$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE533/E8FD4FA4799F11E7B879101DC4F9AE02/CaPsxJ-Dp5iuE58dy8U27m9nzn4.mft File: CaPsxJ-Dp5iuE58dy8U27m9nzn4.mft (raw, json) Hash identifier: eG6cd11739Iu7j3Fs5y72y3BSuyEpMofM15dgMzN5Rs= Subject key identifier: 31:BB:42:7C:F2:33:94:C9:7F:18:1B:4D:19:C9:70:23:2D:A4:25:3F Authority key identifier: 09:A3:EC:C4:9F:83:A7:98:AE:13:9F:1D:CB:C5:36:EE:6F:67:CE:7E Certificate issuer: /CN=A91CE533/serialNumber=09A3ECC49F83A798AE139F1DCBC536EE6F67CE7E Certificate serial: 1954 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CaPsxJ-Dp5iuE58dy8U27m9nzn4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE533/E8FD4FA4799F11E7B879101DC4F9AE02/CaPsxJ-Dp5iuE58dy8U27m9nzn4.mft Manifest number: 1948 Signing time: Sat 14 Jun 2025 16:22:39 +0000 Manifest this update: Sat 14 Jun 2025 16:22:39 +0000 Manifest next update: Sat 21 Jun 2025 16:22:39 +0000 Files and hashes: 1: CaPsxJ-Dp5iuE58dy8U27m9nzn4.crl (hash: F/IubIn2O4bwA+8ehJH6PO11hNexa9g7kpKT6IqNAoE=) 2: 290732FC79A211E79F34D81FC4F9AE02.roa (hash: SR7eVnerj/ud7fW+5gtERIt5ClN7aXRbGYLPuzi6Nlc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE533/E8FD4FA4799F11E7B879101DC4F9AE02/CaPsxJ-Dp5iuE58dy8U27m9nzn4.crl rsync://rpki.apnic.net/member_repository/A91CE533/E8FD4FA4799F11E7B879101DC4F9AE02/CaPsxJ-Dp5iuE58dy8U27m9nzn4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CaPsxJ-Dp5iuE58dy8U27m9nzn4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 16:22:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6484 (0x1954) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE533, serialNumber=09A3ECC49F83A798AE139F1DCBC536EE6F67CE7E Validity Not Before: Jun 14 16:22:39 2025 GMT Not After : Jun 21 16:22:39 2025 GMT Subject: CN=684da1cf-6f14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:54:18:f3:eb:0b:46:2c:82:ce:90:7d:1b:b3: 1c:40:a1:7c:5f:af:46:06:a2:5a:27:de:32:b3:e9: ff:0b:26:e5:97:36:63:91:12:ae:43:32:76:39:90: f6:8b:68:e9:50:ea:57:4f:58:f4:ce:1e:0e:74:87: 7e:bf:2f:06:8d:3c:ca:43:0a:f9:d8:10:bf:ca:3c: 3f:e9:58:14:b8:29:00:b9:6a:e2:cd:52:9c:48:1c: bf:c2:40:71:9e:d1:22:d1:8c:bc:d7:fb:f7:57:af: 00:de:34:d6:c6:be:09:7c:a9:fb:6f:06:ab:bf:3d: bd:3b:9a:d6:c3:93:8b:71:28:a0:dc:7f:80:59:c8: 09:e4:dd:8f:7d:41:5b:24:16:c4:01:48:ad:99:f2: cd:c8:2c:28:a1:e9:1d:9c:87:37:80:6f:77:67:65: 4b:f4:1f:0d:c3:90:7d:a7:a0:18:12:2e:3a:df:f7: b9:dc:b4:99:27:07:7f:8d:5e:33:28:57:b4:90:1e: 1f:b0:2c:5a:ce:d7:08:6c:88:f1:a5:82:cf:52:d1: 86:f0:87:a2:b0:50:da:e6:44:c5:ce:e6:90:19:54: 17:ed:8a:1c:e6:70:db:89:f2:5d:73:c5:cf:25:67: f3:cc:bb:51:e7:5a:6f:c4:df:a8:85:ef:cf:09:9d: 04:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:BB:42:7C:F2:33:94:C9:7F:18:1B:4D:19:C9:70:23:2D:A4:25:3F X509v3 Authority Key Identifier: keyid:09:A3:EC:C4:9F:83:A7:98:AE:13:9F:1D:CB:C5:36:EE:6F:67:CE:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE533/E8FD4FA4799F11E7B879101DC4F9AE02/CaPsxJ-Dp5iuE58dy8U27m9nzn4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CaPsxJ-Dp5iuE58dy8U27m9nzn4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE533/E8FD4FA4799F11E7B879101DC4F9AE02/CaPsxJ-Dp5iuE58dy8U27m9nzn4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:10:e2:76:46:a7:df:62:e2:87:45:67:05:f8:f7:b8:94:00: 99:d5:fd:00:0c:c7:d5:af:c5:86:49:c6:ed:ad:3c:f4:7c:a4: 5c:15:00:21:96:22:35:75:b9:74:ea:ae:aa:2e:9e:18:2f:56: aa:21:62:75:7c:86:07:9d:d6:08:7d:7f:d8:88:96:cf:e9:37: 6a:82:22:a1:93:ee:69:40:92:4c:a2:64:cd:18:53:39:23:da: 74:e8:a3:bd:79:08:3c:20:66:09:0c:a0:ed:37:f7:cc:9d:b3: 19:98:0b:8e:4c:36:1e:b1:c5:1a:ff:43:36:c5:ae:c8:d8:c7: 87:e5:cc:1a:1b:23:a7:ff:41:4e:04:5f:6c:a4:6e:54:38:61: e5:06:ad:85:c8:74:e7:eb:6a:ee:20:28:a1:fd:36:c3:2e:70: 29:05:e4:9f:f1:ba:f3:6c:81:12:56:f4:8c:43:4f:fb:e4:d9: 6b:86:92:9e:6c:ba:b6:a3:dc:d1:04:3a:40:ee:fd:91:9a:b9: 23:35:b5:be:12:34:2d:72:b2:cd:4a:60:29:c1:4b:60:93:bd: 77:79:ef:6d:34:37:69:9b:3c:a3:b0:f5:21:9b:ff:3a:26:f5: 3c:2d:49:53:da:36:66:ee:a7:d7:37:83:42:e8:dc:9a:80:18: b3:cd:5a:d3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGVQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U1MzMxMTAvBgNVBAUTKDA5QTNFQ0M0OUY4M0E3OThBRTEzOUYxRENCQzUzNkVF NkY2N0NFN0UwHhcNMjUwNjE0MTYyMjM5WhcNMjUwNjIxMTYyMjM5WjAYMRYwFAYD VQQDEw02ODRkYTFjZi02ZjE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvVQY8+sLRiyCzpB9G7McQKF8X69GBqJaJ94ys+n/CybllzZjkRKuQzJ2OZD2 i2jpUOpXT1j0zh4OdId+vy8GjTzKQwr52BC/yjw/6VgUuCkAuWrizVKcSBy/wkBx ntEi0Yy81/v3V68A3jTWxr4JfKn7bwarvz29O5rWw5OLcSig3H+AWcgJ5N2PfUFb JBbEAUitmfLNyCwooekdnIc3gG93Z2VL9B8Nw5B9p6AYEi463/e53LSZJwd/jV4z KFe0kB4fsCxaztcIbIjxpYLPUtGG8IeisFDa5kTFzuaQGVQX7Yoc5nDbifJdc8XP JWfzzLtR51pvxN+ohe/PCZ0EHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDG7Qnzy M5TJfxgbTRnJcCMtpCU/MB8GA1UdIwQYMBaAFAmj7MSfg6eYrhOfHcvFNu5vZ85+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTUzMy9FOEZENEZBNDc5 OUYxMUU3Qjg3OTEwMURDNEY5QUUwMi9DYVBzeEotRHA1aXVFNThkeThVMjdtOW56 bjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NhUHN4Si1EcDVpdUU1OGR5OFUyN205bnpuNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTUzMy9FOEZENEZBNDc5OUYxMUU3Qjg3OTEwMURDNEY5QUUwMi9DYVBzeEotRHA1 aXVFNThkeThVMjdtOW56bjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCtEOJ2RqffYuKHRWcF+Pe4lACZ1f0ADMfVr8WGScbtrTz0fKRcFQAh liI1dbl06q6qLp4YL1aqIWJ1fIYHndYIfX/YiJbP6TdqgiKhk+5pQJJMomTNGFM5 I9p06KO9eQg8IGYJDKDtN/fMnbMZmAuOTDYescUa/0M2xa7I2MeH5cwaGyOn/0FO BF9spG5UOGHlBq2FyHTn62ruICih/TbDLnApBeSf8brzbIESVvSMQ0/75NlrhpKe bLq2o9zRBDpA7v2RmrkjNbW+EjQtcrLNSmApwUtgk713ee9tNDdpmzyjsPUhm/86 JvU8LUlT2jZm7qfXN4NC6NyagBizzVrT -----END CERTIFICATE-----Generated at Sun Jun 15 05:01:28 2025 by rpki-client