$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6B3D/0E978E64596211EBA40B5C85C4F9AE02/exUBXdufhEEqZ9s-Jv7LTdy72YA.mft File: exUBXdufhEEqZ9s-Jv7LTdy72YA.mft (raw, json) Hash identifier: KPES3qB4rK54LxPFpO7Je5qdaMTO7SMquuuIxmgI5LM= Subject key identifier: A2:79:C7:FB:3D:E6:BE:DC:F7:81:8A:17:41:B8:0E:01:7F:D5:97:C4 Authority key identifier: 7B:15:01:5D:DB:9F:84:41:2A:67:DB:3E:26:FE:CB:4D:DC:BB:D9:80 Certificate issuer: /CN=A91F6B3D/serialNumber=7B15015DDB9F84412A67DB3E26FECB4DDCBBD980 Certificate serial: 06DD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exUBXdufhEEqZ9s-Jv7LTdy72YA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F6B3D/0E978E64596211EBA40B5C85C4F9AE02/exUBXdufhEEqZ9s-Jv7LTdy72YA.mft Manifest number: 06CD Signing time: Fri 30 May 2025 22:17:21 +0000 Manifest this update: Fri 30 May 2025 22:17:21 +0000 Manifest next update: Fri 06 Jun 2025 22:17:21 +0000 Files and hashes: 1: exUBXdufhEEqZ9s-Jv7LTdy72YA.crl (hash: iYgXZnJ9+GgYAj7IQB3mJxlXKiGkdbqcIucdNF6KFpQ=) 2: 0F83E674B45611EC8D43DA35C4F9AE02.roa (hash: 44B6YCXFFFx+bCdGIykmPbtlTvIuZVPUkL4VeJYbwxg=) 3: 76F636C6C13111EC8B2DD839C4F9AE02.roa (hash: ji78Z3bYDne8h3ntfFAr2jh173VOiqckcY3Gt5rpLOI=) 4: 4FB0329A827311EBAB565A86C4F9AE02.roa (hash: gFcpYNnFwW2L/eMps8n5pMtg1/xMFxUVZSJLx7s2gUc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F6B3D/0E978E64596211EBA40B5C85C4F9AE02/exUBXdufhEEqZ9s-Jv7LTdy72YA.crl rsync://rpki.apnic.net/member_repository/A91F6B3D/0E978E64596211EBA40B5C85C4F9AE02/exUBXdufhEEqZ9s-Jv7LTdy72YA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exUBXdufhEEqZ9s-Jv7LTdy72YA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 22:17:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1757 (0x6dd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F6B3D, serialNumber=7B15015DDB9F84412A67DB3E26FECB4DDCBBD980 Validity Not Before: May 30 22:17:21 2025 GMT Not After : Jun 6 22:17:21 2025 GMT Subject: CN=683a2e71-89a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:d8:a8:62:57:06:a7:a6:54:b7:65:28:9a:3a: ae:6f:27:15:75:a8:e2:9b:55:79:67:43:b9:79:08: d4:d1:ea:3f:61:d3:9c:d2:03:14:31:20:e6:9a:85: db:49:6b:3a:ed:2c:62:24:99:3c:53:02:eb:9e:e4: b3:b9:a6:48:fd:4d:d4:cd:ad:64:4a:61:5f:6f:1d: 6e:27:e8:8f:06:be:69:8f:fa:de:01:b5:10:ca:78: 7b:b1:56:a0:b1:1d:1a:95:c1:43:a5:0f:56:a0:5b: ba:8b:c9:1c:37:8e:ca:69:58:ae:d3:bd:fa:61:f3: e2:a3:81:95:26:ca:ad:10:bb:dc:cc:07:d5:3f:c5: d5:41:8f:d0:83:95:03:9b:e3:6e:61:7b:ad:13:c0: b0:50:9a:59:75:90:4a:1d:f4:fe:a7:21:f8:96:fd: ed:9d:2a:33:67:9a:c8:f8:0c:06:83:9c:1f:6e:55: c4:af:8a:05:18:01:cd:7e:bc:72:22:15:62:d3:2c: 38:0e:b3:08:65:45:fb:cb:1f:33:e2:0b:af:3c:92: af:c3:95:63:f6:3e:9a:85:5c:d4:d3:21:9d:0d:57: e4:79:2d:e0:64:ba:76:95:90:c4:da:22:f7:6b:e8: 47:83:a5:ee:0a:ed:5a:7c:b9:be:94:86:5f:49:27: 94:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:79:C7:FB:3D:E6:BE:DC:F7:81:8A:17:41:B8:0E:01:7F:D5:97:C4 