$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB179/2CCCAB9865D411EBA5B3DF82C4F9AE02/Dj0eI6dk5iI7d3wXHk_eEjxlfv4.mft File: Dj0eI6dk5iI7d3wXHk_eEjxlfv4.mft (raw, json) Hash identifier: ijRFW7y9M1iNRqyw8ryN6+JnfCwtBuLKCeXtKsh/Z0g= Subject key identifier: 8C:2B:3F:F0:F2:FC:2E:D9:4A:63:F3:F1:DB:C1:55:12:E8:48:A5:17 Authority key identifier: 0E:3D:1E:23:A7:64:E6:22:3B:77:7C:17:1E:4F:DE:12:3C:65:7E:FE Certificate issuer: /CN=A91FB179/serialNumber=0E3D1E23A764E6223B777C171E4FDE123C657EFE Certificate serial: 06AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Dj0eI6dk5iI7d3wXHk_eEjxlfv4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FB179/2CCCAB9865D411EBA5B3DF82C4F9AE02/Dj0eI6dk5iI7d3wXHk_eEjxlfv4.mft Manifest number: 06A8 Signing time: Fri 30 May 2025 22:23:27 +0000 Manifest this update: Fri 30 May 2025 22:23:26 +0000 Manifest next update: Fri 06 Jun 2025 22:23:26 +0000 Files and hashes: 1: Dj0eI6dk5iI7d3wXHk_eEjxlfv4.crl (hash: UWLE/Ep5toa1wCd5j5oOVplP0zdbxEueseSdkzJVe8s=) 2: 6C4046C665EE11EB9ADB5F40C4F9AE02.roa (hash: 2Mo86XnCI5KeTWF6zAmVrthl3kfcd93BXOE5Y90BE8s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FB179/2CCCAB9865D411EBA5B3DF82C4F9AE02/Dj0eI6dk5iI7d3wXHk_eEjxlfv4.crl rsync://rpki.apnic.net/member_repository/A91FB179/2CCCAB9865D411EBA5B3DF82C4F9AE02/Dj0eI6dk5iI7d3wXHk_eEjxlfv4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Dj0eI6dk5iI7d3wXHk_eEjxlfv4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 22:23:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1709 (0x6ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FB179, serialNumber=0E3D1E23A764E6223B777C171E4FDE123C657EFE Validity Not Before: May 30 22:23:26 2025 GMT Not After : Jun 6 22:23:26 2025 GMT Subject: CN=683a2fde-5dbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:a0:8b:1a:fb:7f:32:c7:e8:10:9d:63:03:14: f8:17:90:06:db:8b:09:b8:b2:f0:18:7b:f2:9f:c3: 26:d7:a2:4d:49:b7:bb:09:05:c7:7c:3c:09:bf:e8: 27:ef:42:e1:e8:50:1d:13:09:93:23:22:06:5a:0d: 5c:7d:b8:b0:07:34:8f:33:fe:b9:45:a6:58:40:9a: 1f:e0:07:7d:b4:f5:2d:21:3c:c6:bc:56:1c:33:a8: 3d:aa:ac:c1:fd:28:25:87:62:77:0e:8c:1f:23:74: 4a:37:85:aa:69:cb:5b:56:e8:62:13:87:97:10:57: 88:4b:15:a6:b2:3d:d4:54:d9:af:d2:85:74:a5:eb: 1a:6d:53:3a:fb:40:13:5d:4b:0c:e8:d6:85:8e:9e: 3e:d6:78:6b:80:1f:e0:7f:95:83:3e:68:de:68:00: 7e:d2:96:e3:ab:14:92:53:56:40:7e:23:e4:3d:7f: f3:e8:f2:d5:66:37:bd:b9:5b:b3:bc:69:20:b2:f6: 20:dd:e4:d2:24:cb:fe:10:3a:06:81:b6:05:63:46: 1a:c3:44:0e:7d:b1:1f:f8:25:24:9a:41:32:2b:94: 61:b6:2f:fc:bd:82:3d:50:63:c1:0c:42:b3:89:e5: 1e:f2:b2:10:e6:46:e8:0d:8d:f1:56:4b:ec:da:48: e5:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:2B:3F:F0:F2:FC:2E:D9:4A:63:F3:F1:DB:C1:55:12:E8:48:A5:17 X509v3 Authority Key Identifier: