$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6A35/A159F782D49211EFB564DE62C4F9AE02/-2uUY2HwxcguKwZ0DUuosLmTU_g.mft File: -2uUY2HwxcguKwZ0DUuosLmTU_g.mft (raw, json) Hash identifier: WYdlsffn8faL8KOvkBXK/Uexna1E/yMxTF6vDNQngTM= Subject key identifier: 83:9F:EA:DB:49:25:DC:CC:AD:53:87:E9:BB:15:CF:C8:EE:91:97:3D Authority key identifier: FB:6B:94:63:61:F0:C5:C8:2E:2B:06:74:0D:4B:A8:B0:B9:93:53:F8 Certificate issuer: /CN=A91C6A35/serialNumber=FB6B946361F0C5C82E2B06740D4BA8B0B99353F8 Certificate serial: 35 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-2uUY2HwxcguKwZ0DUuosLmTU_g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6A35/A159F782D49211EFB564DE62C4F9AE02/-2uUY2HwxcguKwZ0DUuosLmTU_g.mft Manifest number: 34 Signing time: Fri 25 Apr 2025 06:36:29 +0000 Manifest this update: Fri 25 Apr 2025 06:36:29 +0000 Manifest next update: Fri 02 May 2025 06:36:29 +0000 Files and hashes: 1: -2uUY2HwxcguKwZ0DUuosLmTU_g.crl (hash: 2SdOrVa6uNYBwaL8tkmeiFZp46mGRHbzpGbAenPj9/A=) 2: 06D77958D49411EFA8DF5E69C4F9AE02.roa (hash: SIysPbQ0shw6SImSP7LGItvtceoka+GBhE2dzjDub+w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6A35/A159F782D49211EFB564DE62C4F9AE02/-2uUY2HwxcguKwZ0DUuosLmTU_g.crl rsync://rpki.apnic.net/member_repository/A91C6A35/A159F782D49211EFB564DE62C4F9AE02/-2uUY2HwxcguKwZ0DUuosLmTU_g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-2uUY2HwxcguKwZ0DUuosLmTU_g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:36:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53 (0x35) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6A35, serialNumber=FB6B946361F0C5C82E2B06740D4BA8B0B99353F8 Validity Not Before: Apr 25 06:36:29 2025 GMT Not After : May 2 06:36:29 2025 GMT Subject: CN=680b2d6d-cd1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:08:83:e3:b8:86:e2:00:8b:32:7e:47:6b:9b: 21:7e:64:2b:c7:9f:65:65:61:66:9b:18:f1:3f:00: 60:78:49:8e:2f:ae:aa:39:4a:99:e0:d3:f7:44:f4: b5:b5:b8:ea:6e:84:6c:35:c6:2f:b3:b2:26:ba:f4: dc:ce:a6:74:bc:24:ff:a2:df:99:ac:dc:40:e2:78: b3:cb:b2:ec:d7:5d:cb:55:f2:23:d3:6f:74:db:27: c9:e6:4f:d8:e9:07:28:50:9d:7e:4d:56:9c:bf:30: 11:44:e0:9b:07:53:25:f6:ef:96:d8:94:21:bc:c6: 01:2f:3e:5c:bd:3b:42:36:de:a8:94:53:b5:e0:b9: 1b:6b:90:78:10:2b:2a:a2:1f:6d:f2:3f:2a:ba:6f: 0f:2f:7f:ad:0e:39:5f:f0:dc:30:e8:e1:1f:96:63: 9f:ee:3d:86:73:12:b2:79:a2:24:f4:05:2f:d7:dc: a1:4d:c8:3e:5a:8e:06:26:b7:4a:cf:9c:63:70:1a: fa:a1:ff:06:d4:1f:53:46:53:46:0d:cf:cf:7d:15: b1:34:20:3d:2e:ad:4d:92:0b:ec:c3:01:3a:2f:e0: 04:e9:fb:58:f9:d3:d7:7e:9f:0f:b8:0f:45:f4:92: b1:6b:b4:5d:4a:8d:47:56:c9:d1:58:b2:51:f0:82: 60:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:9F:EA:DB:49:25:DC:CC:AD:53:87:E9:BB:15:CF:C8:EE:91:97:3D X509v3 Authority Key Identifier: keyid:FB:6B:94:63:61:F0:C5:C8:2E:2B:06:74:0D:4B:A8:B0:B9:93:53:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6A35/A159F782D49211EFB564DE62C4F9AE02/-2uUY2HwxcguKwZ0DUuosLmTU_g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-2uUY2HwxcguKwZ0DUuosLmTU_g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6A35/A159F782D49211EFB564DE62C4F9AE02/-2uUY2HwxcguKwZ0DUuosLmTU_g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:ed:72:20:c3:81:c7:d2:bb:4b:b8:0d:98:22:08:c1:93:44: 5c:3c:01:ca:be:bc:29:08:b6:f8:45:c3:19:61:34:66:fe:1d: 82:74:9a:b8:1b:93:ec:de:f9:e4:e9:fb:1b:33:d5:a0:1d:62: a3:40:55:5d:ce:a7:4f:a9:15:ce:c6:64:fd:26:1a:96:e5:05: 20:94:59:40:43:a5:c3:ae:00:e0:5b:2c:b1:40:05:8e:48:8f: 8a:46:3f:4d:fb:4a:10:98:bc:a6:ae:01:84:58:2b:9d:a2:e2: 56:00:19:ad:a2:80:bd:92:21:a8:ed:ed:90:9f:e3:83:bc:ee: ab:e0:92:3a:13:60:b4:1f:84:b4:fe:2b:fa:f3:78:45:3c:ed: 59:1b:8f:be:a7:30:25:86:2f:d6:05:4d:c4:56:21:15:e2:05: fc:eb:0a:d5:0f:cd:3e:c0:ab:bb:c8:b9:7d:a9:1d:11:25:bb: b9:e4:31:03:08:79:26:b1:15:59:1b:82:33:8b:86:a0:77:1f: 57:e4:6b:c9:7f:1a:c8:43:42:d3:79:9c:57:13:d2:a0:44:7e: 21:91:08:99:b5:84:6e:34:2b:4a:52:1a:f1:bf:52:03:f6:d5: a9:34:4f:4e:03:db:b3:13:ec:64:08:45:ab:90:51:8d:22:89: e7:d3:d3:a2 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD NkEzNTExMC8GA1UEBRMoRkI2Qjk0NjM2MUYwQzVDODJFMkIwNjc0MEQ0QkE4QjBC OTkzNTNGODAeFw0yNTA0MjUwNjM2MjlaFw0yNTA1MDIwNjM2MjlaMBgxFjAUBgNV BAMTDTY4MGIyZDZkLWNkMWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDqCIPjuIbiAIsyfkdrmyF+ZCvHn2VlYWabGPE/AGB4SY4vrqo5Spng0/dE9LW1 uOpuhGw1xi+zsia69NzOpnS8JP+i35ms3EDieLPLsuzXXctV8iPTb3TbJ8nmT9jp ByhQnX5NVpy/MBFE4JsHUyX275bYlCG8xgEvPly9O0I23qiUU7XguRtrkHgQKyqi H23yPyq6bw8vf60OOV/w3DDo4R+WY5/uPYZzErJ5oiT0BS/X3KFNyD5ajgYmt0rP nGNwGvqh/wbUH1NGU0YNz899FbE0ID0urU2SC+zDATov4ATp+1j509d+nw+4D0X0 krFrtF1KjUdWydFYslHwgmDrAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUg5/q20kl 3MytU4fpuxXPyO6Rlz0wHwYDVR0jBBgwFoAU+2uUY2HwxcguKwZ0DUuosLmTU/gw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM2QTM1L0ExNTlGNzgyRDQ5 MjExRUZCNTY0REU2MkM0RjlBRTAyLy0ydVVZMkh3eGNndUt3WjBEVXVvc0xtVFVf Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvLTJ1VVkySHd4Y2d1S3daMERVdW9zTG1UVV9nLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM2 QTM1L0ExNTlGNzgyRDQ5MjExRUZCNTY0REU2MkM0RjlBRTAyLy0ydVVZMkh3eGNn dUt3WjBEVXVvc0xtVFVfZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFXtciDDgcfSu0u4DZgiCMGTRFw8Acq+vCkItvhFwxlhNGb+HYJ0mrgb k+ze+eTp+xsz1aAdYqNAVV3Op0+pFc7GZP0mGpblBSCUWUBDpcOuAOBbLLFABY5I j4pGP037ShCYvKauAYRYK52i4lYAGa2igL2SIajt7ZCf44O87qvgkjoTYLQfhLT+ K/rzeEU87Vkbj76nMCWGL9YFTcRWIRXiBfzrCtUPzT7Aq7vIuX2pHRElu7nkMQMI eSaxFVkbgjOLhqB3H1fka8l/GshDQtN5nFcT0qBEfiGRCJm1hG40K0pSGvG/UgP2 1ak0T04D27MT7GQIRauQUY0iiefT06I= -----END CERTIFICATE-----Generated at Sat Apr 26 04:31:38 2025 by rpki-client