$ rpki-client -vvf rpki.apnic.net/member_repository/A91FAB62/82E93F2C98CF11EBB7572A3AC4F9AE02/v49Do1Dk9qJgvwPtS9_BqB2itaE.mft File: v49Do1Dk9qJgvwPtS9_BqB2itaE.mft (raw, json) Hash identifier: 1p/SYoqvNCURrSsjhrzHr84SbpKryLZijo3neM9b4nY= Subject key identifier: 07:5D:6E:C4:84:57:05:12:23:EF:56:AD:5C:CE:4B:C6:2F:90:80:C8 Authority key identifier: BF:8F:43:A3:50:E4:F6:A2:60:BF:03:ED:4B:DF:C1:A8:1D:A2:B5:A1 Certificate issuer: /CN=A91FAB62/serialNumber=BF8F43A350E4F6A260BF03ED4BDFC1A81DA2B5A1 Certificate serial: 0675 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v49Do1Dk9qJgvwPtS9_BqB2itaE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FAB62/82E93F2C98CF11EBB7572A3AC4F9AE02/v49Do1Dk9qJgvwPtS9_BqB2itaE.mft Manifest number: 0656 Signing time: Fri 30 May 2025 22:56:46 +0000 Manifest this update: Fri 30 May 2025 22:56:45 +0000 Manifest next update: Fri 06 Jun 2025 22:56:45 +0000 Files and hashes: 1: v49Do1Dk9qJgvwPtS9_BqB2itaE.crl (hash: WNK+RVPExrlbzAUIFXnddxH0XstiPzd6zypJo6j55eQ=) 2: 606DB4B298D111EB84F5A23CC4F9AE02.roa (hash: d5GPHUQ6PbzbALE1pusneP0He2eAPmJTteAnoAOf/Gs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FAB62/82E93F2C98CF11EBB7572A3AC4F9AE02/v49Do1Dk9qJgvwPtS9_BqB2itaE.crl rsync://rpki.apnic.net/member_repository/A91FAB62/82E93F2C98CF11EBB7572A3AC4F9AE02/v49Do1Dk9qJgvwPtS9_BqB2itaE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v49Do1Dk9qJgvwPtS9_BqB2itaE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 22:56:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1653 (0x675) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FAB62, serialNumber=BF8F43A350E4F6A260BF03ED4BDFC1A81DA2B5A1 Validity Not Before: May 30 22:56:45 2025 GMT Not After : Jun 6 22:56:45 2025 GMT Subject: CN=683a37ae-c83b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:3d:55:65:87:68:f7:97:c7:ec:89:1d:98:26: 53:14:2a:67:5f:69:8d:90:69:d9:70:ad:6f:e4:10: 9e:20:b0:76:c6:f8:33:bb:b0:11:76:e6:4a:99:f2: f8:51:5e:38:22:60:98:68:6e:ed:9a:dc:ff:5c:d8: 7c:5c:9d:83:f9:7c:09:35:03:ab:a3:cb:71:08:57: a3:c3:30:fd:a7:01:68:6d:36:ca:69:fd:25:3b:07: e9:22:95:5a:d7:8d:df:a1:c5:fb:dd:dd:d5:57:f5: 69:59:aa:a3:fd:d3:04:ce:04:59:a0:a4:1c:9b:da: 31:23:4a:8d:0e:fb:3f:3c:9c:3d:2f:2f:13:25:b3: 5d:df:85:82:a5:88:2b:0e:95:78:64:0d:8e:80:7d: c4:d7:74:87:52:8d:56:db:16:fd:22:48:ae:23:2a: 2d:05:39:62:fc:47:f4:f0:6a:c1:f9:34:ab:0e:f2: 5c:c4:de:48:d2:54:c7:b2:9f:91:79:87:80:76:82: 9a:df:a3:a7:f2:96:73:79:80:5f:73:36:7d:e0:94: 0c:3a:c5:19:90:b4:b0:4a:2f:9d:66:d9:e5:1b:4a: 64:a2:ab:c2:c0:b8:7a:5c:2b:fc:40:9b:7f:3c:aa: 1f:4e:ab:df:dc:c5:97:78:9c:bb:d0:c7:86:03:6a: 88:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:5D:6E:C4:84:57:05:12:23:EF:56:AD:5C:CE:4B:C6:2F:90:80:C8 X509v3 Authority Key Identifier: