$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8BEE/6E0627F83F0311EBBE75B44BC4F9AE02/aWnCC4aZpI0HLUowZ8_wDV9EfJg.mft File: aWnCC4aZpI0HLUowZ8_wDV9EfJg.mft (raw, json) Hash identifier: qQnMglfQS2cmRCF/dVmT2MzbwpdFfEdjhm5AkfFU6xk= Subject key identifier: FB:71:68:4D:B4:91:E1:DE:A9:F6:CF:E5:98:03:59:FA:02:3A:35:9C Authority key identifier: 69:69:C2:0B:86:99:A4:8D:07:2D:4A:30:67:CF:F0:0D:5F:44:7C:98 Certificate issuer: /CN=A91C8BEE/serialNumber=6969C20B8699A48D072D4A3067CFF00D5F447C98 Certificate serial: 0703 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWnCC4aZpI0HLUowZ8_wDV9EfJg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C8BEE/6E0627F83F0311EBBE75B44BC4F9AE02/aWnCC4aZpI0HLUowZ8_wDV9EfJg.mft Manifest number: 06FE Signing time: Fri 02 May 2025 22:05:19 +0000 Manifest this update: Fri 02 May 2025 22:05:18 +0000 Manifest next update: Fri 09 May 2025 22:05:18 +0000 Files and hashes: 1: aWnCC4aZpI0HLUowZ8_wDV9EfJg.crl (hash: 0641W/UgqIhbY3juTYFTpWvgxHEQSJDA4iNeEekp4HI=) 2: DE524D283F0511EBBB4C174FC4F9AE02.roa (hash: zWRikEivlVPteMMOfXpGEHZKMPXoa2S3XawXpPi4Aig=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C8BEE/6E0627F83F0311EBBE75B44BC4F9AE02/aWnCC4aZpI0HLUowZ8_wDV9EfJg.crl rsync://rpki.apnic.net/member_repository/A91C8BEE/6E0627F83F0311EBBE75B44BC4F9AE02/aWnCC4aZpI0HLUowZ8_wDV9EfJg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWnCC4aZpI0HLUowZ8_wDV9EfJg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 May 2025 21:48:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1795 (0x703) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C8BEE, serialNumber=6969C20B8699A48D072D4A3067CFF00D5F447C98 Validity Not Before: May 2 22:05:18 2025 GMT Not After : May 9 22:05:18 2025 GMT Subject: CN=6815419f-4c34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:53:7c:f2:fd:af:01:fe:e0:a4:6e:a5:b4:39: 68:75:a5:f6:60:81:ac:7b:7f:0f:40:f2:16:78:ef: 92:25:f1:6d:3a:e5:d2:d4:67:a4:0a:d4:52:af:e8: fc:ad:cb:c8:4f:3f:20:b9:71:2b:d2:d6:40:b8:6b: c5:38:7b:58:87:10:0d:59:35:f9:14:12:38:aa:74: 4c:f1:e9:4e:79:93:66:8f:d6:4c:0c:fe:31:5a:6c: 1a:43:dd:f1:aa:d6:7f:07:90:5c:c4:1f:88:6f:a0: b4:9d:e2:5c:54:fe:12:de:c7:bc:ed:e9:28:0e:51: e0:50:53:33:23:56:84:64:d4:21:16:cb:5f:d5:49: 9d:5d:82:83:5f:1c:7e:ec:42:f4:65:2d:82:23:3c: 20:4d:af:0a:9e:c5:93:8b:83:b7:09:61:be:01:59: 71:2f:2a:f4:21:ce:b0:5f:b1:36:26:3c:99:ac:66: 1f:03:b8:97:79:3e:bb:b5:8c:07:44:40:fc:db:25: 78:86:5f:d6:f9:3c:61:34:35:c0:ba:c6:f1:ff:0b: 68:ed:36:24:72:17:ea:88:e3:90:24:03:10:68:d1: e9:e9:da:58:c7:4f:4d:eb:f4:4b:d9:47:18:17:b4: c5:c4:5c:d4:03:d3:6d:14:b6:1c:d5:0e:70:9a:73: 68:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:71:68:4D:B4:91:E1:DE:A9:F6:CF:E5:98:03:59:FA:02:3A:35:9C X509v3 Authority Key Identifier: