$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2D93/818FDB78D44D11EFB1600B28C4F9AE02/-65NuTksgZMhr1EdxrK1qomYGfo.mft File: -65NuTksgZMhr1EdxrK1qomYGfo.mft (raw, json) Hash identifier: HTMkYWd/fpWGQlAJlzrkl8/XwWY8CKMm0BzdsHap6xg= Subject key identifier: 2B:04:7B:5B:A4:9C:2D:0F:77:1F:73:DF:B2:0B:0D:9A:EC:52:38:6C Authority key identifier: FB:AE:4D:B9:39:2C:81:93:21:AF:51:1D:C6:B2:B5:AA:89:98:19:FA Certificate issuer: /CN=A91F2D93/serialNumber=FBAE4DB9392C819321AF511DC6B2B5AA899819FA Certificate serial: 53 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-65NuTksgZMhr1EdxrK1qomYGfo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F2D93/818FDB78D44D11EFB1600B28C4F9AE02/-65NuTksgZMhr1EdxrK1qomYGfo.mft Manifest number: 51 Signing time: Tue 17 Jun 2025 06:11:06 +0000 Manifest this update: Tue 17 Jun 2025 06:11:06 +0000 Manifest next update: Tue 24 Jun 2025 06:11:06 +0000 Files and hashes: 1: -65NuTksgZMhr1EdxrK1qomYGfo.crl (hash: AJho+ZtKHbGysWCOyUOMNKkHV7zeNSIg3cuUSIPPsng=) 2: 93D86AAED76611EF9C982924C4F9AE02.roa (hash: LnJzBzEfTxjLgTZtBUJIJtCnRzaftx7eCk4WGWWItX4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F2D93/818FDB78D44D11EFB1600B28C4F9AE02/-65NuTksgZMhr1EdxrK1qomYGfo.crl rsync://rpki.apnic.net/member_repository/A91F2D93/818FDB78D44D11EFB1600B28C4F9AE02/-65NuTksgZMhr1EdxrK1qomYGfo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-65NuTksgZMhr1EdxrK1qomYGfo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Jun 2025 06:11:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 83 (0x53) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F2D93, serialNumber=FBAE4DB9392C819321AF511DC6B2B5AA899819FA Validity Not Before: Jun 17 06:11:06 2025 GMT Not After : Jun 24 06:11:06 2025 GMT Subject: CN=685106fa-4744 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:53:bf:c1:9b:33:15:82:6c:2d:8a:da:d8:cd: 85:fb:b4:ad:70:87:bb:7a:7a:ed:7f:5c:22:dc:1c: 6d:17:9e:19:b8:82:5d:69:4c:c1:8b:25:29:0a:64: 00:e2:25:a1:97:42:07:f3:25:ff:4f:31:6b:d0:54: 9f:43:38:38:e8:46:25:09:3b:3c:6b:c5:74:0f:e7: ec:23:61:2a:03:2f:ef:10:57:81:e4:a8:18:b4:4d: 26:fd:3c:6a:db:8e:0a:dc:99:bb:8f:e4:6d:96:78: 83:b2:11:ff:d9:80:b2:cb:1c:80:61:fa:b8:a8:fe: 3f:97:3b:3c:35:f0:eb:a3:2f:13:3e:c2:9c:52:f4: 2e:6d:2a:4c:c9:01:9d:08:17:ea:49:0a:75:05:42: 14:52:95:ba:c7:b8:73:a1:26:e9:16:cb:03:e0:23: 81:dc:98:10:a4:20:bf:00:39:45:1a:06:f1:cc:b6: c2:dc:f6:8f:99:91:43:95:25:29:61:71:28:ef:8c: 1d:2f:05:8f:d4:b1:85:71:b5:05:7d:2d:59:95:59: 11:02:c8:0b:76:ff:04:b9:da:6f:b3:c6:d6:a9:da: a2:e6:af:d6:23:ed:79:37:83:b2:28:08:b4:80:0f: 5c:5a:68:56:78:d6:33:d1:83:38:93:da:df:16:c4: e5:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:04:7B:5B:A4:9C:2D:0F:77:1F:73:DF:B2:0B:0D:9A:EC:52:38:6C X509v3 Authority Key Identifier: keyid:FB:AE:4D:B9:39:2C:81:93:21:AF:51:1D:C6:B2:B5:AA:89:98:19:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F2D93/818FDB78D44D11EFB1600B28C4F9AE02/-65NuTksgZMhr1EdxrK1qomYGfo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-65NuTksgZMhr1EdxrK1qomYGfo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2D93/818FDB78D44D11EFB1600B28C4F9AE02/-65NuTksgZMhr1EdxrK1qomYGfo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:3a:41:d8:60:2c:24:9e:cf:b7:31:3c:12:b4:9f:18:53:f6: a8:54:f9:fb:d4:01:f5:1e:8b:89:c0:35:73:71:54:1f:49:1b: 6b:b8:90:a0:9e:1b:4e:72:63:98:50:45:32:35:7b:fc:c6:15: 49:a0:2c:c1:29:d7:eb:a0:1d:13:17:c2:90:1f:38:91:f1:e3: 67:9e:3a:60:c3:e1:fe:ed:ac:81:08:76:19:65:aa:08:a0:90: 0a:6c:c7:ba:fa:5c:ff:9f:29:84:62:5b:a1:ed:13:96:e9:0c: fc:a1:8c:46:72:19:53:fe:f5:53:84:c6:95:b0:c5:76:c5:f6: 86:56:bc:17:e0:2b:9c:e0:30:83:89:07:96:25:f0:f7:30:56: 99:37:dd:19:cb:78:ce:6e:a3:18:0e:fd:24:99:db:bb:03:f3: 58:af:76:24:2f:fa:02:1a:a0:6a:84:4b:9e:52:63:6d:da:fe: fd:fc:c4:6e:50:fc:c8:6c:f0:b5:ac:81:40:2f:6b:e4:a2:8b: f6:0a:bd:49:f9:d9:7b:42:47:a9:9f:14:24:fe:25:ed:b4:32: 58:0f:e9:40:ba:a4:88:7d:85:c0:6f:b3:37:18:0b:98:29:d0: 5e:17:b6:9e:a9:3d:f1:d0:32:08:b4:bf:ae:b5:53:13:47:79: 85:2f:e8:be -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBUzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MkQ5MzExMC8GA1UEBRMoRkJBRTREQjkzOTJDODE5MzIxQUY1MTFEQzZCMkI1QUE4 OTk4MTlGQTAeFw0yNTA2MTcwNjExMDZaFw0yNTA2MjQwNjExMDZaMBgxFjAUBgNV BAMTDTY4NTEwNmZhLTQ3NDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCsU7/BmzMVgmwtitrYzYX7tK1wh7t6eu1/XCLcHG0Xnhm4gl1pTMGLJSkKZADi JaGXQgfzJf9PMWvQVJ9DODjoRiUJOzxrxXQP5+wjYSoDL+8QV4HkqBi0TSb9PGrb jgrcmbuP5G2WeIOyEf/ZgLLLHIBh+rio/j+XOzw18OujLxM+wpxS9C5tKkzJAZ0I F+pJCnUFQhRSlbrHuHOhJukWywPgI4HcmBCkIL8AOUUaBvHMtsLc9o+ZkUOVJSlh cSjvjB0vBY/UsYVxtQV9LVmVWRECyAt2/wS52m+zxtap2qLmr9Yj7Xk3g7IoCLSA D1xaaFZ41jPRgziT2t8WxOU9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUKwR7W6Sc LQ93H3PfsgsNmuxSOGwwHwYDVR0jBBgwFoAU+65NuTksgZMhr1EdxrK1qomYGfow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYyRDkzLzgxOEZEQjc4RDQ0 RDExRUZCMTYwMEIyOEM0RjlBRTAyLy02NU51VGtzZ1pNaHIxRWR4cksxcW9tWUdm by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvLTY1TnVUa3NnWk1ocjFFZHhySzFxb21ZR2ZvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYy RDkzLzgxOEZEQjc4RDQ0RDExRUZCMTYwMEIyOEM0RjlBRTAyLy02NU51VGtzZ1pN aHIxRWR4cksxcW9tWUdmby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGo6QdhgLCSez7cxPBK0nxhT9qhU+fvUAfUei4nANXNxVB9JG2u4kKCe G05yY5hQRTI1e/zGFUmgLMEp1+ugHRMXwpAfOJHx42eeOmDD4f7trIEIdhllqgig kApsx7r6XP+fKYRiW6HtE5bpDPyhjEZyGVP+9VOExpWwxXbF9oZWvBfgK5zgMIOJ B5Yl8PcwVpk33RnLeM5uoxgO/SSZ27sD81ivdiQv+gIaoGqES55SY23a/v38xG5Q /Mhs8LWsgUAva+Sii/YKvUn52XtCR6mfFCT+Je20MlgP6UC6pIh9hcBvszcYC5gp 0F4Xtp6pPfHQMgi0v661UxNHeYUv6L4= -----END CERTIFICATE-----Generated at Thu Jun 19 00:15:27 2025 by rpki-client