$ rpki-client -vvf rpki.apnic.net/member_repository/A91689C8/38B38E5E8DD711ED85225A7EC4F9AE02/rdsr88QYJtbQ--jSvy8FLZil2Uk.mft File: rdsr88QYJtbQ--jSvy8FLZil2Uk.mft (raw, json) Hash identifier: aw8pmdtU91nanzw0pSxP7MgRAvDQYV/83sB+ViWEftk= Subject key identifier: 44:A2:34:D6:9E:BC:87:2F:05:E2:29:7B:E9:FD:6B:8C:F5:DE:84:2A Authority key identifier: AD:DB:2B:F3:C4:18:26:D6:D0:FB:E8:D2:BF:2F:05:2D:98:A5:D9:49 Certificate issuer: /CN=A91689C8/serialNumber=ADDB2BF3C41826D6D0FBE8D2BF2F052D98A5D949 Certificate serial: 2C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdsr88QYJtbQ--jSvy8FLZil2Uk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91689C8/38B38E5E8DD711ED85225A7EC4F9AE02/rdsr88QYJtbQ--jSvy8FLZil2Uk.mft Manifest number: 01F4 Signing time: Sun 15 Jun 2025 02:12:43 +0000 Manifest this update: Sun 15 Jun 2025 02:12:42 +0000 Manifest next update: Sun 22 Jun 2025 02:12:42 +0000 Files and hashes: 1: rdsr88QYJtbQ--jSvy8FLZil2Uk.crl (hash: E34X7k69A46IfFU5N3XAyVZiUWs154BzDaFKDAJl+6I=) 2: 3BB70A86092211F08BA72686C4F9AE02.roa (hash: 2J/4S4P7iHBoNIa8ALxa/H8YBNXVUqoF1W5QLX0G6vs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91689C8/38B38E5E8DD711ED85225A7EC4F9AE02/rdsr88QYJtbQ--jSvy8FLZil2Uk.crl rsync://rpki.apnic.net/member_repository/A91689C8/38B38E5E8DD711ED85225A7EC4F9AE02/rdsr88QYJtbQ--jSvy8FLZil2Uk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdsr88QYJtbQ--jSvy8FLZil2Uk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 02:12:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44 (0x2c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91689C8, serialNumber=ADDB2BF3C41826D6D0FBE8D2BF2F052D98A5D949 Validity Not Before: Jun 15 02:12:42 2025 GMT Not After : Jun 22 02:12:42 2025 GMT Subject: CN=684e2c1b-61ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:86:07:93:00:cb:62:ad:09:b9:17:01:68:72: 0e:6a:50:e6:4a:44:34:b5:75:27:fb:39:81:38:2e: e9:ef:7e:33:3a:fb:2c:1d:9d:2f:a4:f0:a5:b2:55: 3c:cd:25:70:29:67:1b:02:9d:c5:92:23:95:11:8f: 78:55:cc:54:8c:30:2d:17:67:04:97:66:71:fd:f2: e4:ca:51:45:5b:46:60:b8:bb:b6:d4:65:d0:62:88: 86:ca:37:d2:7a:9c:96:30:63:cc:26:95:8f:b8:dc: 53:e1:93:73:4c:20:8f:f6:09:7d:31:11:8e:21:1a: 5a:3e:5c:cf:0d:95:81:59:06:82:da:e1:75:ee:2b: 08:f4:1a:39:fe:cb:1b:a7:8f:e1:ab:23:ac:10:96: 6a:f9:22:0a:f1:88:0c:c3:cf:87:11:fe:ff:45:70: 64:20:58:6c:69:71:0a:f0:a5:26:66:1a:ef:be:e0: 7d:1a:89:3d:a9:4c:c5:ff:11:86:06:78:f2:7a:73: 6b:38:cf:4e:6d:7b:a6:93:78:33:3e:9e:84:dd:d6: ce:50:e4:b9:6f:bf:14:4a:8e:64:ee:f4:19:b1:7f: d4:de:7a:0f:84:e8:af:73:46:e3:b0:20:50:67:14: df:8f:f3:8a:b9:74:74:13:18:58:7e:15:8f:36:c9: 8a:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:A2:34:D6:9E:BC:87:2F:05:E2:29:7B:E9:FD:6B:8C:F5:DE:84:2A X509v3 Authority Key Identifier: keyid:AD:DB:2B:F3:C4:18:26:D6:D0:FB:E8:D2:BF:2F:05:2D:98:A5:D9:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91689C8/38B38E5E8DD711ED85225A7EC4F9AE02/rdsr88QYJtbQ--jSvy8FLZil2Uk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdsr88QYJtbQ--jSvy8FLZil2Uk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91689C8/38B38E5E8DD711ED85225A7EC4F9AE02/rdsr88QYJtbQ--jSvy8FLZil2Uk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:bf:1a:ee:af:f4:d6:ab:ef:69:15:86:d1:2f:83:2f:30:43: 0f:92:d0:84:17:a6:b3:43:07:83:f2:70:99:f9:63:c9:8b:5e: f8:7d:12:7c:a5:54:da:5e:d2:1f:81:b7:fc:22:e7:eb:60:d8: 3d:c3:61:b3:17:12:df:b1:ba:7d:92:11:4e:3b:85:83:8c:ae: 26:c1:72:dd:9b:1d:f5:a1:9f:96:ec:39:d9:cb:3d:d3:92:d9: d2:f4:41:7c:4b:e1:85:ca:e5:cc:37:80:da:83:04:84:a8:b6: 4c:95:d0:e6:f3:00:01:12:71:f6:5f:3d:31:53:fd:3e:63:60: cd:c9:6d:d4:35:0f:fe:6a:4c:51:7d:6b:e0:b0:d9:3c:7b:9a: 99:62:03:16:27:d1:a7:4b:23:96:75:65:50:cd:00:30:80:19: 65:31:91:b6:61:61:fd:b7:56:d2:03:90:d5:52:9b:89:ba:2f: 22:7d:01:3c:8a:5a:e6:6e:d0:aa:ab:0c:54:2b:7a:64:43:5d: 96:06:8d:bd:44:3d:7d:58:31:bf:8d:cb:48:92:12:7c:7b:80: e2:30:ad:5d:46:be:d7:f8:81:d0:91:c7:e9:cb:27:0f:30:21: 6e:0e:a6:6e:2c:b9:1a:dc:ca:2c:23:d0:6c:83:59:65:7c:d4: 45:b6:0a:08 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBLDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 ODlDODExMC8GA1UEBRMoQUREQjJCRjNDNDE4MjZENkQwRkJFOEQyQkYyRjA1MkQ5 OEE1RDk0OTAeFw0yNTA2MTUwMjEyNDJaFw0yNTA2MjIwMjEyNDJaMBgxFjAUBgNV BAMTDTY4NGUyYzFiLTYxZWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDNhgeTAMtirQm5FwFocg5qUOZKRDS1dSf7OYE4LunvfjM6+ywdnS+k8KWyVTzN JXApZxsCncWSI5URj3hVzFSMMC0XZwSXZnH98uTKUUVbRmC4u7bUZdBiiIbKN9J6 nJYwY8wmlY+43FPhk3NMII/2CX0xEY4hGlo+XM8NlYFZBoLa4XXuKwj0Gjn+yxun j+GrI6wQlmr5IgrxiAzDz4cR/v9FcGQgWGxpcQrwpSZmGu++4H0aiT2pTMX/EYYG ePJ6c2s4z05te6aTeDM+noTd1s5Q5LlvvxRKjmTu9Bmxf9Teeg+E6K9zRuOwIFBn FN+P84q5dHQTGFh+FY82yYrpAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQURKI01p68 hy8F4il76f1rjPXehCowHwYDVR0jBBgwFoAUrdsr88QYJtbQ++jSvy8FLZil2Ukw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY4OUM4LzM4QjM4RTVFOERE NzExRUQ4NTIyNUE3RUM0RjlBRTAyL3Jkc3I4OFFZSnRiUS0talN2eThGTFppbDJV ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcmRzcjg4UVlKdGJRLS1qU3Z5OEZMWmlsMlVrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY4 OUM4LzM4QjM4RTVFOERENzExRUQ4NTIyNUE3RUM0RjlBRTAyL3Jkc3I4OFFZSnRi US0talN2eThGTFppbDJVay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADa/Gu6v9Nar72kVhtEvgy8wQw+S0IQXprNDB4PycJn5Y8mLXvh9Enyl VNpe0h+Bt/wi5+tg2D3DYbMXEt+xun2SEU47hYOMribBct2bHfWhn5bsOdnLPdOS 2dL0QXxL4YXK5cw3gNqDBISotkyV0ObzAAEScfZfPTFT/T5jYM3JbdQ1D/5qTFF9 a+Cw2Tx7mpliAxYn0adLI5Z1ZVDNADCAGWUxkbZhYf23VtIDkNVSm4m6LyJ9ATyK WuZu0KqrDFQremRDXZYGjb1EPX1YMb+Ny0iSEnx7gOIwrV1Gvtf4gdCRx+nLJw8w IW4Opm4suRrcyiwj0GyDWWV81EW2Cgg= -----END CERTIFICATE-----Generated at Sun Jun 15 22:04:39 2025 by rpki-client