$ rpki-client -vvf rpki.apnic.net/member_repository/A91F277D/78A1D08E8D6B11EB9840E05FC4F9AE02/u8EDVhr9epMDbRxy3UwKfCpOKc4.mft File: u8EDVhr9epMDbRxy3UwKfCpOKc4.mft (raw, json) Hash identifier: R9upcruq2ygfX2WouDMuQb6KeOS6kCysu6+Y891ejfQ= Subject key identifier: 07:0D:8F:7E:12:D7:29:B8:90:E7:13:59:21:2C:D8:07:50:39:14:04 Authority key identifier: BB:C1:03:56:1A:FD:7A:93:03:6D:1C:72:DD:4C:0A:7C:2A:4E:29:CE Certificate issuer: /CN=A91F277D/serialNumber=BBC103561AFD7A93036D1C72DD4C0A7C2A4E29CE Certificate serial: 0662 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u8EDVhr9epMDbRxy3UwKfCpOKc4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F277D/78A1D08E8D6B11EB9840E05FC4F9AE02/u8EDVhr9epMDbRxy3UwKfCpOKc4.mft Manifest number: 064C Signing time: Sat 31 May 2025 22:18:55 +0000 Manifest this update: Sat 31 May 2025 22:18:54 +0000 Manifest next update: Sat 07 Jun 2025 22:18:54 +0000 Files and hashes: 1: u8EDVhr9epMDbRxy3UwKfCpOKc4.crl (hash: QNi6xvISi+7SRmTZ+6BU5/UYIlb143qZS+OECt2FMZw=) 2: CEF8E22E711711EDB49CE11AC4F9AE02.roa (hash: Ps44UQPvNI+l6dnKBZUyTUvHvKmwO+RBPeKzPiMeBfw=) 3: 70A77C348D6C11EBAFD23A2EC4F9AE02.roa (hash: gsfWGtMmL+dpa9EjzvC9HprHiy8q0yGq8k/h26d5iH8=) 4: 0BABC0DCB15D11EB8937582CC4F9AE02.roa (hash: myGu3py2MJoX+9pcsdAEfeXFlVuZbTSedA0MlFyQwmI=) 5: 715924988D6C11EBAFD23A2EC4F9AE02.roa (hash: IRx8YlQZD3iZNO8ZkV5fm0YkjEB3fazq27IMfHjcxDQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F277D/78A1D08E8D6B11EB9840E05FC4F9AE02/u8EDVhr9epMDbRxy3UwKfCpOKc4.crl rsync://rpki.apnic.net/member_repository/A91F277D/78A1D08E8D6B11EB9840E05FC4F9AE02/u8EDVhr9epMDbRxy3UwKfCpOKc4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u8EDVhr9epMDbRxy3UwKfCpOKc4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 22:18:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1634 (0x662) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F277D, serialNumber=BBC103561AFD7A93036D1C72DD4C0A7C2A4E29CE Validity Not Before: May 31 22:18:54 2025 GMT Not After : Jun 7 22:18:54 2025 GMT Subject: CN=683b804e-7a2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:39:c6:9a:ce:32:90:66:98:63:1c:57:0e:d9: d9:87:03:56:ba:66:18:85:69:73:2b:bc:ad:68:da: f9:cd:86:48:f1:c3:5e:81:89:c0:be:76:01:6d:0e: fc:6d:49:49:02:df:9d:27:0b:9e:b7:55:4a:f7:e2: 4a:02:07:d4:b8:73:d9:e2:a2:2f:c2:6f:7e:38:84: 5f:a5:67:6b:42:47:3a:35:19:18:4e:89:cc:4b:e6: b9:e6:04:cc:e6:8e:7f:86:90:45:04:09:9f:d0:d3: bb:e7:f8:65:5a:b9:9c:f8:31:40:68:cb:f5:94:c3: 5f:9e:dc:25:84:11:3c:ea:c2:38:92:50:02:bb:83: 8d:b1:0a:ed:b9:49:17:66:84:fa:97:e0:8f:42:e4: 9d:b5:51:d4:d4:60:e7:6a:f9:e7:a9:f9:d9:b1:ff: 5c:28:80:75:7b:d1:e2:d1:19:b6:3e:60:df:21:2b: ba:7a:54:70:61:4b:d0:d6:6d:7c:ae:6a:73:e3:bd: 16:0f:42:f8:44:fd:61:2d:f1:97:4b:31:54:78:9f: 43:80:35:1c:a7:37:c8:22:65:15:e8:fd:54:23:31: ee:6c:06:a0:8f:93:9a:bc:03:db:0a:d7:5b:70:e5: 62:89:01:b0:dc:36:4f:75:e7:c9:d7:5a:ee:01:7e: f4:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:0D:8F:7E:12:D7:29:B8:90:E7:13:59:21:2C:D8:07:50:39:14:04 