$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3D4D/ED6A19929AE711EB8A045626C4F9AE02/30PPMfEc2OafGltFHUP2ixRHa0c.mft File: 30PPMfEc2OafGltFHUP2ixRHa0c.mft (raw, json) Hash identifier: ToEs6MpqzJpgUQkTa+h7vG5CWL02isC+Ipxl5X7h7Jk= Subject key identifier: EE:CC:48:7D:C7:A1:FE:4D:E7:9B:CD:CD:4D:AE:85:07:7E:16:41:C6 Authority key identifier: DF:43:CF:31:F1:1C:D8:E6:9F:1A:5B:45:1D:43:F6:8B:14:47:6B:47 Certificate issuer: /CN=A91E3D4D/serialNumber=DF43CF31F11CD8E69F1A5B451D43F68B14476B47 Certificate serial: 063A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/30PPMfEc2OafGltFHUP2ixRHa0c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3D4D/ED6A19929AE711EB8A045626C4F9AE02/30PPMfEc2OafGltFHUP2ixRHa0c.mft Manifest number: 0628 Signing time: Thu 24 Apr 2025 22:36:12 +0000 Manifest this update: Thu 24 Apr 2025 22:36:12 +0000 Manifest next update: Thu 01 May 2025 22:36:12 +0000 Files and hashes: 1: 30PPMfEc2OafGltFHUP2ixRHa0c.crl (hash: ahLldytHmm6U/6f4dVQVbJej0miYynzwYZxQcCN/7jA=) 2: 8B5C69BACD5211EBBF89483BC4F9AE02.roa (hash: hZSSJaQgFguODQcmLdfStIq0+a+g/wi2cxwKmcjF2gk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3D4D/ED6A19929AE711EB8A045626C4F9AE02/30PPMfEc2OafGltFHUP2ixRHa0c.crl rsync://rpki.apnic.net/member_repository/A91E3D4D/ED6A19929AE711EB8A045626C4F9AE02/30PPMfEc2OafGltFHUP2ixRHa0c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/30PPMfEc2OafGltFHUP2ixRHa0c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:36:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1594 (0x63a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3D4D, serialNumber=DF43CF31F11CD8E69F1A5B451D43F68B14476B47 Validity Not Before: Apr 24 22:36:12 2025 GMT Not After : May 1 22:36:12 2025 GMT Subject: CN=680abcdc-5c33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:d5:9f:22:00:39:b8:33:a0:cf:98:98:44:74: 6c:70:ce:2a:c4:f8:24:ae:4e:d2:ac:3f:f2:55:f7: 54:f5:de:96:e4:40:ed:76:8c:65:10:c1:c5:4c:b5: 7a:95:90:52:f3:2e:8f:69:d1:42:7e:fb:a5:39:ba: 5d:7d:b4:cf:8d:30:69:ee:73:5b:99:22:1c:57:b5: 15:f5:87:23:30:7b:27:f1:ba:21:9c:3c:eb:08:70: ff:a5:66:f2:bb:10:8f:52:f7:e3:7d:8b:33:7b:14: 5a:58:49:d6:09:95:d4:29:f2:c4:d8:1e:01:a7:7d: 16:82:44:a0:38:8c:79:6a:f0:70:c9:f3:8f:17:2f: d2:b6:ca:99:9c:4b:5c:4f:98:16:4a:16:e5:35:da: 30:51:1c:92:49:b0:c7:5a:a2:2e:bb:33:6e:c3:82: 9c:30:2b:a3:9a:be:03:a2:ae:06:01:0a:59:01:49: 4b:b3:20:e3:23:4f:16:2a:bb:c9:ab:cb:b1:b9:b3: 7e:6f:d8:53:92:7a:9d:83:d4:82:42:c5:70:91:09: b2:ee:6a:3c:ac:b9:9a:0f:bc:76:5a:80:1d:b7:b6: ab:d2:3e:af:84:50:69:eb:f1:e6:87:56:2f:e2:b9: 5b:08:22:b9:a2:85:ca:74:83:52:07:01:91:93:81: ee:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:CC:48:7D:C7:A1:FE:4D:E7:9B:CD:CD:4D:AE:85:07:7E:16:41:C6 X509v3 Authority Key Identifier: