$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3D4D/ED6A19929AE711EB8A045626C4F9AE02/30PPMfEc2OafGltFHUP2ixRHa0c.mft File: 30PPMfEc2OafGltFHUP2ixRHa0c.mft (raw, json) Hash identifier: rTsTBy2Rm7YZXVMssZ9Q3d+T8S5iLocGZ4tXzbBzZeI= Subject key identifier: DF:CD:99:46:95:95:69:E0:8B:74:8B:73:14:D5:21:3D:99:F6:72:BD Authority key identifier: DF:43:CF:31:F1:1C:D8:E6:9F:1A:5B:45:1D:43:F6:8B:14:47:6B:47 Certificate issuer: /CN=A91E3D4D/serialNumber=DF43CF31F11CD8E69F1A5B451D43F68B14476B47 Certificate serial: 063F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/30PPMfEc2OafGltFHUP2ixRHa0c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3D4D/ED6A19929AE711EB8A045626C4F9AE02/30PPMfEc2OafGltFHUP2ixRHa0c.mft Manifest number: 062D Signing time: Sun 04 May 2025 22:26:52 +0000 Manifest this update: Sun 04 May 2025 22:26:52 +0000 Manifest next update: Sun 11 May 2025 22:26:52 +0000 Files and hashes: 1: 30PPMfEc2OafGltFHUP2ixRHa0c.crl (hash: xtTbrpc/PapFiBhWKO4GavM6Cr3KB2ihjBgb2g0er+s=) 2: 8B5C69BACD5211EBBF89483BC4F9AE02.roa (hash: hZSSJaQgFguODQcmLdfStIq0+a+g/wi2cxwKmcjF2gk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3D4D/ED6A19929AE711EB8A045626C4F9AE02/30PPMfEc2OafGltFHUP2ixRHa0c.crl rsync://rpki.apnic.net/member_repository/A91E3D4D/ED6A19929AE711EB8A045626C4F9AE02/30PPMfEc2OafGltFHUP2ixRHa0c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/30PPMfEc2OafGltFHUP2ixRHa0c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 22:26:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1599 (0x63f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3D4D, serialNumber=DF43CF31F11CD8E69F1A5B451D43F68B14476B47 Validity Not Before: May 4 22:26:52 2025 GMT Not After : May 11 22:26:52 2025 GMT Subject: CN=6817e9ac-891f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:48:75:45:55:6d:c8:29:98:09:a3:71:6e:dd: 6a:9d:62:68:56:4a:c1:94:d4:f4:82:ed:10:2e:b2: 7a:fe:50:7c:8e:14:8b:29:26:24:a5:97:94:39:58: 6e:ef:93:57:f8:74:74:b3:97:1b:79:3d:29:0e:2c: fe:37:fb:4f:9b:14:82:e9:49:9d:37:5b:d8:2f:3a: 6b:b3:e2:7e:4a:b4:7a:3d:1c:85:ac:c8:a6:24:55: bc:ce:c4:b8:22:20:10:69:fa:3d:dd:a2:2e:78:9a: f0:a2:d3:08:6c:3c:66:72:54:65:14:bf:08:08:c3: 95:8d:cc:23:1d:55:b4:68:37:1c:dc:8f:1c:cc:18: 34:a6:18:c2:a6:ad:85:94:f9:ab:76:06:1b:a5:4b: 58:09:7e:1c:fd:a0:1e:73:6e:34:ac:7f:d5:ff:51: 7b:b9:55:cb:22:e5:ba:55:9a:9c:25:66:ef:48:1a: 05:99:24:d3:07:12:50:1e:7a:70:9f:31:3c:aa:a6: 2a:86:25:31:ef:64:13:09:da:5c:20:4d:53:f7:ba: 60:74:00:d5:e1:4d:f1:28:c9:9d:ce:27:8a:84:63: 65:69:1a:b5:e1:c9:8d:32:f1:c4:de:bc:d3:11:91: 0f:24:3b:8b:fc:48:af:5b:10:92:50:bb:17:46:19: fa:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:CD:99:46:95:95:69:E0:8B:74:8B:73:14:D5:21:3D:99:F6:72:BD X509v3 Authority Key Identifier: keyid:DF:43:CF:31:F1:1C:D8:E6:9F:1A:5B:45:1D:43:F6:8B:14:47:6B:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3D4D/ED6A19929AE711EB8A045626C4F9AE02/30PPMfEc2OafGltFHUP2ixRHa0c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/30PPMfEc2OafGltFHUP2ixRHa0c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3D4D/ED6A19929AE711EB8A045626C4F9AE02/30PPMfEc2OafGltFHUP2ixRHa0c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:57:09:f9:3d:08:1b:3c:65:09:55:47:bf:3e:6a:28:5a:f8: 79:7f:72:e6:ea:52:45:93:1d:bf:57:55:6f:9f:ad:c8:3f:d2: 45:b2:0b:13:d8:ef:fc:df:53:2d:b1:a6:fb:5d:a3:08:ae:c1: 23:73:c9:da:b1:e7:93:75:51:d3:56:2d:8a:41:57:84:85:b6: 5a:30:25:90:1d:7c:bb:c4:96:23:46:46:05:05:e5:0e:b9:3b: 6c:d6:34:11:d5:f9:cb:6d:3c:bc:00:71:69:76:b1:de:58:ec: 7a:01:e5:ba:67:32:46:3f:c9:e3:d9:23:1a:9b:70:44:fb:4f: f4:7e:a2:7e:5d:51:b3:48:3e:50:d8:e9:48:75:8a:7b:b5:f8: 91:29:ed:85:cb:b9:0b:fe:d7:5a:12:2f:af:38:29:a1:ef:2f: d4:ed:5e:e2:ae:9f:8c:8d:60:33:31:29:a4:c8:60:0a:68:c9: c9:11:f2:fd:5f:ad:83:4b:3d:22:c4:96:34:86:8b:2b:74:a8: d6:a7:ef:1b:3f:5b:b7:1e:14:9f:96:e5:73:e2:5d:dc:89:d7: 33:bd:90:f9:79:67:df:cb:0e:be:90:b8:23:95:dd:8f:d9:69: 84:5f:8a:63:e6:4f:d0:51:51:b0:e9:5b:e4:ce:05:06:5b:66: 20:1b:d5:61 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBj8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTNENEQxMTAvBgNVBAUTKERGNDNDRjMxRjExQ0Q4RTY5RjFBNUI0NTFENDNGNjhC MTQ0NzZCNDcwHhcNMjUwNTA0MjIyNjUyWhcNMjUwNTExMjIyNjUyWjAYMRYwFAYD VQQDEw02ODE3ZTlhYy04OTFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwEh1RVVtyCmYCaNxbt1qnWJoVkrBlNT0gu0QLrJ6/lB8jhSLKSYkpZeUOVhu 75NX+HR0s5cbeT0pDiz+N/tPmxSC6UmdN1vYLzprs+J+SrR6PRyFrMimJFW8zsS4 IiAQafo93aIueJrwotMIbDxmclRlFL8ICMOVjcwjHVW0aDcc3I8czBg0phjCpq2F lPmrdgYbpUtYCX4c/aAec240rH/V/1F7uVXLIuW6VZqcJWbvSBoFmSTTBxJQHnpw nzE8qqYqhiUx72QTCdpcIE1T97pgdADV4U3xKMmdzieKhGNlaRq14cmNMvHE3rzT EZEPJDuL/EivWxCSULsXRhn6mwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN/NmUaV lWngi3SLcxTVIT2Z9nK9MB8GA1UdIwQYMBaAFN9DzzHxHNjmnxpbRR1D9osUR2tH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFM0Q0RC9FRDZBMTk5MjlB RTcxMUVCOEEwNDU2MjZDNEY5QUUwMi8zMFBQTWZFYzJPYWZHbHRGSFVQMml4Ukhh MGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzMwUFBNZkVjMk9hZkdsdEZIVVAyaXhSSGEwYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF M0Q0RC9FRDZBMTk5MjlBRTcxMUVCOEEwNDU2MjZDNEY5QUUwMi8zMFBQTWZFYzJP YWZHbHRGSFVQMml4UkhhMGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBfVwn5PQgbPGUJVUe/PmooWvh5f3Lm6lJFkx2/V1Vvn63IP9JFsgsT 2O/831Mtsab7XaMIrsEjc8naseeTdVHTVi2KQVeEhbZaMCWQHXy7xJYjRkYFBeUO uTts1jQR1fnLbTy8AHFpdrHeWOx6AeW6ZzJGP8nj2SMam3BE+0/0fqJ+XVGzSD5Q 2OlIdYp7tfiRKe2Fy7kL/tdaEi+vOCmh7y/U7V7irp+MjWAzMSmkyGAKaMnJEfL9 X62DSz0ixJY0hosrdKjWp+8bP1u3HhSfluVz4l3cidczvZD5eWffyw6+kLgjld2P 2WmEX4pj5k/QUVGw6VvkzgUGW2YgG9Vh -----END CERTIFICATE-----Generated at Mon May 5 06:24:59 2025 by rpki-client