$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD75B/64A1DA4801DC11ED9EFE2A56C4F9AE02/64E_WXYcfGsa4oxHgWfiBhq1ys8.mft File: 64E_WXYcfGsa4oxHgWfiBhq1ys8.mft (raw, json) Hash identifier: MsW0mw73XEac53XJNBViWJHfa9UFH3QegGJHoshNEgA= Subject key identifier: E4:B6:31:B8:13:45:51:6B:24:26:B5:97:52:3D:62:4D:83:27:56:A2 Authority key identifier: EB:81:3F:59:76:1C:7C:6B:1A:E2:8C:47:81:67:E2:06:1A:B5:CA:CF Certificate issuer: /CN=A91DD75B/serialNumber=EB813F59761C7C6B1AE28C478167E2061AB5CACF Certificate serial: 02A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/64E_WXYcfGsa4oxHgWfiBhq1ys8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DD75B/64A1DA4801DC11ED9EFE2A56C4F9AE02/64E_WXYcfGsa4oxHgWfiBhq1ys8.mft Manifest number: 029D Signing time: Fri 13 Jun 2025 01:02:45 +0000 Manifest this update: Fri 13 Jun 2025 01:02:44 +0000 Manifest next update: Fri 20 Jun 2025 01:02:44 +0000 Files and hashes: 1: 64E_WXYcfGsa4oxHgWfiBhq1ys8.crl (hash: 0pxDMT4QxTSejwEnODP5ZgtOUZJBoEvlUgPENzReHqg=) 2: D6A658CE01DE11ED8236F073C4F9AE02.roa (hash: kmjWEDePak7RaIzaM2s6P+tZd0JsQcs5f1UxF22C33k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DD75B/64A1DA4801DC11ED9EFE2A56C4F9AE02/64E_WXYcfGsa4oxHgWfiBhq1ys8.crl rsync://rpki.apnic.net/member_repository/A91DD75B/64A1DA4801DC11ED9EFE2A56C4F9AE02/64E_WXYcfGsa4oxHgWfiBhq1ys8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/64E_WXYcfGsa4oxHgWfiBhq1ys8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 01:02:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 673 (0x2a1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD75B, serialNumber=EB813F59761C7C6B1AE28C478167E2061AB5CACF Validity Not Before: Jun 13 01:02:44 2025 GMT Not After : Jun 20 01:02:44 2025 GMT Subject: CN=684b78b5-5720 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:d3:64:be:a0:cd:85:cd:8f:91:02:d3:73:73: c4:0d:0f:54:b8:25:09:5a:2a:91:55:cd:bc:4b:8b: ce:94:21:bd:a7:05:2a:6b:6d:49:5f:e5:75:46:79: 1e:d8:10:71:73:06:22:2f:ec:0e:58:57:92:81:92: fc:e6:e0:1c:77:34:24:64:d4:e3:09:d7:a9:0b:d8: ac:46:5b:93:98:74:2e:19:3c:96:13:38:a2:7c:67: d3:7d:57:6b:67:8d:86:10:07:3a:bc:ff:74:ec:8c: 5a:b3:d9:a1:ca:bb:e4:ad:17:f2:8f:62:e5:34:bd: ba:01:f7:d3:ca:cd:31:5b:64:bf:48:35:9c:93:5c: ee:7b:5a:2f:9f:0d:58:47:c0:c4:a0:d7:b3:70:94: 03:36:1c:ec:c6:b3:c5:61:23:ca:41:44:1d:fa:c2: 8e:40:52:68:40:49:e8:9c:cc:69:95:d7:1e:d8:da: 23:18:41:30:f1:44:e2:db:b1:b8:28:6b:36:7a:60: 05:0b:d5:8f:da:28:00:63:49:ef:85:ad:4d:e0:2d: a7:c0:7e:f4:61:a6:b4:c9:aa:aa:86:bf:42:94:05: 4c:c2:62:5c:56:17:0b:1c:45:79:50:e6:62:05:04: dc:a2:6a:92:72:0f:b3:c2:3b:7f:d3:e0:a0:0a:b6: 3a:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:B6:31:B8:13:45:51:6B:24:26:B5:97:52:3D:62:4D:83:27:56:A2 X509v3 Authority Key Identifier: keyid:EB:81:3F:59:76:1C:7C:6B:1A:E2:8C:47:81:67:E2:06:1A:B5:CA:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DD75B/64A1DA4801DC11ED9EFE2A56C4F9AE02/64E_WXYcfGsa4oxHgWfiBhq1ys8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/64E_WXYcfGsa4oxHgWfiBhq1ys8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD75B/64A1DA4801DC11ED9EFE2A56C4F9AE02/64E_WXYcfGsa4oxHgWfiBhq1ys8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:a7:ec:12:d3:91:06:d6:77:19:ff:db:a0:a9:17:93:5f:2e: 9f:22:26:e7:12:a7:0e:88:1c:49:46:c3:3e:f9:1c:d9:c9:0e: 1c:3c:2e:85:a5:86:82:7e:ad:81:cd:0d:84:23:79:c8:e4:45: 92:c9:72:39:07:b1:37:29:38:30:08:2c:33:c4:68:16:ec:84: 56:48:df:9b:43:b0:02:dd:52:d2:dc:0a:3d:be:27:ef:4d:f1: 2d:a5:a2:87:8a:a1:10:23:be:ff:ee:bc:2d:0e:04:10:f4:cb: fc:ed:80:7b:89:db:15:05:a7:8f:f4:b4:cf:f0:3a:a8:0f:20: 92:75:25:6b:a5:31:35:ea:ee:b6:ab:4d:4c:73:8d:02:c0:72: 6c:87:c9:fb:d6:90:55:bd:e1:2b:08:4d:c3:db:9a:f8:b4:d8: 33:83:92:e3:1a:29:bf:0d:9c:b5:4e:72:8d:3c:48:9a:88:e0: 26:8a:64:07:0c:74:09:21:78:cc:f7:19:71:19:71:65:a1:31: f2:27:54:0d:7b:80:d7:d3:22:bb:b4:18:da:f0:6f:35:e6:62: 7a:92:d5:b4:82:d2:1d:27:8c:bb:f1:f5:8b:64:e9:e6:56:54: 72:a3:e3:2b:f9:49:1c:98:66:0a:32:30:a8:ad:92:2b:21:12: 08:1e:71:c5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAqEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REQ3NUIxMTAvBgNVBAUTKEVCODEzRjU5NzYxQzdDNkIxQUUyOEM0NzgxNjdFMjA2 MUFCNUNBQ0YwHhcNMjUwNjEzMDEwMjQ0WhcNMjUwNjIwMDEwMjQ0WjAYMRYwFAYD VQQDEw02ODRiNzhiNS01NzIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArtNkvqDNhc2PkQLTc3PEDQ9UuCUJWiqRVc28S4vOlCG9pwUqa21JX+V1Rnke 2BBxcwYiL+wOWFeSgZL85uAcdzQkZNTjCdepC9isRluTmHQuGTyWEziifGfTfVdr Z42GEAc6vP907Ixas9mhyrvkrRfyj2LlNL26AffTys0xW2S/SDWck1zue1ovnw1Y R8DEoNezcJQDNhzsxrPFYSPKQUQd+sKOQFJoQEnonMxpldce2NojGEEw8UTi27G4 KGs2emAFC9WP2igAY0nvha1N4C2nwH70Yaa0yaqqhr9ClAVMwmJcVhcLHEV5UOZi BQTcomqScg+zwjt/0+CgCrY6lwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOS2MbgT RVFrJCa1l1I9Yk2DJ1aiMB8GA1UdIwQYMBaAFOuBP1l2HHxrGuKMR4Fn4gYatcrP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERDc1Qi82NEExREE0ODAx REMxMUVEOUVGRTJBNTZDNEY5QUUwMi82NEVfV1hZY2ZHc2E0b3hIZ1dmaUJocTF5 czguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzY0RV9XWFljZkdzYTRveEhnV2ZpQmhxMXlzOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RDc1Qi82NEExREE0ODAxREMxMUVEOUVGRTJBNTZDNEY5QUUwMi82NEVfV1hZY2ZH c2E0b3hIZ1dmaUJocTF5czgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBgp+wS05EG1ncZ/9ugqReTXy6fIibnEqcOiBxJRsM++RzZyQ4cPC6F pYaCfq2BzQ2EI3nI5EWSyXI5B7E3KTgwCCwzxGgW7IRWSN+bQ7AC3VLS3Ao9vifv TfEtpaKHiqEQI77/7rwtDgQQ9Mv87YB7idsVBaeP9LTP8DqoDyCSdSVrpTE16u62 q01Mc40CwHJsh8n71pBVveErCE3D25r4tNgzg5LjGim/DZy1TnKNPEiaiOAmimQH DHQJIXjM9xlxGXFloTHyJ1QNe4DX0yK7tBja8G815mJ6ktW0gtIdJ4y78fWLZOnm VlRyo+Mr+UkcmGYKMjCorZIrIRIIHnHF -----END CERTIFICATE-----Generated at Sat Jun 14 18:55:10 2025 by rpki-client