$ rpki-client -vvf rpki.apnic.net/member_repository/A91127C1/534472CC83B911EA852A1576C4F9AE02/VAR9J873NG9Bde-sc0SUrbsFe1U.mft File: VAR9J873NG9Bde-sc0SUrbsFe1U.mft (raw, json) Hash identifier: vIcdVD/wzLaswVlL3D5gr0FLgy1pUHy1rIV5EfSlUHA= Subject key identifier: 54:C1:3B:66:FC:BC:C2:C9:5A:43:6B:F4:87:C2:48:AD:16:D3:20:79 Authority key identifier: 54:04:7D:27:CE:F7:34:6F:41:75:EF:AC:73:44:94:AD:BB:05:7B:55 Certificate issuer: /CN=A91127C1/serialNumber=54047D27CEF7346F4175EFAC734494ADBB057B55 Certificate serial: 09D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VAR9J873NG9Bde-sc0SUrbsFe1U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91127C1/534472CC83B911EA852A1576C4F9AE02/VAR9J873NG9Bde-sc0SUrbsFe1U.mft Manifest number: 09C9 Signing time: Fri 20 Jun 2025 19:53:32 +0000 Manifest this update: Fri 20 Jun 2025 19:53:31 +0000 Manifest next update: Fri 27 Jun 2025 19:53:31 +0000 Files and hashes: 1: VAR9J873NG9Bde-sc0SUrbsFe1U.crl (hash: L3jjdiT71st8T6GycJEWmZeFxWE4eKw27PNjIFvCqDk=) 2: 3492D2F083BA11EA8728F076C4F9AE02.roa (hash: KDJ+ohVUY2aGK5rtHUQLiPRKWsZuV9h/W6r/Y+qQ0VM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91127C1/534472CC83B911EA852A1576C4F9AE02/VAR9J873NG9Bde-sc0SUrbsFe1U.crl rsync://rpki.apnic.net/member_repository/A91127C1/534472CC83B911EA852A1576C4F9AE02/VAR9J873NG9Bde-sc0SUrbsFe1U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VAR9J873NG9Bde-sc0SUrbsFe1U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Jun 2025 19:53:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2512 (0x9d0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91127C1, serialNumber=54047D27CEF7346F4175EFAC734494ADBB057B55 Validity Not Before: Jun 20 19:53:31 2025 GMT Not After : Jun 27 19:53:31 2025 GMT Subject: CN=6855bc3b-8ee0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:42:eb:5f:f9:a5:32:c1:95:5c:4b:04:b0:3f: 00:a7:ea:db:65:19:a2:b5:17:ad:7e:c0:df:f5:72: fb:ff:db:29:a7:a3:cf:fa:96:70:40:9e:eb:5c:e3: 08:b9:51:75:8e:a5:f3:4c:1c:e4:f0:2b:bf:ee:cc: 5a:80:4d:83:6c:fa:46:a5:62:ab:04:73:5a:8e:13: 57:1a:a0:e8:b5:d5:e6:a5:65:38:66:66:c2:18:43: 3f:7f:3c:3b:9d:22:4d:3e:85:03:57:44:b2:c1:fc: 59:8a:93:4e:9c:ee:93:e9:f1:87:4a:46:0a:18:43: 81:71:3d:fb:f9:8a:e6:a1:56:4d:7e:76:91:e4:11: 24:df:63:0e:eb:42:40:4e:da:8c:ba:49:8f:30:cc: f6:9d:3d:fa:6d:5f:e6:0a:dc:16:2b:f2:23:f9:ae: c4:8b:18:b0:ed:3b:85:8c:7f:32:8f:a9:ee:31:96: a9:a2:60:e0:fc:00:5c:1c:d3:b2:be:29:98:df:2c: 17:63:bd:f2:66:72:81:19:80:d6:b0:f0:96:05:5f: 97:2f:85:44:3b:bc:43:a1:5d:ea:ed:26:86:b1:e0: 42:02:18:a9:13:b0:7f:5d:81:99:82:78:53:bf:c2: fc:2b:9f:7e:01:aa:0d:fb:50:b3:52:47:74:6f:ef: 94:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:C1:3B:66:FC:BC:C2:C9:5A:43:6B:F4:87:C2:48:AD:16:D3:20:79 X509v3 Authority Key Identifier: keyid:54:04:7D:27:CE:F7:34:6F:41:75:EF:AC:73:44:94:AD:BB:05:7B:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91127C1/534472CC83B911EA852A1576C4F9AE02/VAR9J873NG9Bde-sc0SUrbsFe1U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VAR9J873NG9Bde-sc0SUrbsFe1U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91127C1/534472CC83B911EA852A1576C4F9AE02/VAR9J873NG9Bde-sc0SUrbsFe1U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:1f:43:7a:e4:d3:64:31:86:68:b9:63:c6:bc:b3:d8:64:8b: d9:05:d9:de:6a:c8:69:74:a2:03:5d:29:ad:af:00:71:43:5b: a1:91:25:cb:dd:00:f7:46:23:15:e0:fe:34:e0:25:cc:f4:56: 2f:53:80:d4:e8:29:8a:91:0c:fe:f5:21:33:37:3a:bf:ca:a5: 39:cd:83:58:6e:15:04:60:54:89:97:d2:50:6c:26:22:73:00: 6a:5a:6d:f9:75:1a:2a:cd:91:e7:59:9b:d6:5d:6f:e4:30:cb: ba:bf:ba:c5:2c:10:63:1c:6d:c9:a6:29:66:0e:2d:d6:e2:17: fc:df:19:05:6f:86:93:40:d1:12:4b:4b:26:88:15:86:55:8e: 71:00:38:e7:44:e6:75:66:00:65:e1:a9:5d:35:50:50:a5:af: ae:20:51:d4:fb:ba:5a:44:3f:65:41:5d:5b:49:0d:de:e1:ae: 28:c0:72:c3:e6:70:68:13:0b:0d:f0:2d:db:f3:f7:97:80:04: bd:53:7f:a1:14:cf:e2:9b:1b:14:3f:3e:0d:f3:db:44:b0:69: 83:b2:50:d8:55:76:06:7a:f7:db:28:d5:c2:f0:91:6e:84:3c: 49:01:06:c2:45:54:0c:74:2a:63:53:42:11:00:fb:f8:c8:fe: 45:ce:d6:95 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCdAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTI3QzExMTAvBgNVBAUTKDU0MDQ3RDI3Q0VGNzM0NkY0MTc1RUZBQzczNDQ5NEFE QkIwNTdCNTUwHhcNMjUwNjIwMTk1MzMxWhcNMjUwNjI3MTk1MzMxWjAYMRYwFAYD VQQDEw02ODU1YmMzYi04ZWUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0ELrX/mlMsGVXEsEsD8Ap+rbZRmitRetfsDf9XL7/9spp6PP+pZwQJ7rXOMI uVF1jqXzTBzk8Cu/7sxagE2DbPpGpWKrBHNajhNXGqDotdXmpWU4ZmbCGEM/fzw7 nSJNPoUDV0SywfxZipNOnO6T6fGHSkYKGEOBcT37+YrmoVZNfnaR5BEk32MO60JA TtqMukmPMMz2nT36bV/mCtwWK/Ij+a7Eixiw7TuFjH8yj6nuMZapomDg/ABcHNOy vimY3ywXY73yZnKBGYDWsPCWBV+XL4VEO7xDoV3q7SaGseBCAhipE7B/XYGZgnhT v8L8K59+AaoN+1CzUkd0b++UtQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFTBO2b8 vMLJWkNr9IfCSK0W0yB5MB8GA1UdIwQYMBaAFFQEfSfO9zRvQXXvrHNElK27BXtV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjdDMS81MzQ0NzJDQzgz QjkxMUVBODUyQTE1NzZDNEY5QUUwMi9WQVI5Sjg3M05HOUJkZS1zYzBTVXJic0Zl MVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZBUjlKODczTkc5QmRlLXNjMFNVcmJzRmUxVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MjdDMS81MzQ0NzJDQzgzQjkxMUVBODUyQTE1NzZDNEY5QUUwMi9WQVI5Sjg3M05H OUJkZS1zYzBTVXJic0ZlMVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAGH0N65NNkMYZouWPGvLPYZIvZBdneashpdKIDXSmtrwBxQ1uhkSXL 3QD3RiMV4P404CXM9FYvU4DU6CmKkQz+9SEzNzq/yqU5zYNYbhUEYFSJl9JQbCYi cwBqWm35dRoqzZHnWZvWXW/kMMu6v7rFLBBjHG3JpilmDi3W4hf83xkFb4aTQNES S0smiBWGVY5xADjnROZ1ZgBl4aldNVBQpa+uIFHU+7paRD9lQV1bSQ3e4a4owHLD 5nBoEwsN8C3b8/eXgAS9U3+hFM/imxsUPz4N89tEsGmDslDYVXYGevfbKNXC8JFu hDxJAQbCRVQMdCpjU0IRAPv4yP5FztaV -----END CERTIFICATE-----Generated at Fri Jun 20 23:06:57 2025 by rpki-client