$ rpki-client -vvf rpki.apnic.net/member_repository/A91EDEC8/8A05098856E111EBAACBEE73C4F9AE02/0wuATUKrfQIMXx9287PdHykthmo.mft File: 0wuATUKrfQIMXx9287PdHykthmo.mft (raw, json) Hash identifier: /JMdDt+qUSwhcxi2QLSkpEa8fELjShLwNE5cg3aVMpI= Subject key identifier: E7:D8:A1:DF:04:B6:67:E4:E2:65:97:5D:44:CC:B1:CC:9E:DC:43:D0 Authority key identifier: D3:0B:80:4D:42:AB:7D:02:0C:5F:1F:76:F3:B3:DD:1F:29:2D:86:6A Certificate issuer: /CN=A91EDEC8/serialNumber=D30B804D42AB7D020C5F1F76F3B3DD1F292D866A Certificate serial: 06D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0wuATUKrfQIMXx9287PdHykthmo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EDEC8/8A05098856E111EBAACBEE73C4F9AE02/0wuATUKrfQIMXx9287PdHykthmo.mft Manifest number: 06CE Signing time: Fri 30 May 2025 22:16:37 +0000 Manifest this update: Fri 30 May 2025 22:16:37 +0000 Manifest next update: Fri 06 Jun 2025 22:16:37 +0000 Files and hashes: 1: 0wuATUKrfQIMXx9287PdHykthmo.crl (hash: whCs87ZQk1FBpmsxkNLnt/tZNcUML+a2vK9G2mKPo2g=) 2: D693E0B656E211EB83D9EA74C4F9AE02.roa (hash: PFrV9NPTBknSjdmlAsxffe/x4T1O4oXZWiMBMdvbqVU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EDEC8/8A05098856E111EBAACBEE73C4F9AE02/0wuATUKrfQIMXx9287PdHykthmo.crl rsync://rpki.apnic.net/member_repository/A91EDEC8/8A05098856E111EBAACBEE73C4F9AE02/0wuATUKrfQIMXx9287PdHykthmo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0wuATUKrfQIMXx9287PdHykthmo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 22:16:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1747 (0x6d3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EDEC8, serialNumber=D30B804D42AB7D020C5F1F76F3B3DD1F292D866A Validity Not Before: May 30 22:16:37 2025 GMT Not After : Jun 6 22:16:37 2025 GMT Subject: CN=683a2e45-bd01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:35:a9:86:6c:4b:09:53:39:e5:ea:6e:de:35: b3:d5:d4:90:4f:9f:6f:2b:d0:c2:ad:8f:f5:cc:7f: a9:4f:d5:3d:13:f3:20:09:43:5c:9b:17:d3:a3:83: d3:c4:70:42:9e:fc:20:d3:b0:7f:3c:8e:96:97:c1: 2d:18:57:97:19:6c:e9:e8:a6:f0:35:74:2e:df:dd: d2:2d:7b:bc:c8:af:4c:2b:47:94:45:fa:58:ee:1f: 9d:bf:f1:d2:bb:63:d0:1e:c6:8c:86:87:bd:86:b6: ae:7f:44:15:3f:90:77:20:f8:b2:21:23:64:84:7f: d5:0a:2f:3c:62:aa:4c:43:4f:76:39:ca:51:97:3a: be:5c:62:00:66:e8:e4:ec:6a:cf:0b:14:b9:69:78: aa:d2:e4:4d:d6:39:1f:cc:72:37:85:8a:95:6d:6e: a1:d4:f7:f0:f9:57:6d:b5:96:9f:58:a7:76:7f:ed: 05:6f:db:09:9a:13:71:50:0d:08:62:dd:c5:85:9c: 5c:9c:97:81:45:b5:b5:9b:28:17:b8:5f:25:99:8c: 8d:92:b8:72:46:6b:4a:14:7b:ae:97:c3:21:8e:83: d3:5f:db:2b:44:8c:16:f2:a2:7f:f8:26:5d:27:e1: ea:5d:74:70:cc:29:f9:f4:a6:f1:61:7d:85:c0:f3: ab:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:D8:A1:DF:04:B6:67:E4:E2:65:97:5D:44:CC:B1:CC:9E:DC:43:D0 X509v3 Authority Key Identifier: keyid:D3:0B:80:4D:42:AB:7D:02:0C:5F:1F:76:F3:B3:DD:1F:29:2D:86:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EDEC8/8A05098856E111EBAACBEE73C4F9AE02/0wuATUKrfQIMXx9287PdHykthmo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0wuATUKrfQIMXx9287PdHykthmo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EDEC8/8A05098856E111EBAACBEE73C4F9AE02/0wuATUKrfQIMXx9287PdHykthmo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:c2:13:ed:72:4a:83:c8:b7:c0:d8:79:5e:03:7c:e9:71:d6: 3c:ab:26:55:5d:72:3c:75:3b:4c:49:59:ff:ba:44:f2:b1:e8: 1b:60:ff:d9:43:24:5d:04:9f:09:fb:c4:3c:d9:34:6f:8f:cf: d0:a9:5b:6b:c7:da:c4:81:e3:db:44:4e:98:9e:46:ac:f8:28: e2:71:4c:be:3e:6f:0f:e6:ea:4c:11:b4:71:c2:8f:51:6a:ab: f9:90:35:da:5a:5c:5c:43:af:f7:2e:c1:08:1c:1d:f9:39:7c: 54:c6:34:61:ce:18:c4:69:37:f4:51:03:60:7d:17:9f:de:16: 85:a3:15:d0:4e:dc:10:91:80:92:e1:db:dd:16:83:1c:79:58: 8e:ef:20:58:59:f8:14:0b:df:8b:58:9e:03:a4:cc:03:ec:01: 2c:7d:ee:08:31:25:6f:d7:c3:46:f6:7c:98:66:10:58:0f:1e: a3:d5:2b:a2:ce:67:63:0b:de:08:d2:dd:0f:52:56:69:11:c2: 26:f5:9f:d8:db:30:67:6b:fb:64:98:c3:05:8c:bf:3f:70:ba: 64:3e:c7:e7:01:fa:54:a9:18:c9:7c:e5:41:64:e7:8b:a0:33: b9:f0:59:e4:93:88:d9:1a:76:aa:7f:f1:3f:54:f3:c4:fb:fb: 09:c5:94:4a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBtMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RURFQzgxMTAvBgNVBAUTKEQzMEI4MDRENDJBQjdEMDIwQzVGMUY3NkYzQjNERDFG MjkyRDg2NkEwHhcNMjUwNTMwMjIxNjM3WhcNMjUwNjA2MjIxNjM3WjAYMRYwFAYD VQQDEw02ODNhMmU0NS1iZDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0jWphmxLCVM55epu3jWz1dSQT59vK9DCrY/1zH+pT9U9E/MgCUNcmxfTo4PT xHBCnvwg07B/PI6Wl8EtGFeXGWzp6KbwNXQu393SLXu8yK9MK0eURfpY7h+dv/HS u2PQHsaMhoe9hrauf0QVP5B3IPiyISNkhH/VCi88YqpMQ092OcpRlzq+XGIAZujk 7GrPCxS5aXiq0uRN1jkfzHI3hYqVbW6h1Pfw+VdttZafWKd2f+0Fb9sJmhNxUA0I Yt3FhZxcnJeBRbW1mygXuF8lmYyNkrhyRmtKFHuul8MhjoPTX9srRIwW8qJ/+CZd J+HqXXRwzCn59KbxYX2FwPOrywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOfYod8E tmfk4mWXXUTMscye3EPQMB8GA1UdIwQYMBaAFNMLgE1Cq30CDF8fdvOz3R8pLYZq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFREVDOC84QTA1MDk4ODU2 RTExMUVCQUFDQkVFNzNDNEY5QUUwMi8wd3VBVFVLcmZRSU1YeDkyODdQZEh5a3Ro bW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzB3dUFUVUtyZlFJTVh4OTI4N1BkSHlrdGhtby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF REVDOC84QTA1MDk4ODU2RTExMUVCQUFDQkVFNzNDNEY5QUUwMi8wd3VBVFVLcmZR SU1YeDkyODdQZEh5a3RobW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCYwhPtckqDyLfA2HleA3zpcdY8qyZVXXI8dTtMSVn/ukTysegbYP/Z QyRdBJ8J+8Q82TRvj8/QqVtrx9rEgePbRE6Ynkas+CjicUy+Pm8P5upMEbRxwo9R aqv5kDXaWlxcQ6/3LsEIHB35OXxUxjRhzhjEaTf0UQNgfRef3haFoxXQTtwQkYCS 4dvdFoMceViO7yBYWfgUC9+LWJ4DpMwD7AEsfe4IMSVv18NG9nyYZhBYDx6j1Sui zmdjC94I0t0PUlZpEcIm9Z/Y2zBna/tkmMMFjL8/cLpkPsfnAfpUqRjJfOVBZOeL oDO58Fnkk4jZGnaqf/E/VPPE+/sJxZRK -----END CERTIFICATE-----Generated at Sat May 31 15:09:33 2025 by rpki-client