$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6ADE/28739D3A41DF11ECA3DC2F85C4F9AE02/cOaM6FoDjZ4wcEODfKbmsaZglu4.mft File: cOaM6FoDjZ4wcEODfKbmsaZglu4.mft (raw, json) Hash identifier: XN+2LY1mFCyHh1NThYhQlC0A/JXO/Zw3qwWhKD1Sx1A= Subject key identifier: 49:18:E6:56:46:3F:F2:D8:EA:14:2B:CD:EE:E9:2E:39:15:A2:48:20 Authority key identifier: 70:E6:8C:E8:5A:03:8D:9E:30:70:43:83:7C:A6:E6:B1:A6:60:96:EE Certificate issuer: /CN=A91F6ADE/serialNumber=70E68CE85A038D9E307043837CA6E6B1A66096EE Certificate serial: 0487 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cOaM6FoDjZ4wcEODfKbmsaZglu4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F6ADE/28739D3A41DF11ECA3DC2F85C4F9AE02/cOaM6FoDjZ4wcEODfKbmsaZglu4.mft Manifest number: 0481 Signing time: Sat 31 May 2025 00:16:11 +0000 Manifest this update: Sat 31 May 2025 00:16:10 +0000 Manifest next update: Sat 07 Jun 2025 00:16:10 +0000 Files and hashes: 1: cOaM6FoDjZ4wcEODfKbmsaZglu4.crl (hash: /jcco1aOTW6QS6yBX38nKItMwr2nQBzya8scAC++j2Q=) 2: FD0DCDCA41E111EC98FA0C0AC4F9AE02.roa (hash: CzraaquDZ9Uo+Rh3T+BRvbMkjKbruCD1g9kPUW6icAU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F6ADE/28739D3A41DF11ECA3DC2F85C4F9AE02/cOaM6FoDjZ4wcEODfKbmsaZglu4.crl rsync://rpki.apnic.net/member_repository/A91F6ADE/28739D3A41DF11ECA3DC2F85C4F9AE02/cOaM6FoDjZ4wcEODfKbmsaZglu4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cOaM6FoDjZ4wcEODfKbmsaZglu4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 00:16:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1159 (0x487) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F6ADE, serialNumber=70E68CE85A038D9E307043837CA6E6B1A66096EE Validity Not Before: May 31 00:16:10 2025 GMT Not After : Jun 7 00:16:10 2025 GMT Subject: CN=683a4a4b-4bd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:67:51:e8:e6:19:62:3c:cd:e7:d4:9e:8f:b4: 2b:ce:78:24:36:63:f2:41:6b:26:f2:66:4b:2c:79: ae:6f:31:5b:4a:2e:8f:ed:d0:7b:90:fb:29:a2:6c: ff:a7:fb:68:a6:5d:7d:d1:4b:65:6f:c2:1d:7b:09: 86:35:ab:55:32:ba:0c:23:3b:1d:f9:f4:83:03:c1: 76:a5:e6:99:dc:64:9d:19:a6:67:73:9f:7e:4d:0a: 79:78:b9:d1:c5:6d:67:ac:27:6d:3e:a3:86:1c:36: 85:53:1c:7b:fd:c2:15:bd:a2:2b:f9:f0:4a:7f:bc: 1c:57:dd:d9:a5:ba:76:fa:f5:14:4a:8d:78:fc:17: 4a:f0:78:48:c2:63:bf:27:9c:c4:93:ab:a5:52:54: 85:19:40:90:18:a6:fb:2c:c8:35:10:36:c6:a2:aa: 97:4a:0f:0b:23:d9:bb:7a:20:0f:40:ec:a1:e4:28: 90:83:e3:d7:13:c8:04:7f:e1:29:12:89:0c:aa:7a: 54:ff:e2:bb:10:40:c0:0b:0c:3d:2d:a0:28:6a:65: a0:27:5a:5e:3d:40:8c:8e:d1:19:06:65:bf:ae:8e: af:8a:aa:20:28:75:d8:55:37:d8:0c:84:0d:bb:21: 90:b6:47:40:20:89:18:ee:57:67:fc:c1:84:47:99: 0d:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:18:E6:56:46:3F:F2:D8:EA:14:2B:CD:EE:E9:2E:39:15:A2:48:20 X509v3 Authority Key Identifier: keyid:70:E6:8C:E8:5A:03:8D:9E:30:70:43:83:7C:A6:E6:B1:A6:60:96:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F6ADE/28739D3A41DF11ECA3DC2F85C4F9AE02/cOaM6FoDjZ4wcEODfKbmsaZglu4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cOaM6FoDjZ4wcEODfKbmsaZglu4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6ADE/28739D3A41DF11ECA3DC2F85C4F9AE02/cOaM6FoDjZ4wcEODfKbmsaZglu4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:d5:6d:36:9e:08:5d:f4:34:d9:68:c7:81:c2:ae:bc:26:56: de:ce:6c:73:b1:94:3a:89:7e:6b:db:77:0b:e0:15:b2:19:3d: 2f:5e:8d:5f:f2:d6:6d:77:f1:63:f8:c1:1c:e9:9c:67:35:98: 0d:bf:40:1f:26:60:32:3f:5f:a7:9a:ea:c9:21:cd:37:42:fb: f2:5e:61:fb:4a:4c:1f:de:4c:d6:f4:16:56:e7:b6:6e:b7:36: 6e:3c:14:6d:99:32:2a:be:ba:c4:fb:ac:7f:22:ae:bb:3a:5e: 0e:d5:f5:1e:aa:77:d6:fe:c4:d5:fb:e1:04:23:15:a6:29:66: 0b:15:c4:b3:b6:af:d3:98:70:e6:1a:d9:7f:ce:db:67:a9:c3: 2d:50:32:cd:8a:f0:a1:84:b4:42:c3:c1:df:72:59:68:66:71: 80:56:3b:88:aa:9a:63:3e:1b:bb:7f:98:f3:ec:e5:f2:72:45: a5:ce:18:c3:9d:3f:42:24:c3:4c:f5:17:35:c7:e6:7d:5d:cb: 60:05:4c:41:18:7d:b6:b1:db:b3:a1:f2:8d:5d:5d:82:b3:9f: 0f:5d:db:b9:ff:79:bd:5c:f6:3e:5e:38:91:40:1e:d4:4a:71: 28:a6:f8:09:4d:37:d2:da:d8:35:8b:94:8d:ef:c6:c7:12:79: 77:38:60:bd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBIcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjZBREUxMTAvBgNVBAUTKDcwRTY4Q0U4NUEwMzhEOUUzMDcwNDM4MzdDQTZFNkIx QTY2MDk2RUUwHhcNMjUwNTMxMDAxNjEwWhcNMjUwNjA3MDAxNjEwWjAYMRYwFAYD VQQDEw02ODNhNGE0Yi00YmQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAymdR6OYZYjzN59Sej7QrzngkNmPyQWsm8mZLLHmubzFbSi6P7dB7kPspomz/ p/topl190Utlb8IdewmGNatVMroMIzsd+fSDA8F2peaZ3GSdGaZnc59+TQp5eLnR xW1nrCdtPqOGHDaFUxx7/cIVvaIr+fBKf7wcV93Zpbp2+vUUSo14/BdK8HhIwmO/ J5zEk6ulUlSFGUCQGKb7LMg1EDbGoqqXSg8LI9m7eiAPQOyh5CiQg+PXE8gEf+Ep EokMqnpU/+K7EEDACww9LaAoamWgJ1pePUCMjtEZBmW/ro6viqogKHXYVTfYDIQN uyGQtkdAIIkY7ldn/MGER5kNGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEkY5lZG P/LY6hQrze7pLjkVokggMB8GA1UdIwQYMBaAFHDmjOhaA42eMHBDg3ym5rGmYJbu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNkFERS8yODczOUQzQTQx REYxMUVDQTNEQzJGODVDNEY5QUUwMi9jT2FNNkZvRGpaNHdjRU9EZktibXNhWmds dTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NPYU02Rm9Ealo0d2NFT0RmS2Jtc2FaZ2x1NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NkFERS8yODczOUQzQTQxREYxMUVDQTNEQzJGODVDNEY5QUUwMi9jT2FNNkZvRGpa NHdjRU9EZktibXNhWmdsdTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC41W02nghd9DTZaMeBwq68JlbezmxzsZQ6iX5r23cL4BWyGT0vXo1f 8tZtd/Fj+MEc6ZxnNZgNv0AfJmAyP1+nmurJIc03QvvyXmH7Skwf3kzW9BZW57Zu tzZuPBRtmTIqvrrE+6x/Iq67Ol4O1fUeqnfW/sTV++EEIxWmKWYLFcSztq/TmHDm Gtl/zttnqcMtUDLNivChhLRCw8HfclloZnGAVjuIqppjPhu7f5jz7OXyckWlzhjD nT9CJMNM9Rc1x+Z9XctgBUxBGH22sduzofKNXV2Cs58PXdu5/3m9XPY+XjiRQB7U SnEopvgJTTfS2tg1i5SN78bHEnl3OGC9 -----END CERTIFICATE-----Generated at Sat May 31 14:36:46 2025 by rpki-client