$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE92F/12085D18740B11EF9E9C0336C4F9AE02/RX23ZuGw1qTcx_muzSh9TcPnDJ4.mft File: RX23ZuGw1qTcx_muzSh9TcPnDJ4.mft (raw, json) Hash identifier: 4LzckBB+Q/1XMEY6Fjw0y+a8szRXdrV/l7empibt2ts= Subject key identifier: 7C:7B:84:C4:7F:21:E8:DB:6A:4A:7C:DB:F3:B0:45:DC:BD:A5:8E:A0 Authority key identifier: 45:7D:B7:66:E1:B0:D6:A4:DC:C7:F9:AE:CD:28:7D:4D:C3:E7:0C:9E Certificate issuer: /CN=A91EE92F/serialNumber=457DB766E1B0D6A4DCC7F9AECD287D4DC3E70C9E Certificate serial: 87 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RX23ZuGw1qTcx_muzSh9TcPnDJ4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EE92F/12085D18740B11EF9E9C0336C4F9AE02/RX23ZuGw1qTcx_muzSh9TcPnDJ4.mft Manifest number: 86 Signing time: Tue 03 Jun 2025 06:21:18 +0000 Manifest this update: Tue 03 Jun 2025 06:21:17 +0000 Manifest next update: Tue 10 Jun 2025 06:21:17 +0000 Files and hashes: 1: RX23ZuGw1qTcx_muzSh9TcPnDJ4.crl (hash: W8wEMy6chXXR2gDO7Fx0vI8ZDp3w3pQCLSmdU2oN8Pk=) 2: 2DFD4A1E740C11EFB881CE37C4F9AE02.roa (hash: T+wmuYYMTFF61NV8D+auleLzw90NK0dFwG6cz8qIwGw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EE92F/12085D18740B11EF9E9C0336C4F9AE02/RX23ZuGw1qTcx_muzSh9TcPnDJ4.crl rsync://rpki.apnic.net/member_repository/A91EE92F/12085D18740B11EF9E9C0336C4F9AE02/RX23ZuGw1qTcx_muzSh9TcPnDJ4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RX23ZuGw1qTcx_muzSh9TcPnDJ4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 06:21:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 135 (0x87) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EE92F, serialNumber=457DB766E1B0D6A4DCC7F9AECD287D4DC3E70C9E Validity Not Before: Jun 3 06:21:17 2025 GMT Not After : Jun 10 06:21:17 2025 GMT Subject: CN=683e945e-f888 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:44:b9:d6:93:77:ad:49:32:cf:f8:65:15:d5: 12:49:38:52:e7:37:47:86:c2:55:6f:fa:ec:07:66: ad:a6:ba:ad:46:60:9b:99:62:95:10:8d:fe:fa:65: a6:5b:1b:49:76:7d:cc:12:25:45:65:89:2d:93:ac: 7a:cb:b6:f5:21:be:80:80:d8:df:fd:06:66:a4:73: 72:d6:53:f3:4e:46:f6:5a:c9:75:a8:81:d9:52:28: f0:f2:cb:3b:22:5c:1a:f8:52:c1:f4:46:8c:96:87: 3a:78:a8:f2:83:91:61:4b:23:8d:ac:b6:07:fc:95: 72:4e:47:8f:00:e1:89:3c:ad:b7:0c:87:50:72:d7: 7e:98:da:a5:c4:9c:36:73:d9:0b:4a:f2:f9:ed:46: f2:05:d2:e4:4d:d2:ef:aa:7b:c4:79:f1:26:89:1c: 5f:12:71:d8:e6:41:89:28:ae:16:56:42:a9:5c:f4: 94:d5:12:5b:7b:bb:43:9c:8d:3c:ea:41:00:4c:4f: e4:ba:51:94:55:25:63:e5:26:5e:13:a3:66:3d:c7: 2d:30:17:97:70:c5:32:08:31:c5:8a:3e:cb:be:a4: 4a:1d:9e:94:c6:0a:c3:1c:2c:24:93:91:06:92:29: 1a:69:26:e3:7e:df:a0:d8:09:8f:5f:db:45:be:a0: 3b:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:7B:84:C4:7F:21:E8:DB:6A:4A:7C:DB:F3:B0:45:DC:BD:A5:8E:A0 X509v3 Authority Key Identifier: keyid:45:7D:B7:66:E1:B0:D6:A4:DC:C7:F9:AE:CD:28:7D:4D:C3:E7:0C:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EE92F/12085D18740B11EF9E9C0336C4F9AE02/RX23ZuGw1qTcx_muzSh9TcPnDJ4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RX23ZuGw1qTcx_muzSh9TcPnDJ4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE92F/12085D18740B11EF9E9C0336C4F9AE02/RX23ZuGw1qTcx_muzSh9TcPnDJ4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:9a:f9:ac:44:d5:c8:10:57:2b:2d:b4:a6:ef:30:b1:01:14: 41:c8:ec:0b:3e:7e:f0:8d:a3:1e:1e:e2:1d:08:2c:5f:23:f8: 58:9e:6f:3d:11:70:47:bb:05:f2:9e:9b:a5:03:f8:15:0f:03: ef:d4:46:1e:7d:57:33:a6:30:eb:5b:a8:ed:a2:c0:51:e0:01: 9f:54:0e:77:24:b0:92:7c:bd:0b:98:0b:0b:17:fa:9b:b6:33: f9:8e:5b:df:d2:c1:e2:fa:a2:9c:3e:b5:91:be:1d:9d:97:12: 93:4d:79:03:ab:86:d5:b6:90:ab:2b:d9:bc:6f:9c:4c:07:b0: a6:7a:08:9f:ad:86:06:4c:bd:9d:45:37:e9:07:c1:0f:f8:a9: 08:ff:25:39:fd:40:bd:ab:88:a8:47:8f:84:64:60:70:72:a6: 8e:8a:72:78:c8:b5:6a:69:c9:0f:06:09:72:3e:6d:08:80:ce: ac:89:20:52:83:4a:72:b9:ea:1c:3d:96:3d:e7:de:f3:fa:79: b9:6f:18:f9:3b:a7:3f:24:f7:8a:e4:63:4f:56:91:0c:f1:0c: 1c:4f:2a:c4:95:16:09:6d:88:3c:43:e2:f2:71:2e:5e:21:06: e2:96:02:88:ac:eb:d4:9b:33:59:02:54:e4:f8:eb:49:28:26: a3:86:41:a6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUU5MkYxMTAvBgNVBAUTKDQ1N0RCNzY2RTFCMEQ2QTREQ0M3RjlBRUNEMjg3RDRE QzNFNzBDOUUwHhcNMjUwNjAzMDYyMTE3WhcNMjUwNjEwMDYyMTE3WjAYMRYwFAYD VQQDEw02ODNlOTQ1ZS1mODg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp0S51pN3rUkyz/hlFdUSSThS5zdHhsJVb/rsB2atprqtRmCbmWKVEI3++mWm WxtJdn3MEiVFZYktk6x6y7b1Ib6AgNjf/QZmpHNy1lPzTkb2Wsl1qIHZUijw8ss7 Ilwa+FLB9EaMloc6eKjyg5FhSyONrLYH/JVyTkePAOGJPK23DIdQctd+mNqlxJw2 c9kLSvL57UbyBdLkTdLvqnvEefEmiRxfEnHY5kGJKK4WVkKpXPSU1RJbe7tDnI08 6kEATE/kulGUVSVj5SZeE6NmPcctMBeXcMUyCDHFij7LvqRKHZ6UxgrDHCwkk5EG kikaaSbjft+g2AmPX9tFvqA7pQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHx7hMR/ Iejbakp82/OwRdy9pY6gMB8GA1UdIwQYMBaAFEV9t2bhsNak3Mf5rs0ofU3D5wye MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRTkyRi8xMjA4NUQxODc0 MEIxMUVGOUU5QzAzMzZDNEY5QUUwMi9SWDIzWnVHdzFxVGN4X211elNoOVRjUG5E SjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1JYMjNadUd3MXFUY3hfbXV6U2g5VGNQbkRKNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RTkyRi8xMjA4NUQxODc0MEIxMUVGOUU5QzAzMzZDNEY5QUUwMi9SWDIzWnVHdzFx VGN4X211elNoOVRjUG5ESjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBcmvmsRNXIEFcrLbSm7zCxARRByOwLPn7wjaMeHuIdCCxfI/hYnm89 EXBHuwXynpulA/gVDwPv1EYefVczpjDrW6jtosBR4AGfVA53JLCSfL0LmAsLF/qb tjP5jlvf0sHi+qKcPrWRvh2dlxKTTXkDq4bVtpCrK9m8b5xMB7CmegifrYYGTL2d RTfpB8EP+KkI/yU5/UC9q4ioR4+EZGBwcqaOinJ4yLVqackPBglyPm0IgM6siSBS g0pyueocPZY9597z+nm5bxj5O6c/JPeK5GNPVpEM8QwcTyrElRYJbYg8Q+LycS5e IQbilgKIrOvUmzNZAlTk+OtJKCajhkGm -----END CERTIFICATE-----Generated at Tue Jun 3 23:53:48 2025 by rpki-client