$ rpki-client -vvf rpki.apnic.net/member_repository/A91EFD20/A8253B9C433011EF9EDBCD6CC4F9AE02/p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.mft File: p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.mft (raw, json) Hash identifier: tqhd16WqyjfO2lS/bA00qh+mUzNwYNoges4wayG6Jig= Subject key identifier: BE:1E:D0:BC:4B:26:91:9A:BA:87:30:CF:A1:2E:1F:E3:78:C3:75:2F Authority key identifier: A7:6B:71:0C:D2:36:0A:2E:26:82:FD:2B:80:71:8A:19:88:39:66:04 Certificate issuer: /CN=A91EFD20/serialNumber=A76B710CD2360A2E2682FD2B80718A1988396604 Certificate serial: A5 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EFD20/A8253B9C433011EF9EDBCD6CC4F9AE02/p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.mft Manifest number: A4 Signing time: Sun 01 Jun 2025 05:52:21 +0000 Manifest this update: Sun 01 Jun 2025 05:52:21 +0000 Manifest next update: Sun 08 Jun 2025 05:52:21 +0000 Files and hashes: 1: p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.crl (hash: HeTXWiE0w3e+YkEodpdNFvI4njkdQ+pDCQ8sZu1jeSM=) 2: 80A57534433311EF94E79D23C4F9AE02.roa (hash: /DX7dbxTLTAh+dFwT5n2PZNSYyr7e+Nh1d2b2XOmU5M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EFD20/A8253B9C433011EF9EDBCD6CC4F9AE02/p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.crl rsync://rpki.apnic.net/member_repository/A91EFD20/A8253B9C433011EF9EDBCD6CC4F9AE02/p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 05:52:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 165 (0xa5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EFD20, serialNumber=A76B710CD2360A2E2682FD2B80718A1988396604 Validity Not Before: Jun 1 05:52:21 2025 GMT Not After : Jun 8 05:52:21 2025 GMT Subject: CN=683bea95-0590 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:50:db:a4:12:84:e1:4b:63:06:06:41:fe:7c: 07:a6:30:fc:87:af:17:05:37:a1:8a:0f:79:28:0e: af:9b:bc:61:dc:6e:2f:67:cb:b5:3f:ff:39:ea:72: fc:3a:6f:1f:12:5a:8a:65:c2:97:0f:f4:90:cf:38: 85:87:95:e5:d9:4d:10:64:30:bb:1b:aa:1a:56:c6: 5f:fc:bc:e7:b8:07:a2:48:07:a3:6f:5f:92:bc:e5: d5:c6:1b:72:18:ce:3f:c7:ce:23:17:6c:24:70:75: 3b:e3:33:9e:c4:b8:ad:ee:31:67:8a:fe:af:fe:76: c9:d5:c0:13:81:98:c9:53:a6:a4:27:b1:e3:2f:4a: 06:84:b8:0f:1d:e1:e5:6f:4c:0b:42:61:70:bd:21: c6:7e:c7:ed:25:71:b5:ba:78:90:54:3b:3a:18:31: f8:69:57:ee:e3:12:e4:01:b9:f8:85:d2:f6:62:e1: a4:a8:c0:17:64:ab:70:79:b6:0a:4d:02:79:f5:cf: aa:78:68:34:55:30:44:9f:1e:ec:4c:53:cb:d4:43: 09:df:82:e7:b8:f8:db:45:9e:0b:93:19:82:90:0c: bb:e1:6c:a0:d6:2b:89:e8:8f:51:8f:8a:17:fa:3b: b4:bb:80:96:64:39:0f:7e:a9:24:bf:d3:68:fa:8f: 94:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:1E:D0:BC:4B:26:91:9A:BA:87:30:CF:A1:2E:1F:E3:78:C3:75:2F X509v3 Authority Key