$ rpki-client -vvf rpki.apnic.net/member_repository/A91FC42A/F3B52E72C87011E98DECA581C4F9AE02/grPUpZa7l4hVoVXKr6iyYlMw3o0.mft File: grPUpZa7l4hVoVXKr6iyYlMw3o0.mft (raw, json) Hash identifier: ZzophBEctuw6Gv4BSG8W7G2kCKhdp6gZzAfFRK1jRls= Subject key identifier: E5:BD:B4:20:C8:95:58:1C:01:C6:66:E0:18:92:33:8D:10:52:31:FF Authority key identifier: 82:B3:D4:A5:96:BB:97:88:55:A1:55:CA:AF:A8:B2:62:53:30:DE:8D Certificate issuer: /CN=A91FC42A/serialNumber=82B3D4A596BB978855A155CAAFA8B2625330DE8D Certificate serial: 0D7C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/grPUpZa7l4hVoVXKr6iyYlMw3o0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FC42A/F3B52E72C87011E98DECA581C4F9AE02/grPUpZa7l4hVoVXKr6iyYlMw3o0.mft Manifest number: 0D75 Signing time: Fri 30 May 2025 18:07:31 +0000 Manifest this update: Fri 30 May 2025 18:07:30 +0000 Manifest next update: Fri 06 Jun 2025 18:07:30 +0000 Files and hashes: 1: grPUpZa7l4hVoVXKr6iyYlMw3o0.crl (hash: fIB41bDsfkO6jsiJZGNCFbQ5ZwNEmpVL4PxZDvk/iRw=) 2: E4653316C87211E9ADADA185C4F9AE02.roa (hash: Kl+qHWqwPNXr+jNBmlZ54bsne4TIDTa38/cYe+iBa+g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FC42A/F3B52E72C87011E98DECA581C4F9AE02/grPUpZa7l4hVoVXKr6iyYlMw3o0.crl rsync://rpki.apnic.net/member_repository/A91FC42A/F3B52E72C87011E98DECA581C4F9AE02/grPUpZa7l4hVoVXKr6iyYlMw3o0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/grPUpZa7l4hVoVXKr6iyYlMw3o0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 18:07:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3452 (0xd7c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FC42A, serialNumber=82B3D4A596BB978855A155CAAFA8B2625330DE8D Validity Not Before: May 30 18:07:30 2025 GMT Not After : Jun 6 18:07:30 2025 GMT Subject: CN=6839f3e2-5512 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:d4:9b:7a:db:3c:0f:8e:4a:83:38:b8:f4:f1: 57:f0:a4:7d:7d:42:df:e6:a8:22:99:87:6a:9d:a6: 81:d9:5e:3b:2c:f4:3a:d4:86:1b:3a:64:96:0b:d1: a5:5e:75:76:c4:f2:c2:95:cf:55:d0:f1:57:fb:53: 38:31:0e:30:bd:81:6e:90:ae:85:be:c2:40:ff:78: 5a:92:b2:6b:26:0a:3f:9c:f3:4e:41:80:1c:89:c4: 3a:d6:10:40:3e:f9:54:c9:58:24:59:c0:0e:ce:8a: 93:ff:20:4a:80:59:c0:e7:32:ca:3f:a6:db:a1:97: 27:99:f7:18:c4:ee:93:42:c8:d8:2e:44:62:61:29: 67:62:ac:71:87:4a:69:ff:46:3c:2c:99:c9:f0:84: ee:51:66:eb:dc:e2:c1:4c:1b:1b:aa:50:d2:06:4b: ee:e6:c1:37:2b:40:82:a0:3c:2a:23:ad:62:76:4b: 8c:3a:ef:8e:be:ed:a0:b0:f2:a2:44:32:dc:4c:9d: 61:69:34:d2:71:1b:20:39:ea:0c:bf:35:f7:c4:e8: d6:57:25:2d:55:7c:f4:3b:a8:d1:34:13:9c:4b:61: 32:3c:e5:a1:fa:e7:8d:6e:89:74:81:b0:88:76:1a: 3e:ed:ba:58:ef:07:5b:f2:7e:c7:99:c9:5d:2b:d0: 5d:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:BD:B4:20:C8:95:58:1C:01:C6:66:E0:18:92:33:8D:10:52:31:FF X509v3 Authority Key Identifier: keyid:82:B3:D4:A5:96:BB:97:88:55:A1:55:CA:AF:A8:B2:62:53:30:DE:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FC42A/F3B52E72C87011E98DECA581C4F9AE02/grPUpZa7l4hVoVXKr6iyYlMw3o0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/grPUpZa7l4hVoVXKr6iyYlMw3o0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC42A/F3B52E72C87011E98DECA581C4F9AE02/grPUpZa7l4hVoVXKr6iyYlMw3o0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c1:d3:d1:28:34:dc:07:b3:83:21:c6:a9:d2:b4:d0:65:cf:4f: 01:3e:d0:9b:1b:46:13:5b:3b:33:b0:13:18:e8:e9:28:d2:67: 08:cf:6b:47:ad:95:bc:48:73:d7:ac:03:51:b2:da:88:57:a2: e7:7d:ea:24:23:9c:f5:33:3a:86:1f:42:25:f5:c7:32:f0:b4: 66:e9:7c:db:5a:33:1c:14:e3:16:05:27:bf:01:dc:f0:94:38: 52:08:d9:67:8c:0b:20:aa:85:a6:2d:1d:a1:1f:69:ed:25:85: 0b:a3:50:31:0b:d1:d0:b0:a6:42:d8:c2:53:c0:79:90:ac:e1: 5c:14:c0:1d:fd:ab:c5:89:3c:48:ac:e6:22:c4:31:2b:e6:e2: af:51:74:bb:f1:ae:ec:89:c2:ee:77:a0:d5:08:3b:33:d5:e3: f7:d5:b2:43:a2:18:10:81:b7:b2:54:65:e4:4d:87:e9:2d:c3: d4:db:d0:2e:28:86:c3:72:82:45:c3:77:fc:53:4c:74:ef:9d: 9a:ff:98:2e:18:8a:de:47:7b:b2:35:bd:8b:3f:38:38:39:5f: db:f3:6f:61:a6:15:20:cd:fe:a7:43:38:5b:76:4d:4b:73:d6: f5:e4:7f:46:1f:ca:18:47:29:bc:90:4d:83:f6:8a:0d:c5:74: a3:16:d9:d3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDXwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkM0MkExMTAvBgNVBAUTKDgyQjNENEE1OTZCQjk3ODg1NUExNTVDQUFGQThCMjYy NTMzMERFOEQwHhcNMjUwNTMwMTgwNzMwWhcNMjUwNjA2MTgwNzMwWjAYMRYwFAYD VQQDEw02ODM5ZjNlMi01NTEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwtSbets8D45Kgzi49PFX8KR9fULf5qgimYdqnaaB2V47LPQ61IYbOmSWC9Gl XnV2xPLClc9V0PFX+1M4MQ4wvYFukK6FvsJA/3hakrJrJgo/nPNOQYAcicQ61hBA PvlUyVgkWcAOzoqT/yBKgFnA5zLKP6bboZcnmfcYxO6TQsjYLkRiYSlnYqxxh0pp /0Y8LJnJ8ITuUWbr3OLBTBsbqlDSBkvu5sE3K0CCoDwqI61idkuMOu+Ovu2gsPKi RDLcTJ1haTTScRsgOeoMvzX3xOjWVyUtVXz0O6jRNBOcS2EyPOWh+ueNbol0gbCI dho+7bpY7wdb8n7HmcldK9BdFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOW9tCDI lVgcAcZm4BiSM40QUjH/MB8GA1UdIwQYMBaAFIKz1KWWu5eIVaFVyq+osmJTMN6N MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQzQyQS9GM0I1MkU3MkM4 NzAxMUU5OERFQ0E1ODFDNEY5QUUwMi9nclBVcFphN2w0aFZvVlhLcjZpeVlsTXcz bzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dyUFVwWmE3bDRoVm9WWEtyNml5WWxNdzNvMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QzQyQS9GM0I1MkU3MkM4NzAxMUU5OERFQ0E1ODFDNEY5QUUwMi9nclBVcFphN2w0 aFZvVlhLcjZpeVlsTXczbzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDB09EoNNwHs4MhxqnStNBlz08BPtCbG0YTWzszsBMY6Oko0mcIz2tH rZW8SHPXrANRstqIV6LnfeokI5z1MzqGH0Il9ccy8LRm6XzbWjMcFOMWBSe/Adzw lDhSCNlnjAsgqoWmLR2hH2ntJYULo1AxC9HQsKZC2MJTwHmQrOFcFMAd/avFiTxI rOYixDEr5uKvUXS78a7sicLud6DVCDsz1eP31bJDohgQgbeyVGXkTYfpLcPU29Au KIbDcoJFw3f8U0x0752a/5guGIreR3uyNb2LPzg4OV/b829hphUgzf6nQzhbdk1L c9b15H9GH8oYRym8kE2D9ooNxXSjFtnT -----END CERTIFICATE-----Generated at Sat May 31 15:18:04 2025 by rpki-client