$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA733/333872A20D7411EDA896062FC4F9AE02/R0Blek4vuGe_tE2_bLi8HdGywg4.mft File: R0Blek4vuGe_tE2_bLi8HdGywg4.mft (raw, json) Hash identifier: 6flykLTJov2vgCHUPHVjzscPLMObrDfvADULJEApJwM= Subject key identifier: 53:03:04:EB:A7:06:58:61:CF:CE:95:FE:B1:50:33:6F:FE:C8:05:BB Authority key identifier: 47:40:65:7A:4E:2F:B8:67:BF:B4:4D:BF:6C:B8:BC:1D:D1:B2:C2:0E Certificate issuer: /CN=A91BA733/serialNumber=4740657A4E2FB867BFB44DBF6CB8BC1DD1B2C20E Certificate serial: 028B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R0Blek4vuGe_tE2_bLi8HdGywg4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA733/333872A20D7411EDA896062FC4F9AE02/R0Blek4vuGe_tE2_bLi8HdGywg4.mft Manifest number: 0286 Signing time: Sun 29 Jun 2025 01:11:07 +0000 Manifest this update: Sun 29 Jun 2025 01:11:06 +0000 Manifest next update: Sun 06 Jul 2025 01:11:06 +0000 Files and hashes: 1: R0Blek4vuGe_tE2_bLi8HdGywg4.crl (hash: 5TXMydHZFgg0+rMB9hNhLXdBEQJaqb6HoyDmCGIvQAk=) 2: 7AD326AC663911EDA919A02AC4F9AE02.roa (hash: +hdEozIbVn2GYt8jwfbthhL8PpPkZpGYDiLEr/d+5Rk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA733/333872A20D7411EDA896062FC4F9AE02/R0Blek4vuGe_tE2_bLi8HdGywg4.crl rsync://rpki.apnic.net/member_repository/A91BA733/333872A20D7411EDA896062FC4F9AE02/R0Blek4vuGe_tE2_bLi8HdGywg4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R0Blek4vuGe_tE2_bLi8HdGywg4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 01:11:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 651 (0x28b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA733, serialNumber=4740657A4E2FB867BFB44DBF6CB8BC1DD1B2C20E Validity Not Before: Jun 29 01:11:06 2025 GMT Not After : Jul 6 01:11:06 2025 GMT Subject: CN=686092aa-882f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:fe:2f:bc:97:c2:07:88:92:b9:e4:48:dc:3b: 96:4c:ce:31:87:2e:8d:0c:0f:2e:18:f3:a6:3b:d6: 1c:f4:c6:a1:a7:16:dd:ad:d7:78:8e:b3:d5:85:f7: f8:c4:11:d6:07:21:88:86:f3:d9:6e:78:f3:84:96: 45:e2:42:11:91:8e:3a:17:65:62:05:ed:f1:84:0c: 94:90:83:16:1a:c1:22:96:e5:ee:40:bf:21:ce:72: ab:7a:2a:10:0c:31:54:7f:28:5d:d1:eb:bf:21:e3: e9:dd:02:85:63:2a:6f:04:5a:8b:34:c6:98:ad:43: a1:71:8a:0d:f6:ba:b2:e6:03:4a:e1:b6:ea:20:17: 84:93:86:a0:fb:c2:7b:48:8e:9b:70:ee:b4:3f:18: 15:64:82:cf:8d:b8:f8:1e:df:0c:a5:1f:1e:ab:20: 7c:3e:ca:04:f1:94:26:30:91:a1:b3:b0:62:83:4c: 17:18:28:6a:e7:96:35:68:f9:a8:77:d6:ec:2f:13: 6d:9c:0f:3f:36:b6:14:50:62:2b:a6:9b:53:1f:70: 63:d1:d7:4b:81:52:87:0e:d3:f0:91:25:cb:5a:14: 3b:f0:c2:3e:a2:41:31:91:b4:d9:54:2f:50:15:d1: 32:76:4a:17:88:db:85:49:30:e0:7f:6d:d6:31:48: f9:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:03:04:EB:A7:06:58:61:CF:CE:95:FE:B1:50:33:6F:FE:C8:05:BB X509v3 Authority Key Identifier: keyid:47:40:65:7A:4E:2F:B8:67:BF:B4:4D:BF:6C:B8:BC:1D:D1:B2:C2:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA733/333872A20D7411EDA896062FC4F9AE02/R0Blek4vuGe_tE2_bLi8HdGywg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R0Blek4vuGe_tE2_bLi8HdGywg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA733/333872A20D7411EDA896062FC4F9AE02/R0Blek4vuGe_tE2_bLi8HdGywg4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:62:e6:2c:20:97:aa:14:54:cf:a5:b5:a7:52:8b:4a:7f:70: ff:39:15:55:55:e3:9f:b8:e4:e4:e5:14:27:9e:4d:b0:8e:dc: 7d:96:7b:07:44:e7:00:24:af:e3:28:8f:b0:31:f7:09:04:1b: 08:f8:a7:e8:df:ad:51:7c:3d:ba:65:6b:a5:8e:ea:32:98:b1: 69:1e:52:4e:e6:9c:31:a7:bc:d7:c0:2c:b5:87:6a:8e:62:b2: 65:84:75:a0:11:c5:22:cc:3f:cf:e2:98:ae:ee:2e:0b:c7:69: 79:6f:dd:9c:a8:3b:a4:2e:4d:55:db:0b:3d:9d:f2:d8:9a:0f: 93:92:ae:5d:77:e4:85:e5:29:ae:fa:74:b7:0a:3c:37:23:23: 81:d7:16:82:06:d0:6e:3a:e2:ed:96:13:47:06:7a:80:a0:64: 3c:82:5a:f1:e3:78:2a:29:3b:be:27:42:98:62:77:8e:59:21: 13:13:1d:67:59:1f:c1:76:85:5d:61:0a:8b:ee:6f:ea:56:04: 73:b5:1b:79:bb:68:bc:2d:72:7a:99:d6:27:aa:c4:71:e1:29: 1e:b6:43:19:ee:8e:38:83:1c:e0:a3:4c:3e:fa:30:92:49:af: ad:28:fa:7e:1c:88:a5:57:63:53:ad:72:05:1f:1e:ce:39:a3: 35:2a:2b:2f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAoswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkE3MzMxMTAvBgNVBAUTKDQ3NDA2NTdBNEUyRkI4NjdCRkI0NERCRjZDQjhCQzFE RDFCMkMyMEUwHhcNMjUwNjI5MDExMTA2WhcNMjUwNzA2MDExMTA2WjAYMRYwFAYD VQQDEw02ODYwOTJhYS04ODJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0v4vvJfCB4iSueRI3DuWTM4xhy6NDA8uGPOmO9Yc9Mahpxbdrdd4jrPVhff4 xBHWByGIhvPZbnjzhJZF4kIRkY46F2ViBe3xhAyUkIMWGsEiluXuQL8hznKreioQ DDFUfyhd0eu/IePp3QKFYypvBFqLNMaYrUOhcYoN9rqy5gNK4bbqIBeEk4ag+8J7 SI6bcO60PxgVZILPjbj4Ht8MpR8eqyB8PsoE8ZQmMJGhs7Big0wXGChq55Y1aPmo d9bsLxNtnA8/NrYUUGIrpptTH3Bj0ddLgVKHDtPwkSXLWhQ78MI+okExkbTZVC9Q FdEydkoXiNuFSTDgf23WMUj5/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFMDBOun Blhhz86V/rFQM2/+yAW7MB8GA1UdIwQYMBaAFEdAZXpOL7hnv7RNv2y4vB3RssIO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTczMy8zMzM4NzJBMjBE NzQxMUVEQTg5NjA2MkZDNEY5QUUwMi9SMEJsZWs0dnVHZV90RTJfYkxpOEhkR3l3 ZzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1IwQmxlazR2dUdlX3RFMl9iTGk4SGRHeXdnNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QTczMy8zMzM4NzJBMjBENzQxMUVEQTg5NjA2MkZDNEY5QUUwMi9SMEJsZWs0dnVH ZV90RTJfYkxpOEhkR3l3ZzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAuYuYsIJeqFFTPpbWnUotKf3D/ORVVVeOfuOTk5RQnnk2wjtx9lnsH ROcAJK/jKI+wMfcJBBsI+Kfo361RfD26ZWuljuoymLFpHlJO5pwxp7zXwCy1h2qO YrJlhHWgEcUizD/P4piu7i4Lx2l5b92cqDukLk1V2ws9nfLYmg+Tkq5dd+SF5Smu +nS3Cjw3IyOB1xaCBtBuOuLtlhNHBnqAoGQ8glrx43gqKTu+J0KYYneOWSETEx1n WR/BdoVdYQqL7m/qVgRztRt5u2i8LXJ6mdYnqsRx4SketkMZ7o44gxzgo0w++jCS Sa+tKPp+HIilV2NTrXIFHx7OOaM1Kisv -----END CERTIFICATE-----Generated at Sun Jun 29 13:25:18 2025 by rpki-client