$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA449/401790FC073C11EF8D1DB056C4F9AE02/b2WgySJgsa2iMYeym6w76trAVmE.mft File: b2WgySJgsa2iMYeym6w76trAVmE.mft (raw, json) Hash identifier: JLublucbQzlg4Bs+lLnoidt1pvUXzZywSMWzjrwCqo4= Subject key identifier: E6:DB:59:70:35:43:79:13:B0:1B:53:E0:55:BD:F1:10:29:BD:BA:45 Authority key identifier: 6F:65:A0:C9:22:60:B1:AD:A2:31:87:B2:9B:AC:3B:EA:DA:C0:56:61 Certificate issuer: /CN=A91EA449/serialNumber=6F65A0C92260B1ADA23187B29BAC3BEADAC05661 Certificate serial: E5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b2WgySJgsa2iMYeym6w76trAVmE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA449/401790FC073C11EF8D1DB056C4F9AE02/b2WgySJgsa2iMYeym6w76trAVmE.mft Manifest number: DE Signing time: Sun 15 Jun 2025 04:46:13 +0000 Manifest this update: Sun 15 Jun 2025 04:46:12 +0000 Manifest next update: Sun 22 Jun 2025 04:46:12 +0000 Files and hashes: 1: b2WgySJgsa2iMYeym6w76trAVmE.crl (hash: BKNxXFOvGh4dGj9bVZMmIrDq9PBoyacm98U1kzM+WCg=) 2: 9DE187FA2A8211F08575E277C4F9AE02.roa (hash: 4s3NtIvsEComlAClIWN0C/pBpA6ARQs8HzKhlcubCoM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA449/401790FC073C11EF8D1DB056C4F9AE02/b2WgySJgsa2iMYeym6w76trAVmE.crl rsync://rpki.apnic.net/member_repository/A91EA449/401790FC073C11EF8D1DB056C4F9AE02/b2WgySJgsa2iMYeym6w76trAVmE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b2WgySJgsa2iMYeym6w76trAVmE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 229 (0xe5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA449, serialNumber=6F65A0C92260B1ADA23187B29BAC3BEADAC05661 Validity Not Before: Jun 15 04:46:12 2025 GMT Not After : Jun 22 04:46:12 2025 GMT Subject: CN=684e5014-28ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:bd:4a:9d:0e:8d:cd:79:0a:7c:76:f1:99:68: c0:8a:3f:90:36:b2:b8:11:dc:72:d9:48:fb:a4:96: d2:c5:f3:14:10:de:ca:54:b2:53:4e:53:6f:d4:db: 7c:30:57:ef:07:96:22:2b:4e:a4:eb:e4:a9:d1:90: af:e5:40:40:81:8b:ba:2d:3a:49:4a:5f:f2:8e:e9: e5:a4:01:e0:6d:19:39:8b:83:d2:2a:aa:bd:fb:68: 5f:87:d7:a7:75:b4:bc:e9:32:09:da:0d:c7:eb:01: 28:1c:9b:8e:76:f5:11:b9:e8:e7:88:7f:96:e2:6b: 11:e2:de:25:2d:16:06:e9:9e:77:97:ef:91:90:06: df:76:4e:17:dd:86:14:26:ab:31:09:ce:0b:79:ce: eb:19:a8:8c:46:1b:58:fb:89:27:32:3f:19:8a:30: 0d:78:4f:04:1e:d9:2f:9f:c7:f7:fe:a2:8d:a7:1b: 85:bf:4c:1f:bd:db:e0:09:ce:d8:b2:61:d8:fb:44: ca:f7:f9:f1:03:ff:a2:f4:ae:25:51:94:33:9b:9d: 7b:ed:a8:80:33:b6:f5:10:44:26:06:93:86:05:03: 22:0e:91:a5:9c:57:1a:37:ec:77:83:b0:8e:ef:de: 40:3d:d9:83:db:fe:ca:b4:4c:e4:26:a6:df:da:09: d9:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:DB:59:70:35:43:79:13:B0:1B:53:E0:55:BD:F1:10:29:BD:BA:45 X509v3 Authority Key Identifier: keyid:6F:65:A0:C9:22:60:B1:AD:A2:31:87:B2:9B:AC:3B:EA:DA:C0:56:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA449/401790FC073C11EF8D1DB056C4F9AE02/b2WgySJgsa2iMYeym6w76trAVmE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b2WgySJgsa2iMYeym6w76trAVmE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA449/401790FC073C11EF8D1DB056C4F9AE02/b2WgySJgsa2iMYeym6w76trAVmE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:74:ca:98:61:70:b8:c8:83:12:4e:48:f1:a7:ca:fd:45:47: a5:5f:ac:2e:4b:0c:c6:76:cb:78:e8:4d:1c:99:bc:56:a2:f2: 88:ea:c2:5f:f0:d4:21:56:a4:90:7d:2c:70:f6:1c:99:fb:38: 7e:f0:42:f3:70:f6:45:c4:1e:71:a4:a0:7a:fb:9f:68:5b:4d: 6e:c2:85:e0:d5:93:3a:8a:be:50:df:d3:ae:37:b4:43:17:45: 31:e7:51:a7:e1:2d:22:56:6f:98:62:3a:fd:28:b5:13:8c:39: 75:b4:82:ac:07:c5:cd:64:f8:1d:54:f8:56:e6:b0:bc:dd:12: 68:b7:74:81:cc:19:36:d0:bb:8b:09:9a:49:4e:dc:56:4e:ff: 5f:d8:8c:40:fb:c1:47:cf:d1:17:21:e6:45:21:96:07:9a:01: cc:44:5a:b4:ec:22:80:2f:d5:b5:a1:75:ba:dd:38:4f:01:f9: 99:32:5c:93:02:26:fa:2b:d9:79:79:89:66:39:0e:3d:2d:87: ce:de:38:b9:a2:14:c6:9d:ca:af:4e:97:3e:ee:00:d3:9b:16: a3:ff:f2:75:2d:03:35:1a:52:39:54:c8:0a:ec:81:f2:65:48: b7:ed:99:b1:9b:50:1d:34:5c:62:e5:d8:ee:43:c9:74:3a:19: 4f:60:f8:d3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUE0NDkxMTAvBgNVBAUTKDZGNjVBMEM5MjI2MEIxQURBMjMxODdCMjlCQUMzQkVB REFDMDU2NjEwHhcNMjUwNjE1MDQ0NjEyWhcNMjUwNjIyMDQ0NjEyWjAYMRYwFAYD VQQDEw02ODRlNTAxNC0yOGZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1r1KnQ6NzXkKfHbxmWjAij+QNrK4Edxy2Uj7pJbSxfMUEN7KVLJTTlNv1Nt8 MFfvB5YiK06k6+Sp0ZCv5UBAgYu6LTpJSl/yjunlpAHgbRk5i4PSKqq9+2hfh9en dbS86TIJ2g3H6wEoHJuOdvURuejniH+W4msR4t4lLRYG6Z53l++RkAbfdk4X3YYU JqsxCc4Lec7rGaiMRhtY+4knMj8ZijANeE8EHtkvn8f3/qKNpxuFv0wfvdvgCc7Y smHY+0TK9/nxA/+i9K4lUZQzm5177aiAM7b1EEQmBpOGBQMiDpGlnFcaN+x3g7CO 795APdmD2/7KtEzkJqbf2gnZfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFObbWXA1 Q3kTsBtT4FW98RApvbpFMB8GA1UdIwQYMBaAFG9loMkiYLGtojGHspusO+rawFZh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTQ0OS80MDE3OTBGQzA3 M0MxMUVGOEQxREIwNTZDNEY5QUUwMi9iMldneVNKZ3NhMmlNWWV5bTZ3NzZ0ckFW bUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2IyV2d5U0pnc2EyaU1ZZXltNnc3NnRyQVZtRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTQ0OS80MDE3OTBGQzA3M0MxMUVGOEQxREIwNTZDNEY5QUUwMi9iMldneVNKZ3Nh MmlNWWV5bTZ3NzZ0ckFWbUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCKdMqYYXC4yIMSTkjxp8r9RUelX6wuSwzGdst46E0cmbxWovKI6sJf 8NQhVqSQfSxw9hyZ+zh+8ELzcPZFxB5xpKB6+59oW01uwoXg1ZM6ir5Q39OuN7RD F0Ux51Gn4S0iVm+YYjr9KLUTjDl1tIKsB8XNZPgdVPhW5rC83RJot3SBzBk20LuL CZpJTtxWTv9f2IxA+8FHz9EXIeZFIZYHmgHMRFq07CKAL9W1oXW63ThPAfmZMlyT Aib6K9l5eYlmOQ49LYfO3ji5ohTGncqvTpc+7gDTmxaj//J1LQM1GlI5VMgK7IHy ZUi37Zmxm1AdNFxi5djuQ8l0OhlPYPjT -----END CERTIFICATE-----Generated at Sun Jun 15 09:46:15 2025 by rpki-client