$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF19E/05C4C0A41D8411E2B0C5A3D908B02CD2/K1N18tBgdUbVH2UR9hvEoYl0_eI.mft File: K1N18tBgdUbVH2UR9hvEoYl0_eI.mft (raw, json) Hash identifier: u+Cen7UPy0O5HaiZFZFov1XjZgra+Zn88Mgf7Lp/niI= Subject key identifier: 39:1E:6D:74:B3:A6:AB:15:44:A3:91:39:77:4F:47:16:B8:AB:A7:31 Authority key identifier: 2B:53:75:F2:D0:60:75:46:D5:1F:65:11:F6:1B:C4:A1:89:74:FD:E2 Certificate issuer: /CN=A91EF19E/serialNumber=2B5375F2D0607546D51F6511F61BC4A18974FDE2 Certificate serial: 34BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1N18tBgdUbVH2UR9hvEoYl0_eI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF19E/05C4C0A41D8411E2B0C5A3D908B02CD2/K1N18tBgdUbVH2UR9hvEoYl0_eI.mft Manifest number: 34AC Signing time: Sat 31 May 2025 14:23:30 +0000 Manifest this update: Sat 31 May 2025 14:23:30 +0000 Manifest next update: Sat 07 Jun 2025 14:23:30 +0000 Files and hashes: 1: K1N18tBgdUbVH2UR9hvEoYl0_eI.crl (hash: zA/6FrykAYBPAjAtxIUHfdQmduxvqdH4qSQ325FQj2M=) 2: FACC58F855C411E9A0FEF781C4F9AE02.roa (hash: xRVsw1KmS2w+1EDgE8BbroBgIAZxNI85/W3Lxxz+NyE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF19E/05C4C0A41D8411E2B0C5A3D908B02CD2/K1N18tBgdUbVH2UR9hvEoYl0_eI.crl rsync://rpki.apnic.net/member_repository/A91EF19E/05C4C0A41D8411E2B0C5A3D908B02CD2/K1N18tBgdUbVH2UR9hvEoYl0_eI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1N18tBgdUbVH2UR9hvEoYl0_eI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 14:23:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13500 (0x34bc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF19E, serialNumber=2B5375F2D0607546D51F6511F61BC4A18974FDE2 Validity Not Before: May 31 14:23:30 2025 GMT Not After : Jun 7 14:23:30 2025 GMT Subject: CN=683b10e2-7553 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:7c:26:6d:ec:cc:4a:36:a4:e8:31:28:ea:6b: 73:66:4c:05:75:85:fa:1e:1d:58:63:40:37:80:01: 5b:3e:12:c2:b2:ac:01:3d:4c:0a:a1:a1:9e:60:81: cd:dd:3b:42:40:96:ed:74:45:83:90:22:e2:1d:70: 35:a8:0d:4b:f9:0d:96:71:22:76:18:74:08:58:c1: c4:c2:b2:20:13:6c:c5:ee:2d:e7:b2:b1:70:62:79: a0:9d:54:6f:f4:f4:11:4c:16:6c:38:97:4e:e9:c4: 42:74:ff:7f:fd:91:d1:7b:00:07:6b:f7:2e:fd:3f: cb:e1:07:55:4c:d9:d4:30:2b:2e:97:9a:ac:a8:53: 4f:cc:1a:5d:77:2b:61:26:a5:71:6c:99:64:a9:5d: d8:f9:a3:27:37:75:ad:72:d0:bc:33:31:20:c8:85: b9:fa:98:f1:c1:6a:81:a2:e6:1f:a9:46:0a:8a:d6: 6e:8d:b9:ac:56:3e:31:71:0f:56:37:98:ac:82:f8: 92:d5:4d:7b:e2:9d:87:06:37:71:a0:40:65:53:87: a9:ab:22:0f:b2:90:de:b8:1e:16:07:92:dd:19:fc: 0b:9b:b3:7c:63:9a:c7:bd:b9:a5:33:9f:8b:e1:d4: 76:38:fc:68:8f:63:1e:0d:4c:2d:21:6c:91:00:1e: 7f:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:1E:6D:74:B3:A6:AB:15:44:A3:91:39:77:4F:47:16:B8:AB:A7:31 X509v3 Authority Key Identifier: keyid:2B:53:75:F2:D0:60:75:46:D5:1F:65:11:F6:1B:C4:A1:89:74:FD:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF19E/05C4C0A41D8411E2B0C5A3D908B02CD2/K1N18tBgdUbVH2UR9hvEoYl0_eI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1N18tBgdUbVH2UR9hvEoYl0_eI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF19E/05C4C0A41D8411E2B0C5A3D908B02CD2/K1N18tBgdUbVH2UR9hvEoYl0_eI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:3a:34:54:58:81:0a:b5:23:b1:71:9f:e4:71:76:6b:37:08: d8:34:9f:d7:b4:55:3b:80:b3:61:3b:9e:3f:d5:e1:2f:f0:ed: 6c:c2:4a:33:b0:01:a2:35:f4:cd:c1:7a:c4:62:63:f0:0f:28: 0e:ab:34:67:39:50:f3:cc:ff:da:69:19:55:26:36:b3:bb:18: 20:06:f0:ed:82:c5:e6:93:25:11:4f:3d:79:cb:09:fc:60:7b: 06:17:ff:c0:b9:3a:ca:f4:4f:48:c7:ce:de:0a:93:2f:bc:ba: ee:ef:23:86:cd:2a:3f:fb:05:ff:77:07:ad:f3:5a:41:a2:b6: 21:e6:51:05:6b:e1:5a:86:23:28:ca:b7:c3:a9:de:20:0d:1d: ef:b5:40:7a:90:80:fe:c1:0f:5f:d7:7b:04:37:b5:c2:ac:ed: 7d:77:22:05:9d:4d:ff:6d:92:33:b4:6f:00:cc:74:36:4d:43: 3f:19:84:2d:c5:ab:90:9d:39:97:d2:e1:d6:8d:3d:87:88:ce: bb:05:d1:d8:d4:08:3d:03:9d:bb:95:2c:c0:1d:0d:73:a0:6f: ba:eb:c7:97:64:d6:18:98:77:b8:51:47:ca:5b:5c:7e:ae:1e: 57:0a:0a:d2:cc:57:32:8a:47:3c:71:c8:a7:05:e2:d1:37:b6: 15:16:e7:d9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNLwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUYxOUUxMTAvBgNVBAUTKDJCNTM3NUYyRDA2MDc1NDZENTFGNjUxMUY2MUJDNEEx ODk3NEZERTIwHhcNMjUwNTMxMTQyMzMwWhcNMjUwNjA3MTQyMzMwWjAYMRYwFAYD VQQDEw02ODNiMTBlMi03NTUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt3wmbezMSjak6DEo6mtzZkwFdYX6Hh1YY0A3gAFbPhLCsqwBPUwKoaGeYIHN 3TtCQJbtdEWDkCLiHXA1qA1L+Q2WcSJ2GHQIWMHEwrIgE2zF7i3nsrFwYnmgnVRv 9PQRTBZsOJdO6cRCdP9//ZHRewAHa/cu/T/L4QdVTNnUMCsul5qsqFNPzBpddyth JqVxbJlkqV3Y+aMnN3WtctC8MzEgyIW5+pjxwWqBouYfqUYKitZujbmsVj4xcQ9W N5isgviS1U174p2HBjdxoEBlU4epqyIPspDeuB4WB5LdGfwLm7N8Y5rHvbmlM5+L 4dR2OPxoj2MeDUwtIWyRAB5/jwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDkebXSz pqsVRKOROXdPRxa4q6cxMB8GA1UdIwQYMBaAFCtTdfLQYHVG1R9lEfYbxKGJdP3i MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjE5RS8wNUM0QzBBNDFE ODQxMUUyQjBDNUEzRDkwOEIwMkNEMi9LMU4xOHRCZ2RVYlZIMlVSOWh2RW9ZbDBf ZUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0sxTjE4dEJnZFViVkgyVVI5aHZFb1lsMF9lSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RjE5RS8wNUM0QzBBNDFEODQxMUUyQjBDNUEzRDkwOEIwMkNEMi9LMU4xOHRCZ2RV YlZIMlVSOWh2RW9ZbDBfZUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBUOjRUWIEKtSOxcZ/kcXZrNwjYNJ/XtFU7gLNhO54/1eEv8O1swkoz sAGiNfTNwXrEYmPwDygOqzRnOVDzzP/aaRlVJjazuxggBvDtgsXmkyURTz15ywn8 YHsGF//AuTrK9E9Ix87eCpMvvLru7yOGzSo/+wX/dwet81pBorYh5lEFa+FahiMo yrfDqd4gDR3vtUB6kID+wQ9f13sEN7XCrO19dyIFnU3/bZIztG8AzHQ2TUM/GYQt xauQnTmX0uHWjT2HiM67BdHY1Ag9A527lSzAHQ1zoG+668eXZNYYmHe4UUfKW1x+ rh5XCgrSzFcyikc8ccinBeLRN7YVFufZ -----END CERTIFICATE-----Generated at Sat May 31 16:53:37 2025 by rpki-client