keyid:0E:3D:1E:23:A7:64:E6:22:3B:77:7C:17:1E:4F:DE:12:3C:65:7E:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FB179/2CCCAB9865D411EBA5B3DF82C4F9AE02/Dj0eI6dk5iI7d3wXHk_eEjxlfv4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Dj0eI6dk5iI7d3wXHk_eEjxlfv4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB179/2CCCAB9865D411EBA5B3DF82C4F9AE02/Dj0eI6dk5iI7d3wXHk_eEjxlfv4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:4c:ca:f3:f1:56:0f:aa:1c:44:ce:d7:85:68:83:7f:58:45: 1a:84:62:e5:e3:4f:35:6e:41:d2:03:0e:fa:af:1d:06:b4:62: 7f:4e:62:f0:7b:6d:a4:66:5e:a7:5d:30:8f:35:14:57:2d:4c: 6c:0e:20:76:bc:c2:7a:7d:05:ae:13:ab:bb:d3:67:bb:bb:d2: 9d:f3:f2:26:35:82:63:94:fd:5c:e7:e7:44:4d:9e:c8:f0:2c: 72:cc:8d:b1:79:fa:22:3c:c9:90:b1:14:07:c0:fe:2c:97:a0: 47:11:b0:f2:80:77:6e:8a:0a:4a:a0:fd:9a:ee:0c:76:57:84: 2c:d9:51:a1:31:79:47:61:03:60:f6:ac:1a:43:1a:1f:95:3f: 41:99:aa:be:36:98:02:f1:3d:d9:fc:4c:26:71:16:01:9f:f3: cd:6c:86:78:3e:6b:30:51:39:a7:35:24:50:a6:c4:3f:2c:e5: 2e:11:46:cd:3c:99:25:e6:2f:43:c2:1d:30:9c:66:53:9f:b5: 30:94:0f:1d:26:53:53:4d:8a:37:93:3e:bf:12:3c:e6:c4:c2: 6a:f2:81:77:10:26:32:0d:a0:65:b2:40:ed:2e:16:1a:5f:3a: 67:0b:aa:c6:9d:60:26:be:80:4a:62:9a:6b:f9:1c:1f:53:20: e4:74:ab:72 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBq0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkIxNzkxMTAvBgNVBAUTKDBFM0QxRTIzQTc2NEU2MjIzQjc3N0MxNzFFNEZERTEy M0M2NTdFRkUwHhcNMjUwNTMwMjIyMzI2WhcNMjUwNjA2MjIyMzI2WjAYMRYwFAYD VQQDEw02ODNhMmZkZS01ZGJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2aCLGvt/MsfoEJ1jAxT4F5AG24sJuLLwGHvyn8Mm16JNSbe7CQXHfDwJv+gn 70Lh6FAdEwmTIyIGWg1cfbiwBzSPM/65RaZYQJof4Ad9tPUtITzGvFYcM6g9qqzB /Sglh2J3DowfI3RKN4WqactbVuhiE4eXEFeISxWmsj3UVNmv0oV0pesabVM6+0AT XUsM6NaFjp4+1nhrgB/gf5WDPmjeaAB+0pbjqxSSU1ZAfiPkPX/z6PLVZje9uVuz vGkgsvYg3eTSJMv+EDoGgbYFY0Yaw0QOfbEf+CUkmkEyK5Rhti/8vYI9UGPBDEKz ieUe8rIQ5kboDY3xVkvs2kjlFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIwrP/Dy /C7ZSmPz8dvBVRLoSKUXMB8GA1UdIwQYMBaAFA49HiOnZOYiO3d8Fx5P3hI8ZX7+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQjE3OS8yQ0NDQUI5ODY1 RDQxMUVCQTVCM0RGODJDNEY5QUUwMi9EajBlSTZkazVpSTdkM3dYSGtfZUVqeGxm djQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RqMGVJNmRrNWlJN2Qzd1hIa19lRWp4bGZ2NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QjE3OS8yQ0NDQUI5ODY1RDQxMUVCQTVCM0RGODJDNEY5QUUwMi9EajBlSTZkazVp STdkM3dYSGtfZUVqeGxmdjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAYTMrz8VYPqhxEzteFaIN/WEUahGLl4081bkHSAw76rx0GtGJ/TmLw e22kZl6nXTCPNRRXLUxsDiB2vMJ6fQWuE6u702e7u9Kd8/ImNYJjlP1c5+dETZ7I 8CxyzI2xefoiPMmQsRQHwP4sl6BHEbDygHduigpKoP2a7gx2V4Qs2VGhMXlHYQNg 9qwaQxoflT9Bmaq+NpgC8T3Z/EwmcRYBn/PNbIZ4PmswUTmnNSRQpsQ/LOUuEUbN PJkl5i9Dwh0wnGZTn7UwlA8dJlNTTYo3kz6/EjzmxMJq8oF3ECYyDaBlskDtLhYa XzpnC6rGnWAmvoBKYppr+RwfUyDkdKty -----END CERTIFICATE-----Generated at Sat May 31 16:43:48 2025 by rpki-client