$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED073/F4B4CA5264A411EDA0876B16C4F9AE02/CK7T4dy27XdCMDzv9H3gLZKz7eU.mft File: CK7T4dy27XdCMDzv9H3gLZKz7eU.mft (raw, json) Hash identifier: 5ysa+kg9n4/p0dHSpYd+zUJce5HVOcSCC+W7QAroIdk= Subject key identifier: C0:E8:B8:6A:C9:A9:84:D5:88:44:8D:92:AE:9B:A7:2C:D6:2B:58:88 Authority key identifier: 08:AE:D3:E1:DC:B6:ED:77:42:30:3C:EF:F4:7D:E0:2D:92:B3:ED:E5 Certificate issuer: /CN=A91ED073/serialNumber=08AED3E1DCB6ED7742303CEFF47DE02D92B3EDE5 Certificate serial: 01E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CK7T4dy27XdCMDzv9H3gLZKz7eU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ED073/F4B4CA5264A411EDA0876B16C4F9AE02/CK7T4dy27XdCMDzv9H3gLZKz7eU.mft Manifest number: 01DD Signing time: Sun 01 Jun 2025 02:28:44 +0000 Manifest this update: Sun 01 Jun 2025 02:28:43 +0000 Manifest next update: Sun 08 Jun 2025 02:28:43 +0000 Files and hashes: 1: CK7T4dy27XdCMDzv9H3gLZKz7eU.crl (hash: ETcoH3Awc2ZJ2tY92+twrZhCtjOI5HiKK58rnIytY0U=) 2: 6DDD4756EEC411EEA4BB703CC4F9AE02.roa (hash: 8+VuZ7fIxTmaLVYpnHMJUk/ecoQHiqToC0QiVIOWMis=) 3: 6EB41DC6EEC411EEA4BB703CC4F9AE02.roa (hash: UKZjo7nlv5xaEfM2Q5iGETEP+0bko/kMccsOgiKgCVA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ED073/F4B4CA5264A411EDA0876B16C4F9AE02/CK7T4dy27XdCMDzv9H3gLZKz7eU.crl rsync://rpki.apnic.net/member_repository/A91ED073/F4B4CA5264A411EDA0876B16C4F9AE02/CK7T4dy27XdCMDzv9H3gLZKz7eU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CK7T4dy27XdCMDzv9H3gLZKz7eU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 02:28:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 484 (0x1e4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ED073, serialNumber=08AED3E1DCB6ED7742303CEFF47DE02D92B3EDE5 Validity Not Before: Jun 1 02:28:43 2025 GMT Not After : Jun 8 02:28:43 2025 GMT Subject: CN=683bbadc-bf5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:02:50:0d:8e:47:92:ad:0d:9c:6f:3c:45:46: de:4a:e2:0b:f2:55:e0:84:8b:9b:dc:91:0c:f2:60: 69:7f:22:c2:84:aa:c6:78:5f:cb:56:cf:f5:49:8e: c0:be:8d:7f:a8:62:ad:8c:92:cf:49:c1:05:cc:4e: c7:31:f5:46:25:1e:f1:84:d0:cd:46:68:52:33:3a: d7:a8:cf:56:d6:a7:2e:ee:07:54:a9:64:f5:a7:b7: fe:2a:e4:e6:f7:97:71:cd:33:ac:bb:b7:8d:9e:00: 3e:04:3f:55:58:83:74:a8:08:ea:d3:69:59:67:69: 29:ad:3d:db:c5:c8:d1:d3:f2:ca:0e:2c:98:6a:e9: 91:88:a2:c1:a5:54:41:54:2b:10:da:cd:94:d9:03: f8:52:e5:5c:9e:3c:42:77:8c:e7:37:46:99:f1:db: a6:20:28:32:3e:84:d5:98:45:46:c9:4f:cc:14:b5: c2:fa:c5:07:65:f1:56:06:cc:0e:a8:53:51:eb:3c: d4:c7:fc:1e:bc:1f:ec:6d:16:c3:89:05:57:fe:1e: b6:dd:8b:60:2c:d5:9d:c2:75:62:79:27:ef:be:a5: 75:35:08:e9:4a:d0:01:f7:fc:cf:d5:b5:03:12:e5: 6b:d4:1e:88:51:76:45:28:ad:73:43:90:f2:a0:03: 52:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:E8:B8:6A:C9:A9:84:D5:88:44:8D:92:AE:9B:A7:2C:D6:2B:58:88 X509v3 Authority Key Identifier: keyid:08:AE:D3:E1:DC:B6:ED:77:42:30:3C:EF:F4:7D:E0:2D:92:B3:ED:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ED073/F4B4CA5264A411EDA0876B16C4F9AE02/CK7T4dy27XdCMDzv9H3gLZKz7eU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CK7T4dy27XdCMDzv9H3gLZKz7eU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED073/F4B4CA5264A411EDA0876B16C4F9AE02/CK7T4dy27XdCMDzv9H3gLZKz7eU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:17:aa:5f:41:a0:b0:d9:32:37:b0:8e:27:36:4e:e9:6c:80: 53:6d:60:4f:3a:91:d1:62:a7:ea:2e:67:51:3b:e7:4a:93:b5: 71:73:70:bb:4a:77:3d:14:97:22:d9:f0:cf:40:79:2e:0e:37: 8c:8e:f6:15:05:ee:34:ec:2e:04:db:3a:49:89:51:dd:2e:41: 6a:f5:0e:fc:02:3f:e0:59:3e:37:21:4d:d9:25:ce:69:71:60: 25:e9:61:16:91:eb:d4:8e:52:46:35:8b:d6:81:b5:22:95:6a: 22:38:64:a0:f8:f7:55:e7:ae:15:b0:38:49:ce:63:6b:58:94: bd:c7:49:30:d0:af:07:e2:88:f8:8b:05:f0:e8:48:f0:2f:49: 68:da:74:2a:89:d4:52:3e:e1:93:f7:22:1d:68:fc:0a:d1:d2: d7:53:f6:ab:46:65:30:b0:07:3c:09:ff:0b:fb:d6:1f:9d:05: 06:5f:80:96:22:9c:d1:81:68:66:99:5a:c7:f7:b9:24:51:4e: 31:9f:49:92:de:ac:ae:8b:20:44:65:3d:6d:57:ba:c9:d0:63: 4d:62:8e:6e:fb:21:f9:b3:3c:11:15:da:4d:25:4b:5e:c8:4d: c4:fb:32:92:bc:99:28:70:4e:f1:b5:a0:92:d5:c1:5d:32:24: 20:57:c8:10 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAeQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUQwNzMxMTAvBgNVBAUTKDA4QUVEM0UxRENCNkVENzc0MjMwM0NFRkY0N0RFMDJE OTJCM0VERTUwHhcNMjUwNjAxMDIyODQzWhcNMjUwNjA4MDIyODQzWjAYMRYwFAYD VQQDEw02ODNiYmFkYy1iZjVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvQJQDY5Hkq0NnG88RUbeSuIL8lXghIub3JEM8mBpfyLChKrGeF/LVs/1SY7A vo1/qGKtjJLPScEFzE7HMfVGJR7xhNDNRmhSMzrXqM9W1qcu7gdUqWT1p7f+KuTm 95dxzTOsu7eNngA+BD9VWIN0qAjq02lZZ2kprT3bxcjR0/LKDiyYaumRiKLBpVRB VCsQ2s2U2QP4UuVcnjxCd4znN0aZ8dumICgyPoTVmEVGyU/MFLXC+sUHZfFWBswO qFNR6zzUx/wevB/sbRbDiQVX/h623YtgLNWdwnVieSfvvqV1NQjpStAB9/zP1bUD EuVr1B6IUXZFKK1zQ5DyoANSnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMDouGrJ qYTViESNkq6bpyzWK1iIMB8GA1UdIwQYMBaAFAiu0+Hctu13QjA87/R94C2Ss+3l MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRDA3My9GNEI0Q0E1MjY0 QTQxMUVEQTA4NzZCMTZDNEY5QUUwMi9DSzdUNGR5MjdYZENNRHp2OUgzZ0xaS3o3 ZVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NLN1Q0ZHkyN1hkQ01EenY5SDNnTFpLejdlVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RDA3My9GNEI0Q0E1MjY0QTQxMUVEQTA4NzZCMTZDNEY5QUUwMi9DSzdUNGR5MjdY ZENNRHp2OUgzZ0xaS3o3ZVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB1F6pfQaCw2TI3sI4nNk7pbIBTbWBPOpHRYqfqLmdRO+dKk7Vxc3C7 Snc9FJci2fDPQHkuDjeMjvYVBe407C4E2zpJiVHdLkFq9Q78Aj/gWT43IU3ZJc5p cWAl6WEWkevUjlJGNYvWgbUilWoiOGSg+PdV564VsDhJzmNrWJS9x0kw0K8H4oj4 iwXw6EjwL0lo2nQqidRSPuGT9yIdaPwK0dLXU/arRmUwsAc8Cf8L+9YfnQUGX4CW IpzRgWhmmVrH97kkUU4xn0mS3qyuiyBEZT1tV7rJ0GNNYo5u+yH5szwRFdpNJUte yE3E+zKSvJkocE7xtaCS1cFdMiQgV8gQ -----END CERTIFICATE-----Generated at Mon Jun 2 07:18:06 2025 by rpki-client