUwMi8wRGFjSUI5M3J6anljQ243SWtiRU9GMG5q S0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBEYWNJQjkzcnpqeWNDbjdJa2JFT0YwbmpLSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QkYyNy9GMUQzRTMyNkFCRTcxMUVCQjg1RDUxNDdDNEY5QUUwMi8wRGFjSUI5M3J6 anljQ243SWtiRU9GMG5qS0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAEp65O45s1oSa3E6McAkUw3FwbtKvEe+j7t5HxCbvSIxIMuUWcSnL3 m1KkACxSvDZC6hMTv6vxh7E/v+COq809p+vccSYgcVxsz71pTJMu1aOXvdG6/Bzd miU7Wgrr1mTmoIchpwXT0lQeoPLFxagz1dKVdRmGKBgQBjgUtdeyZpGMBR+KrD4X zX9jC75LRFe7J2lAVSxnrvAOdDjokSMVoqeaK1Algv7qmMkdytCp7ltbGoyYg5IZ /G0Uv1LEFwTQcuvmBEgJ2Ch2uLPhwjPfyBaN4y2gexg+2BTi8EHaWaltyg3RBeMy 5E+18XcWMqC+kRG1PuCdZwQ+vRI3PemN -----END CERTIFICATE-----Generated at Sat May 31 17:39:14 2025 by rpki-client