$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD5E1/165B7BF6BC6E11EAA5CB037DC4F9AE02/rC4NP0JyIX_vudMtzhozLelqOF4.mft File: rC4NP0JyIX_vudMtzhozLelqOF4.mft (raw, json) Hash identifier: m1D1kCRjDeG5q2tuhupDVHAQVXgfAh1F1l/l7IesYKc= Subject key identifier: 61:56:73:91:E0:37:86:56:BD:BD:BF:FC:D1:47:9C:59:34:C6:C1:20 Authority key identifier: AC:2E:0D:3F:42:72:21:7F:EF:B9:D3:2D:CE:1A:33:2D:E9:6A:38:5E Certificate issuer: /CN=A91DD5E1/serialNumber=AC2E0D3F4272217FEFB9D32DCE1A332DE96A385E Certificate serial: 08AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rC4NP0JyIX_vudMtzhozLelqOF4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DD5E1/165B7BF6BC6E11EAA5CB037DC4F9AE02/rC4NP0JyIX_vudMtzhozLelqOF4.mft Manifest number: 08A2 Signing time: Sat 14 Jun 2025 20:21:32 +0000 Manifest this update: Sat 14 Jun 2025 20:21:32 +0000 Manifest next update: Sat 21 Jun 2025 20:21:32 +0000 Files and hashes: 1: rC4NP0JyIX_vudMtzhozLelqOF4.crl (hash: JiQZgd0GUN0BAVVNudBmPlos24SYhUsZZk/XFOsX4jA=) 2: E034D1A6BC6F11EA8FE53280C4F9AE02.roa (hash: r0YFlYuIRf7Aj55A1t3w3hfTwFR/8iacpEclsozeKco=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DD5E1/165B7BF6BC6E11EAA5CB037DC4F9AE02/rC4NP0JyIX_vudMtzhozLelqOF4.crl rsync://rpki.apnic.net/member_repository/A91DD5E1/165B7BF6BC6E11EAA5CB037DC4F9AE02/rC4NP0JyIX_vudMtzhozLelqOF4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rC4NP0JyIX_vudMtzhozLelqOF4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 20:21:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2218 (0x8aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD5E1, serialNumber=AC2E0D3F4272217FEFB9D32DCE1A332DE96A385E Validity Not Before: Jun 14 20:21:32 2025 GMT Not After : Jun 21 20:21:32 2025 GMT Subject: CN=684dd9cc-ee4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:3d:33:71:96:6a:87:d3:13:66:17:8b:5a:7f: 18:f4:c1:b9:39:d6:1a:91:1f:4c:de:91:e7:a5:de: 74:58:8b:2f:df:f6:68:be:ba:b5:fa:c2:87:d0:2c: 39:12:33:17:47:e2:80:6b:ad:8f:3d:53:85:b9:7c: f8:d3:a5:dc:60:5e:5f:3f:6d:d0:a6:6d:42:68:f0: 17:69:4a:74:35:8c:89:81:ed:66:a1:c9:14:15:b9: 65:4c:96:e9:bb:8e:32:f9:97:24:c9:7d:85:0c:3e: 71:19:0d:69:e6:54:48:64:ad:76:d9:ba:ad:ed:27: 1a:b7:23:d6:f4:a4:8f:32:1c:a3:50:33:91:13:13: 26:ae:a3:86:b8:87:df:72:df:9d:ef:3e:3e:b1:e9: b6:c9:e0:7f:a4:39:83:89:a1:e6:fd:be:58:4f:cf: 87:d5:b5:33:ea:59:8e:27:f3:57:c3:a1:31:20:40: b4:a8:db:99:42:d8:9e:ad:25:34:f4:57:98:85:2f: 8b:7d:a2:83:18:53:df:48:5d:58:56:8c:b5:6f:2b: 91:8d:26:7d:fd:04:e9:d8:d4:6b:99:fd:90:0e:67: ac:a0:37:96:ab:4c:25:81:32:c5:38:2f:9c:eb:70: 5e:39:12:2e:03:15:35:98:e2:ed:6e:3b:17:08:8d: 77:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:56:73:91:E0:37:86:56:BD:BD:BF:FC:D1:47:9C:59:34:C6:C1:20 X509v3 Authority Key Identifier: keyid:AC:2E:0D:3F:42:72:21:7F:EF:B9:D3:2D:CE:1A:33:2D:E9:6A:38:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DD5E1/165B7BF6BC6E11EAA5CB037DC4F9AE02/rC4NP0JyIX_vudMtzhozLelqOF4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rC4NP0JyIX_vudMtzhozLelqOF4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD5E1/165B7BF6BC6E11EAA5CB037DC4F9AE02/rC4NP0JyIX_vudMtzhozLelqOF4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:1d:f2:99:b3:45:05:a6:3b:de:0b:22:79:01:ae:f1:49:68: 6e:1c:f0:f5:34:c7:db:9b:db:58:b8:c9:db:3c:c6:5b:24:51: 63:9b:36:39:05:0e:54:e9:af:9e:5c:03:7f:d6:0e:1e:15:8f: 47:a6:89:d0:11:7c:79:e2:15:35:86:54:06:c9:0e:0b:72:a6: 70:0e:be:78:9d:2f:34:ff:cb:41:33:f3:09:95:21:17:f1:98: 73:10:08:95:6a:d7:5b:86:2d:4f:fd:34:2b:21:51:01:48:b6: 29:ca:be:4c:95:37:2d:85:c6:98:74:1c:f2:98:af:b7:d9:48: ab:89:68:67:dc:5b:a4:26:6d:6c:fb:90:fc:0b:76:4a:b2:51: 9c:9f:75:a5:23:18:07:be:3e:e8:01:c0:95:19:41:c4:6c:8a: dc:97:5b:5e:2b:c9:05:46:ad:27:58:17:4a:f1:c1:ad:95:bc: 5c:a8:11:b9:43:3d:59:44:d5:29:0f:09:e8:b2:eb:3b:ba:34: eb:15:2d:49:75:1b:9f:5e:54:c2:ea:d1:10:ed:f3:62:57:03: 53:f3:af:a9:4e:34:7a:c5:e9:ef:45:9a:fd:96:05:7a:2b:f8: 36:22:72:70:b4:65:63:0d:31:2d:a3:e6:6c:f7:15:84:38:73: fb:66:7c:f5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCKowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REQ1RTExMTAvBgNVBAUTKEFDMkUwRDNGNDI3MjIxN0ZFRkI5RDMyRENFMUEzMzJE RTk2QTM4NUUwHhcNMjUwNjE0MjAyMTMyWhcNMjUwNjIxMjAyMTMyWjAYMRYwFAYD VQQDEw02ODRkZDljYy1lZTRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtj0zcZZqh9MTZheLWn8Y9MG5OdYakR9M3pHnpd50WIsv3/Zovrq1+sKH0Cw5 EjMXR+KAa62PPVOFuXz406XcYF5fP23Qpm1CaPAXaUp0NYyJge1mockUFbllTJbp u44y+ZckyX2FDD5xGQ1p5lRIZK122bqt7ScatyPW9KSPMhyjUDORExMmrqOGuIff ct+d7z4+sem2yeB/pDmDiaHm/b5YT8+H1bUz6lmOJ/NXw6ExIEC0qNuZQtierSU0 9FeYhS+LfaKDGFPfSF1YVoy1byuRjSZ9/QTp2NRrmf2QDmesoDeWq0wlgTLFOC+c 63BeORIuAxU1mOLtbjsXCI13BQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGFWc5Hg N4ZWvb2//NFHnFk0xsEgMB8GA1UdIwQYMBaAFKwuDT9CciF/77nTLc4aMy3pajhe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERDVFMS8xNjVCN0JGNkJD NkUxMUVBQTVDQjAzN0RDNEY5QUUwMi9yQzROUDBKeUlYX3Z1ZE10emhvekxlbHFP RjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JDNE5QMEp5SVhfdnVkTXR6aG96TGVscU9GNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RDVFMS8xNjVCN0JGNkJDNkUxMUVBQTVDQjAzN0RDNEY5QUUwMi9yQzROUDBKeUlY X3Z1ZE10emhvekxlbHFPRjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBuHfKZs0UFpjveCyJ5Aa7xSWhuHPD1NMfbm9tYuMnbPMZbJFFjmzY5 BQ5U6a+eXAN/1g4eFY9HponQEXx54hU1hlQGyQ4LcqZwDr54nS80/8tBM/MJlSEX 8ZhzEAiVatdbhi1P/TQrIVEBSLYpyr5MlTcthcaYdBzymK+32UiriWhn3FukJm1s +5D8C3ZKslGcn3WlIxgHvj7oAcCVGUHEbIrcl1teK8kFRq0nWBdK8cGtlbxcqBG5 Qz1ZRNUpDwnosus7ujTrFS1JdRufXlTC6tEQ7fNiVwNT86+pTjR6xenvRZr9lgV6 K/g2InJwtGVjDTEto+Zs9xWEOHP7Znz1 -----END CERTIFICATE-----Generated at Sun Jun 15 05:01:23 2025 by rpki-client