$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE1DD/F15003C8F11211EC91965444C4F9AE02/MoI4D1fWFw9Fz1IOeywaPNovyq0.mft File: MoI4D1fWFw9Fz1IOeywaPNovyq0.mft (raw, json) Hash identifier: kuKuK+WBgoySOhYhGVCGwuNp/3hi6r5Bze3KDoPT+Ho= Subject key identifier: 4B:AE:E2:EA:C9:83:D2:24:8D:F6:A6:EA:4F:3A:6C:FE:37:61:8B:7A Authority key identifier: 32:82:38:0F:57:D6:17:0F:45:CF:52:0E:7B:2C:1A:3C:DA:2F:CA:AD Certificate issuer: /CN=A91EE1DD/serialNumber=3282380F57D6170F45CF520E7B2C1A3CDA2FCAAD Certificate serial: 02CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MoI4D1fWFw9Fz1IOeywaPNovyq0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EE1DD/F15003C8F11211EC91965444C4F9AE02/MoI4D1fWFw9Fz1IOeywaPNovyq0.mft Manifest number: 02C7 Signing time: Sun 15 Jun 2025 01:06:05 +0000 Manifest this update: Sun 15 Jun 2025 01:06:04 +0000 Manifest next update: Sun 22 Jun 2025 01:06:04 +0000 Files and hashes: 1: MoI4D1fWFw9Fz1IOeywaPNovyq0.crl (hash: pSsjSrxhNYN88dAFDNTPNDrEv7KLpNaEJ/rClXy35VY=) 2: 7D857A30F11811EC86D3AD4BC4F9AE02.roa (hash: RY7IQ05ThI/6GtkKfLwI0St2mmRdLcPJ0ecThYjAydU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EE1DD/F15003C8F11211EC91965444C4F9AE02/MoI4D1fWFw9Fz1IOeywaPNovyq0.crl rsync://rpki.apnic.net/member_repository/A91EE1DD/F15003C8F11211EC91965444C4F9AE02/MoI4D1fWFw9Fz1IOeywaPNovyq0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MoI4D1fWFw9Fz1IOeywaPNovyq0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 01:06:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 716 (0x2cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EE1DD, serialNumber=3282380F57D6170F45CF520E7B2C1A3CDA2FCAAD Validity Not Before: Jun 15 01:06:04 2025 GMT Not After : Jun 22 01:06:04 2025 GMT Subject: CN=684e1c7c-5805 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:b6:e3:cd:b6:91:54:57:50:fa:13:93:35:02: 75:92:af:4f:6e:35:30:e6:28:88:cc:1b:a6:1d:2e: a1:d3:70:8a:4e:8a:83:71:0c:ed:36:33:e9:83:72: a0:e9:c8:0b:d1:c3:49:86:79:36:3a:0f:a1:f8:f2: 8e:06:8a:de:1d:0c:b2:2c:f2:02:97:a6:12:f6:f2: d3:c6:bc:15:54:5f:4a:cc:f2:3d:54:49:c3:c8:77: 9f:18:cc:bc:34:ad:34:02:73:dc:ea:5c:04:bd:59: 75:cb:ab:fd:2b:66:09:67:89:c7:cb:fc:7a:d1:69: 44:3c:fd:b9:7d:3a:ca:66:a0:47:9b:7f:c9:be:81: 72:3d:73:1a:0b:bf:74:76:a6:d6:f4:c5:1f:b4:79: 67:9d:39:74:8e:7b:7b:66:b8:01:06:93:fc:89:af: 99:99:c5:31:99:31:a8:eb:69:6a:37:7f:c2:57:3b: fd:2a:55:9a:38:36:5b:98:9f:e1:5e:be:f1:67:33: 49:d1:47:02:64:e1:14:b9:f9:30:e6:c1:41:e3:c1: a8:67:5d:02:6d:82:26:09:8a:c8:1c:22:58:81:39: 45:63:87:fb:52:12:0a:1e:52:4c:7b:9b:63:2f:66: d4:83:8a:11:22:ec:76:9d:b5:37:a8:fe:7f:5c:8c: c7:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:AE:E2:EA:C9:83:D2:24:8D:F6:A6:EA:4F:3A:6C:FE:37:61:8B:7A X509v3 Authority Key Identifier: keyid:32:82:38:0F:57:D6:17:0F:45:CF:52:0E:7B:2C:1A:3C:DA:2F:CA:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EE1DD/F15003C8F11211EC91965444C4F9AE02/MoI4D1fWFw9Fz1IOeywaPNovyq0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MoI4D1fWFw9Fz1IOeywaPNovyq0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE1DD/F15003C8F11211EC91965444C4F9AE02/MoI4D1fWFw9Fz1IOeywaPNovyq0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:55:c0:f0:2a:12:c9:46:0b:73:c5:c9:10:fb:46:59:a8:d1: d6:eb:f5:90:f6:72:36:6b:53:fa:a5:53:f1:f7:a0:33:6c:b5: 90:c4:68:36:fe:df:66:d3:62:a9:11:67:f7:06:5a:df:ba:57: 1e:bc:b4:ce:0b:d2:f8:12:5a:62:6e:a4:0f:db:ef:be:a0:73: 7e:6a:94:6e:1f:e7:76:2d:52:3e:6e:d1:9c:07:d0:51:1b:24: 5c:00:71:08:40:ce:02:8d:b1:6c:4f:a2:4e:9d:27:fb:5e:e6: 73:e8:2c:09:45:2e:2a:dc:86:ea:c1:70:88:24:37:cd:80:ab: 45:e4:fa:2e:46:62:6b:6c:31:44:d9:26:77:7b:27:44:f6:dc: 82:81:c2:72:74:6f:11:6a:1e:45:2a:5a:d4:fa:fc:c5:99:b7: d2:e4:d9:db:e1:31:f7:81:9f:ad:8d:c7:67:71:a8:60:28:db: 42:51:7d:cc:d0:d1:c8:3a:05:9f:62:41:93:75:0e:24:cc:54: 1e:a3:cc:42:4f:4c:7f:07:89:ab:51:d7:7f:83:c4:e3:64:6f: d5:c5:ef:65:64:18:1f:15:1e:9f:9e:9f:d6:9f:c5:bc:4f:6c: 56:c3:12:08:c0:bb:a3:6e:68:7d:c7:bf:fd:e1:8c:6a:b1:ea: 53:1a:33:17 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAswwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUUxREQxMTAvBgNVBAUTKDMyODIzODBGNTdENjE3MEY0NUNGNTIwRTdCMkMxQTND REEyRkNBQUQwHhcNMjUwNjE1MDEwNjA0WhcNMjUwNjIyMDEwNjA0WjAYMRYwFAYD VQQDEw02ODRlMWM3Yy01ODA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAubbjzbaRVFdQ+hOTNQJ1kq9PbjUw5iiIzBumHS6h03CKToqDcQztNjPpg3Kg 6cgL0cNJhnk2Og+h+PKOBoreHQyyLPICl6YS9vLTxrwVVF9KzPI9VEnDyHefGMy8 NK00AnPc6lwEvVl1y6v9K2YJZ4nHy/x60WlEPP25fTrKZqBHm3/JvoFyPXMaC790 dqbW9MUftHlnnTl0jnt7ZrgBBpP8ia+ZmcUxmTGo62lqN3/CVzv9KlWaODZbmJ/h Xr7xZzNJ0UcCZOEUufkw5sFB48GoZ10CbYImCYrIHCJYgTlFY4f7UhIKHlJMe5tj L2bUg4oRIux2nbU3qP5/XIzHDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEuu4urJ g9Ikjfam6k86bP43YYt6MB8GA1UdIwQYMBaAFDKCOA9X1hcPRc9SDnssGjzaL8qt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRTFERC9GMTUwMDNDOEYx MTIxMUVDOTE5NjU0NDRDNEY5QUUwMi9Nb0k0RDFmV0Z3OUZ6MUlPZXl3YVBOb3Z5 cTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01vSTREMWZXRnc5RnoxSU9leXdhUE5vdnlxMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RTFERC9GMTUwMDNDOEYxMTIxMUVDOTE5NjU0NDRDNEY5QUUwMi9Nb0k0RDFmV0Z3 OUZ6MUlPZXl3YVBOb3Z5cTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAqVcDwKhLJRgtzxckQ+0ZZqNHW6/WQ9nI2a1P6pVPx96AzbLWQxGg2 /t9m02KpEWf3BlrfulcevLTOC9L4ElpibqQP2+++oHN+apRuH+d2LVI+btGcB9BR GyRcAHEIQM4CjbFsT6JOnSf7XuZz6CwJRS4q3IbqwXCIJDfNgKtF5PouRmJrbDFE 2SZ3eydE9tyCgcJydG8Rah5FKlrU+vzFmbfS5Nnb4TH3gZ+tjcdncahgKNtCUX3M 0NHIOgWfYkGTdQ4kzFQeo8xCT0x/B4mrUdd/g8TjZG/Vxe9lZBgfFR6fnp/Wn8W8 T2xWwxIIwLujbmh9x7/94YxqsepTGjMX -----END CERTIFICATE-----Generated at Sun Jun 15 05:10:07 2025 by rpki-client