keyid:69:69:C2:0B:86:99:A4:8D:07:2D:4A:30:67:CF:F0:0D:5F:44:7C:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C8BEE/6E0627F83F0311EBBE75B44BC4F9AE02/aWnCC4aZpI0HLUowZ8_wDV9EfJg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWnCC4aZpI0HLUowZ8_wDV9EfJg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8BEE/6E0627F83F0311EBBE75B44BC4F9AE02/aWnCC4aZpI0HLUowZ8_wDV9EfJg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:28:2f:84:79:f5:8e:da:de:c8:55:0c:94:a9:0b:11:8e:7d: d5:13:00:6b:ab:15:cf:6b:4e:e9:61:69:5f:de:f3:90:5d:6b: 37:01:d0:f0:90:89:65:2b:e1:c5:ec:52:fc:07:29:e5:ae:03: aa:0c:dc:2e:ee:cb:eb:f3:df:ec:90:bf:ae:b8:95:16:19:bd: 73:7b:25:2c:ba:07:a1:04:07:76:5b:b5:ee:41:dc:4e:21:af: cd:49:40:67:aa:27:c1:d1:7e:6a:4c:ac:b3:bf:12:0a:39:68: 20:6e:2a:be:19:19:40:0c:9f:f2:18:52:8a:77:ef:d7:46:d2: 5d:60:01:b0:95:cd:f7:9d:03:43:19:f0:b5:eb:00:f7:f8:b1: 14:4b:5d:ef:52:1c:7e:60:34:b8:a0:46:4a:1c:47:6d:3d:1b: cc:8e:b0:37:ac:78:65:36:a4:7e:80:2f:c5:b6:d1:fe:b5:5b: 70:d2:d6:72:97:ae:74:79:c5:da:9a:e7:fd:b4:f0:f7:2f:48: 6e:ce:bc:0c:aa:b6:13:a9:f9:2f:ea:60:37:3b:5d:e8:27:19: ca:9f:d1:2c:6e:3f:bf:36:29:29:52:82:8d:9f:6d:0d:c1:fb: 44:40:9a:c0:38:7a:c8:a6:23:7f:6b:a6:cf:f9:65:8d:b5:78: 2e:eb:8c:17 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBwMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzhCRUUxMTAvBgNVBAUTKDY5NjlDMjBCODY5OUE0OEQwNzJENEEzMDY3Q0ZGMDBE NUY0NDdDOTgwHhcNMjUwNTAyMjIwNTE4WhcNMjUwNTA5MjIwNTE4WjAYMRYwFAYD VQQDEw02ODE1NDE5Zi00YzM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzlN88v2vAf7gpG6ltDlodaX2YIGse38PQPIWeO+SJfFtOuXS1GekCtRSr+j8 rcvITz8guXEr0tZAuGvFOHtYhxANWTX5FBI4qnRM8elOeZNmj9ZMDP4xWmwaQ93x qtZ/B5BcxB+Ib6C0neJcVP4S3se87ekoDlHgUFMzI1aEZNQhFstf1UmdXYKDXxx+ 7EL0ZS2CIzwgTa8KnsWTi4O3CWG+AVlxLyr0Ic6wX7E2JjyZrGYfA7iXeT67tYwH RED82yV4hl/W+TxhNDXAusbx/wto7TYkchfqiOOQJAMQaNHp6dpYx09N6/RL2UcY F7TFxFzUA9NtFLYc1Q5wmnNovQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPtxaE20 keHeqfbP5ZgDWfoCOjWcMB8GA1UdIwQYMBaAFGlpwguGmaSNBy1KMGfP8A1fRHyY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOEJFRS82RTA2MjdGODNG MDMxMUVCQkU3NUI0NEJDNEY5QUUwMi9hV25DQzRhWnBJMEhMVW93Wjhfd0RWOUVm SmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FXbkNDNGFacEkwSExVb3daOF93RFY5RWZKZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OEJFRS82RTA2MjdGODNGMDMxMUVCQkU3NUI0NEJDNEY5QUUwMi9hV25DQzRhWnBJ MEhMVW93Wjhfd0RWOUVmSmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAHKC+EefWO2t7IVQyUqQsRjn3VEwBrqxXPa07pYWlf3vOQXWs3AdDw kIllK+HF7FL8BynlrgOqDNwu7svr89/skL+uuJUWGb1zeyUsugehBAd2W7XuQdxO Ia/NSUBnqifB0X5qTKyzvxIKOWggbiq+GRlADJ/yGFKKd+/XRtJdYAGwlc33nQND GfC16wD3+LEUS13vUhx+YDS4oEZKHEdtPRvMjrA3rHhlNqR+gC/FttH+tVtw0tZy l650ecXamuf9tPD3L0huzrwMqrYTqfkv6mA3O13oJxnKn9Esbj+/NikpUoKNn20N wftEQJrAOHrIpiN/a6bP+WWNtXgu64wX -----END CERTIFICATE-----Generated at Sat May 3 01:17:17 2025 by rpki-client