$ rpki-client -vvf rpki.apnic.net/member_repository/A91DBA5B/58004AAA70E711EFB444AF70C4F9AE02/30fOzFfqiK65ajhlVgufImC6mQ4.mft File: 30fOzFfqiK65ajhlVgufImC6mQ4.mft (raw, json) Hash identifier: fqeob2k8gt7XrSCX5IwSSwlN918g9Ozm/mO1QjPbnRQ= Subject key identifier: B2:94:1A:6E:CC:CC:6A:D5:06:75:39:83:2A:F8:45:55:40:D4:9D:95 Authority key identifier: DF:47:CE:CC:57:EA:88:AE:B9:6A:38:65:56:0B:9F:22:60:BA:99:0E Certificate issuer: /CN=A91DBA5B/serialNumber=DF47CECC57EA88AEB96A3865560B9F2260BA990E Certificate serial: 8E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/30fOzFfqiK65ajhlVgufImC6mQ4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DBA5B/58004AAA70E711EFB444AF70C4F9AE02/30fOzFfqiK65ajhlVgufImC6mQ4.mft Manifest number: 8D Signing time: Fri 13 Jun 2025 05:25:00 +0000 Manifest this update: Fri 13 Jun 2025 05:25:00 +0000 Manifest next update: Fri 20 Jun 2025 05:24:59 +0000 Files and hashes: 1: 30fOzFfqiK65ajhlVgufImC6mQ4.crl (hash: UNNzuOXe+xt2d4NlRXGT2XQ23vdVNH7btMLDvKUM2FA=) 2: 02389B7670E811EFA8DBE571C4F9AE02.roa (hash: AxDsA8rt+K98y/uEnY4JUiHZ0XXqFDNJTlI0IgqxxqQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DBA5B/58004AAA70E711EFB444AF70C4F9AE02/30fOzFfqiK65ajhlVgufImC6mQ4.crl rsync://rpki.apnic.net/member_repository/A91DBA5B/58004AAA70E711EFB444AF70C4F9AE02/30fOzFfqiK65ajhlVgufImC6mQ4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/30fOzFfqiK65ajhlVgufImC6mQ4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 05:24:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 142 (0x8e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DBA5B, serialNumber=DF47CECC57EA88AEB96A3865560B9F2260BA990E Validity Not Before: Jun 13 05:25:00 2025 GMT Not After : Jun 20 05:24:59 2025 GMT Subject: CN=684bb62c-f4a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:b1:cc:36:eb:e3:6b:52:17:d8:ef:14:0e:a4: 92:5c:51:62:5b:af:3e:31:0d:10:1d:89:2d:08:5d: 11:46:73:11:e7:c9:a6:da:6c:bf:bf:57:26:24:51: 51:45:d9:ef:9f:10:56:3c:a7:6e:5a:5f:ed:c1:6f: 23:f7:93:a1:1b:32:db:0b:78:27:63:e0:93:19:f4: 43:36:c9:f7:e0:58:13:79:0d:ac:a0:54:20:50:2e: ab:4e:4b:7e:6c:ff:66:87:c8:43:60:16:0a:1c:57: f1:7a:b1:fe:d6:de:e9:5a:63:8f:d8:64:3c:a6:bf: f6:5f:e6:0f:ef:72:4f:93:ec:e1:67:0d:21:d3:66: 35:9c:90:04:28:d8:cc:09:43:ff:bb:cf:53:78:b7: d2:21:c9:1f:b4:b8:bf:ed:52:e7:46:f8:63:e1:3b: 4d:70:1e:04:03:35:d4:a1:55:e8:53:3b:54:4d:c6: ef:af:72:f5:00:63:fc:8c:4f:4e:33:09:a3:d6:f2: a7:d8:b4:1a:c1:ab:18:8c:74:69:1b:fd:c5:3d:ec: e8:b7:b9:8a:77:9d:06:58:42:ad:58:0b:4a:62:3f: a3:99:83:99:a0:e1:75:1b:c9:9d:f0:ab:db:03:34: 45:a8:35:01:23:21:11:1e:41:8c:1d:47:8a:a2:81: bc:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:94:1A:6E:CC:CC:6A:D5:06:75:39:83:2A:F8:45:55:40:D4:9D:95 X509v3 Authority Key Identifier: keyid:DF:47:CE:CC:57:EA:88:AE:B9:6A:38:65:56:0B:9F:22:60:BA:99:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DBA5B/58004AAA70E711EFB444AF70C4F9AE02/30fOzFfqiK65ajhlVgufImC6mQ4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/30fOzFfqiK65ajhlVgufImC6mQ4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBA5B/58004AAA70E711EFB444AF70C4F9AE02/30fOzFfqiK65ajhlVgufImC6mQ4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:57:f6:7f:7d:fd:7f:13:e1:f4:b8:30:b2:6d:a5:55:00:06: 15:86:a3:5f:7b:82:6b:96:0c:5a:ca:66:a7:96:1c:fe:4a:b5: 27:9d:4c:f9:bd:9e:0d:3b:6e:68:ab:1a:4b:ad:3d:3d:ef:73: 43:0a:e9:e7:a5:3d:41:aa:59:38:97:b1:14:bc:45:21:87:17: 77:d2:3d:66:89:fb:5b:29:5a:6e:c5:7b:d3:b9:75:6c:18:8e: 56:0d:23:43:b3:fb:c2:ce:47:23:88:e8:dc:b8:b5:31:d2:b4: b4:ae:82:f9:d5:ca:14:d6:2c:f1:74:8a:4e:10:c5:0c:66:4e: e7:85:11:a5:35:1a:42:46:cf:e2:d1:ff:41:8e:c0:aa:21:9a: cb:ce:6b:83:68:ef:ae:4c:22:d7:ae:32:7c:af:75:2d:af:4b: db:fd:b5:7b:f5:b8:e9:5e:95:95:f9:8a:ef:22:ac:3f:fe:a0: 04:7f:3f:cc:7e:a3:76:48:e6:b0:84:9b:48:b4:b3:de:c3:8f: a3:53:96:68:b4:6b:29:c0:3b:a9:ba:ab:9f:0b:0e:f9:05:4b: 59:bb:ed:bc:18:d0:bd:c9:58:d6:a4:1f:5b:23:6b:7f:02:18: bb:8e:d9:b1:48:15:de:41:4c:53:ad:1b:fe:58:22:e6:bb:8e: fe:2d:fe:3a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAI4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REJBNUIxMTAvBgNVBAUTKERGNDdDRUNDNTdFQTg4QUVCOTZBMzg2NTU2MEI5RjIy NjBCQTk5MEUwHhcNMjUwNjEzMDUyNTAwWhcNMjUwNjIwMDUyNDU5WjAYMRYwFAYD VQQDEw02ODRiYjYyYy1mNGE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr7HMNuvja1IX2O8UDqSSXFFiW68+MQ0QHYktCF0RRnMR58mm2my/v1cmJFFR RdnvnxBWPKduWl/twW8j95OhGzLbC3gnY+CTGfRDNsn34FgTeQ2soFQgUC6rTkt+ bP9mh8hDYBYKHFfxerH+1t7pWmOP2GQ8pr/2X+YP73JPk+zhZw0h02Y1nJAEKNjM CUP/u89TeLfSIckftLi/7VLnRvhj4TtNcB4EAzXUoVXoUztUTcbvr3L1AGP8jE9O Mwmj1vKn2LQawasYjHRpG/3FPezot7mKd50GWEKtWAtKYj+jmYOZoOF1G8md8Kvb AzRFqDUBIyERHkGMHUeKooG8YwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLKUGm7M zGrVBnU5gyr4RVVA1J2VMB8GA1UdIwQYMBaAFN9HzsxX6oiuuWo4ZVYLnyJgupkO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQkE1Qi81ODAwNEFBQTcw RTcxMUVGQjQ0NEFGNzBDNEY5QUUwMi8zMGZPekZmcWlLNjVhamhsVmd1ZkltQzZt UTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzMwZk96RmZxaUs2NWFqaGxWZ3VmSW1DNm1RNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QkE1Qi81ODAwNEFBQTcwRTcxMUVGQjQ0NEFGNzBDNEY5QUUwMi8zMGZPekZmcWlL NjVhamhsVmd1ZkltQzZtUTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAeV/Z/ff1/E+H0uDCybaVVAAYVhqNfe4Jrlgxaymanlhz+SrUnnUz5 vZ4NO25oqxpLrT0973NDCunnpT1Bqlk4l7EUvEUhhxd30j1miftbKVpuxXvTuXVs GI5WDSNDs/vCzkcjiOjcuLUx0rS0roL51coU1izxdIpOEMUMZk7nhRGlNRpCRs/i 0f9BjsCqIZrLzmuDaO+uTCLXrjJ8r3Utr0vb/bV79bjpXpWV+YrvIqw//qAEfz/M fqN2SOawhJtItLPew4+jU5ZotGspwDupuqufCw75BUtZu+28GNC9yVjWpB9bI2t/ Ahi7jtmxSBXeQUxTrRv+WCLmu47+Lf46 -----END CERTIFICATE-----Generated at Sat Jun 14 19:04:28 2025 by rpki-client