X509v3 Authority Key Identifier: keyid:BB:C1:03:56:1A:FD:7A:93:03:6D:1C:72:DD:4C:0A:7C:2A:4E:29:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F277D/78A1D08E8D6B11EB9840E05FC4F9AE02/u8EDVhr9epMDbRxy3UwKfCpOKc4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u8EDVhr9epMDbRxy3UwKfCpOKc4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F277D/78A1D08E8D6B11EB9840E05FC4F9AE02/u8EDVhr9epMDbRxy3UwKfCpOKc4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:a6:cb:66:76:06:d8:27:34:13:d5:02:ef:8b:1f:7d:9d:ca: 0c:d2:23:cc:48:09:ec:19:8c:b6:ff:c4:10:f6:43:3f:b1:53: 25:7b:a0:78:83:e1:52:c5:ee:95:43:91:61:21:66:59:2c:2f: 2f:ef:b7:72:6c:3d:af:41:03:8a:97:6e:6b:6a:5a:1e:d6:b5: 3c:3c:da:b5:01:93:d5:35:69:95:e0:e7:dd:04:7a:eb:25:35: 66:2d:5f:b2:dc:b2:e8:a1:10:fd:b1:91:c2:75:79:90:0d:62: 34:ed:4e:a4:e9:ef:13:50:49:e1:74:fa:26:1a:ea:05:b3:f1: 29:ca:80:f0:1c:43:9a:99:c6:29:3d:c4:ab:17:3c:54:ba:1e: 0a:f4:78:1f:eb:c7:7e:86:64:08:db:8e:df:33:bc:cf:ee:6d: c9:ea:c0:28:13:6e:1e:ff:c2:35:ef:ba:83:d1:3f:ef:01:6e: d4:b3:db:1e:77:4d:fd:36:93:bc:88:0f:2d:bb:fb:98:0a:38: 6d:24:c1:e1:96:83:b8:dc:84:eb:d6:fd:04:cf:8a:9d:10:3d: 0c:28:8a:d0:ef:f0:99:5b:80:76:d5:0f:b2:9d:bc:c8:aa:3a: ea:44:7e:17:d9:ef:06:f0:e6:83:0c:86:72:c4:4f:04:a5:b0: f2:64:d1:3c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBmIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjI3N0QxMTAvBgNVBAUTKEJCQzEwMzU2MUFGRDdBOTMwMzZEMUM3MkRENEMwQTdD MkE0RTI5Q0UwHhcNMjUwNTMxMjIxODU0WhcNMjUwNjA3MjIxODU0WjAYMRYwFAYD VQQDEw02ODNiODA0ZS03YTJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApjnGms4ykGaYYxxXDtnZhwNWumYYhWlzK7ytaNr5zYZI8cNegYnAvnYBbQ78 bUlJAt+dJwuet1VK9+JKAgfUuHPZ4qIvwm9+OIRfpWdrQkc6NRkYTonMS+a55gTM 5o5/hpBFBAmf0NO75/hlWrmc+DFAaMv1lMNfntwlhBE86sI4klACu4ONsQrtuUkX ZoT6l+CPQuSdtVHU1GDnavnnqfnZsf9cKIB1e9Hi0Rm2PmDfISu6elRwYUvQ1m18 rmpz470WD0L4RP1hLfGXSzFUeJ9DgDUcpzfIImUV6P1UIzHubAagj5OavAPbCtdb cOViiQGw3DZPdefJ11ruAX70GQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAcNj34S 1ym4kOcTWSEs2AdQORQEMB8GA1UdIwQYMBaAFLvBA1Ya/XqTA20cct1MCnwqTinO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMjc3RC83OEExRDA4RThE NkIxMUVCOTg0MEUwNUZDNEY5QUUwMi91OEVEVmhyOWVwTURiUnh5M1V3S2ZDcE9L YzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3U4RURWaHI5ZXBNRGJSeHkzVXdLZkNwT0tjNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG Mjc3RC83OEExRDA4RThENkIxMUVCOTg0MEUwNUZDNEY5QUUwMi91OEVEVmhyOWVw TURiUnh5M1V3S2ZDcE9LYzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCCpstmdgbYJzQT1QLvix99ncoM0iPMSAnsGYy2/8QQ9kM/sVMle6B4 g+FSxe6VQ5FhIWZZLC8v77dybD2vQQOKl25raloe1rU8PNq1AZPVNWmV4OfdBHrr JTVmLV+y3LLooRD9sZHCdXmQDWI07U6k6e8TUEnhdPomGuoFs/EpyoDwHEOamcYp PcSrFzxUuh4K9Hgf68d+hmQI247fM7zP7m3J6sAoE24e/8I177qD0T/vAW7Us9se d039NpO8iA8tu/uYCjhtJMHhloO43ITr1v0Ez4qdED0MKIrQ7/CZW4B21Q+ynbzI qjrqRH4X2e8G8OaDDIZyxE8EpbDyZNE8 -----END CERTIFICATE-----Generated at Mon Jun 2 21:53:55 2025 by rpki-client