$ rpki-client -vvf rpki.apnic.net/member_repository/A91F223F/0969127C8CAA11EE864DFD6DC4F9AE02/29rQCQF9kd-0ONcNG41NNIYvBo4.mft File: 29rQCQF9kd-0ONcNG41NNIYvBo4.mft (raw, json) Hash identifier: wHdVoLkPJhUzPmutrqudTB+uaiKaQyJX9kbMoJIi3yk= Subject key identifier: 46:B7:63:62:7D:F8:42:B5:DE:E6:A9:32:D9:C5:F8:3E:DD:CB:EC:1B Authority key identifier: DB:DA:D0:09:01:7D:91:DF:B4:38:D7:0D:1B:8D:4D:34:86:2F:06:8E Certificate issuer: /CN=A91F223F/serialNumber=DBDAD009017D91DFB438D70D1B8D4D34862F068E Certificate serial: 0121 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/29rQCQF9kd-0ONcNG41NNIYvBo4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F223F/0969127C8CAA11EE864DFD6DC4F9AE02/29rQCQF9kd-0ONcNG41NNIYvBo4.mft Manifest number: 011D Signing time: Sat 31 May 2025 04:25:01 +0000 Manifest this update: Sat 31 May 2025 04:25:00 +0000 Manifest next update: Sat 07 Jun 2025 04:25:00 +0000 Files and hashes: 1: 29rQCQF9kd-0ONcNG41NNIYvBo4.crl (hash: innAvhTGAflG1MYa7fgEhhpgjlezLmGht9i+h/AhCyA=) 2: 63E8E1AA8CAA11EE8B20D86EC4F9AE02.roa (hash: FS0NZn6HmMNUVE243zK4MTv8yDH9emQLgpWFOPvCnxU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F223F/0969127C8CAA11EE864DFD6DC4F9AE02/29rQCQF9kd-0ONcNG41NNIYvBo4.crl rsync://rpki.apnic.net/member_repository/A91F223F/0969127C8CAA11EE864DFD6DC4F9AE02/29rQCQF9kd-0ONcNG41NNIYvBo4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/29rQCQF9kd-0ONcNG41NNIYvBo4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 04:25:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 289 (0x121) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F223F, serialNumber=DBDAD009017D91DFB438D70D1B8D4D34862F068E Validity Not Before: May 31 04:25:00 2025 GMT Not After : Jun 7 04:25:00 2025 GMT Subject: CN=683a849d-6954 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:da:0b:95:f0:c9:08:14:10:69:09:2a:41:4c: 9d:91:f8:2f:66:e3:43:0a:2a:0d:60:84:f3:95:65: e1:67:ef:50:a6:dd:ba:35:20:f8:5d:a5:aa:b8:ee: c8:ac:e7:1b:49:19:76:ba:2f:16:95:3e:98:b2:57: 02:e3:e7:30:fd:58:b4:ba:c8:ba:38:33:e9:5f:ae: eb:c5:06:64:96:6c:bd:e8:e9:4c:d8:f1:a4:af:1a: a5:32:27:85:53:6a:0d:2f:5e:14:bb:dd:0b:6e:3a: 6d:75:6d:c9:ff:6b:ae:7b:3c:bc:5f:ba:f3:dc:c6: 82:0c:c3:f3:f9:fe:25:e9:2b:bd:34:98:d3:d4:05: 1e:5e:ee:01:06:2f:79:23:01:6b:d0:a4:f5:40:3a: b7:ac:95:90:44:ad:23:d3:ee:23:f5:f9:c3:a8:bd: e8:9c:09:b0:83:2f:3a:96:63:10:57:3a:6f:dc:51: ab:26:7e:07:c2:90:87:a3:7e:16:f9:db:1d:e0:84: fc:c2:49:53:67:c4:d7:c7:a3:8f:63:43:3e:a4:b5: e6:b7:db:61:38:c7:8a:54:e4:54:45:01:9c:58:18: b2:44:7f:4c:cb:43:60:97:96:27:a3:4e:c9:84:2a: f9:b3:db:5a:e6:23:7a:f2:cd:6c:6c:f1:c7:d8:83: fe:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:B7:63:62:7D:F8:42:B5:DE:E6:A9:32:D9:C5:F8:3E:DD:CB:EC:1B X509v3 Authority Key Identifier: