$ rpki-client -vvf rpki.apnic.net/member_repository/A91E46E8/D4B8DA16B15A11EC8240B820C4F9AE02/CEz6nrwGwNaBBUiw7RzEfPjuDzE.mft File: CEz6nrwGwNaBBUiw7RzEfPjuDzE.mft (raw, json) Hash identifier: zqdO852WAYJpz8ahy4ssKML/yiwvJZB5h8cANuqy7kk= Subject key identifier: 65:50:53:A7:94:27:B9:77:7E:3D:90:F7:4A:C9:CB:C6:68:F7:5E:0A Authority key identifier: 08:4C:FA:9E:BC:06:C0:D6:81:05:48:B0:ED:1C:C4:7C:F8:EE:0F:31 Certificate issuer: /CN=A91E46E8/serialNumber=084CFA9EBC06C0D6810548B0ED1CC47CF8EE0F31 Certificate serial: 0370 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CEz6nrwGwNaBBUiw7RzEfPjuDzE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E46E8/D4B8DA16B15A11EC8240B820C4F9AE02/CEz6nrwGwNaBBUiw7RzEfPjuDzE.mft Manifest number: 036B Signing time: Fri 13 Jun 2025 00:28:55 +0000 Manifest this update: Fri 13 Jun 2025 00:28:55 +0000 Manifest next update: Fri 20 Jun 2025 00:28:55 +0000 Files and hashes: 1: CEz6nrwGwNaBBUiw7RzEfPjuDzE.crl (hash: c3CM9w1Ql0HcgmVUDy5tdW5UZV1Yi/IbN5BbR/3frIo=) 2: 97E05E58B15E11ECB6B31625C4F9AE02.roa (hash: 814gK30vRsw3f3GeLBYUI3A+K0FBKsWqCyMte+6ZS3M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E46E8/D4B8DA16B15A11EC8240B820C4F9AE02/CEz6nrwGwNaBBUiw7RzEfPjuDzE.crl rsync://rpki.apnic.net/member_repository/A91E46E8/D4B8DA16B15A11EC8240B820C4F9AE02/CEz6nrwGwNaBBUiw7RzEfPjuDzE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CEz6nrwGwNaBBUiw7RzEfPjuDzE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 00:28:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 880 (0x370) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E46E8, serialNumber=084CFA9EBC06C0D6810548B0ED1CC47CF8EE0F31 Validity Not Before: Jun 13 00:28:55 2025 GMT Not After : Jun 20 00:28:55 2025 GMT Subject: CN=684b70c7-542b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:9a:6f:cc:65:47:00:c6:3e:e8:a1:b5:71:18: b8:7c:bf:ec:ea:90:4f:06:ba:f9:ce:e7:a8:70:c3: cb:2b:65:ea:c1:15:2d:c7:26:39:78:2a:0d:af:e8: d5:38:ba:92:f4:36:46:49:a8:fa:42:73:46:4e:18: db:34:77:28:f8:57:0f:22:af:0d:f1:4e:84:1d:f1: 8a:25:33:e8:9c:3b:3d:8e:42:03:34:50:ec:73:21: 18:d0:45:8e:96:74:d8:c5:ea:17:8f:f6:e6:9d:d1: 55:7d:f8:88:33:94:aa:46:17:43:0c:d3:69:d2:a0: 91:2b:90:b2:0e:26:ea:11:f7:06:e5:36:eb:cc:20: 7f:14:ae:dc:32:3a:13:50:94:ce:23:46:b2:79:83: 89:ad:c5:2d:c2:95:94:e8:4a:c7:84:72:fa:f0:1c: 36:24:35:a9:e7:83:c4:1d:d1:48:2e:92:15:87:fe: fa:f4:e8:dd:f2:19:50:e9:0d:e1:d0:bd:df:2f:cb: a9:6e:26:ba:8a:08:0f:79:61:df:ce:4d:bd:35:08: a0:c9:98:bf:80:53:a8:28:44:1d:fc:51:c7:a7:1b: 9d:60:a0:0d:7e:cd:9e:32:4d:26:6f:ee:fa:9d:7f: c7:2d:3a:4e:33:0a:c4:50:38:ac:56:25:a7:5c:33: 0a:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:50:53:A7:94:27:B9:77:7E:3D:90:F7:4A:C9:CB:C6:68:F7:5E:0A X509v3 Authority Key Identifier: keyid:08:4C:FA:9E:BC:06:C0:D6:81:05:48:B0:ED:1C:C4:7C:F8:EE:0F:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E46E8/D4B8DA16B15A11EC8240B820C4F9AE02/CEz6nrwGwNaBBUiw7RzEfPjuDzE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CEz6nrwGwNaBBUiw7RzEfPjuDzE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E46E8/D4B8DA16B15A11EC8240B820C4F9AE02/CEz6nrwGwNaBBUiw7RzEfPjuDzE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:74:f1:4f:cb:fb:70:7f:ab:d5:55:0b:33:51:35:5a:e1:02: 6c:a1:a2:2f:29:71:12:a0:2a:e4:f3:74:0e:0c:f7:62:1d:07: 6f:0b:43:95:fa:f8:5f:f8:1a:09:84:c5:91:cc:84:8d:09:b6: 65:52:d3:d3:24:65:e0:a4:dd:a9:f9:82:91:60:03:33:32:0e: e6:58:d7:c7:81:fd:88:51:64:c4:30:e1:f5:17:67:23:71:a0: 78:99:e7:cc:ad:72:e1:bb:30:74:e5:df:c9:e4:ce:40:f7:78: 36:c3:88:51:aa:75:25:1a:4e:b2:d9:40:3f:98:21:7f:3f:a0: 2d:b9:15:7a:38:e8:78:97:da:eb:ea:5d:a3:97:89:be:51:93: 0e:0d:72:70:80:bf:d8:8d:16:40:a7:24:94:36:09:c8:88:83: 0c:fd:d3:54:79:72:42:9c:33:0b:e2:f9:cb:41:58:2a:6b:f8: fa:91:e8:ea:fe:93:37:98:9f:d2:2d:2f:7b:12:48:5f:9e:1e: d0:02:6c:a0:95:b6:b7:09:c6:a7:21:9f:48:e0:26:e7:20:84: 20:76:4e:a9:c4:1a:d4:10:4f:ce:25:e6:d7:cc:51:11:17:2f: cc:dc:91:1b:fc:0c:75:4a:5e:33:82:10:d6:47:80:e6:62:78: 82:f2:68:fc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA3AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTQ2RTgxMTAvBgNVBAUTKDA4NENGQTlFQkMwNkMwRDY4MTA1NDhCMEVEMUNDNDdD RjhFRTBGMzEwHhcNMjUwNjEzMDAyODU1WhcNMjUwNjIwMDAyODU1WjAYMRYwFAYD VQQDEw02ODRiNzBjNy01NDJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu5pvzGVHAMY+6KG1cRi4fL/s6pBPBrr5zueocMPLK2XqwRUtxyY5eCoNr+jV OLqS9DZGSaj6QnNGThjbNHco+FcPIq8N8U6EHfGKJTPonDs9jkIDNFDscyEY0EWO lnTYxeoXj/bmndFVffiIM5SqRhdDDNNp0qCRK5CyDibqEfcG5TbrzCB/FK7cMjoT UJTOI0ayeYOJrcUtwpWU6ErHhHL68Bw2JDWp54PEHdFILpIVh/769Ojd8hlQ6Q3h 0L3fL8upbia6iggPeWHfzk29NQigyZi/gFOoKEQd/FHHpxudYKANfs2eMk0mb+76 nX/HLTpOMwrEUDisViWnXDMKmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGVQU6eU J7l3fj2Q90rJy8Zo914KMB8GA1UdIwQYMBaAFAhM+p68BsDWgQVIsO0cxHz47g8x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNDZFOC9ENEI4REExNkIx NUExMUVDODI0MEI4MjBDNEY5QUUwMi9DRXo2bnJ3R3dOYUJCVWl3N1J6RWZQanVE ekUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NFejZucndHd05hQkJVaXc3UnpFZlBqdUR6RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NDZFOC9ENEI4REExNkIxNUExMUVDODI0MEI4MjBDNEY5QUUwMi9DRXo2bnJ3R3dO YUJCVWl3N1J6RWZQanVEekUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCDdPFPy/twf6vVVQszUTVa4QJsoaIvKXESoCrk83QODPdiHQdvC0OV +vhf+BoJhMWRzISNCbZlUtPTJGXgpN2p+YKRYAMzMg7mWNfHgf2IUWTEMOH1F2cj caB4mefMrXLhuzB05d/J5M5A93g2w4hRqnUlGk6y2UA/mCF/P6AtuRV6OOh4l9rr 6l2jl4m+UZMODXJwgL/YjRZApySUNgnIiIMM/dNUeXJCnDML4vnLQVgqa/j6kejq /pM3mJ/SLS97Ekhfnh7QAmyglba3CcanIZ9I4CbnIIQgdk6pxBrUEE/OJebXzFER Fy/M3JEb/Ax1Sl4zghDWR4DmYniC8mj8 -----END CERTIFICATE-----Generated at Sat Jun 14 19:37:24 2025 by rpki-client