$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF84F/DD487A5C981411EBA4B32150C4F9AE02/cUHDGbtEv7zeM4Kzu2kSZfldMJ8.mft File: cUHDGbtEv7zeM4Kzu2kSZfldMJ8.mft (raw, json) Hash identifier: 4HPsiA1mjIXOmr4/jjDradKjL6FlxcbFDwMhSXuf/lI= Subject key identifier: F9:11:6B:A4:D0:76:20:DD:65:C0:1D:70:D3:F8:7E:3E:A8:B4:34:C4 Authority key identifier: 71:41:C3:19:BB:44:BF:BC:DE:33:82:B3:BB:69:12:65:F9:5D:30:9F Certificate issuer: /CN=A91FF84F/serialNumber=7141C319BB44BFBCDE3382B3BB691265F95D309F Certificate serial: 0630 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cUHDGbtEv7zeM4Kzu2kSZfldMJ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FF84F/DD487A5C981411EBA4B32150C4F9AE02/cUHDGbtEv7zeM4Kzu2kSZfldMJ8.mft Manifest number: 062A Signing time: Fri 30 May 2025 22:56:18 +0000 Manifest this update: Fri 30 May 2025 22:56:17 +0000 Manifest next update: Fri 06 Jun 2025 22:56:17 +0000 Files and hashes: 1: cUHDGbtEv7zeM4Kzu2kSZfldMJ8.crl (hash: 8+8Sa2JzCjXw75RYxipQO4RR1W9FO/Ny1Yj9om2wmvE=) 2: 2F320256981611EB904AF150C4F9AE02.roa (hash: zydBQ6+XzPsP0D5XfuooCO12kFS+89HKhQ6kY0lGz0g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FF84F/DD487A5C981411EBA4B32150C4F9AE02/cUHDGbtEv7zeM4Kzu2kSZfldMJ8.crl rsync://rpki.apnic.net/member_repository/A91FF84F/DD487A5C981411EBA4B32150C4F9AE02/cUHDGbtEv7zeM4Kzu2kSZfldMJ8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cUHDGbtEv7zeM4Kzu2kSZfldMJ8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 22:56:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1584 (0x630) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FF84F, serialNumber=7141C319BB44BFBCDE3382B3BB691265F95D309F Validity Not Before: May 30 22:56:17 2025 GMT Not After : Jun 6 22:56:17 2025 GMT Subject: CN=683a3791-2776 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:2b:2e:46:47:be:0d:eb:3e:ca:c0:c6:01:1f: fa:dc:05:9d:53:5d:80:a6:5c:ef:00:60:91:ca:e2: 74:f6:2e:c2:77:b7:76:13:ca:e5:c3:ae:11:f5:ae: ee:35:a8:07:3f:13:f1:03:0f:4f:e1:46:47:5a:13: 73:f5:c4:7e:6f:55:58:1c:3a:6b:f4:bf:1a:02:6e: b1:f4:fe:a6:94:19:a5:e4:f4:6a:7f:a1:d3:53:69: a9:02:d7:f7:9e:50:c0:ba:b6:4f:6c:94:2d:be:50: 38:91:84:d6:49:03:aa:a5:bb:4d:c1:d0:76:ea:2e: 13:b8:c8:4c:33:b6:00:85:22:29:e9:c3:ca:4b:05: c9:a7:80:b6:6b:4d:48:36:db:34:8d:fc:85:44:18: 73:fe:20:3a:89:2f:32:8b:f0:a4:32:df:ee:ea:0d: cf:ab:fc:e5:52:7f:6c:1c:d4:bb:fe:3e:46:18:ca: 56:34:a5:bd:bb:40:61:ad:97:88:3f:40:4c:ee:89: 87:9e:71:21:30:a5:49:de:b5:85:04:12:80:b7:45: 12:0f:59:41:37:4c:84:23:4c:db:a5:41:a6:ea:09: 73:fd:b1:1d:43:b2:2e:cf:af:bc:8c:88:d4:54:0a: 64:34:34:83:2f:06:ef:10:2d:f2:57:06:e2:f4:4a: f8:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:11:6B:A4:D0:76:20:DD:65:C0:1D:70:D3:F8:7E:3E:A8:B4:34:C4 X509v3 Authority Key Identifier: keyid:71:41:C3:19:BB:44:BF:BC:DE:33:82:B3:BB:69:12:65:F9:5D:30:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FF84F/DD487A5C981411EBA4B32150C4F9AE02/cUHDGbtEv7zeM4Kzu2kSZfldMJ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cUHDGbtEv7zeM4Kzu2kSZfldMJ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF84F/DD487A5C981411EBA4B32150C4F9AE02/cUHDGbtEv7zeM4Kzu2kSZfldMJ8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:60:6f:c8:03:35:e2:47:86:3b:b0:be:b0:5c:29:b6:c4:06: 42:5e:d4:3d:7d:ee:1a:e8:7d:90:7e:81:53:11:4c:78:98:e2: fc:84:5e:11:cf:b4:2b:73:50:ae:ab:aa:ea:0b:06:e8:d2:f0: e0:e7:eb:99:65:42:3d:a7:73:b9:80:3b:b1:ce:c9:4f:6c:ea: 55:3d:79:22:27:40:a0:6c:a0:09:27:f9:71:89:70:a1:f5:d5: c3:ea:83:a7:05:b9:33:55:ad:f9:07:41:c6:b3:5d:8d:4d:94: 34:d6:fd:a5:25:61:77:ae:10:9d:83:ff:56:fe:ba:c0:a7:8d: 19:9d:c0:53:6e:eb:3e:c4:b3:d2:dc:47:29:06:6b:bb:3c:ff: 05:cd:2d:a0:cd:24:06:16:93:9e:88:87:11:c3:c6:e7:89:2c: ef:93:ef:d4:87:05:f7:f3:e7:60:dd:62:6a:81:e3:bf:59:7f: df:89:93:82:16:99:81:32:d1:f3:36:c6:d9:7b:01:1f:f5:b1: f9:fd:47:f3:48:0c:ee:f0:88:2a:b5:68:be:5c:27:f6:9a:49: 71:dc:21:28:90:ea:d2:c9:97:c4:3e:a6:e6:77:1e:77:bd:2f: cf:21:72:47:bf:cb:a4:e7:b3:9d:3d:06:a9:13:00:e4:b0:b2: 5e:50:9e:ca -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBjAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkY4NEYxMTAvBgNVBAUTKDcxNDFDMzE5QkI0NEJGQkNERTMzODJCM0JCNjkxMjY1 Rjk1RDMwOUYwHhcNMjUwNTMwMjI1NjE3WhcNMjUwNjA2MjI1NjE3WjAYMRYwFAYD VQQDEw02ODNhMzc5MS0yNzc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqCsuRke+Des+ysDGAR/63AWdU12AplzvAGCRyuJ09i7Cd7d2E8rlw64R9a7u NagHPxPxAw9P4UZHWhNz9cR+b1VYHDpr9L8aAm6x9P6mlBml5PRqf6HTU2mpAtf3 nlDAurZPbJQtvlA4kYTWSQOqpbtNwdB26i4TuMhMM7YAhSIp6cPKSwXJp4C2a01I Nts0jfyFRBhz/iA6iS8yi/CkMt/u6g3Pq/zlUn9sHNS7/j5GGMpWNKW9u0BhrZeI P0BM7omHnnEhMKVJ3rWFBBKAt0USD1lBN0yEI0zbpUGm6glz/bEdQ7Iuz6+8jIjU VApkNDSDLwbvEC3yVwbi9Er43QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPkRa6TQ diDdZcAdcNP4fj6otDTEMB8GA1UdIwQYMBaAFHFBwxm7RL+83jOCs7tpEmX5XTCf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRjg0Ri9ERDQ4N0E1Qzk4 MTQxMUVCQTRCMzIxNTBDNEY5QUUwMi9jVUhER2J0RXY3emVNNEt6dTJrU1pmbGRN SjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NVSERHYnRFdjd6ZU00S3p1MmtTWmZsZE1KOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG Rjg0Ri9ERDQ4N0E1Qzk4MTQxMUVCQTRCMzIxNTBDNEY5QUUwMi9jVUhER2J0RXY3 emVNNEt6dTJrU1pmbGRNSjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBlYG/IAzXiR4Y7sL6wXCm2xAZCXtQ9fe4a6H2QfoFTEUx4mOL8hF4R z7Qrc1Cuq6rqCwbo0vDg5+uZZUI9p3O5gDuxzslPbOpVPXkiJ0CgbKAJJ/lxiXCh 9dXD6oOnBbkzVa35B0HGs12NTZQ01v2lJWF3rhCdg/9W/rrAp40ZncBTbus+xLPS 3EcpBmu7PP8FzS2gzSQGFpOeiIcRw8bniSzvk+/UhwX38+dg3WJqgeO/WX/fiZOC FpmBMtHzNsbZewEf9bH5/UfzSAzu8IgqtWi+XCf2mklx3CEokOrSyZfEPqbmdx53 vS/PIXJHv8uk57OdPQapEwDksLJeUJ7K -----END CERTIFICATE-----Generated at Sat May 31 17:03:34 2025 by rpki-client