keyid:DB:DA:D0:09:01:7D:91:DF:B4:38:D7:0D:1B:8D:4D:34:86:2F:06:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F223F/0969127C8CAA11EE864DFD6DC4F9AE02/29rQCQF9kd-0ONcNG41NNIYvBo4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/29rQCQF9kd-0ONcNG41NNIYvBo4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F223F/0969127C8CAA11EE864DFD6DC4F9AE02/29rQCQF9kd-0ONcNG41NNIYvBo4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:37:0d:4c:5c:0a:1a:ca:5c:48:21:66:aa:f9:1a:c4:b9:a4: 0c:85:5b:a1:7c:91:f1:61:40:2a:be:53:42:01:46:40:c6:39: 4e:fb:94:40:ea:e1:6c:77:e5:67:4f:56:fc:3f:bf:29:6f:9e: 8c:cf:e1:77:6a:3b:72:20:38:87:6f:e7:3a:d1:da:fd:8c:38: 6e:c3:b8:a3:4f:e2:6a:85:a4:0b:07:fd:5d:ab:ce:7b:ba:29: c0:6a:42:a4:ad:09:16:d0:e3:7a:9f:7f:ba:60:8f:27:c6:d9: 12:19:80:eb:fd:e9:49:a2:31:f5:5d:73:c6:7a:ea:fe:d0:08: e4:50:7f:c7:2c:0d:45:36:2f:92:00:f0:6d:57:bd:8d:8c:39: 1f:a3:e1:39:02:66:0b:cc:48:d7:60:27:0b:d6:79:27:d6:4e: 2c:c8:19:b9:fe:8d:3b:f9:09:4c:8f:cc:07:7c:84:eb:09:6c: 54:96:4a:7b:ed:c9:b5:e5:08:53:9e:ce:11:5c:13:df:b1:9f: a2:fd:c7:f0:fc:d2:e2:92:d8:bd:8e:9a:00:67:5a:d4:ff:cb: 44:70:a7:8f:2f:ea:58:8a:87:fd:95:12:13:6b:92:92:00:27: dd:0f:cd:d1:42:6b:fe:0b:82:3b:8e:9d:94:38:c8:74:84:92: 4a:81:de:76 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjIyM0YxMTAvBgNVBAUTKERCREFEMDA5MDE3RDkxREZCNDM4RDcwRDFCOEQ0RDM0 ODYyRjA2OEUwHhcNMjUwNTMxMDQyNTAwWhcNMjUwNjA3MDQyNTAwWjAYMRYwFAYD VQQDEw02ODNhODQ5ZC02OTU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtNoLlfDJCBQQaQkqQUydkfgvZuNDCioNYITzlWXhZ+9Qpt26NSD4XaWquO7I rOcbSRl2ui8WlT6YslcC4+cw/Vi0usi6ODPpX67rxQZklmy96OlM2PGkrxqlMieF U2oNL14Uu90LbjptdW3J/2uuezy8X7rz3MaCDMPz+f4l6Su9NJjT1AUeXu4BBi95 IwFr0KT1QDq3rJWQRK0j0+4j9fnDqL3onAmwgy86lmMQVzpv3FGrJn4HwpCHo34W +dsd4IT8wklTZ8TXx6OPY0M+pLXmt9thOMeKVORURQGcWBiyRH9My0Ngl5Yno07J hCr5s9ta5iN68s1sbPHH2IP+bwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEa3Y2J9 +EK13uapMtnF+D7dy+wbMB8GA1UdIwQYMBaAFNva0AkBfZHftDjXDRuNTTSGLwaO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMjIzRi8wOTY5MTI3QzhD QUExMUVFODY0REZENkRDNEY5QUUwMi8yOXJRQ1FGOWtkLTBPTmNORzQxTk5JWXZC bzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzI5clFDUUY5a2QtME9OY05HNDFOTklZdkJvNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MjIzRi8wOTY5MTI3QzhDQUExMUVFODY0REZENkRDNEY5QUUwMi8yOXJRQ1FGOWtk LTBPTmNORzQxTk5JWXZCbzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAONw1MXAoaylxIIWaq+RrEuaQMhVuhfJHxYUAqvlNCAUZAxjlO+5RA 6uFsd+VnT1b8P78pb56Mz+F3ajtyIDiHb+c60dr9jDhuw7ijT+JqhaQLB/1dq857 uinAakKkrQkW0ON6n3+6YI8nxtkSGYDr/elJojH1XXPGeur+0AjkUH/HLA1FNi+S APBtV72NjDkfo+E5AmYLzEjXYCcL1nkn1k4syBm5/o07+QlMj8wHfITrCWxUlkp7 7cm15QhTns4RXBPfsZ+i/cfw/NLikti9jpoAZ1rU/8tEcKePL+pYiof9lRITa5KS ACfdD83RQmv+C4I7jp2UOMh0hJJKgd52 -----END CERTIFICATE-----Generated at Sat May 31 16:30:36 2025 by rpki-client