$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC28E/B5CA896876CD11ED8DC63A64C4F9AE02/m_aWWObA_qLqCOOn_dKtysoTOUk.mft File: m_aWWObA_qLqCOOn_dKtysoTOUk.mft (raw, json) Hash identifier: 6uYFHjMsIaaSzfoffKdcIPNvlq7OPJ+4Om6UUxQwH9s= Subject key identifier: 35:E4:68:6C:1B:97:52:D4:92:83:90:C8:74:73:60:FE:F0:46:80:19 Authority key identifier: 9B:F6:96:58:E6:C0:FE:A2:EA:08:E3:A7:FD:D2:AD:CA:CA:13:39:49 Certificate issuer: /CN=A91CC28E/serialNumber=9BF69658E6C0FEA2EA08E3A7FDD2ADCACA133949 Certificate serial: 01DA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m_aWWObA_qLqCOOn_dKtysoTOUk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CC28E/B5CA896876CD11ED8DC63A64C4F9AE02/m_aWWObA_qLqCOOn_dKtysoTOUk.mft Manifest number: 01D7 Signing time: Sun 15 Jun 2025 02:03:52 +0000 Manifest this update: Sun 15 Jun 2025 02:03:52 +0000 Manifest next update: Sun 22 Jun 2025 02:03:52 +0000 Files and hashes: 1: m_aWWObA_qLqCOOn_dKtysoTOUk.crl (hash: 9+zZNVr8HxjFLS6Z2hCGLficrOjcZjKL0ekgt3KaqF8=) 2: 73E253FC76D011EDBAECD665C4F9AE02.roa (hash: n/BMRPFUHjUzsfa0GoSirwLl0k+pEwLO2kUv8wHTWRI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CC28E/B5CA896876CD11ED8DC63A64C4F9AE02/m_aWWObA_qLqCOOn_dKtysoTOUk.crl rsync://rpki.apnic.net/member_repository/A91CC28E/B5CA896876CD11ED8DC63A64C4F9AE02/m_aWWObA_qLqCOOn_dKtysoTOUk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m_aWWObA_qLqCOOn_dKtysoTOUk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 02:03:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 474 (0x1da) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CC28E, serialNumber=9BF69658E6C0FEA2EA08E3A7FDD2ADCACA133949 Validity Not Before: Jun 15 02:03:52 2025 GMT Not After : Jun 22 02:03:52 2025 GMT Subject: CN=684e2a08-3743 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:3e:24:e3:b2:71:bd:8e:5c:f1:e9:bf:c1:b6: dc:3b:c9:99:89:b5:24:27:52:ac:fd:ba:55:53:d8: a8:16:86:d2:89:fe:8b:33:2b:1e:99:12:c3:f0:92: c8:a9:c7:67:45:07:b5:31:78:94:14:b4:4f:3c:85: e5:5f:aa:7c:74:db:91:3a:8e:99:c5:64:60:3f:97: 22:42:60:3a:ae:e9:52:a2:a1:3c:17:67:64:6a:ed: 04:06:39:e1:c1:b2:2e:d8:b8:81:89:7c:69:ae:57: 54:90:31:9c:6e:e2:71:e4:1d:21:8a:85:35:3d:a6: 97:20:78:4c:70:1b:22:cc:ed:6a:e0:d3:52:96:ae: 8f:1c:a2:d4:e0:52:c0:60:2c:d3:4b:30:6c:a3:a7: cd:7a:50:a0:31:be:da:37:fb:49:fa:01:69:b7:a3: 08:8f:93:99:b2:2d:45:db:37:3f:6f:e0:10:14:f9: 43:dd:32:2e:53:09:f7:36:b1:96:ad:66:dc:d9:3e: 4f:e5:76:0d:2c:e2:b7:9b:72:00:6b:bc:d0:a2:c5: 49:3e:e4:fc:c7:0a:9f:a3:30:ef:c8:b3:2a:ea:df: 28:45:11:f1:88:bb:24:22:df:c7:94:fc:c1:f4:9d: a5:25:83:4d:e4:89:67:22:fe:29:89:9b:12:24:a7: 32:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:E4:68:6C:1B:97:52:D4:92:83:90:C8:74:73:60:FE:F0:46:80:19 X509v3 Authority Key Identifier: keyid:9B:F6:96:58:E6:C0:FE:A2:EA:08:E3:A7:FD:D2:AD:CA:CA:13:39:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CC28E/B5CA896876CD11ED8DC63A64C4F9AE02/m_aWWObA_qLqCOOn_dKtysoTOUk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m_aWWObA_qLqCOOn_dKtysoTOUk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC28E/B5CA896876CD11ED8DC63A64C4F9AE02/m_aWWObA_qLqCOOn_dKtysoTOUk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:8e:7f:49:11:63:f6:bb:c1:ed:77:8b:cc:d1:8c:fe:78:a4: a4:e3:af:b6:68:ef:92:e6:ec:f9:30:16:10:27:5c:5c:ec:2b: 5d:28:33:6d:6c:c7:3e:6e:10:2a:85:f7:54:76:e0:f0:73:de: 5b:f5:ca:76:f7:a2:8d:d2:7a:93:ed:75:11:00:b8:27:2b:df: 81:cc:ec:9a:36:f8:56:01:c6:5b:c1:9d:85:b6:47:0b:b3:f4: 50:b7:f3:0d:4d:4d:21:71:59:38:13:12:c5:48:48:9a:aa:38: 1a:49:c0:6d:49:7d:76:35:d7:dc:0d:26:e6:a6:ff:26:9f:97: 37:12:be:d1:53:f5:11:f9:bd:fa:0b:7e:17:7d:87:dd:83:b1: 2f:1d:eb:a1:1e:1f:cd:97:70:65:a0:fd:a8:fa:d2:c3:d0:23: 87:91:b9:47:d7:6b:70:81:ee:39:65:42:f5:24:93:8b:3e:99: 7a:df:3d:3f:79:78:70:cc:3c:37:b6:3d:b5:b5:b3:e2:21:18: 45:63:71:f1:10:7f:ce:5a:82:49:da:16:8a:3b:43:f1:47:46: f1:c0:a5:d4:17:48:b7:59:2e:f7:05:5d:0e:9c:96:65:a4:92: 7d:99:03:95:b3:b7:00:ba:05:e3:bf:8e:8b:4b:86:9b:16:8c: 82:6b:3a:fb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0MyOEUxMTAvBgNVBAUTKDlCRjY5NjU4RTZDMEZFQTJFQTA4RTNBN0ZERDJBRENB Q0ExMzM5NDkwHhcNMjUwNjE1MDIwMzUyWhcNMjUwNjIyMDIwMzUyWjAYMRYwFAYD VQQDEw02ODRlMmEwOC0zNzQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2T4k47JxvY5c8em/wbbcO8mZibUkJ1Ks/bpVU9ioFobSif6LMysemRLD8JLI qcdnRQe1MXiUFLRPPIXlX6p8dNuROo6ZxWRgP5ciQmA6rulSoqE8F2dkau0EBjnh wbIu2LiBiXxprldUkDGcbuJx5B0hioU1PaaXIHhMcBsizO1q4NNSlq6PHKLU4FLA YCzTSzBso6fNelCgMb7aN/tJ+gFpt6MIj5OZsi1F2zc/b+AQFPlD3TIuUwn3NrGW rWbc2T5P5XYNLOK3m3IAa7zQosVJPuT8xwqfozDvyLMq6t8oRRHxiLskIt/HlPzB 9J2lJYNN5IlnIv4piZsSJKcy8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDXkaGwb l1LUkoOQyHRzYP7wRoAZMB8GA1UdIwQYMBaAFJv2lljmwP6i6gjjp/3SrcrKEzlJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQzI4RS9CNUNBODk2ODc2 Q0QxMUVEOERDNjNBNjRDNEY5QUUwMi9tX2FXV09iQV9xTHFDT09uX2RLdHlzb1RP VWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21fYVdXT2JBX3FMcUNPT25fZEt0eXNvVE9Vay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QzI4RS9CNUNBODk2ODc2Q0QxMUVEOERDNjNBNjRDNEY5QUUwMi9tX2FXV09iQV9x THFDT09uX2RLdHlzb1RPVWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBjjn9JEWP2u8Htd4vM0Yz+eKSk46+2aO+S5uz5MBYQJ1xc7CtdKDNt bMc+bhAqhfdUduDwc95b9cp296KN0nqT7XURALgnK9+BzOyaNvhWAcZbwZ2FtkcL s/RQt/MNTU0hcVk4ExLFSEiaqjgaScBtSX12NdfcDSbmpv8mn5c3Er7RU/UR+b36 C34XfYfdg7EvHeuhHh/Nl3BloP2o+tLD0COHkblH12twge45ZUL1JJOLPpl63z0/ eXhwzDw3tj21tbPiIRhFY3HxEH/OWoJJ2haKO0PxR0bxwKXUF0i3WS73BV0OnJZl pJJ9mQOVs7cAugXjv46LS4abFoyCazr7 -----END CERTIFICATE-----Generated at Sun Jun 15 04:57:54 2025 by rpki-client