$ rpki-client -vvf rpki.apnic.net/member_repository/A91499BB/AB1CAC86609711E8B74A861AC4F9AE02/8Os9EfDsrmhzaV1az7e0rcVfNFg.mft File: 8Os9EfDsrmhzaV1az7e0rcVfNFg.mft (raw, json) Hash identifier: 0tevfdXErKhgB4EcK9IUxFhHzEl6uu6gDTfv6D2Ok4M= Subject key identifier: 1D:EC:DE:65:3F:4E:C4:33:60:49:97:31:B7:08:B3:C2:E5:41:28:9C Authority key identifier: F0:EB:3D:11:F0:EC:AE:68:73:69:5D:5A:CF:B7:B4:AD:C5:5F:34:58 Certificate issuer: /CN=A91499BB/serialNumber=F0EB3D11F0ECAE6873695D5ACFB7B4ADC55F3458 Certificate serial: 14B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Os9EfDsrmhzaV1az7e0rcVfNFg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91499BB/AB1CAC86609711E8B74A861AC4F9AE02/8Os9EfDsrmhzaV1az7e0rcVfNFg.mft Manifest number: 14A9 Signing time: Sat 14 Jun 2025 16:49:27 +0000 Manifest this update: Sat 14 Jun 2025 16:49:26 +0000 Manifest next update: Sat 21 Jun 2025 16:49:26 +0000 Files and hashes: 1: 8Os9EfDsrmhzaV1az7e0rcVfNFg.crl (hash: BaygXTLBpoYXknLE5qwzyDKNI965xfhPJpbxzM9LOWs=) 2: 5F150B08D48611E9A4473984C4F9AE02.roa (hash: oH35QJywcYwQK9w172Dp8G4g95WEClMxQ6f9cBdl364=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91499BB/AB1CAC86609711E8B74A861AC4F9AE02/8Os9EfDsrmhzaV1az7e0rcVfNFg.crl rsync://rpki.apnic.net/member_repository/A91499BB/AB1CAC86609711E8B74A861AC4F9AE02/8Os9EfDsrmhzaV1az7e0rcVfNFg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Os9EfDsrmhzaV1az7e0rcVfNFg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 16:49:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5299 (0x14b3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91499BB, serialNumber=F0EB3D11F0ECAE6873695D5ACFB7B4ADC55F3458 Validity Not Before: Jun 14 16:49:26 2025 GMT Not After : Jun 21 16:49:26 2025 GMT Subject: CN=684da816-7fe8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:95:53:42:81:3f:fb:4b:ee:4c:de:58:56:cf: f1:db:ae:22:04:93:4f:05:14:52:c7:3c:07:06:38: 44:09:27:a7:5d:a4:af:2f:44:a8:4b:1c:80:bb:91: 7e:20:13:0d:ef:6b:ad:ef:0d:86:a5:58:7d:86:51: 90:85:6d:7f:f9:0c:58:4d:4f:00:2e:13:5d:68:8c: 1c:ec:c6:59:35:fa:9f:7a:01:72:ba:0a:a5:00:69: 35:ae:b0:79:c6:9b:be:aa:e1:4d:11:99:60:00:fe: 0d:8b:e2:19:84:51:c5:14:e4:e1:26:1b:59:1a:cb: a6:df:3c:91:7a:c4:00:c6:8e:00:8c:45:91:54:0b: 1a:3b:a4:96:b6:9d:37:a0:77:24:a1:d9:f8:3a:c5: 05:b1:9c:c1:58:bb:69:54:af:cf:18:32:3f:7b:f0: 14:65:c9:31:7f:1c:bc:e0:9b:62:27:45:a1:fb:71: 04:62:33:b8:8d:e9:c6:4a:f6:e8:be:1e:d2:89:b7: e3:0c:24:97:69:c5:8c:94:f7:35:67:db:44:19:dc: b4:01:a3:b6:ef:49:e4:e5:25:40:bd:24:3c:9e:f1: 65:d4:44:c9:19:ec:ef:de:f4:ab:49:dd:bc:1b:47: 91:60:79:ea:59:8b:c8:a6:29:fa:cb:f0:1f:5c:35: d1:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:EC:DE:65:3F:4E:C4:33:60:49:97:31:B7:08:B3:C2:E5:41:28:9C X509v3 Authority Key Identifier: keyid:F0:EB:3D:11:F0:EC:AE:68:73:69:5D:5A:CF:B7:B4:AD:C5:5F:34:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91499BB/AB1CAC86609711E8B74A861AC4F9AE02/8Os9EfDsrmhzaV1az7e0rcVfNFg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Os9EfDsrmhzaV1az7e0rcVfNFg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91499BB/AB1CAC86609711E8B74A861AC4F9AE02/8Os9EfDsrmhzaV1az7e0rcVfNFg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:4c:d8:46:95:6f:e0:6c:d5:df:72:b3:0d:1b:21:03:f5:b8: 1f:5f:6b:79:b6:d6:c4:d4:8b:7a:5f:21:d3:09:55:83:7b:0c: 64:9d:93:df:95:44:50:79:c0:03:df:1f:e1:32:ad:3c:66:6c: 86:35:a5:68:a6:48:31:3f:de:43:25:e8:b0:a5:f1:4d:b1:3a: 6c:d4:06:2e:45:2b:66:4d:59:21:26:3a:5c:ce:9e:dd:25:7f: 6a:2d:8c:db:28:23:b3:f5:9b:55:66:b7:9a:c6:78:ea:eb:6b: fe:5d:c5:01:b7:5e:fe:ad:31:ae:41:04:c9:8b:c4:da:e7:1b: 84:d4:87:0f:c4:94:bd:bd:5f:41:dc:da:db:e3:94:f5:67:4c: e2:89:58:88:f1:5b:24:1d:d9:17:6c:63:12:c9:8b:d1:9a:4d: 4f:25:ef:d9:ed:a7:1c:8a:64:4b:d5:56:83:7d:e1:67:d8:dd: 3c:63:1e:8b:d0:64:6e:6e:d4:d2:60:6b:3f:0e:23:52:ea:35: a6:79:e5:f6:61:32:75:1a:69:f5:51:0e:8b:cf:fa:4a:1c:66: d4:01:79:c4:36:e1:3f:8f:b3:cc:98:71:54:12:8f:06:3b:ad: 6d:aa:df:82:ce:56:3d:27:46:ae:48:6d:32:d2:f9:af:19:09: 43:de:88:c6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFLMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDk5QkIxMTAvBgNVBAUTKEYwRUIzRDExRjBFQ0FFNjg3MzY5NUQ1QUNGQjdCNEFE QzU1RjM0NTgwHhcNMjUwNjE0MTY0OTI2WhcNMjUwNjIxMTY0OTI2WjAYMRYwFAYD VQQDEw02ODRkYTgxNi03ZmU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAypVTQoE/+0vuTN5YVs/x264iBJNPBRRSxzwHBjhECSenXaSvL0SoSxyAu5F+ IBMN72ut7w2GpVh9hlGQhW1/+QxYTU8ALhNdaIwc7MZZNfqfegFyugqlAGk1rrB5 xpu+quFNEZlgAP4Ni+IZhFHFFOThJhtZGsum3zyResQAxo4AjEWRVAsaO6SWtp03 oHckodn4OsUFsZzBWLtpVK/PGDI/e/AUZckxfxy84JtiJ0Wh+3EEYjO4jenGSvbo vh7SibfjDCSXacWMlPc1Z9tEGdy0AaO270nk5SVAvSQ8nvFl1ETJGezv3vSrSd28 G0eRYHnqWYvIpin6y/AfXDXRpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB3s3mU/ TsQzYEmXMbcIs8LlQSicMB8GA1UdIwQYMBaAFPDrPRHw7K5oc2ldWs+3tK3FXzRY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OTlCQi9BQjFDQUM4NjYw OTcxMUU4Qjc0QTg2MUFDNEY5QUUwMi84T3M5RWZEc3JtaHphVjFhejdlMHJjVmZO RmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhPczlFZkRzcm1oemFWMWF6N2UwcmNWZk5GZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OTlCQi9BQjFDQUM4NjYwOTcxMUU4Qjc0QTg2MUFDNEY5QUUwMi84T3M5RWZEc3Jt aHphVjFhejdlMHJjVmZORmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBuTNhGlW/gbNXfcrMNGyED9bgfX2t5ttbE1It6XyHTCVWDewxknZPf lURQecAD3x/hMq08ZmyGNaVopkgxP95DJeiwpfFNsTps1AYuRStmTVkhJjpczp7d JX9qLYzbKCOz9ZtVZreaxnjq62v+XcUBt17+rTGuQQTJi8Ta5xuE1IcPxJS9vV9B 3Nrb45T1Z0ziiViI8VskHdkXbGMSyYvRmk1PJe/Z7accimRL1VaDfeFn2N08Yx6L 0GRubtTSYGs/DiNS6jWmeeX2YTJ1Gmn1UQ6Lz/pKHGbUAXnENuE/j7PMmHFUEo8G O61tqt+CzlY9J0auSG0y0vmvGQlD3ojG -----END CERTIFICATE-----Generated at Sat Jun 14 19:36:47 2025 by rpki-client