$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE2B2/53CA462A1D9D11E2AF456D8C08B02CD2/c84SdM3fF8MNo6vP-B_Z8S_RtPI.mft File: c84SdM3fF8MNo6vP-B_Z8S_RtPI.mft (raw, json) Hash identifier: D+SE1Gu/W/jj6W8ZnCz5u5qozcUBKH5fIvhClO5paLQ= Subject key identifier: 3B:E3:61:0E:4F:BB:14:02:78:FE:D9:5A:D1:54:C3:82:30:22:E3:E6 Authority key identifier: 73:CE:12:74:CD:DF:17:C3:0D:A3:AB:CF:F8:1F:D9:F1:2F:D1:B4:F2 Certificate issuer: /CN=A91DE2B2/serialNumber=73CE1274CDDF17C30DA3ABCFF81FD9F12FD1B4F2 Certificate serial: 34AE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c84SdM3fF8MNo6vP-B_Z8S_RtPI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE2B2/53CA462A1D9D11E2AF456D8C08B02CD2/c84SdM3fF8MNo6vP-B_Z8S_RtPI.mft Manifest number: 34A2 Signing time: Sat 28 Jun 2025 14:57:01 +0000 Manifest this update: Sat 28 Jun 2025 14:57:00 +0000 Manifest next update: Sat 05 Jul 2025 14:57:00 +0000 Files and hashes: 1: c84SdM3fF8MNo6vP-B_Z8S_RtPI.crl (hash: 6AygFFrU/ynWPOGB5JPrOIQKtFtVgi1BsYv3CfiEuuc=) 2: 991B38BC44E811F0968D8B30C4F9AE02.roa (hash: eEF2YFvICJOqay9i6WsFZPXnUiZoOP0Qsq3SyzYoK+g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE2B2/53CA462A1D9D11E2AF456D8C08B02CD2/c84SdM3fF8MNo6vP-B_Z8S_RtPI.crl rsync://rpki.apnic.net/member_repository/A91DE2B2/53CA462A1D9D11E2AF456D8C08B02CD2/c84SdM3fF8MNo6vP-B_Z8S_RtPI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c84SdM3fF8MNo6vP-B_Z8S_RtPI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 14:57:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13486 (0x34ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE2B2, serialNumber=73CE1274CDDF17C30DA3ABCFF81FD9F12FD1B4F2 Validity Not Before: Jun 28 14:57:00 2025 GMT Not After : Jul 5 14:57:00 2025 GMT Subject: CN=686002bc-1e1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:b5:48:cd:48:a3:76:5d:5e:6f:a3:2a:05:d7: b6:31:6a:a5:00:46:f4:8a:f6:4e:17:4f:c5:6c:83: 2f:67:f9:34:8c:63:b0:c9:e7:7f:70:e5:49:a0:10: 34:34:5f:f6:24:07:3c:b3:1a:f8:77:de:66:a0:9c: 5e:b0:5e:b4:dd:bf:52:9f:43:ee:7b:6d:48:3f:ef: ed:99:75:d8:e1:d5:5f:ea:cd:a6:68:41:d0:f5:84: 56:87:55:01:fc:8f:34:4d:4f:32:58:58:2a:5c:97: f2:92:a7:cb:3a:0b:cb:cb:2d:f6:ce:fa:0f:ab:91: f1:96:f5:93:f8:50:72:d8:d9:4c:9d:36:90:5e:d9: 0a:77:2c:44:b8:d0:6f:96:f2:a6:40:73:2b:08:ea: 28:60:ba:8f:19:64:d1:9d:d3:6e:c6:f7:aa:c5:84: 41:72:2b:64:f4:d2:47:ed:87:38:f3:e9:77:68:1f: f5:46:65:d6:9f:50:b2:ea:64:2f:94:e5:35:be:2b: df:0f:88:c5:64:24:27:62:18:9f:ea:25:49:22:20: 3e:4a:1c:2e:ee:68:13:4e:60:02:8b:db:d7:29:8a: 56:e1:5e:cd:da:46:9c:4b:cd:59:ca:37:95:c3:ec: 7d:fe:f9:a1:b4:3f:ec:40:92:8c:db:99:c3:1f:32: 9f:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:E3:61:0E:4F:BB:14:02:78:FE:D9:5A:D1:54:C3:82:30:22:E3:E6 X509v3 Authority Key Identifier: keyid:73:CE:12:74:CD:DF:17:C3:0D:A3:AB:CF:F8:1F:D9:F1:2F:D1:B4:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE2B2/53CA462A1D9D11E2AF456D8C08B02CD2/c84SdM3fF8MNo6vP-B_Z8S_RtPI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c84SdM3fF8MNo6vP-B_Z8S_RtPI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE2B2/53CA462A1D9D11E2AF456D8C08B02CD2/c84SdM3fF8MNo6vP-B_Z8S_RtPI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:a2:fc:9b:f6:92:93:cf:f6:7f:6d:29:5e:b1:0d:98:1a:81: 86:5d:89:19:c7:36:e9:48:1d:2d:f5:42:6e:b3:40:78:6a:b1: ea:b7:24:22:6c:da:5d:8c:85:ed:6f:27:01:4e:13:d0:f0:d0: a7:81:75:26:2a:db:86:9f:57:df:ac:56:fa:21:52:32:d0:ba: a4:51:86:3e:35:72:09:48:4a:ce:bd:45:d4:46:3b:d1:75:7a: ef:9b:41:50:97:81:0b:78:41:e6:2a:63:05:e3:a6:21:4d:db: 72:d6:c8:a5:4a:a9:6e:84:9a:76:09:81:0c:a5:d7:bd:31:57: 3b:bc:e3:dc:84:6c:ab:89:2e:ad:d8:6a:a0:80:e5:d9:d9:c9: 59:d5:0c:48:4d:1c:9e:e3:27:7c:fe:8c:66:87:79:94:90:e1: fe:d6:06:e2:92:29:44:95:81:aa:8d:00:ce:d0:21:fe:d6:53: ef:41:ed:df:a7:0d:8b:57:40:82:e8:f6:36:82:0f:9f:ae:2a: 20:4d:48:1e:8c:2c:7d:1b:1d:d8:8c:08:26:99:a7:a2:7f:c1: 23:20:de:be:56:fb:a7:9c:c5:2d:60:06:5f:5d:59:61:d7:de: 4b:2f:13:23:60:05:ff:bc:bc:38:80:86:40:0a:82:63:d8:65: 29:c8:b2:51 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNK4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REUyQjIxMTAvBgNVBAUTKDczQ0UxMjc0Q0RERjE3QzMwREEzQUJDRkY4MUZEOUYx MkZEMUI0RjIwHhcNMjUwNjI4MTQ1NzAwWhcNMjUwNzA1MTQ1NzAwWjAYMRYwFAYD VQQDEw02ODYwMDJiYy0xZTFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2rVIzUijdl1eb6MqBde2MWqlAEb0ivZOF0/FbIMvZ/k0jGOwyed/cOVJoBA0 NF/2JAc8sxr4d95moJxesF603b9Sn0Pue21IP+/tmXXY4dVf6s2maEHQ9YRWh1UB /I80TU8yWFgqXJfykqfLOgvLyy32zvoPq5HxlvWT+FBy2NlMnTaQXtkKdyxEuNBv lvKmQHMrCOooYLqPGWTRndNuxveqxYRBcitk9NJH7Yc48+l3aB/1RmXWn1Cy6mQv lOU1vivfD4jFZCQnYhif6iVJIiA+Shwu7mgTTmACi9vXKYpW4V7N2kacS81ZyjeV w+x9/vmhtD/sQJKM25nDHzKfTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDvjYQ5P uxQCeP7ZWtFUw4IwIuPmMB8GA1UdIwQYMBaAFHPOEnTN3xfDDaOrz/gf2fEv0bTy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERTJCMi81M0NBNDYyQTFE OUQxMUUyQUY0NTZEOEMwOEIwMkNEMi9jODRTZE0zZkY4TU5vNnZQLUJfWjhTX1J0 UEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2M4NFNkTTNmRjhNTm82dlAtQl9aOFNfUnRQSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RTJCMi81M0NBNDYyQTFEOUQxMUUyQUY0NTZEOEMwOEIwMkNEMi9jODRTZE0zZkY4 TU5vNnZQLUJfWjhTX1J0UEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAoovyb9pKTz/Z/bSlesQ2YGoGGXYkZxzbpSB0t9UJus0B4arHqtyQi bNpdjIXtbycBThPQ8NCngXUmKtuGn1ffrFb6IVIy0LqkUYY+NXIJSErOvUXURjvR dXrvm0FQl4ELeEHmKmMF46YhTdty1silSqluhJp2CYEMpde9MVc7vOPchGyriS6t 2GqggOXZ2clZ1QxITRye4yd8/oxmh3mUkOH+1gbikilElYGqjQDO0CH+1lPvQe3f pw2LV0CC6PY2gg+friogTUgejCx9Gx3YjAgmmaeif8EjIN6+VvunnMUtYAZfXVlh 195LLxMjYAX/vLw4gIZACoJj2GUpyLJR -----END CERTIFICATE-----Generated at Sun Jun 29 19:28:36 2025 by rpki-client