$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4D8E/589B933C06A411EAB3C66B38C4F9AE02/P32buu18W_27o6NJq-lrIa0n2mc.mft File: P32buu18W_27o6NJq-lrIa0n2mc.mft (raw, json) Hash identifier: bLaRc527/k/yvm3G09MMJffv0WgLrkIwF16iY9u0gUg= Subject key identifier: 0A:64:52:FF:7D:6C:9B:11:48:03:AE:3A:E2:A6:F8:D6:A8:B4:D1:62 Authority key identifier: 3F:7D:9B:BA:ED:7C:5B:FD:BB:A3:A3:49:AB:E9:6B:21:AD:27:DA:67 Certificate issuer: /CN=A91C4D8E/serialNumber=3F7D9BBAED7C5BFDBBA3A349ABE96B21AD27DA67 Certificate serial: 0C52 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P32buu18W_27o6NJq-lrIa0n2mc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C4D8E/589B933C06A411EAB3C66B38C4F9AE02/P32buu18W_27o6NJq-lrIa0n2mc.mft Manifest number: 0C49 Signing time: Thu 12 Jun 2025 20:52:32 +0000 Manifest this update: Thu 12 Jun 2025 20:52:31 +0000 Manifest next update: Thu 19 Jun 2025 20:52:31 +0000 Files and hashes: 1: P32buu18W_27o6NJq-lrIa0n2mc.crl (hash: LjYi+MVRsr8wKX+yRAs8LRuzhZrtvttqm25MR5YLrPQ=) 2: C9FF2A7E06A511EAA1FFDB3DC4F9AE02.roa (hash: 78Vf6/fB7sknA1Wt2VtN9AZj7sBbXgPyMuxI8cL1zlU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C4D8E/589B933C06A411EAB3C66B38C4F9AE02/P32buu18W_27o6NJq-lrIa0n2mc.crl rsync://rpki.apnic.net/member_repository/A91C4D8E/589B933C06A411EAB3C66B38C4F9AE02/P32buu18W_27o6NJq-lrIa0n2mc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P32buu18W_27o6NJq-lrIa0n2mc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 20:52:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3154 (0xc52) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C4D8E, serialNumber=3F7D9BBAED7C5BFDBBA3A349ABE96B21AD27DA67 Validity Not Before: Jun 12 20:52:31 2025 GMT Not After : Jun 19 20:52:31 2025 GMT Subject: CN=684b3e0f-1f7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:69:d0:50:ff:db:f4:5a:db:34:79:ba:5a:77: 29:eb:66:50:6a:73:a0:ea:d2:d2:8e:f0:b1:2d:fb: 25:2c:ca:49:9e:57:57:5a:e1:64:9b:e3:f9:f0:e0: df:aa:9e:e1:09:73:33:bd:01:11:5d:d2:9e:18:5a: 99:5d:70:80:a2:22:f7:b0:e0:95:9d:ca:70:60:a6: 24:11:6e:30:a8:e6:ad:ea:fc:5a:29:e2:c9:8e:c1: ea:db:d8:fa:80:02:82:5d:90:eb:44:3d:1d:31:55: 12:0b:7b:27:19:c7:4c:fb:23:37:46:46:19:7a:f0: b4:48:24:bd:d9:f4:52:f7:6d:5e:f1:3d:6e:dc:22: 7f:7e:4c:21:f6:f8:dc:80:56:84:28:6e:be:1d:4c: cb:d4:cb:58:05:24:78:7f:29:47:cb:32:39:ed:94: b9:b2:b7:eb:06:d8:57:be:89:83:d8:cc:3c:d6:c0: 9c:71:6c:4d:e0:9b:a6:f0:52:8d:cc:1c:b0:e4:0c: 69:28:f7:7e:7d:9a:88:ff:7d:62:ca:a0:b5:8f:cc: 8f:e5:bc:f1:49:bf:65:9c:57:7c:3f:9e:e6:33:2b: c6:31:f1:e1:d6:a1:59:8d:20:a4:69:d1:8d:30:68: 2c:3a:2c:40:49:6d:d8:bf:72:96:b8:4a:b3:c2:a5: 03:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:64:52:FF:7D:6C:9B:11:48:03:AE:3A:E2:A6:F8:D6:A8:B4:D1:62 X509v3 Authority Key Identifier: keyid:3F:7D:9B:BA:ED:7C:5B:FD:BB:A3:A3:49:AB:E9:6B:21:AD:27:DA:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C4D8E/589B933C06A411EAB3C66B38C4F9AE02/P32buu18W_27o6NJq-lrIa0n2mc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P32buu18W_27o6NJq-lrIa0n2mc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4D8E/589B933C06A411EAB3C66B38C4F9AE02/P32buu18W_27o6NJq-lrIa0n2mc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:87:f5:0e:12:75:10:01:14:e9:dd:97:71:fb:79:32:b2:4b: a1:d0:06:0d:b0:d6:a8:3c:6e:a5:a1:8c:72:2c:e1:35:07:d0: e3:99:c6:97:89:cd:11:19:1e:0c:d8:6e:06:1b:8a:ba:b3:4a: 93:4c:b2:9c:26:48:98:7c:01:a6:51:50:54:d9:7f:13:27:23: 56:ae:13:fa:40:27:83:3e:43:c7:35:b4:81:e1:3c:c3:c2:13: b9:25:ae:7c:0a:5a:fb:c2:04:80:75:d3:21:d1:e1:41:be:4d: 94:82:0e:b6:2f:e9:60:9a:df:46:cf:f3:ad:96:f9:da:f0:e1: df:2e:20:08:11:d8:d1:f2:6e:a5:a1:f5:8c:28:10:f4:2a:c7: 65:a2:23:4c:e9:ed:8b:20:c6:a0:21:1f:ac:34:5f:78:46:88: 42:dd:83:73:1f:d6:49:bc:e8:ef:5e:56:6c:4d:58:f6:57:7f: 51:fa:30:c7:9d:f2:b0:6f:34:da:d9:d5:5d:50:8e:f6:10:ab: c3:f2:b6:06:5e:5b:3e:3a:08:38:09:47:11:4a:ab:f9:ef:57: 3d:1f:a7:70:01:8b:31:c9:3b:d7:9c:60:38:3a:5d:b7:9a:49: 85:51:9d:94:c0:7a:dd:f1:92:73:ab:65:f1:dd:83:64:59:d5: 7a:b5:7c:d4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDFIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzREOEUxMTAvBgNVBAUTKDNGN0Q5QkJBRUQ3QzVCRkRCQkEzQTM0OUFCRTk2QjIx QUQyN0RBNjcwHhcNMjUwNjEyMjA1MjMxWhcNMjUwNjE5MjA1MjMxWjAYMRYwFAYD VQQDEw02ODRiM2UwZi0xZjdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwGnQUP/b9FrbNHm6Wncp62ZQanOg6tLSjvCxLfslLMpJnldXWuFkm+P58ODf qp7hCXMzvQERXdKeGFqZXXCAoiL3sOCVncpwYKYkEW4wqOat6vxaKeLJjsHq29j6 gAKCXZDrRD0dMVUSC3snGcdM+yM3RkYZevC0SCS92fRS921e8T1u3CJ/fkwh9vjc gFaEKG6+HUzL1MtYBSR4fylHyzI57ZS5srfrBthXvomD2Mw81sCccWxN4Jum8FKN zByw5AxpKPd+fZqI/31iyqC1j8yP5bzxSb9lnFd8P57mMyvGMfHh1qFZjSCkadGN MGgsOixASW3Yv3KWuEqzwqUDhwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFApkUv99 bJsRSAOuOuKm+NaotNFiMB8GA1UdIwQYMBaAFD99m7rtfFv9u6OjSavpayGtJ9pn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNEQ4RS81ODlCOTMzQzA2 QTQxMUVBQjNDNjZCMzhDNEY5QUUwMi9QMzJidXUxOFdfMjdvNk5KcS1scklhMG4y bWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1AzMmJ1dTE4V18yN282TkpxLWxySWEwbjJtYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NEQ4RS81ODlCOTMzQzA2QTQxMUVBQjNDNjZCMzhDNEY5QUUwMi9QMzJidXUxOFdf MjdvNk5KcS1scklhMG4ybWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCvh/UOEnUQARTp3Zdx+3kyskuh0AYNsNaoPG6loYxyLOE1B9DjmcaX ic0RGR4M2G4GG4q6s0qTTLKcJkiYfAGmUVBU2X8TJyNWrhP6QCeDPkPHNbSB4TzD whO5Ja58Clr7wgSAddMh0eFBvk2Ugg62L+lgmt9Gz/Otlvna8OHfLiAIEdjR8m6l ofWMKBD0KsdloiNM6e2LIMagIR+sNF94RohC3YNzH9ZJvOjvXlZsTVj2V39R+jDH nfKwbzTa2dVdUI72EKvD8rYGXls+Ogg4CUcRSqv571c9H6dwAYsxyTvXnGA4Ol23 mkmFUZ2UwHrd8ZJzq2Xx3YNkWdV6tXzU -----END CERTIFICATE-----Generated at Sat Jun 14 19:21:59 2025 by rpki-client