$ rpki-client -vvf rpki.apnic.net/member_repository/A91359CD/185FFC2882DB11EAAC2CD60AC4F9AE02/a5tdFBgYlY1zBFgvJU6hddhD4_0.mft File: a5tdFBgYlY1zBFgvJU6hddhD4_0.mft (raw, json) Hash identifier: fGt4ZYzRaWSaA/iuqB/bXZPvFsasOU2RRyq9Veklg1E= Subject key identifier: 47:A5:D0:25:6D:47:E1:2B:36:7C:89:42:5E:5B:3F:0D:1B:5B:84:9F Authority key identifier: 6B:9B:5D:14:18:18:95:8D:73:04:58:2F:25:4E:A1:75:D8:43:E3:FD Certificate issuer: /CN=A91359CD/serialNumber=6B9B5D141818958D7304582F254EA175D843E3FD Certificate serial: 09D1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a5tdFBgYlY1zBFgvJU6hddhD4_0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91359CD/185FFC2882DB11EAAC2CD60AC4F9AE02/a5tdFBgYlY1zBFgvJU6hddhD4_0.mft Manifest number: 09C9 Signing time: Mon 16 Jun 2025 19:47:53 +0000 Manifest this update: Mon 16 Jun 2025 19:47:53 +0000 Manifest next update: Mon 23 Jun 2025 19:47:53 +0000 Files and hashes: 1: a5tdFBgYlY1zBFgvJU6hddhD4_0.crl (hash: H25fwUZTU/sz/Tz3lwIAMcxAwrC0bpZRnaFMr1RBmHk=) 2: 8F467E0082DD11EABD325010C4F9AE02.roa (hash: nTti14+ixHvCqHgk8IwtFdkQ1Ouiq6aL3zx3Hm8MMGs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91359CD/185FFC2882DB11EAAC2CD60AC4F9AE02/a5tdFBgYlY1zBFgvJU6hddhD4_0.crl rsync://rpki.apnic.net/member_repository/A91359CD/185FFC2882DB11EAAC2CD60AC4F9AE02/a5tdFBgYlY1zBFgvJU6hddhD4_0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a5tdFBgYlY1zBFgvJU6hddhD4_0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Jun 2025 19:47:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2513 (0x9d1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91359CD, serialNumber=6B9B5D141818958D7304582F254EA175D843E3FD Validity Not Before: Jun 16 19:47:53 2025 GMT Not After : Jun 23 19:47:53 2025 GMT Subject: CN=685074e9-283e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:ba:97:df:31:64:f9:f8:ea:73:a5:74:0a:a8: 89:09:d4:cd:49:06:7e:22:6a:3d:f7:e3:ce:b3:1a: 46:8e:de:56:92:33:97:15:b8:9d:12:ae:d2:23:7c: d5:80:81:9e:54:09:0b:25:20:74:59:6d:e9:e0:6b: 0a:fa:1e:82:b3:17:71:f7:74:e8:d5:d9:0b:72:a9: cc:cd:76:63:0f:f1:01:6e:09:40:e9:a2:dd:96:f6: 84:76:28:43:77:20:7a:97:a9:8d:8d:2f:c6:ba:fd: 4c:ba:9a:42:d5:03:ae:3e:9d:f8:48:54:f4:91:6f: 63:b9:77:e0:fc:56:0b:b5:b8:c5:6c:5c:70:5d:75: b3:b2:77:97:8f:66:3a:e8:65:61:2e:ad:50:3b:ba: 21:64:34:6f:28:e0:06:10:cd:99:c1:48:b7:c2:fe: cf:ab:8f:a4:60:cd:ea:be:b5:82:9c:34:56:fa:dc: bf:f3:aa:fd:70:af:01:e8:02:12:cb:bf:aa:6e:0f: b3:08:ef:09:8e:4c:c0:ad:8f:59:ad:f5:d3:b6:a9: 22:99:e4:5f:be:4f:6f:6c:cd:3f:a2:31:e3:2f:35: 58:c9:d2:c1:2e:87:c7:b0:4d:dd:fd:41:2b:c5:50: ec:ae:4d:02:5e:8f:13:42:4c:16:79:40:46:f7:8d: df:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:A5:D0:25:6D:47:E1:2B:36:7C:89:42:5E:5B:3F:0D:1B:5B:84:9F X509v3 Authority Key Identifier: keyid:6B:9B:5D:14:18:18:95:8D:73:04:58:2F:25:4E:A1:75:D8:43:E3:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91359CD/185FFC2882DB11EAAC2CD60AC4F9AE02/a5tdFBgYlY1zBFgvJU6hddhD4_0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a5tdFBgYlY1zBFgvJU6hddhD4_0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91359CD/185FFC2882DB11EAAC2CD60AC4F9AE02/a5tdFBgYlY1zBFgvJU6hddhD4_0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:92:f4:18:f2:e5:ac:29:cc:9f:d8:57:04:be:19:6c:1b:d3: 74:0f:7f:e6:14:cd:c4:f6:a0:71:ef:96:c1:50:d5:69:86:e3: a7:29:d3:18:95:45:49:41:ef:09:dd:61:46:f6:93:76:c8:fa: 5e:89:d7:2c:30:a4:45:18:b7:63:d2:f8:3e:c2:73:76:0e:f3: 14:e7:7b:c1:2d:ef:cc:b5:8b:79:36:6d:b8:2e:ab:50:54:00: aa:e6:ce:ad:0d:09:ba:fd:ed:7e:96:e2:1f:a8:d7:bc:24:ad: 24:13:c2:6f:fc:27:b9:12:0d:e1:03:9e:d1:69:3f:66:6d:0a: ca:4b:df:c3:1b:c1:43:4b:36:f4:d4:f4:20:34:5c:78:76:db: bf:db:e0:2c:52:dc:d8:c4:ef:c4:07:9c:fb:91:5f:d0:0b:15: ea:e0:12:aa:ab:f3:31:5d:82:95:13:98:e5:66:a0:48:fa:da: 55:24:d5:16:98:60:4a:23:39:bb:ed:98:a0:0e:8f:65:e1:e3: 01:8f:2f:7d:63:66:31:71:08:5f:37:88:53:af:24:88:fc:5d: 04:2c:2f:b3:ce:56:9d:d5:6c:c1:a2:6d:4e:96:09:aa:ed:3b: fb:cd:02:10:a6:5d:08:4b:eb:ee:db:24:36:12:83:8e:c3:cc: 57:f2:85:14 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCdEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzU5Q0QxMTAvBgNVBAUTKDZCOUI1RDE0MTgxODk1OEQ3MzA0NTgyRjI1NEVBMTc1 RDg0M0UzRkQwHhcNMjUwNjE2MTk0NzUzWhcNMjUwNjIzMTk0NzUzWjAYMRYwFAYD VQQDEw02ODUwNzRlOS0yODNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA47qX3zFk+fjqc6V0CqiJCdTNSQZ+Imo99+POsxpGjt5WkjOXFbidEq7SI3zV gIGeVAkLJSB0WW3p4GsK+h6Csxdx93To1dkLcqnMzXZjD/EBbglA6aLdlvaEdihD dyB6l6mNjS/Guv1MuppC1QOuPp34SFT0kW9juXfg/FYLtbjFbFxwXXWzsneXj2Y6 6GVhLq1QO7ohZDRvKOAGEM2ZwUi3wv7Pq4+kYM3qvrWCnDRW+ty/86r9cK8B6AIS y7+qbg+zCO8JjkzArY9ZrfXTtqkimeRfvk9vbM0/ojHjLzVYydLBLofHsE3d/UEr xVDsrk0CXo8TQkwWeUBG943fbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEel0CVt R+ErNnyJQl5bPw0bW4SfMB8GA1UdIwQYMBaAFGubXRQYGJWNcwRYLyVOoXXYQ+P9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNTlDRC8xODVGRkMyODgy REIxMUVBQUMyQ0Q2MEFDNEY5QUUwMi9hNXRkRkJnWWxZMXpCRmd2SlU2aGRkaEQ0 XzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2E1dGRGQmdZbFkxekJGZ3ZKVTZoZGRoRDRfMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NTlDRC8xODVGRkMyODgyREIxMUVBQUMyQ0Q2MEFDNEY5QUUwMi9hNXRkRkJnWWxZ MXpCRmd2SlU2aGRkaEQ0XzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAFkvQY8uWsKcyf2FcEvhlsG9N0D3/mFM3E9qBx75bBUNVphuOnKdMY lUVJQe8J3WFG9pN2yPpeidcsMKRFGLdj0vg+wnN2DvMU53vBLe/MtYt5Nm24LqtQ VACq5s6tDQm6/e1+luIfqNe8JK0kE8Jv/Ce5Eg3hA57RaT9mbQrKS9/DG8FDSzb0 1PQgNFx4dtu/2+AsUtzYxO/EB5z7kV/QCxXq4BKqq/MxXYKVE5jlZqBI+tpVJNUW mGBKIzm77ZigDo9l4eMBjy99Y2YxcQhfN4hTrySI/F0ELC+zzlad1WzBom1Olgmq 7Tv7zQIQpl0IS+vu2yQ2EoOOw8xX8oUU -----END CERTIFICATE-----Generated at Wed Jun 18 06:28:02 2025 by rpki-client