$ rpki-client -vvf rpki.apnic.net/member_repository/A91F17B1/66E4E4F6FB4011EBBAB0DA3BC4F9AE02/_lDDhdnrGeLvoU-jWtpb3qW0VtM.mft File: _lDDhdnrGeLvoU-jWtpb3qW0VtM.mft (raw, json) Hash identifier: T38IfecymQmC4ZRirW9ZKlbZlGp+/5Td93HmxiYdOCo= Subject key identifier: 2A:EF:FA:71:69:2A:52:48:90:C5:6B:F7:C8:C5:1E:76:F6:01:C2:C1 Authority key identifier: FE:50:C3:85:D9:EB:19:E2:EF:A1:4F:A3:5A:DA:5B:DE:A5:B4:56:D3 Certificate issuer: /CN=A91F17B1/serialNumber=FE50C385D9EB19E2EFA14FA35ADA5BDEA5B456D3 Certificate serial: 058F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_lDDhdnrGeLvoU-jWtpb3qW0VtM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F17B1/66E4E4F6FB4011EBBAB0DA3BC4F9AE02/_lDDhdnrGeLvoU-jWtpb3qW0VtM.mft Manifest number: 0565 Signing time: Fri 30 May 2025 23:43:15 +0000 Manifest this update: Fri 30 May 2025 23:43:14 +0000 Manifest next update: Fri 06 Jun 2025 23:43:14 +0000 Files and hashes: 1: _lDDhdnrGeLvoU-jWtpb3qW0VtM.crl (hash: WX6bsYaQ9FTP7GnG3I6eaPNUyECuDPTQohUbqlOoVWc=) 2: 65DFCD4A884D11EE8423C486C4F9AE02.roa (hash: Ji5QHhKyC9d/xw16UVd29SWOnnXI9pwAI1DiN2SnuG0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F17B1/66E4E4F6FB4011EBBAB0DA3BC4F9AE02/_lDDhdnrGeLvoU-jWtpb3qW0VtM.crl rsync://rpki.apnic.net/member_repository/A91F17B1/66E4E4F6FB4011EBBAB0DA3BC4F9AE02/_lDDhdnrGeLvoU-jWtpb3qW0VtM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_lDDhdnrGeLvoU-jWtpb3qW0VtM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 23:43:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1423 (0x58f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F17B1, serialNumber=FE50C385D9EB19E2EFA14FA35ADA5BDEA5B456D3 Validity Not Before: May 30 23:43:14 2025 GMT Not After : Jun 6 23:43:14 2025 GMT Subject: CN=683a4293-e24a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:71:47:8d:f9:b2:e3:48:84:8e:0f:8f:a3:de: 23:0d:97:cc:89:90:26:20:3d:98:b5:ff:ad:61:cf: 9e:cd:77:c5:5d:c8:cb:bd:ef:93:3e:aa:32:fe:0e: a2:ac:6f:eb:30:d1:22:dd:29:92:e5:90:99:af:09: a4:92:73:b5:7a:46:7b:19:8c:7d:1f:b4:f9:73:e9: fc:7a:bb:bb:b4:20:46:79:99:7a:7b:4e:60:3c:81: 63:27:56:73:d1:97:b4:fd:74:5b:1a:fa:ca:88:fd: 0e:9b:05:f4:df:0c:ec:81:99:0a:97:8d:5d:c3:04: bd:aa:cb:26:17:c7:46:f0:28:2e:67:7b:d8:da:66: c0:30:5f:4c:6d:4e:59:86:43:ba:70:f2:87:78:5b: 53:c9:38:09:a1:4f:4f:05:63:3a:81:e0:61:9f:0e: 7f:e7:4c:c7:4f:a1:ba:42:bb:59:76:c1:14:db:f0: 8a:4f:39:6e:31:a7:ed:26:be:bb:81:d4:07:8e:a2: 74:16:7a:d6:df:57:92:8e:b3:ff:b3:81:8c:a2:bc: 2a:30:84:7c:ff:c0:75:34:d7:a1:fc:d3:05:c9:72: f8:31:67:19:e7:74:89:38:d3:b5:30:48:31:a1:85: 4c:5b:e3:63:60:91:51:4f:37:12:d7:0f:82:48:9f: 17:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:EF:FA:71:69:2A:52:48:90:C5:6B:F7:C8:C5:1E:76:F6:01:C2:C1 X509v3 Authority Key Identifier: keyid:FE:50:C3:85:D9:EB:19:E2:EF:A1:4F:A3:5A:DA:5B:DE:A5:B4:56:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F17B1/66E4E4F6FB4011EBBAB0DA3BC4F9AE02/_lDDhdnrGeLvoU-jWtpb3qW0VtM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_lDDhdnrGeLvoU-jWtpb3qW0VtM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F17B1/66E4E4F6FB4011EBBAB0DA3BC4F9AE02/_lDDhdnrGeLvoU-jWtpb3qW0VtM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:c7:d4:21:38:8b:7c:0c:64:50:70:0d:ed:e1:ba:5b:fc:18: b9:6e:22:76:05:f2:66:89:aa:3a:66:1a:06:a4:8e:7d:7f:71: 06:bd:ae:65:62:01:c9:07:98:77:4c:d7:16:4d:5c:3d:fd:a3: 82:23:71:a1:c6:d6:cf:6c:15:0b:56:e3:4e:cf:82:46:2d:b7: f7:70:4e:0d:aa:46:9f:8d:3a:c9:8a:d3:c5:55:29:75:fa:bb: 84:52:18:00:c4:a6:21:77:3a:51:a2:71:a2:d3:81:b8:da:20: d3:62:4b:3f:2d:42:c2:85:7d:7a:78:ef:ab:36:1f:2f:23:1b: 10:1e:45:8f:94:a7:89:b7:03:8f:8f:e9:26:26:6d:f3:5d:b9: 44:ec:41:e5:48:21:37:13:99:0c:f7:db:ef:89:58:58:16:27: 10:a0:e9:31:a0:2b:d4:19:66:39:dc:16:a4:fd:30:ed:84:8a: ea:ab:32:ec:9b:72:f1:f2:85:4a:1d:11:9b:38:e5:84:02:ce: 79:a2:67:c4:e2:ab:14:73:48:1c:2f:2c:ca:b8:c5:89:72:3a: a3:1b:4f:18:43:9e:cf:6f:3a:cb:2e:d6:81:14:47:16:6c:08: 1a:06:60:56:6d:66:44:74:5d:64:9f:97:a3:33:de:1a:d4:56: 22:37:d1:bf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBY8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjE3QjExMTAvBgNVBAUTKEZFNTBDMzg1RDlFQjE5RTJFRkExNEZBMzVBREE1QkRF QTVCNDU2RDMwHhcNMjUwNTMwMjM0MzE0WhcNMjUwNjA2MjM0MzE0WjAYMRYwFAYD VQQDEw02ODNhNDI5My1lMjRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAynFHjfmy40iEjg+Po94jDZfMiZAmID2Ytf+tYc+ezXfFXcjLve+TPqoy/g6i rG/rMNEi3SmS5ZCZrwmkknO1ekZ7GYx9H7T5c+n8eru7tCBGeZl6e05gPIFjJ1Zz 0Ze0/XRbGvrKiP0OmwX03wzsgZkKl41dwwS9qssmF8dG8CguZ3vY2mbAMF9MbU5Z hkO6cPKHeFtTyTgJoU9PBWM6geBhnw5/50zHT6G6QrtZdsEU2/CKTzluMaftJr67 gdQHjqJ0FnrW31eSjrP/s4GMorwqMIR8/8B1NNeh/NMFyXL4MWcZ53SJONO1MEgx oYVMW+NjYJFRTzcS1w+CSJ8XDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCrv+nFp KlJIkMVr98jFHnb2AcLBMB8GA1UdIwQYMBaAFP5Qw4XZ6xni76FPo1raW96ltFbT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMTdCMS82NkU0RTRGNkZC NDAxMUVCQkFCMERBM0JDNEY5QUUwMi9fbEREaGRuckdlTHZvVS1qV3RwYjNxVzBW dE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19sRERoZG5yR2VMdm9VLWpXdHBiM3FXMFZ0TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MTdCMS82NkU0RTRGNkZCNDAxMUVCQkFCMERBM0JDNEY5QUUwMi9fbEREaGRuckdl THZvVS1qV3RwYjNxVzBWdE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBNx9QhOIt8DGRQcA3t4bpb/Bi5biJ2BfJmiao6ZhoGpI59f3EGva5l YgHJB5h3TNcWTVw9/aOCI3GhxtbPbBULVuNOz4JGLbf3cE4NqkafjTrJitPFVSl1 +ruEUhgAxKYhdzpRonGi04G42iDTYks/LULChX16eO+rNh8vIxsQHkWPlKeJtwOP j+kmJm3zXblE7EHlSCE3E5kM99vviVhYFicQoOkxoCvUGWY53Bak/TDthIrqqzLs m3Lx8oVKHRGbOOWEAs55omfE4qsUc0gcLyzKuMWJcjqjG08YQ57PbzrLLtaBFEcW bAgaBmBWbWZEdF1kn5ejM94a1FYiN9G/ -----END CERTIFICATE-----Generated at Sat May 31 17:00:19 2025 by rpki-client