$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE9B1/5BB9E00AB9DB11EB9CF3B86EC4F9AE02/70llBmvaJCursGhbwuat2fdWM_0.mft File: 70llBmvaJCursGhbwuat2fdWM_0.mft (raw, json) Hash identifier: gpjJKnnx1yTQOzQANZixUynPFquNFZAKaZj20Jt4DBw= Subject key identifier: 8F:FF:35:DA:FE:F0:F3:AA:84:E4:5C:F5:8F:6F:0D:EE:D1:E2:B8:FF Authority key identifier: EF:49:65:06:6B:DA:24:2B:AB:B0:68:5B:C2:E6:AD:D9:F7:56:33:FD Certificate issuer: /CN=A91FE9B1/serialNumber=EF4965066BDA242BABB0685BC2E6ADD9F75633FD Certificate serial: 05DB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/70llBmvaJCursGhbwuat2fdWM_0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FE9B1/5BB9E00AB9DB11EB9CF3B86EC4F9AE02/70llBmvaJCursGhbwuat2fdWM_0.mft Manifest number: 05D6 Signing time: Fri 30 May 2025 23:12:58 +0000 Manifest this update: Fri 30 May 2025 23:12:57 +0000 Manifest next update: Fri 06 Jun 2025 23:12:57 +0000 Files and hashes: 1: 70llBmvaJCursGhbwuat2fdWM_0.crl (hash: 3f4CqlG+nOb+uwU5FmROQtrfz7qbqQUaIqPdxYV78So=) 2: 02157718B9DF11EBA8BE9876C4F9AE02.roa (hash: mRSjwQDsA2Ity8Ke/pKlCSea6N3rjwOrxrJxPkM3a1M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FE9B1/5BB9E00AB9DB11EB9CF3B86EC4F9AE02/70llBmvaJCursGhbwuat2fdWM_0.crl rsync://rpki.apnic.net/member_repository/A91FE9B1/5BB9E00AB9DB11EB9CF3B86EC4F9AE02/70llBmvaJCursGhbwuat2fdWM_0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/70llBmvaJCursGhbwuat2fdWM_0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 23:12:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1499 (0x5db) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FE9B1, serialNumber=EF4965066BDA242BABB0685BC2E6ADD9F75633FD Validity Not Before: May 30 23:12:57 2025 GMT Not After : Jun 6 23:12:57 2025 GMT Subject: CN=683a3b79-97c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:7c:a2:75:ae:df:91:0b:8f:a2:c6:10:a7:34: 21:39:5f:35:57:bc:04:34:a0:51:47:89:28:62:a7: a5:16:e1:4c:3f:e8:0f:22:ac:fd:24:71:d6:05:52: cd:da:89:1c:3f:04:51:5c:fe:b7:95:bf:fa:fd:28: 38:d8:8e:23:2f:49:b5:12:52:0b:2b:4c:5d:a4:39: a8:2d:5b:d7:6a:e2:ea:1d:4b:52:4b:62:12:48:09: cf:a1:9e:9b:e2:56:59:74:ae:d8:70:0e:18:64:c6: 16:dc:f6:1a:b0:e1:48:8d:71:1c:03:37:12:a0:5a: e6:b3:70:81:4a:5f:6b:67:d4:77:5a:68:4e:42:1d: 5b:cf:80:0c:0f:c6:da:db:06:a6:ea:49:71:ea:c7: 4e:c2:8e:db:40:46:74:f9:38:ac:f4:f1:d7:bc:f5: 65:72:6f:e1:69:3e:7d:04:37:1c:7b:c3:82:9f:4c: 47:6d:16:8a:7f:81:57:b0:9f:04:d8:3e:1a:d4:7f: ba:fc:99:64:69:44:6c:72:3d:cc:49:3c:83:9d:12: 8b:fc:d6:1e:f7:08:21:25:81:77:57:5c:c6:b3:5b: ae:d3:87:3f:c2:33:90:19:aa:d2:2c:25:52:a6:3b: 01:56:ba:cd:8e:92:7e:fe:87:c7:8e:e7:6b:98:01: 06:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:FF:35:DA:FE:F0:F3:AA:84:E4:5C:F5:8F:6F:0D:EE:D1:E2:B8:FF X509v3 Authority Key Identifier: keyid:EF:49:65:06:6B:DA:24:2B:AB:B0:68:5B:C2:E6:AD:D9:F7:56:33:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FE9B1/5BB9E00AB9DB11EB9CF3B86EC4F9AE02/70llBmvaJCursGhbwuat2fdWM_0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/70llBmvaJCursGhbwuat2fdWM_0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE9B1/5BB9E00AB9DB11EB9CF3B86EC4F9AE02/70llBmvaJCursGhbwuat2fdWM_0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:cd:11:9a:2d:d5:1b:13:ac:6c:35:16:63:f0:37:a3:c4:91: 95:95:29:f2:5f:9b:40:23:7e:b6:48:22:36:3e:4d:cf:7a:d1: 71:85:95:12:4c:60:22:52:f7:29:35:a2:7e:3d:df:26:d3:01: 02:13:92:23:e4:64:9a:55:b2:fa:ab:03:34:7c:0c:5f:ad:cb: 57:be:4a:89:f5:e9:b2:b8:f9:2a:9f:1c:a0:ca:b5:8a:c5:cd: 0e:0d:d4:f2:f4:6f:df:47:31:95:66:be:68:80:0a:f4:ef:ea: 60:f2:ff:5a:29:55:11:34:da:5a:7c:8e:d1:6b:09:41:94:7c: 62:8a:2a:96:d5:74:38:7c:0b:22:0b:5c:dd:0c:5b:06:ab:f8: 99:8a:db:13:7b:8f:07:f7:c8:46:32:32:e5:78:c2:89:aa:2e: 06:fa:9d:73:18:60:5d:48:1b:45:43:68:90:0e:f3:d2:c3:00: 36:13:0d:4d:12:ae:f1:ed:ea:1d:39:88:dc:48:1e:d9:07:a1: 11:cb:fc:a8:54:d9:6d:80:1d:18:1f:bf:2b:47:54:96:c5:52: 44:51:61:8e:b5:2f:58:69:14:c7:22:29:bd:a5:95:e5:9d:ff: 8f:c5:ad:2d:32:75:49:0a:90:1c:1f:0d:9f:8b:46:cd:06:c8: f3:a4:b8:2c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBdswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkU5QjExMTAvBgNVBAUTKEVGNDk2NTA2NkJEQTI0MkJBQkIwNjg1QkMyRTZBREQ5 Rjc1NjMzRkQwHhcNMjUwNTMwMjMxMjU3WhcNMjUwNjA2MjMxMjU3WjAYMRYwFAYD VQQDEw02ODNhM2I3OS05N2M4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsHyida7fkQuPosYQpzQhOV81V7wENKBRR4koYqelFuFMP+gPIqz9JHHWBVLN 2okcPwRRXP63lb/6/Sg42I4jL0m1ElILK0xdpDmoLVvXauLqHUtSS2ISSAnPoZ6b 4lZZdK7YcA4YZMYW3PYasOFIjXEcAzcSoFrms3CBSl9rZ9R3WmhOQh1bz4AMD8ba 2wam6klx6sdOwo7bQEZ0+Tis9PHXvPVlcm/haT59BDcce8OCn0xHbRaKf4FXsJ8E 2D4a1H+6/JlkaURscj3MSTyDnRKL/NYe9wghJYF3V1zGs1uu04c/wjOQGarSLCVS pjsBVrrNjpJ+/ofHjudrmAEGcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI//Ndr+ 8POqhORc9Y9vDe7R4rj/MB8GA1UdIwQYMBaAFO9JZQZr2iQrq7BoW8Lmrdn3VjP9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRTlCMS81QkI5RTAwQUI5 REIxMUVCOUNGM0I4NkVDNEY5QUUwMi83MGxsQm12YUpDdXJzR2hid3VhdDJmZFdN XzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzcwbGxCbXZhSkN1cnNHaGJ3dWF0MmZkV01fMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RTlCMS81QkI5RTAwQUI5REIxMUVCOUNGM0I4NkVDNEY5QUUwMi83MGxsQm12YUpD dXJzR2hid3VhdDJmZFdNXzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBnzRGaLdUbE6xsNRZj8DejxJGVlSnyX5tAI362SCI2Pk3PetFxhZUS TGAiUvcpNaJ+Pd8m0wECE5Ij5GSaVbL6qwM0fAxfrctXvkqJ9emyuPkqnxygyrWK xc0ODdTy9G/fRzGVZr5ogAr07+pg8v9aKVURNNpafI7RawlBlHxiiiqW1XQ4fAsi C1zdDFsGq/iZitsTe48H98hGMjLleMKJqi4G+p1zGGBdSBtFQ2iQDvPSwwA2Ew1N Eq7x7eodOYjcSB7ZB6ERy/yoVNltgB0YH78rR1SWxVJEUWGOtS9YaRTHIim9pZXl nf+Pxa0tMnVJCpAcHw2fi0bNBsjzpLgs -----END CERTIFICATE-----Generated at Sat May 31 16:37:59 2025 by rpki-client