Identifier: keyid:A7:6B:71:0C:D2:36:0A:2E:26:82:FD:2B:80:71:8A:19:88:39:66:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EFD20/A8253B9C433011EF9EDBCD6CC4F9AE02/p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EFD20/A8253B9C433011EF9EDBCD6CC4F9AE02/p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:d7:b4:19:63:ee:7f:be:34:ea:f1:37:35:dd:b6:96:3f:85: b8:69:04:60:92:40:8a:4f:68:e4:27:e4:f0:8a:6c:7d:fb:a0: 91:df:26:df:90:96:bf:93:79:be:38:0b:04:bf:65:26:d1:c4: 07:57:d3:ab:fd:f9:7a:66:3f:23:86:46:36:fb:9b:9b:6d:e5: 87:ed:89:eb:37:ad:60:b5:5f:fd:0e:c9:12:86:3b:cd:20:9a: a8:91:e8:9f:21:f5:dd:f2:8f:db:8f:b2:38:77:17:39:53:8a: a0:a1:e0:a9:5f:6d:7a:11:86:ad:f8:1d:46:95:91:f9:7e:27: fc:d2:26:b5:1f:43:22:86:11:0d:b7:5d:44:38:29:f3:18:e0: 6f:17:56:5a:cc:19:fb:69:8b:f0:28:32:ce:01:87:70:13:35: 78:41:08:42:00:a1:ce:db:f8:1f:e7:f4:31:9b:5a:f7:93:62: 2c:22:8a:8a:1c:48:c8:3a:71:b8:18:8b:77:36:b6:07:c6:4a: 45:2e:8d:b1:54:8f:d9:c4:99:f1:f7:06:22:9f:b1:ae:b1:95: 86:8a:24:c7:ab:8d:7b:72:39:2c:fe:29:ae:fc:61:e6:95:5c: 7b:c3:d3:66:da:1b:b4:3e:3d:2d:02:7a:92:8f:c9:26:eb:d2: 9d:33:e8:78 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUZEMjAxMTAvBgNVBAUTKEE3NkI3MTBDRDIzNjBBMkUyNjgyRkQyQjgwNzE4QTE5 ODgzOTY2MDQwHhcNMjUwNjAxMDU1MjIxWhcNMjUwNjA4MDU1MjIxWjAYMRYwFAYD VQQDEw02ODNiZWE5NS0wNTkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvlDbpBKE4UtjBgZB/nwHpjD8h68XBTehig95KA6vm7xh3G4vZ8u1P/856nL8 Om8fElqKZcKXD/SQzziFh5Xl2U0QZDC7G6oaVsZf/LznuAeiSAejb1+SvOXVxhty GM4/x84jF2wkcHU74zOexLit7jFniv6v/nbJ1cATgZjJU6akJ7HjL0oGhLgPHeHl b0wLQmFwvSHGfsftJXG1uniQVDs6GDH4aVfu4xLkAbn4hdL2YuGkqMAXZKtwebYK TQJ59c+qeGg0VTBEnx7sTFPL1EMJ34LnuPjbRZ4LkxmCkAy74Wyg1iuJ6I9Rj4oX +ju0u4CWZDkPfqkkv9No+o+UlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL4e0LxL JpGauocwz6EuH+N4w3UvMB8GA1UdIwQYMBaAFKdrcQzSNgouJoL9K4BxihmIOWYE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRkQyMC9BODI1M0I5QzQz MzAxMUVGOUVEQkNENkNDNEY5QUUwMi9wMnR4RE5JMkNpNG1ndjByZ0hHS0dZZzVa Z1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3AydHhETkkyQ2k0bWd2MHJnSEdLR1lnNVpnUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RkQyMC9BODI1M0I5QzQzMzAxMUVGOUVEQkNENkNDNEY5QUUwMi9wMnR4RE5JMkNp NG1ndjByZ0hHS0dZZzVaZ1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBE17QZY+5/vjTq8Tc13baWP4W4aQRgkkCKT2jkJ+Twimx9+6CR3ybf kJa/k3m+OAsEv2Um0cQHV9Or/fl6Zj8jhkY2+5ubbeWH7YnrN61gtV/9DskShjvN IJqokeifIfXd8o/bj7I4dxc5U4qgoeCpX216EYat+B1GlZH5fif80ia1H0MihhEN t11EOCnzGOBvF1ZazBn7aYvwKDLOAYdwEzV4QQhCAKHO2/gf5/Qxm1r3k2IsIoqK HEjIOnG4GIt3NrYHxkpFLo2xVI/ZxJnx9wYin7GusZWGiiTHq417cjks/imu/GHm lVx7w9Nm2hu0Pj0tAnqSj8km69KdM+h4 -----END CERTIFICATE-----Generated at Mon Jun 2 20:04:19 2025 by rpki-client