keyid:DF:43:CF:31:F1:1C:D8:E6:9F:1A:5B:45:1D:43:F6:8B:14:47:6B:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3D4D/ED6A19929AE711EB8A045626C4F9AE02/30PPMfEc2OafGltFHUP2ixRHa0c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/30PPMfEc2OafGltFHUP2ixRHa0c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3D4D/ED6A19929AE711EB8A045626C4F9AE02/30PPMfEc2OafGltFHUP2ixRHa0c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:9a:e5:c0:94:3b:d7:a5:bc:72:8f:6f:5d:eb:ff:f5:2b:c0: 03:20:c9:46:35:93:99:74:50:d4:96:88:9c:59:7f:1a:e2:90: ce:f4:37:fd:83:9c:0b:f9:c2:62:80:9c:cb:e8:2c:46:d7:8a: b7:b8:ef:75:dc:ab:14:77:94:17:2c:b0:1b:88:3b:f2:47:d6: 3e:b7:0f:62:ff:bb:4e:a9:f2:ee:6d:2a:62:53:1a:22:31:18: 3b:cf:8d:32:45:41:c1:19:2d:1d:24:ba:91:2f:5a:dc:21:4e: 05:1b:ab:93:ed:ef:85:e1:7b:93:e1:9d:04:ef:7f:8d:6c:78: ee:c3:7f:9f:30:62:fe:74:24:bc:c6:59:39:44:e5:b3:6e:11: d8:c1:8e:b2:d5:ef:c2:7e:cd:95:17:5b:74:f7:93:89:33:3a: d5:61:25:91:86:b2:67:2f:bd:28:e0:9c:43:16:c0:41:18:d3: f4:84:e3:71:d0:f0:fe:3b:df:a9:b7:91:27:15:3a:a8:dd:9a: 08:f8:8b:bf:95:61:93:8e:0f:e6:90:70:45:ea:84:28:bc:56: 6c:71:1c:b7:30:f4:89:79:64:f6:31:02:6c:2e:79:bb:e3:73: 16:a0:a6:55:02:f5:65:43:b8:65:96:f1:0a:b4:6c:9f:d8:a9: db:12:2b:0e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBjowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTNENEQxMTAvBgNVBAUTKERGNDNDRjMxRjExQ0Q4RTY5RjFBNUI0NTFENDNGNjhC MTQ0NzZCNDcwHhcNMjUwNDI0MjIzNjEyWhcNMjUwNTAxMjIzNjEyWjAYMRYwFAYD VQQDEw02ODBhYmNkYy01YzMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4tWfIgA5uDOgz5iYRHRscM4qxPgkrk7SrD/yVfdU9d6W5EDtdoxlEMHFTLV6 lZBS8y6PadFCfvulObpdfbTPjTBp7nNbmSIcV7UV9YcjMHsn8bohnDzrCHD/pWby uxCPUvfjfYszexRaWEnWCZXUKfLE2B4Bp30WgkSgOIx5avBwyfOPFy/StsqZnEtc T5gWShblNdowURySSbDHWqIuuzNuw4KcMCujmr4Doq4GAQpZAUlLsyDjI08WKrvJ q8uxubN+b9hTknqdg9SCQsVwkQmy7mo8rLmaD7x2WoAdt7ar0j6vhFBp6/Hmh1Yv 4rlbCCK5ooXKdINSBwGRk4HuDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO7MSH3H of5N55vNzU2uhQd+FkHGMB8GA1UdIwQYMBaAFN9DzzHxHNjmnxpbRR1D9osUR2tH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFM0Q0RC9FRDZBMTk5MjlB RTcxMUVCOEEwNDU2MjZDNEY5QUUwMi8zMFBQTWZFYzJPYWZHbHRGSFVQMml4Ukhh MGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzMwUFBNZkVjMk9hZkdsdEZIVVAyaXhSSGEwYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF M0Q0RC9FRDZBMTk5MjlBRTcxMUVCOEEwNDU2MjZDNEY5QUUwMi8zMFBQTWZFYzJP YWZHbHRGSFVQMml4UkhhMGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCDmuXAlDvXpbxyj29d6//1K8ADIMlGNZOZdFDUloicWX8a4pDO9Df9 g5wL+cJigJzL6CxG14q3uO913KsUd5QXLLAbiDvyR9Y+tw9i/7tOqfLubSpiUxoi MRg7z40yRUHBGS0dJLqRL1rcIU4FG6uT7e+F4XuT4Z0E73+NbHjuw3+fMGL+dCS8 xlk5ROWzbhHYwY6y1e/Cfs2VF1t095OJMzrVYSWRhrJnL70o4JxDFsBBGNP0hONx 0PD+O9+pt5EnFTqo3ZoI+Iu/lWGTjg/mkHBF6oQovFZscRy3MPSJeWT2MQJsLnm7 43MWoKZVAvVlQ7hllvEKtGyf2KnbEisO -----END CERTIFICATE-----Generated at Sat Apr 26 12:18:14 2025 by rpki-client