$ rpki-client -vvf rpki.apnic.net/member_repository/A9112956/EFBFBBF0261E11EA9C881C28C4F9AE02/091LwNHr_QIHqqZvYIuOBdPNRuM.mft File: 091LwNHr_QIHqqZvYIuOBdPNRuM.mft (raw, json) Hash identifier: tM8uDldZDJlzCQ4wIsMldaIteJpaIcb8hXnDhXsfgXA= Subject key identifier: 9F:EC:63:76:43:7E:2A:77:1B:40:BF:A3:CF:6D:E2:85:88:2D:01:50 Authority key identifier: D3:DD:4B:C0:D1:EB:FD:02:07:AA:A6:6F:60:8B:8E:05:D3:CD:46:E3 Certificate issuer: /CN=A9112956/serialNumber=D3DD4BC0D1EBFD0207AAA66F608B8E05D3CD46E3 Certificate serial: 0BA5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/091LwNHr_QIHqqZvYIuOBdPNRuM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9112956/EFBFBBF0261E11EA9C881C28C4F9AE02/091LwNHr_QIHqqZvYIuOBdPNRuM.mft Manifest number: 0B9F Signing time: Mon 16 Jun 2025 18:52:40 +0000 Manifest this update: Mon 16 Jun 2025 18:52:40 +0000 Manifest next update: Mon 23 Jun 2025 18:52:40 +0000 Files and hashes: 1: 091LwNHr_QIHqqZvYIuOBdPNRuM.crl (hash: wmDp/nZA5Dvuczj6qYgHLR9/EQXmV6nXqS1SrWUPHBM=) 2: 04346EDA262111EAB705442FC4F9AE02.roa (hash: ukt0pxqY8ok4zBKJR2dRuTwyGN5+UeLkjnvL96GEj4U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9112956/EFBFBBF0261E11EA9C881C28C4F9AE02/091LwNHr_QIHqqZvYIuOBdPNRuM.crl rsync://rpki.apnic.net/member_repository/A9112956/EFBFBBF0261E11EA9C881C28C4F9AE02/091LwNHr_QIHqqZvYIuOBdPNRuM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/091LwNHr_QIHqqZvYIuOBdPNRuM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Jun 2025 18:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2981 (0xba5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9112956, serialNumber=D3DD4BC0D1EBFD0207AAA66F608B8E05D3CD46E3 Validity Not Before: Jun 16 18:52:40 2025 GMT Not After : Jun 23 18:52:40 2025 GMT Subject: CN=685067f8-5426 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:f5:61:45:cc:23:7a:e3:25:b7:41:29:60:37: 75:0d:f9:67:2e:08:8a:95:e9:34:2b:ef:71:6e:a6: 00:24:bd:0c:32:d7:90:e9:42:2b:18:f4:76:4c:bf: 33:7e:42:6d:3c:d7:6c:98:ff:6d:f1:a6:68:03:fe: 4f:c5:4b:02:6f:82:cd:98:90:72:24:c4:6e:75:54: 74:f5:5c:cf:ce:d7:22:8a:39:16:10:a7:57:2d:16: 9f:3e:af:d7:1c:0b:72:d3:47:66:93:19:fb:fa:76: a2:1b:e8:d8:c9:c6:ea:47:7d:d9:7e:63:3f:1e:b7: 72:13:f5:82:92:2a:d6:15:29:fc:a8:27:0b:4e:93: ce:b7:32:62:22:6f:a5:7f:a9:4d:8a:1f:71:b1:d0: 99:ea:99:08:94:ef:3c:cf:0b:c8:a9:e5:2e:05:31: 59:2b:00:9f:3a:19:4e:f2:c1:85:70:9c:73:e1:57: 2b:d3:50:b7:6e:17:22:08:49:2b:4d:47:24:0f:69: 7a:08:48:e8:09:80:4e:78:06:e2:d5:6a:74:bc:50: 86:5e:9c:04:c3:55:70:36:ce:30:66:df:4f:ac:57: f8:e6:e3:4d:65:8c:49:cb:0d:e5:a3:f3:8e:6b:dc: 74:e4:5c:3a:74:61:7a:7d:09:1c:7c:73:b6:c2:26: fb:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:EC:63:76:43:7E:2A:77:1B:40:BF:A3:CF:6D:E2:85:88:2D:01:50 X509v3 Authority Key Identifier: keyid:D3:DD:4B:C0:D1:EB:FD:02:07:AA:A6:6F:60:8B:8E:05:D3:CD:46:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9112956/EFBFBBF0261E11EA9C881C28C4F9AE02/091LwNHr_QIHqqZvYIuOBdPNRuM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/091LwNHr_QIHqqZvYIuOBdPNRuM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112956/EFBFBBF0261E11EA9C881C28C4F9AE02/091LwNHr_QIHqqZvYIuOBdPNRuM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:a4:55:ac:03:5b:17:14:b6:2b:8f:49:41:16:d9:36:48:29: 52:74:d4:df:55:2e:a1:fa:13:37:02:05:52:e4:c5:2d:93:72: b5:07:db:35:4e:f2:e7:73:c1:96:93:0b:83:9d:72:1d:2a:39: 04:bb:e8:bf:6c:7c:13:a2:52:2c:b1:fa:6d:60:24:18:3e:ed: da:d3:5c:b9:fe:7e:da:93:3e:e0:bc:17:c2:47:c1:f8:3c:45: ed:76:56:41:ae:65:b2:a5:86:82:55:c9:b6:31:94:00:ff:60: c9:d8:e5:55:3a:22:cf:32:ad:39:65:63:b2:c5:59:be:0f:72: f7:2b:7a:c8:3f:29:35:22:c6:50:1b:7b:88:92:6e:64:82:ee: ed:a5:9d:8c:9f:74:8c:d9:4a:94:58:ae:f0:8d:43:fd:bc:1e: e7:2e:2c:f9:45:19:1c:c4:20:97:6c:43:b9:46:33:cc:fe:36: e3:15:20:6e:2d:49:2c:69:97:57:87:be:2c:c5:db:63:7f:8c: a5:e3:6b:c6:fc:eb:06:cc:17:b0:90:da:0e:0c:95:4e:1b:3d: 82:01:5e:6a:dd:95:ae:6f:a6:ab:9b:9c:1b:35:55:ad:ba:e0: 5d:7b:79:06:a1:20:7a:4d:11:4b:ba:48:c3:e2:f3:7f:34:32: d3:8f:d7:31 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC6UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTI5NTYxMTAvBgNVBAUTKEQzREQ0QkMwRDFFQkZEMDIwN0FBQTY2RjYwOEI4RTA1 RDNDRDQ2RTMwHhcNMjUwNjE2MTg1MjQwWhcNMjUwNjIzMTg1MjQwWjAYMRYwFAYD VQQDEw02ODUwNjdmOC01NDI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr/VhRcwjeuMlt0EpYDd1DflnLgiKlek0K+9xbqYAJL0MMteQ6UIrGPR2TL8z fkJtPNdsmP9t8aZoA/5PxUsCb4LNmJByJMRudVR09VzPztciijkWEKdXLRafPq/X HAty00dmkxn7+naiG+jYycbqR33ZfmM/HrdyE/WCkirWFSn8qCcLTpPOtzJiIm+l f6lNih9xsdCZ6pkIlO88zwvIqeUuBTFZKwCfOhlO8sGFcJxz4Vcr01C3bhciCEkr TUckD2l6CEjoCYBOeAbi1Wp0vFCGXpwEw1VwNs4wZt9PrFf45uNNZYxJyw3lo/OO a9x05Fw6dGF6fQkcfHO2wib7uQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ/sY3ZD fip3G0C/o89t4oWILQFQMB8GA1UdIwQYMBaAFNPdS8DR6/0CB6qmb2CLjgXTzUbj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjk1Ni9FRkJGQkJGMDI2 MUUxMUVBOUM4ODFDMjhDNEY5QUUwMi8wOTFMd05Icl9RSUhxcVp2WUl1T0JkUE5S dU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzA5MUx3TkhyX1FJSHFxWnZZSXVPQmRQTlJ1TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx Mjk1Ni9FRkJGQkJGMDI2MUUxMUVBOUM4ODFDMjhDNEY5QUUwMi8wOTFMd05Icl9R SUhxcVp2WUl1T0JkUE5SdU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBypFWsA1sXFLYrj0lBFtk2SClSdNTfVS6h+hM3AgVS5MUtk3K1B9s1 TvLnc8GWkwuDnXIdKjkEu+i/bHwTolIssfptYCQYPu3a01y5/n7akz7gvBfCR8H4 PEXtdlZBrmWypYaCVcm2MZQA/2DJ2OVVOiLPMq05ZWOyxVm+D3L3K3rIPyk1IsZQ G3uIkm5kgu7tpZ2Mn3SM2UqUWK7wjUP9vB7nLiz5RRkcxCCXbEO5RjPM/jbjFSBu LUksaZdXh74sxdtjf4yl42vG/OsGzBewkNoODJVOGz2CAV5q3ZWub6arm5wbNVWt uuBde3kGoSB6TRFLukjD4vN/NDLTj9cx -----END CERTIFICATE-----Generated at Tue Jun 17 16:27:23 2025 by rpki-client