$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAC4B/DE3F889ACD7D11EFAA07230AC4F9AE02/44pe3hloyTdeUVUfrpiIigu1RJA.mft File: 44pe3hloyTdeUVUfrpiIigu1RJA.mft (raw, json) Hash identifier: NBPEZcIM+P/81Kr+dlqS08MrO7eTO26O34IA+6mopxU= Subject key identifier: 73:71:32:CF:22:78:83:C0:0B:56:8E:E9:FF:BD:A2:5C:D7:70:2B:A9 Authority key identifier: E3:8A:5E:DE:19:68:C9:37:5E:51:55:1F:AE:98:88:8A:0B:B5:44:90 Certificate issuer: /CN=A91AAC4B/serialNumber=E38A5EDE1968C9375E51551FAE98888A0BB54490 Certificate serial: 55 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/44pe3hloyTdeUVUfrpiIigu1RJA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AAC4B/DE3F889ACD7D11EFAA07230AC4F9AE02/44pe3hloyTdeUVUfrpiIigu1RJA.mft Manifest number: 54 Signing time: Thu 19 Jun 2025 06:34:51 +0000 Manifest this update: Thu 19 Jun 2025 06:34:51 +0000 Manifest next update: Thu 26 Jun 2025 06:34:51 +0000 Files and hashes: 1: 44pe3hloyTdeUVUfrpiIigu1RJA.crl (hash: H3siavT390cdOBxUC9+1I2ctuVuO2kOouDqx/i6xUVI=) 2: B6A31094CD7E11EFBBAE2137C4F9AE02.roa (hash: f1IFYkIgMkQ3+JyMSl70ACqIsH3T9EI7K8/rW2krDH4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AAC4B/DE3F889ACD7D11EFAA07230AC4F9AE02/44pe3hloyTdeUVUfrpiIigu1RJA.crl rsync://rpki.apnic.net/member_repository/A91AAC4B/DE3F889ACD7D11EFAA07230AC4F9AE02/44pe3hloyTdeUVUfrpiIigu1RJA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/44pe3hloyTdeUVUfrpiIigu1RJA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 06:34:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 85 (0x55) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AAC4B, serialNumber=E38A5EDE1968C9375E51551FAE98888A0BB54490 Validity Not Before: Jun 19 06:34:51 2025 GMT Not After : Jun 26 06:34:51 2025 GMT Subject: CN=6853af8b-5935 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:d2:11:7b:a0:c2:d9:fb:97:67:70:2b:85:21: 16:1a:61:86:c3:41:88:c2:93:70:c0:5d:a7:4d:4b: 58:f5:e7:9f:67:fa:12:1a:06:fe:48:24:b9:c2:59: 88:04:fc:34:a2:ab:05:37:0f:1f:44:de:c8:26:a0: 74:89:90:d0:de:bc:e7:f6:80:0b:57:f0:6c:47:d3: 05:b2:75:a1:c7:32:f5:69:aa:7b:90:d2:e1:01:9a: 0a:20:b8:9e:e4:c1:19:dc:e6:9e:36:2c:6e:24:7d: ae:f1:76:f9:5a:d5:f0:d4:00:9e:8f:5a:f6:bc:5e: 03:46:29:19:f5:ef:cb:17:54:d3:11:58:f6:b9:8e: 49:b3:88:bb:66:56:af:b1:db:cb:12:3a:a6:9a:63: fb:f8:00:d8:b5:f8:c0:7b:90:b9:c1:78:c4:38:eb: 1a:dd:e4:a3:bb:b7:e8:d4:f2:2e:04:17:9f:dc:69: 85:b1:bb:55:5c:3d:6c:78:f1:81:d8:50:de:6e:84: da:52:87:b0:4b:24:91:fd:24:60:93:81:b5:23:3d: 9d:66:af:44:2b:98:c6:f7:6b:57:fd:7e:ab:14:df: 47:d2:67:68:02:9f:43:55:01:32:56:78:30:72:a8: 1e:fd:fa:ca:3f:ba:f6:b3:5a:fd:04:3d:ed:63:cf: e0:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:71:32:CF:22:78:83:C0:0B:56:8E:E9:FF:BD:A2:5C:D7:70:2B:A9 X509v3 Authority Key Identifier: keyid:E3:8A:5E:DE:19:68:C9:37:5E:51:55:1F:AE:98:88:8A:0B:B5:44:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AAC4B/DE3F889ACD7D11EFAA07230AC4F9AE02/44pe3hloyTdeUVUfrpiIigu1RJA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/44pe3hloyTdeUVUfrpiIigu1RJA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAC4B/DE3F889ACD7D11EFAA07230AC4F9AE02/44pe3hloyTdeUVUfrpiIigu1RJA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bc:a7:79:a2:24:2e:c4:8f:25:f9:cd:d1:a9:99:51:b5:4b:1f: b6:a6:01:25:c3:c3:69:b1:c7:16:e0:d9:a1:2f:40:8e:1e:1b: ff:f4:cd:ea:87:26:6b:c3:8e:a7:87:cd:f7:a7:7f:28:ae:f3: aa:ee:8c:f5:60:ac:91:f9:2e:4b:fe:4c:f3:97:05:a0:22:9f: c5:0c:5d:03:65:8c:9c:53:d3:62:26:ea:91:25:e7:a1:f1:53: d1:d3:a3:19:60:99:aa:ff:47:20:df:7f:2f:04:cf:32:73:34: 51:0e:27:21:37:da:ad:3b:eb:a7:5b:d3:00:4d:06:a3:5c:e0: 66:98:22:1e:ca:aa:b1:79:9f:29:a7:87:7e:ef:59:88:a4:75: d2:64:5a:3a:d7:8d:41:a3:45:ae:8c:35:4f:b1:a2:77:8d:7e: 5f:fe:fb:33:c8:bc:46:c3:fb:c9:d8:48:23:ce:71:df:d3:bc: ec:d4:1b:1c:f5:49:69:4b:8d:ca:ae:a8:74:6d:09:dc:a6:29: ad:45:c4:c3:68:d4:c5:13:f1:9a:82:37:93:37:69:37:f0:bd: 25:47:40:45:21:9c:2d:7b:a1:3e:12:2d:f7:59:89:b7:18:cd: c6:68:89:08:a2:fa:a3:4c:75:12:2e:20:7c:e9:4c:3a:0a:7e: 5e:48:66:fa -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBVTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB QUM0QjExMC8GA1UEBRMoRTM4QTVFREUxOTY4QzkzNzVFNTE1NTFGQUU5ODg4OEEw QkI1NDQ5MDAeFw0yNTA2MTkwNjM0NTFaFw0yNTA2MjYwNjM0NTFaMBgxFjAUBgNV BAMTDTY4NTNhZjhiLTU5MzUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCk0hF7oMLZ+5dncCuFIRYaYYbDQYjCk3DAXadNS1j1559n+hIaBv5IJLnCWYgE /DSiqwU3Dx9E3sgmoHSJkNDevOf2gAtX8GxH0wWydaHHMvVpqnuQ0uEBmgoguJ7k wRnc5p42LG4kfa7xdvla1fDUAJ6PWva8XgNGKRn178sXVNMRWPa5jkmziLtmVq+x 28sSOqaaY/v4ANi1+MB7kLnBeMQ46xrd5KO7t+jU8i4EF5/caYWxu1VcPWx48YHY UN5uhNpSh7BLJJH9JGCTgbUjPZ1mr0QrmMb3a1f9fqsU30fSZ2gCn0NVATJWeDBy qB79+so/uvazWv0EPe1jz+DxAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUc3EyzyJ4 g8ALVo7p/72iXNdwK6kwHwYDVR0jBBgwFoAU44pe3hloyTdeUVUfrpiIigu1RJAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFBQzRCL0RFM0Y4ODlBQ0Q3 RDExRUZBQTA3MjMwQUM0RjlBRTAyLzQ0cGUzaGxveVRkZVVWVWZycGlJaWd1MVJK QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvNDRwZTNobG95VGRlVVZVZnJwaUlpZ3UxUkpBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFB QzRCL0RFM0Y4ODlBQ0Q3RDExRUZBQTA3MjMwQUM0RjlBRTAyLzQ0cGUzaGxveVRk ZVVWVWZycGlJaWd1MVJKQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALyneaIkLsSPJfnN0amZUbVLH7amASXDw2mxxxbg2aEvQI4eG//0zeqH JmvDjqeHzfenfyiu86rujPVgrJH5Lkv+TPOXBaAin8UMXQNljJxT02Im6pEl56Hx U9HToxlgmar/RyDffy8EzzJzNFEOJyE32q0766db0wBNBqNc4GaYIh7KqrF5nymn h37vWYikddJkWjrXjUGjRa6MNU+xoneNfl/++zPIvEbD+8nYSCPOcd/TvOzUGxz1 SWlLjcquqHRtCdymKa1FxMNo1MUT8ZqCN5M3aTfwvSVHQEUhnC17oT4SLfdZibcY zcZoiQii+qNMdRIuIHzpTDoKfl5IZvo= -----END CERTIFICATE-----Generated at Fri Jun 20 01:20:03 2025 by rpki-client