X509v3 Authority Key Identifier: keyid:7B:15:01:5D:DB:9F:84:41:2A:67:DB:3E:26:FE:CB:4D:DC:BB:D9:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F6B3D/0E978E64596211EBA40B5C85C4F9AE02/exUBXdufhEEqZ9s-Jv7LTdy72YA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exUBXdufhEEqZ9s-Jv7LTdy72YA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6B3D/0E978E64596211EBA40B5C85C4F9AE02/exUBXdufhEEqZ9s-Jv7LTdy72YA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:1e:57:54:0a:8e:3a:a0:f7:79:4a:2e:dd:6d:74:92:f1:8c: 8a:96:d4:2f:c3:c5:4e:89:d3:93:42:3e:32:db:22:86:1c:16: 32:91:73:28:6e:d2:47:69:89:85:74:f7:0c:59:4e:94:b9:a4: ec:65:87:7f:80:c6:53:6e:a4:a3:e0:81:9a:d2:14:ec:cd:21: f7:d3:60:8f:dd:0f:e1:b1:af:d9:c1:2c:7d:15:d6:88:f3:56: 0a:f5:83:1d:a9:e1:f6:75:76:bf:7d:f4:4b:5d:ac:24:4e:97: f0:5d:d7:56:88:71:a1:6f:69:15:44:55:cc:fa:a4:4a:2f:b5: 01:b8:2f:fe:87:68:22:45:12:63:4a:c2:0c:d8:ce:63:9a:b8: 6d:75:79:cf:89:5f:ca:f9:70:18:a1:9f:3e:b6:bf:84:7c:4f: 63:32:38:13:4b:ae:f1:98:6a:19:4f:b8:86:3f:59:8d:70:74: 34:da:ae:59:ed:8e:47:49:f9:a9:86:79:41:83:e4:0e:72:0d: e1:a9:d0:a7:07:3e:62:65:a0:8d:c9:42:b1:ca:92:bc:b8:a0: 9e:a8:70:c9:02:56:e0:6f:28:7b:06:b3:c0:7b:47:43:05:10: 9f:7e:24:f4:33:52:0d:e3:c5:83:9c:cb:85:be:96:8f:44:af: 68:66:a5:bd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBt0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjZCM0QxMTAvBgNVBAUTKDdCMTUwMTVEREI5Rjg0NDEyQTY3REIzRTI2RkVDQjRE RENCQkQ5ODAwHhcNMjUwNTMwMjIxNzIxWhcNMjUwNjA2MjIxNzIxWjAYMRYwFAYD VQQDEw02ODNhMmU3MS04OWExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtdioYlcGp6ZUt2UomjqubycVdajim1V5Z0O5eQjU0eo/YdOc0gMUMSDmmoXb SWs67SxiJJk8UwLrnuSzuaZI/U3Uza1kSmFfbx1uJ+iPBr5pj/reAbUQynh7sVag sR0alcFDpQ9WoFu6i8kcN47KaViu0736YfPio4GVJsqtELvczAfVP8XVQY/Qg5UD m+NuYXutE8CwUJpZdZBKHfT+pyH4lv3tnSozZ5rI+AwGg5wfblXEr4oFGAHNfrxy IhVi0yw4DrMIZUX7yx8z4guvPJKvw5Vj9j6ahVzU0yGdDVfkeS3gZLp2lZDE2iL3 a+hHg6XuCu1afLm+lIZfSSeU5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKJ5x/s9 5r7c94GKF0G4DgF/1ZfEMB8GA1UdIwQYMBaAFHsVAV3bn4RBKmfbPib+y03cu9mA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNkIzRC8wRTk3OEU2NDU5 NjIxMUVCQTQwQjVDODVDNEY5QUUwMi9leFVCWGR1ZmhFRXFaOXMtSnY3TFRkeTcy WUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2V4VUJYZHVmaEVFcVo5cy1KdjdMVGR5NzJZQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NkIzRC8wRTk3OEU2NDU5NjIxMUVCQTQwQjVDODVDNEY5QUUwMi9leFVCWGR1ZmhF RXFaOXMtSnY3TFRkeTcyWUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZHldUCo46oPd5Si7dbXSS8YyKltQvw8VOidOTQj4y2yKGHBYykXMo btJHaYmFdPcMWU6UuaTsZYd/gMZTbqSj4IGa0hTszSH302CP3Q/hsa/ZwSx9FdaI 81YK9YMdqeH2dXa/ffRLXawkTpfwXddWiHGhb2kVRFXM+qRKL7UBuC/+h2giRRJj SsIM2M5jmrhtdXnPiV/K+XAYoZ8+tr+EfE9jMjgTS67xmGoZT7iGP1mNcHQ02q5Z 7Y5HSfmphnlBg+QOcg3hqdCnBz5iZaCNyUKxypK8uKCeqHDJAlbgbyh7BrPAe0dD BRCffiT0M1IN48WDnMuFvpaPRK9oZqW9 -----END CERTIFICATE-----Generated at Sat May 31 16:49:03 2025 by rpki-client