$ rpki-client -vvf rpki.apnic.net/member_repository/A91221EF/6F2FEBD6891F11EA89B6277CC4F9AE02/_5APJL-aiYLZX4RHqnubtPesRjk.mft File: _5APJL-aiYLZX4RHqnubtPesRjk.mft (raw, json) Hash identifier: fwEqDcrMRybtgpJkktD5gTk6QtVdmOVMiDu3qS+jx7A= Subject key identifier: 62:A2:5C:8E:9F:16:AA:D5:84:C7:EB:CD:FA:C3:D0:6F:0A:18:19:97 Authority key identifier: FF:90:0F:24:BF:9A:89:82:D9:5F:84:47:AA:7B:9B:B4:F7:AC:46:39 Certificate issuer: /CN=A91221EF/serialNumber=FF900F24BF9A8982D95F8447AA7B9BB4F7AC4639 Certificate serial: 09BB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_5APJL-aiYLZX4RHqnubtPesRjk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91221EF/6F2FEBD6891F11EA89B6277CC4F9AE02/_5APJL-aiYLZX4RHqnubtPesRjk.mft Manifest number: 09AD Signing time: Sat 14 Jun 2025 19:51:59 +0000 Manifest this update: Sat 14 Jun 2025 19:51:58 +0000 Manifest next update: Sat 21 Jun 2025 19:51:58 +0000 Files and hashes: 1: _5APJL-aiYLZX4RHqnubtPesRjk.crl (hash: lqbECzsGhJIMjZykn/YSIZr+/BQndwWs3p7FynYOqKg=) 2: D3037D06738E11ED8283FF53C4F9AE02.roa (hash: fmsh1X3Q3HooxV4YfKkoLFlrGgD13/WeDGjBg2CNmMg=) 3: D1A6B6D0738E11ED8283FF53C4F9AE02.roa (hash: WgMRh1pD8v+j2OuHDw2wLrJ+bXBsyv6ChtDmNGRF1/k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91221EF/6F2FEBD6891F11EA89B6277CC4F9AE02/_5APJL-aiYLZX4RHqnubtPesRjk.crl rsync://rpki.apnic.net/member_repository/A91221EF/6F2FEBD6891F11EA89B6277CC4F9AE02/_5APJL-aiYLZX4RHqnubtPesRjk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_5APJL-aiYLZX4RHqnubtPesRjk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 19:51:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2491 (0x9bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91221EF, serialNumber=FF900F24BF9A8982D95F8447AA7B9BB4F7AC4639 Validity Not Before: Jun 14 19:51:58 2025 GMT Not After : Jun 21 19:51:58 2025 GMT Subject: CN=684dd2df-63dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:6c:68:02:79:c3:b8:2a:42:11:ef:3a:c4:43: 99:a2:24:82:77:28:02:33:72:b0:9c:51:3b:0f:7e: 44:d2:59:3b:9c:33:14:39:d7:5d:f3:e3:82:23:c0: d7:5f:f7:e9:40:68:0d:3b:a2:53:13:c9:76:8b:e5: 03:4d:8b:b0:c3:87:3b:25:62:cb:82:9d:9b:e5:cf: 22:13:f0:be:b2:27:4b:13:69:9f:37:6b:33:54:6e: b7:90:64:e1:99:7a:61:26:b1:c1:60:17:19:f1:c9: b7:d4:3c:8f:b6:8b:f2:e8:6e:ed:f1:e4:45:60:b3: da:ab:56:df:15:73:a3:0e:a4:84:42:c9:36:b4:d6: 58:2d:54:bd:8e:51:80:4c:88:55:ac:e4:96:b7:01: db:0b:21:8d:58:af:ea:7b:f8:dd:54:f7:c7:99:0f: 8f:bc:0b:03:92:53:69:22:cd:d4:1d:b0:d4:6a:84: 00:60:03:ff:85:df:f5:d4:35:78:0e:01:41:ec:1a: 4c:78:b3:01:61:22:dc:6b:b8:0b:23:26:5a:ba:a2: 8b:3e:22:d6:71:35:b3:66:08:2f:a3:f6:04:68:ec: f4:84:fc:7d:34:68:1f:e6:e8:74:08:a0:87:8b:e2: 15:3c:2a:13:3f:7e:f0:f3:7e:17:f5:ba:ec:8c:e1: df:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:A2:5C:8E:9F:16:AA:D5:84:C7:EB:CD:FA:C3:D0:6F:0A:18:19:97 X509v3 Authority Key Identifier: keyid:FF:90:0F:24:BF:9A:89:82:D9:5F:84:47:AA:7B:9B:B4:F7:AC:46:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91221EF/6F2FEBD6891F11EA89B6277CC4F9AE02/_5APJL-aiYLZX4RHqnubtPesRjk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_5APJL-aiYLZX4RHqnubtPesRjk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91221EF/6F2FEBD6891F11EA89B6277CC4F9AE02/_5APJL-aiYLZX4RHqnubtPesRjk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:63:65:80:b9:54:68:8e:1b:49:36:5f:26:78:97:ee:71:4a: fd:5d:50:2c:8e:2a:c8:b7:be:19:e7:de:11:03:69:6d:22:24: 0f:77:47:5a:ba:90:fb:4e:a0:c9:a3:02:cf:1b:f7:de:f9:e9: 5a:d0:42:66:72:e7:11:05:e7:79:eb:1a:c5:71:42:d0:7a:59: 9a:52:aa:61:92:08:d7:9a:60:7a:1e:a5:bb:bc:7c:4a:ae:03: 4f:64:13:be:2f:30:4c:1f:76:2b:0a:78:7a:96:39:62:4e:48: e1:20:20:68:14:a8:4b:22:e7:99:f3:48:a8:e3:0c:cf:75:a3: 11:84:1a:09:2a:82:ca:97:37:b2:e6:a3:90:d8:c6:22:f1:86: ff:3f:dc:04:93:34:6b:20:c2:9d:b5:0c:07:8d:3e:d8:b1:3f: db:9c:f3:5c:d4:5e:d9:bc:a0:98:3c:d5:74:29:6c:42:9c:9d: 05:14:cf:9a:6e:fd:47:f2:e7:6d:5b:e9:0e:c8:77:92:6d:ff: 5f:ca:a8:b0:12:a7:eb:d2:a0:b8:af:4d:1a:2f:c2:db:e1:c6: e4:1a:15:92:2e:f8:a4:fc:c7:6c:55:d2:5f:db:83:88:1c:0a: 10:17:94:00:30:3f:8a:fc:3e:6e:71:1a:50:b6:8c:c8:81:62: 15:e9:46:b2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCbswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjIxRUYxMTAvBgNVBAUTKEZGOTAwRjI0QkY5QTg5ODJEOTVGODQ0N0FBN0I5QkI0 RjdBQzQ2MzkwHhcNMjUwNjE0MTk1MTU4WhcNMjUwNjIxMTk1MTU4WjAYMRYwFAYD VQQDEw02ODRkZDJkZi02M2RkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw2xoAnnDuCpCEe86xEOZoiSCdygCM3KwnFE7D35E0lk7nDMUOddd8+OCI8DX X/fpQGgNO6JTE8l2i+UDTYuww4c7JWLLgp2b5c8iE/C+sidLE2mfN2szVG63kGTh mXphJrHBYBcZ8cm31DyPtovy6G7t8eRFYLPaq1bfFXOjDqSEQsk2tNZYLVS9jlGA TIhVrOSWtwHbCyGNWK/qe/jdVPfHmQ+PvAsDklNpIs3UHbDUaoQAYAP/hd/11DV4 DgFB7BpMeLMBYSLca7gLIyZauqKLPiLWcTWzZggvo/YEaOz0hPx9NGgf5uh0CKCH i+IVPCoTP37w834X9brsjOHfzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGKiXI6f FqrVhMfrzfrD0G8KGBmXMB8GA1UdIwQYMBaAFP+QDyS/momC2V+ER6p7m7T3rEY5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMjFFRi82RjJGRUJENjg5 MUYxMUVBODlCNjI3N0NDNEY5QUUwMi9fNUFQSkwtYWlZTFpYNFJIcW51YnRQZXNS amsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL181QVBKTC1haVlMWlg0UkhxbnVidFBlc1Jqay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MjFFRi82RjJGRUJENjg5MUYxMUVBODlCNjI3N0NDNEY5QUUwMi9fNUFQSkwtYWlZ TFpYNFJIcW51YnRQZXNSamsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC1Y2WAuVRojhtJNl8meJfucUr9XVAsjirIt74Z594RA2ltIiQPd0da upD7TqDJowLPG/fe+ela0EJmcucRBed56xrFcULQelmaUqphkgjXmmB6HqW7vHxK rgNPZBO+LzBMH3YrCnh6ljliTkjhICBoFKhLIueZ80io4wzPdaMRhBoJKoLKlzey 5qOQ2MYi8Yb/P9wEkzRrIMKdtQwHjT7YsT/bnPNc1F7ZvKCYPNV0KWxCnJ0FFM+a bv1H8udtW+kOyHeSbf9fyqiwEqfr0qC4r00aL8Lb4cbkGhWSLvik/MdsVdJf24OI HAoQF5QAMD+K/D5ucRpQtozIgWIV6Uay -----END CERTIFICATE-----Generated at Sun Jun 15 09:41:31 2025 by rpki-client