keyid:BF:8F:43:A3:50:E4:F6:A2:60:BF:03:ED:4B:DF:C1:A8:1D:A2:B5:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FAB62/82E93F2C98CF11EBB7572A3AC4F9AE02/v49Do1Dk9qJgvwPtS9_BqB2itaE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v49Do1Dk9qJgvwPtS9_BqB2itaE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FAB62/82E93F2C98CF11EBB7572A3AC4F9AE02/v49Do1Dk9qJgvwPtS9_BqB2itaE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:9b:a3:86:cd:fd:85:ef:c7:92:37:03:b8:5b:f2:4a:77:1d: ca:ef:78:ed:2b:50:b8:50:ce:43:b4:3f:98:57:e9:61:44:e2: dd:e5:4f:d0:a7:22:8a:74:03:4b:5d:1c:ba:50:e3:63:f2:76: 37:cb:f5:03:50:bd:ea:91:3b:40:56:6a:67:fb:d4:51:a6:b7: 89:7e:05:ae:bc:82:f7:46:1d:e6:d1:dd:73:f0:fa:41:00:83: 5f:4a:48:67:4e:17:62:ec:47:c1:06:eb:3b:c9:a3:16:08:01: 4b:27:58:bc:5b:de:3a:35:b2:5d:09:f5:81:41:80:f8:e1:86: da:c2:41:8d:f8:b7:a1:55:94:0e:75:b6:09:03:fa:07:f4:7d: 4a:87:be:24:31:74:a6:9e:13:42:82:57:f0:7f:b3:4c:25:67: 97:03:a0:18:9e:44:53:bf:95:30:3a:72:6a:e6:f3:26:eb:d8: 65:ac:d9:ca:4b:f7:9d:aa:92:76:8f:80:c6:49:50:8b:d1:9c: 12:3a:4e:62:a6:6b:f0:45:92:73:a4:52:d9:bd:9e:a9:4b:d9: 23:a9:9b:6b:be:c2:e1:70:2a:ef:a4:f7:8a:79:80:48:61:c0: a5:bd:c5:61:9b:70:fc:67:7a:5e:e2:fd:69:60:d8:24:ee:ae: c2:56:6b:5c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBnUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkFCNjIxMTAvBgNVBAUTKEJGOEY0M0EzNTBFNEY2QTI2MEJGMDNFRDRCREZDMUE4 MURBMkI1QTEwHhcNMjUwNTMwMjI1NjQ1WhcNMjUwNjA2MjI1NjQ1WjAYMRYwFAYD VQQDEw02ODNhMzdhZS1jODNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2T1VZYdo95fH7IkdmCZTFCpnX2mNkGnZcK1v5BCeILB2xvgzu7ARduZKmfL4 UV44ImCYaG7tmtz/XNh8XJ2D+XwJNQOro8txCFejwzD9pwFobTbKaf0lOwfpIpVa 143focX73d3VV/VpWaqj/dMEzgRZoKQcm9oxI0qNDvs/PJw9Ly8TJbNd34WCpYgr DpV4ZA2OgH3E13SHUo1W2xb9IkiuIyotBTli/Ef08GrB+TSrDvJcxN5I0lTHsp+R eYeAdoKa36On8pZzeYBfczZ94JQMOsUZkLSwSi+dZtnlG0pkoqvCwLh6XCv8QJt/ PKofTqvf3MWXeJy70MeGA2qISwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAddbsSE VwUSI+9WrVzOS8YvkIDIMB8GA1UdIwQYMBaAFL+PQ6NQ5PaiYL8D7UvfwagdorWh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQUI2Mi84MkU5M0YyQzk4 Q0YxMUVCQjc1NzJBM0FDNEY5QUUwMi92NDlEbzFEazlxSmd2d1B0UzlfQnFCMml0 YUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Y0OURvMURrOXFKZ3Z3UHRTOV9CcUIyaXRhRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QUI2Mi84MkU5M0YyQzk4Q0YxMUVCQjc1NzJBM0FDNEY5QUUwMi92NDlEbzFEazlx Smd2d1B0UzlfQnFCMml0YUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAom6OGzf2F78eSNwO4W/JKdx3K73jtK1C4UM5DtD+YV+lhROLd5U/Q pyKKdANLXRy6UONj8nY3y/UDUL3qkTtAVmpn+9RRpreJfgWuvIL3Rh3m0d1z8PpB AINfSkhnThdi7EfBBus7yaMWCAFLJ1i8W946NbJdCfWBQYD44YbawkGN+LehVZQO dbYJA/oH9H1Kh74kMXSmnhNCglfwf7NMJWeXA6AYnkRTv5UwOnJq5vMm69hlrNnK S/edqpJ2j4DGSVCL0ZwSOk5ipmvwRZJzpFLZvZ6pS9kjqZtrvsLhcCrvpPeKeYBI YcClvcVhm3D8Z3pe4v1pYNgk7q7CVmtc -----END CERTIFICATE-----Generated at Sat May 31 17:54:50 2025 by rpki-client