$ rpki-client -vvf rpki.apnic.net/member_repository/A91456CF/01393496312D11F096CEEA5EC4F9AE02/D_9xeYLZ4dlvTX_FMR7TIyNroJM.mft File: D_9xeYLZ4dlvTX_FMR7TIyNroJM.mft (raw, json) Hash identifier: gK7pUoQ36lcCkbhI9sVuMvkm4IIWyQgkyblz1/0YPvo= Subject key identifier: CE:6F:C3:FD:D5:D8:90:43:F6:68:04:8E:B5:1F:72:D8:34:78:C4:1C Authority key identifier: 0F:FF:71:79:82:D9:E1:D9:6F:4D:7F:C5:31:1E:D3:23:23:6B:A0:93 Certificate issuer: /CN=A91456CF/serialNumber=0FFF717982D9E1D96F4D7FC5311ED323236BA093 Certificate serial: 13 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D_9xeYLZ4dlvTX_FMR7TIyNroJM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91456CF/01393496312D11F096CEEA5EC4F9AE02/D_9xeYLZ4dlvTX_FMR7TIyNroJM.mft Manifest number: 12 Signing time: Tue 17 Jun 2025 06:52:58 +0000 Manifest this update: Tue 17 Jun 2025 06:52:58 +0000 Manifest next update: Tue 24 Jun 2025 06:52:58 +0000 Files and hashes: 1: D_9xeYLZ4dlvTX_FMR7TIyNroJM.crl (hash: 9oOTSK8ZqI4d+3Wgm31D7JSuggzNoHe5Mi2FZX/oOMI=) 2: 6EBD9348315C11F0B4470733C4F9AE02.roa (hash: C2osSUSGXaoVQWIdcbrfsnLCIsFQre/GUrWQUTRuHn0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91456CF/01393496312D11F096CEEA5EC4F9AE02/D_9xeYLZ4dlvTX_FMR7TIyNroJM.crl rsync://rpki.apnic.net/member_repository/A91456CF/01393496312D11F096CEEA5EC4F9AE02/D_9xeYLZ4dlvTX_FMR7TIyNroJM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D_9xeYLZ4dlvTX_FMR7TIyNroJM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Jun 2025 06:52:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19 (0x13) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91456CF, serialNumber=0FFF717982D9E1D96F4D7FC5311ED323236BA093 Validity Not Before: Jun 17 06:52:58 2025 GMT Not After : Jun 24 06:52:58 2025 GMT Subject: CN=685110ca-c3fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:d4:13:53:02:86:b3:25:63:83:ee:d9:da:1e: a7:a9:15:76:a5:e3:dd:a3:b7:ff:af:f3:e0:01:5d: 43:da:84:fd:c4:95:63:d2:b2:ec:04:2e:b9:f9:a8: 28:c6:52:66:4a:31:4f:99:69:b6:db:06:22:ff:d3: 1f:3d:4c:1b:a6:3f:7b:8f:de:6a:42:94:b5:31:75: eb:88:9f:9f:80:d0:7b:61:89:fb:8e:68:c5:d5:5b: 6d:2f:52:8b:09:d5:a5:a3:e6:e0:a2:2d:e1:92:b2: d4:48:07:c8:48:44:f6:01:63:05:eb:a0:74:f8:83: b3:c1:21:cf:ce:12:b2:3b:34:05:8d:e3:59:3c:d3: 42:72:28:ee:e1:1d:0e:d4:94:2f:e0:0e:88:58:d8: 6e:8b:1c:5a:be:ae:6e:4c:f1:8e:40:e5:6d:4b:7d: 8c:7a:4c:95:92:62:5e:fe:20:18:a8:b2:64:f3:db: 4a:59:2a:ae:88:90:ce:cc:7f:fc:fe:90:c1:80:11: 14:9e:09:42:02:c6:79:2a:51:fe:06:03:a1:b4:76: e2:7b:fb:1d:2a:a0:7e:3a:b5:0d:0f:06:cf:6d:2e: e3:53:a4:1d:28:4c:b4:1e:cf:5b:17:84:15:42:b9: 5d:bf:4c:75:1b:ec:9d:97:32:44:36:18:96:aa:c9: d3:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:6F:C3:FD:D5:D8:90:43:F6:68:04:8E:B5:1F:72:D8:34:78:C4:1C X509v3 Authority Key Identifier: keyid:0F:FF:71:79:82:D9:E1:D9:6F:4D:7F:C5:31:1E:D3:23:23:6B:A0:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91456CF/01393496312D11F096CEEA5EC4F9AE02/D_9xeYLZ4dlvTX_FMR7TIyNroJM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D_9xeYLZ4dlvTX_FMR7TIyNroJM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91456CF/01393496312D11F096CEEA5EC4F9AE02/D_9xeYLZ4dlvTX_FMR7TIyNroJM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:1f:9e:31:02:8c:e2:ec:d8:1f:a4:41:48:af:ce:b2:dd:7d: 0e:db:e2:0e:42:3b:1a:a5:5a:55:a0:3d:00:7e:83:cb:1d:c1: 59:6c:d8:f0:d6:20:c8:97:a1:fb:8c:a8:0e:df:41:d9:69:d5: c7:0a:73:55:2b:08:93:43:0c:b8:29:37:e4:e2:9e:e5:bf:ed: 79:6c:c7:40:0c:8c:02:1f:89:15:b4:b7:08:db:6c:5b:2c:c8: 17:3f:95:36:05:06:e0:a4:85:32:7f:9f:40:12:01:dd:e5:11: 59:2a:f2:db:b6:3b:70:5c:89:b9:3a:66:22:fa:6d:6d:4d:f4: 8c:a9:a6:85:21:58:5e:f7:e7:55:80:94:17:b5:89:3a:e2:e7: 6f:aa:c0:63:b7:52:44:7f:11:a5:af:a3:b3:c6:9e:a6:dc:66: 0f:5c:60:dc:4d:d0:84:d5:12:29:17:0d:6f:91:5f:3b:30:8d: c6:06:4b:f1:f1:1e:34:48:53:0a:71:db:16:56:c7:1c:e8:26: 70:58:72:41:08:be:97:35:3a:5a:ad:6d:fc:3a:ce:39:73:a7: 36:bd:5e:22:21:04:39:f7:23:c4:51:ab:e3:4c:bb:f1:a0:f4: 6f:17:3e:55:ea:f5:f0:2e:52:cc:28:f5:43:28:68:21:ec:50: ce:db:56:f6 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBEzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 NTZDRjExMC8GA1UEBRMoMEZGRjcxNzk4MkQ5RTFEOTZGNEQ3RkM1MzExRUQzMjMy MzZCQTA5MzAeFw0yNTA2MTcwNjUyNThaFw0yNTA2MjQwNjUyNThaMBgxFjAUBgNV BAMTDTY4NTExMGNhLWMzZmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC11BNTAoazJWOD7tnaHqepFXal492jt/+v8+ABXUPahP3ElWPSsuwELrn5qCjG UmZKMU+ZabbbBiL/0x89TBumP3uP3mpClLUxdeuIn5+A0HthifuOaMXVW20vUosJ 1aWj5uCiLeGSstRIB8hIRPYBYwXroHT4g7PBIc/OErI7NAWN41k800JyKO7hHQ7U lC/gDohY2G6LHFq+rm5M8Y5A5W1LfYx6TJWSYl7+IBiosmTz20pZKq6IkM7Mf/z+ kMGAERSeCUICxnkqUf4GA6G0duJ7+x0qoH46tQ0PBs9tLuNTpB0oTLQez1sXhBVC uV2/THUb7J2XMkQ2GJaqydOvAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUzm/D/dXY kEP2aASOtR9y2DR4xBwwHwYDVR0jBBgwFoAUD/9xeYLZ4dlvTX/FMR7TIyNroJMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ1NkNGLzAxMzkzNDk2MzEy RDExRjA5NkNFRUE1RUM0RjlBRTAyL0RfOXhlWUxaNGRsdlRYX0ZNUjdUSXlOcm9K TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRF85eGVZTFo0ZGx2VFhfRk1SN1RJeU5yb0pNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ1 NkNGLzAxMzkzNDk2MzEyRDExRjA5NkNFRUE1RUM0RjlBRTAyL0RfOXhlWUxaNGRs dlRYX0ZNUjdUSXlOcm9KTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFYfnjECjOLs2B+kQUivzrLdfQ7b4g5COxqlWlWgPQB+g8sdwVls2PDW IMiXofuMqA7fQdlp1ccKc1UrCJNDDLgpN+TinuW/7Xlsx0AMjAIfiRW0twjbbFss yBc/lTYFBuCkhTJ/n0ASAd3lEVkq8tu2O3Bcibk6ZiL6bW1N9IyppoUhWF7351WA lBe1iTri52+qwGO3UkR/EaWvo7PGnqbcZg9cYNxN0ITVEikXDW+RXzswjcYGS/Hx HjRIUwpx2xZWxxzoJnBYckEIvpc1Olqtbfw6zjlzpza9XiIhBDn3I8RRq+NMu/Gg 9G8XPlXq9fAuUswo9UMoaCHsUM7bVvY= -----END CERTIFICATE-----Generated at Thu Jun 19 07:43:53 2025 by rpki-client