$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3D4D/ED6A19929AE711EB8A045626C4F9AE02/30PPMfEc2OafGltFHUP2ixRHa0c.mft File: 30PPMfEc2OafGltFHUP2ixRHa0c.mft (raw, json) Hash identifier: JwdknWNh6MHoXpudGOQLMiBMtcIfP0kXUSoylcZhUUw= Subject key identifier: 3E:48:18:9B:3A:5B:78:97:3C:EF:62:CC:50:D7:C6:64:46:95:EF:47 Authority key identifier: DF:43:CF:31:F1:1C:D8:E6:9F:1A:5B:45:1D:43:F6:8B:14:47:6B:47 Certificate issuer: /CN=A91E3D4D/serialNumber=DF43CF31F11CD8E69F1A5B451D43F68B14476B47 Certificate serial: 0655 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/30PPMfEc2OafGltFHUP2ixRHa0c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3D4D/ED6A19929AE711EB8A045626C4F9AE02/30PPMfEc2OafGltFHUP2ixRHa0c.mft Manifest number: 0642 Signing time: Thu 12 Jun 2025 22:22:15 +0000 Manifest this update: Thu 12 Jun 2025 22:22:14 +0000 Manifest next update: Thu 19 Jun 2025 22:22:14 +0000 Files and hashes: 1: 30PPMfEc2OafGltFHUP2ixRHa0c.crl (hash: Nc9s59A15W/5PlDQtBPGBw6XaMSIaA2xvRtw5lt6D2k=) 2: 8B5C69BACD5211EBBF89483BC4F9AE02.roa (hash: cxAlue1WNdAlWSTsMFe7GMpFY2WGX2iSM6nZwYbzjpY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3D4D/ED6A19929AE711EB8A045626C4F9AE02/30PPMfEc2OafGltFHUP2ixRHa0c.crl rsync://rpki.apnic.net/member_repository/A91E3D4D/ED6A19929AE711EB8A045626C4F9AE02/30PPMfEc2OafGltFHUP2ixRHa0c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/30PPMfEc2OafGltFHUP2ixRHa0c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 22:22:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1621 (0x655) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3D4D, serialNumber=DF43CF31F11CD8E69F1A5B451D43F68B14476B47 Validity Not Before: Jun 12 22:22:14 2025 GMT Not After : Jun 19 22:22:14 2025 GMT Subject: CN=684b5317-8686 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:5b:98:7a:79:11:29:57:b2:e3:78:8c:d3:29: 9f:15:80:a4:03:fd:94:c7:dd:b6:e7:41:15:81:3d: bf:16:3d:36:ba:11:4b:99:5a:af:e9:1b:6c:43:e0: 2d:37:58:af:d1:68:0a:aa:59:da:02:53:f1:97:3b: 2b:cd:1d:92:54:b5:3a:5d:0d:0b:c7:dd:68:98:b6: 47:65:73:05:29:29:9f:ab:3c:0b:f5:6f:85:17:01: c9:5a:bf:97:7d:27:e4:ab:9e:2b:ad:82:2e:dc:cc: 3b:97:b5:08:18:c4:1c:3c:d6:e2:e7:f6:33:ad:8c: d0:27:c5:05:09:8a:fb:16:82:b0:f6:ff:a6:fd:af: ac:b1:26:a1:37:f5:a7:91:f5:5d:37:ef:12:11:86: 8a:0b:75:f4:23:3f:78:6e:3a:93:94:17:9a:f4:90: 10:f5:ee:d6:a7:27:d6:58:01:ca:8d:99:2b:70:5c: 3e:ec:0b:05:bb:14:81:02:35:a6:6a:ef:37:24:86: b4:ef:c0:ec:63:1f:5f:9a:9c:7a:95:a3:b2:c8:31: 1b:95:e4:75:e3:9d:27:0d:d6:42:c5:af:ae:de:a2: 5c:47:a5:cc:8e:35:c9:0b:48:0b:2a:59:2a:fb:70: 5f:7b:34:92:31:8a:8d:58:b9:ed:08:fc:8c:64:90: ca:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:48:18:9B:3A:5B:78:97:3C:EF:62:CC:50:D7:C6:64:46:95:EF:47 X509v3 Authority Key Identifier: keyid:DF:43:CF:31:F1:1C:D8:E6:9F:1A:5B:45:1D:43:F6:8B:14:47:6B:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3D4D/ED6A19929AE711EB8A045626C4F9AE02/30PPMfEc2OafGltFHUP2ixRHa0c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/30PPMfEc2OafGltFHUP2ixRHa0c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3D4D/ED6A19929AE711EB8A045626C4F9AE02/30PPMfEc2OafGltFHUP2ixRHa0c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:d3:b2:09:77:02:5c:7a:2f:f7:8b:40:97:53:6e:6c:e7:b5: e5:ac:24:d2:4f:32:f1:6c:d1:2d:62:5b:18:c9:af:46:5a:00: bd:8b:5c:77:8c:ea:e5:05:04:ad:f7:53:ae:11:45:39:df:12: e4:df:80:ec:27:9e:5a:22:cb:85:b1:0b:51:79:1c:d0:77:29: d4:96:60:99:8a:79:62:03:e8:44:98:fa:8b:c6:83:1b:e8:4f: 76:51:64:ff:7b:ef:ef:44:b3:ff:70:79:ec:99:ef:fb:14:4e: b0:6c:c4:5e:26:be:21:72:8a:2a:78:e3:4b:53:e6:39:5f:6d: ed:32:66:5f:c9:85:cd:27:ba:83:37:15:a1:53:2c:ed:66:d1: 89:b9:dc:fb:3e:ac:8a:08:7f:b1:a1:2c:0b:5b:35:c5:98:60: c6:20:1f:16:4c:9c:67:a7:dd:9a:08:1e:ed:8a:d8:16:e4:98: c9:8e:b2:8a:bf:60:cb:fa:ba:02:2c:68:cc:fc:73:5a:64:3e: 8b:c5:4d:28:8f:d6:8a:c3:be:99:51:5b:e8:48:22:9b:48:dc: f8:a9:2b:4a:9c:c7:a6:ac:ba:5e:60:1f:b6:2d:51:19:78:73: 62:62:3e:e1:4a:00:08:79:25:24:46:92:ea:45:ae:b0:91:99: 2d:f1:6e:61 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBlUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTNENEQxMTAvBgNVBAUTKERGNDNDRjMxRjExQ0Q4RTY5RjFBNUI0NTFENDNGNjhC MTQ0NzZCNDcwHhcNMjUwNjEyMjIyMjE0WhcNMjUwNjE5MjIyMjE0WjAYMRYwFAYD VQQDEw02ODRiNTMxNy04Njg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlVuYenkRKVey43iM0ymfFYCkA/2Ux92250EVgT2/Fj02uhFLmVqv6RtsQ+At N1iv0WgKqlnaAlPxlzsrzR2SVLU6XQ0Lx91omLZHZXMFKSmfqzwL9W+FFwHJWr+X fSfkq54rrYIu3Mw7l7UIGMQcPNbi5/YzrYzQJ8UFCYr7FoKw9v+m/a+ssSahN/Wn kfVdN+8SEYaKC3X0Iz94bjqTlBea9JAQ9e7WpyfWWAHKjZkrcFw+7AsFuxSBAjWm au83JIa078DsYx9fmpx6laOyyDEbleR1450nDdZCxa+u3qJcR6XMjjXJC0gLKlkq +3BfezSSMYqNWLntCPyMZJDKVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD5IGJs6 W3iXPO9izFDXxmRGle9HMB8GA1UdIwQYMBaAFN9DzzHxHNjmnxpbRR1D9osUR2tH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFM0Q0RC9FRDZBMTk5MjlB RTcxMUVCOEEwNDU2MjZDNEY5QUUwMi8zMFBQTWZFYzJPYWZHbHRGSFVQMml4Ukhh MGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzMwUFBNZkVjMk9hZkdsdEZIVVAyaXhSSGEwYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF M0Q0RC9FRDZBMTk5MjlBRTcxMUVCOEEwNDU2MjZDNEY5QUUwMi8zMFBQTWZFYzJP YWZHbHRGSFVQMml4UkhhMGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAc07IJdwJcei/3i0CXU25s57XlrCTSTzLxbNEtYlsYya9GWgC9i1x3 jOrlBQSt91OuEUU53xLk34DsJ55aIsuFsQtReRzQdynUlmCZinliA+hEmPqLxoMb 6E92UWT/e+/vRLP/cHnsme/7FE6wbMReJr4hcooqeONLU+Y5X23tMmZfyYXNJ7qD NxWhUyztZtGJudz7PqyKCH+xoSwLWzXFmGDGIB8WTJxnp92aCB7titgW5JjJjrKK v2DL+roCLGjM/HNaZD6LxU0oj9aKw76ZUVvoSCKbSNz4qStKnMemrLpeYB+2LVEZ eHNiYj7hSgAIeSUkRpLqRa6wkZkt8W5h -----END CERTIFICATE-----Generated at Sat Jun 14 17:11:14 2025 by rpki-client