$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA8C2/95A69BE2005311F08E73E14AC4F9AE02/0k_MrTrOf_5b8Cpqj2jAYC4cG1E.mft File: 0k_MrTrOf_5b8Cpqj2jAYC4cG1E.mft (raw, json) Hash identifier: 0Z31Diht4eq1kbC8dlB+Vv4HrxqR7oZxiARU0xEVYgs= Subject key identifier: 2F:B3:DE:A1:AB:82:06:4E:A8:DB:CA:0B:AD:6F:B9:85:25:C7:20:CC Authority key identifier: D2:4F:CC:AD:3A:CE:7F:FE:5B:F0:2A:6A:8F:68:C0:60:2E:1C:1B:51 Certificate issuer: /CN=A91DA8C2/serialNumber=D24FCCAD3ACE7FFE5BF02A6A8F68C0602E1C1B51 Certificate serial: 31 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0k_MrTrOf_5b8Cpqj2jAYC4cG1E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DA8C2/95A69BE2005311F08E73E14AC4F9AE02/0k_MrTrOf_5b8Cpqj2jAYC4cG1E.mft Manifest number: 30 Signing time: Fri 13 Jun 2025 06:35:39 +0000 Manifest this update: Fri 13 Jun 2025 06:35:38 +0000 Manifest next update: Fri 20 Jun 2025 06:35:38 +0000 Files and hashes: 1: 0k_MrTrOf_5b8Cpqj2jAYC4cG1E.crl (hash: NPp885X2alWD8U0Bg5TU47Hr7j9cqU4ZEe221aTj9iE=) 2: 32EE2B68005411F08A6FEB4BC4F9AE02.roa (hash: wwcr+8+DOyZmloRteEL56x1j3vM+7vfdbP5INKVgy7U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DA8C2/95A69BE2005311F08E73E14AC4F9AE02/0k_MrTrOf_5b8Cpqj2jAYC4cG1E.crl rsync://rpki.apnic.net/member_repository/A91DA8C2/95A69BE2005311F08E73E14AC4F9AE02/0k_MrTrOf_5b8Cpqj2jAYC4cG1E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0k_MrTrOf_5b8Cpqj2jAYC4cG1E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 06:35:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49 (0x31) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DA8C2, serialNumber=D24FCCAD3ACE7FFE5BF02A6A8F68C0602E1C1B51 Validity Not Before: Jun 13 06:35:38 2025 GMT Not After : Jun 20 06:35:38 2025 GMT Subject: CN=684bc6ba-b5f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:c1:92:0c:65:c0:27:7e:4d:7a:ef:c0:ba:3a: fc:a3:66:63:97:93:ee:33:f9:30:1d:14:39:37:8e: 6a:31:63:5f:d7:60:ef:da:90:64:58:c3:1f:c9:a9: 00:3d:dc:e2:19:3d:89:2b:1e:a6:ea:f0:86:9b:9f: f5:35:64:57:44:aa:00:7e:3b:47:e9:d7:b2:ef:1f: 5c:fb:5d:94:42:4b:87:64:dd:8f:ef:ae:e3:12:d1: fa:e2:79:62:c2:0b:9d:b2:11:d4:0a:c7:fd:c4:66: eb:ec:97:96:02:7a:63:a9:fc:f4:9d:eb:6d:19:8b: fa:95:4f:4f:22:96:1d:c4:87:a1:e1:56:80:ab:0e: 82:3a:1b:63:3d:e2:2c:24:b7:61:a1:45:58:2a:af: 06:85:4f:e8:53:fe:f9:f1:b3:99:99:74:3a:96:24: 37:02:4e:33:19:4e:9d:2e:c8:8a:59:43:99:32:01: 6c:ea:99:11:f5:85:b5:ae:e5:ba:8f:dd:72:79:94: b3:d6:ad:f6:1e:10:a6:8c:af:4c:d3:b3:17:76:21: 01:57:44:7d:1f:fd:9e:0e:9f:80:c5:ee:48:f9:70: 00:b0:eb:0d:6d:99:92:06:fc:e6:7e:f8:b7:7e:53: cf:14:28:5d:d7:72:55:ee:82:c0:99:ce:59:55:7a: 91:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:B3:DE:A1:AB:82:06:4E:A8:DB:CA:0B:AD:6F:B9:85:25:C7:20:CC X509v3 Authority Key Identifier: keyid:D2:4F:CC:AD:3A:CE:7F:FE:5B:F0:2A:6A:8F:68:C0:60:2E:1C:1B:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DA8C2/95A69BE2005311F08E73E14AC4F9AE02/0k_MrTrOf_5b8Cpqj2jAYC4cG1E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0k_MrTrOf_5b8Cpqj2jAYC4cG1E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA8C2/95A69BE2005311F08E73E14AC4F9AE02/0k_MrTrOf_5b8Cpqj2jAYC4cG1E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:4f:f9:fb:da:ee:60:03:48:e3:71:33:5d:d4:18:66:b8:48: 5f:33:cc:73:f5:8e:26:77:f9:f5:03:5c:47:b8:86:e4:ad:71: da:73:3c:c8:2c:9d:e9:87:2f:82:29:66:21:8c:04:a0:1a:aa: b4:79:c9:5a:ac:7f:cb:23:ce:f6:16:29:25:3c:b7:7e:80:b2: 22:65:cf:9b:67:9d:e2:b3:13:30:7b:d8:f4:85:ad:f9:77:50: 95:a1:3a:4c:50:37:b2:1a:29:01:ef:0e:7a:f5:68:a0:3a:4c: 8b:5a:a0:80:69:6d:7e:ca:f3:83:e2:68:17:f5:57:5e:7e:52: b4:11:e6:2d:6e:6c:cf:fd:cf:9b:fe:a5:ec:96:ec:74:ff:c5: 1c:e5:b3:e4:d0:0c:76:cf:5d:b1:05:07:89:76:ca:3b:04:04: 1c:f3:a6:e9:10:9b:e8:7a:e4:f6:1d:eb:09:c7:ce:52:f0:40: fb:60:be:d0:7a:e4:b3:66:d9:fb:d1:69:74:f9:2d:fc:04:90: 96:1d:c4:ad:8a:dc:df:e8:e6:f0:87:7f:56:b8:a7:f5:38:2f: 3d:3f:75:be:9f:90:14:66:a9:da:37:c8:79:71:43:7e:de:36: f1:e2:06:12:b7:73:39:33:9f:8d:7a:03:9f:3a:85:62:e9:d3: a2:a0:d6:7b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE QThDMjExMC8GA1UEBRMoRDI0RkNDQUQzQUNFN0ZGRTVCRjAyQTZBOEY2OEMwNjAy RTFDMUI1MTAeFw0yNTA2MTMwNjM1MzhaFw0yNTA2MjAwNjM1MzhaMBgxFjAUBgNV BAMTDTY4NGJjNmJhLWI1ZjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDAwZIMZcAnfk1678C6OvyjZmOXk+4z+TAdFDk3jmoxY1/XYO/akGRYwx/JqQA9 3OIZPYkrHqbq8Iabn/U1ZFdEqgB+O0fp17LvH1z7XZRCS4dk3Y/vruMS0frieWLC C52yEdQKx/3EZuvsl5YCemOp/PSd620Zi/qVT08ilh3Eh6HhVoCrDoI6G2M94iwk t2GhRVgqrwaFT+hT/vnxs5mZdDqWJDcCTjMZTp0uyIpZQ5kyAWzqmRH1hbWu5bqP 3XJ5lLPWrfYeEKaMr0zTsxd2IQFXRH0f/Z4On4DF7kj5cACw6w1tmZIG/OZ++Ld+ U88UKF3XclXugsCZzllVepGHAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUL7PeoauC Bk6o28oLrW+5hSXHIMwwHwYDVR0jBBgwFoAU0k/MrTrOf/5b8Cpqj2jAYC4cG1Ew DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURBOEMyLzk1QTY5QkUyMDA1 MzExRjA4RTczRTE0QUM0RjlBRTAyLzBrX01yVHJPZl81YjhDcHFqMmpBWUM0Y0cx RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMGtfTXJUck9mXzViOENwcWoyakFZQzRjRzFFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURB OEMyLzk1QTY5QkUyMDA1MzExRjA4RTczRTE0QUM0RjlBRTAyLzBrX01yVHJPZl81 YjhDcHFqMmpBWUM0Y0cxRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABlP+fva7mADSONxM13UGGa4SF8zzHP1jiZ3+fUDXEe4huStcdpzPMgs nemHL4IpZiGMBKAaqrR5yVqsf8sjzvYWKSU8t36AsiJlz5tnneKzEzB72PSFrfl3 UJWhOkxQN7IaKQHvDnr1aKA6TItaoIBpbX7K84PiaBf1V15+UrQR5i1ubM/9z5v+ peyW7HT/xRzls+TQDHbPXbEFB4l2yjsEBBzzpukQm+h65PYd6wnHzlLwQPtgvtB6 5LNm2fvRaXT5LfwEkJYdxK2K3N/o5vCHf1a4p/U4Lz0/db6fkBRmqdo3yHlxQ37e NvHiBhK3czkzn416A586hWLp06Kg1ns= -----END CERTIFICATE-----Generated at Sun Jun 15 05:50:24 2025 by rpki-client