$ rpki-client -vvf rpki.apnic.net/member_repository/A91B13DA/2EACAE2820F511F095B65182C4F9AE02/CkauL6_Mx63e8nLHAqtf-r3Mqk8.mft File: CkauL6_Mx63e8nLHAqtf-r3Mqk8.mft (raw, json) Hash identifier: PJZa5Aq0+iy0Znos4wIsyO1DXZ3cPR5Vza/bcOYonjA= Subject key identifier: 2C:FE:04:F1:0A:65:A0:F5:5E:39:20:64:7F:88:34:C0:BB:6D:55:B0 Authority key identifier: 0A:46:AE:2F:AF:CC:C7:AD:DE:F2:72:C7:02:AB:5F:FA:BD:CC:AA:4F Certificate issuer: /CN=A91B13DA/serialNumber=0A46AE2FAFCCC7ADDEF272C702AB5FFABDCCAA4F Certificate serial: 1E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkauL6_Mx63e8nLHAqtf-r3Mqk8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B13DA/2EACAE2820F511F095B65182C4F9AE02/CkauL6_Mx63e8nLHAqtf-r3Mqk8.mft Manifest number: 1C Signing time: Fri 13 Jun 2025 06:50:02 +0000 Manifest this update: Fri 13 Jun 2025 06:50:01 +0000 Manifest next update: Fri 20 Jun 2025 06:50:01 +0000 Files and hashes: 1: CkauL6_Mx63e8nLHAqtf-r3Mqk8.crl (hash: GzOqCA3ZcOFYC+uwf7HrYnb7dU0d+cDGcOK0YbT3ATo=) 2: E70C7B4620F611F09993632FC4F9AE02.roa (hash: 3DawsxjCSxaO9Yqtl+Go5xRwWPPzE2NpLIfRRBuYg5c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B13DA/2EACAE2820F511F095B65182C4F9AE02/CkauL6_Mx63e8nLHAqtf-r3Mqk8.crl rsync://rpki.apnic.net/member_repository/A91B13DA/2EACAE2820F511F095B65182C4F9AE02/CkauL6_Mx63e8nLHAqtf-r3Mqk8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkauL6_Mx63e8nLHAqtf-r3Mqk8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 06:50:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30 (0x1e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B13DA, serialNumber=0A46AE2FAFCCC7ADDEF272C702AB5FFABDCCAA4F Validity Not Before: Jun 13 06:50:01 2025 GMT Not After : Jun 20 06:50:01 2025 GMT Subject: CN=684bca1a-a507 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:22:99:be:28:bb:66:3c:a9:b8:97:37:38:c5: 1a:21:b8:36:15:7a:98:77:8a:01:dd:b0:b5:77:c7: ef:09:50:77:6c:95:e2:15:a0:73:13:b3:ac:99:05: 70:15:64:9c:f6:c5:e4:3a:0d:7a:a8:e1:56:46:b0: 60:08:32:22:5b:7d:d9:bf:a0:70:9e:a2:bb:ed:b6: c4:41:6e:9e:dc:d4:d1:26:89:a4:ea:30:d1:f5:a5: 8a:5d:e2:56:41:cf:71:f4:00:57:c9:31:06:e6:f5: 26:54:dd:69:de:a2:38:f9:f5:26:83:a9:bd:92:38: 5c:63:41:e3:71:f3:81:48:c8:97:9a:d0:00:f3:68: 23:1b:89:a0:92:5f:83:58:00:fd:d1:0a:89:6f:f4: 73:9d:ab:6e:50:3f:0f:b4:d2:8b:d0:2d:8f:8f:b2: 76:fa:8d:7a:88:3e:a3:54:18:af:e7:1e:11:b8:2b: b3:34:d8:09:c2:70:7e:2d:ea:3d:db:3b:b7:fb:b1: 14:98:73:e3:58:2f:05:61:9b:4e:79:0b:93:64:a2: fe:aa:9f:fd:64:68:bb:5d:ac:b6:eb:17:55:ad:72: f2:f5:39:fb:17:59:15:6a:38:3c:d1:b1:d0:d2:af: 2a:b0:f5:2c:77:24:5a:3f:a0:35:fe:7d:c7:52:7b: b4:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:FE:04:F1:0A:65:A0:F5:5E:39:20:64:7F:88:34:C0:BB:6D:55:B0 X509v3 Authority Key Identifier: keyid:0A:46:AE:2F:AF:CC:C7:AD:DE:F2:72:C7:02:AB:5F:FA:BD:CC:AA:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B13DA/2EACAE2820F511F095B65182C4F9AE02/CkauL6_Mx63e8nLHAqtf-r3Mqk8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkauL6_Mx63e8nLHAqtf-r3Mqk8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B13DA/2EACAE2820F511F095B65182C4F9AE02/CkauL6_Mx63e8nLHAqtf-r3Mqk8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:c2:20:9c:bf:48:4f:fe:c9:5b:9c:c4:27:56:b0:21:3e:bd: 49:40:4d:ab:54:7d:9a:5a:f6:ef:8c:fd:25:7c:f2:df:2f:ae: e5:fa:d6:40:a5:8f:97:67:1a:b6:79:c5:35:5f:f3:fe:e1:a5: bc:c5:0a:16:58:eb:54:36:db:0a:ee:6a:8a:8c:67:02:15:ea: fd:33:91:b6:54:a1:a3:88:6c:52:42:55:d0:b8:88:49:2d:4c: 87:e0:9b:8f:0a:85:14:18:76:7c:f2:44:2b:16:fc:ba:8e:e4: 2b:0b:10:ce:55:88:05:e8:40:04:24:b5:f0:70:13:19:90:54: 3c:ae:1e:5b:87:33:97:65:4d:61:77:1b:08:72:c7:79:be:81: d3:66:fd:6c:75:b3:d2:70:5b:39:c4:94:79:f8:ea:3c:26:c8: 16:da:f4:04:cc:10:5d:50:d2:08:50:58:e1:4b:e6:e4:76:80: df:ff:6c:81:2d:8f:e2:a5:89:b7:ae:e3:ea:e0:a0:a6:76:32: 02:63:59:02:f9:c3:29:bc:95:6a:3b:44:84:a7:0a:6f:29:d9: 51:79:7c:25:71:b6:93:8a:4e:5d:52:5a:21:03:ec:8e:9b:c0: 44:02:fa:73:f6:e1:32:2a:d8:b5:9e:67:bf:3d:59:58:a6:a9: 85:52:f5:6d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC MTNEQTExMC8GA1UEBRMoMEE0NkFFMkZBRkNDQzdBRERFRjI3MkM3MDJBQjVGRkFC RENDQUE0RjAeFw0yNTA2MTMwNjUwMDFaFw0yNTA2MjAwNjUwMDFaMBgxFjAUBgNV BAMTDTY4NGJjYTFhLWE1MDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC4Ipm+KLtmPKm4lzc4xRohuDYVeph3igHdsLV3x+8JUHdsleIVoHMTs6yZBXAV ZJz2xeQ6DXqo4VZGsGAIMiJbfdm/oHCeorvttsRBbp7c1NEmiaTqMNH1pYpd4lZB z3H0AFfJMQbm9SZU3Wneojj59SaDqb2SOFxjQeNx84FIyJea0ADzaCMbiaCSX4NY AP3RColv9HOdq25QPw+00ovQLY+Psnb6jXqIPqNUGK/nHhG4K7M02AnCcH4t6j3b O7f7sRSYc+NYLwVhm055C5Nkov6qn/1kaLtdrLbrF1WtcvL1OfsXWRVqODzRsdDS ryqw9Sx3JFo/oDX+fcdSe7RhAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQULP4E8Qpl oPVeOSBkf4g0wLttVbAwHwYDVR0jBBgwFoAUCkauL6/Mx63e8nLHAqtf+r3Mqk8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIxM0RBLzJFQUNBRTI4MjBG NTExRjA5NUI2NTE4MkM0RjlBRTAyL0NrYXVMNl9NeDYzZThuTEhBcXRmLXIzTXFr OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQ2thdUw2X014NjNlOG5MSEFxdGYtcjNNcWs4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIx M0RBLzJFQUNBRTI4MjBGNTExRjA5NUI2NTE4MkM0RjlBRTAyL0NrYXVMNl9NeDYz ZThuTEhBcXRmLXIzTXFrOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACPCIJy/SE/+yVucxCdWsCE+vUlATatUfZpa9u+M/SV88t8vruX61kCl j5dnGrZ5xTVf8/7hpbzFChZY61Q22wruaoqMZwIV6v0zkbZUoaOIbFJCVdC4iEkt TIfgm48KhRQYdnzyRCsW/LqO5CsLEM5ViAXoQAQktfBwExmQVDyuHluHM5dlTWF3 Gwhyx3m+gdNm/Wx1s9JwWznElHn46jwmyBba9ATMEF1Q0ghQWOFL5uR2gN//bIEt j+Klibeu4+rgoKZ2MgJjWQL5wym8lWo7RISnCm8p2VF5fCVxtpOKTl1SWiED7I6b wEQC+nP24TIq2LWeZ789WVimqYVS9W0= -----END CERTIFICATE-----Generated at Sun Jun 15 07:58:02 2025 by rpki-client