$ rpki-client -vvf rpki.apnic.net/member_repository/A91655EF/607729D0FAC111E8BC76D671C4F9AE02/B04WzKCA1UX-9PLYrcuQnw7LIKI.mft File: B04WzKCA1UX-9PLYrcuQnw7LIKI.mft (raw, json) Hash identifier: +ZCvs8iPnwuBRbvhF+TKnwa3vRBDTSRdcuT9AojFSm8= Subject key identifier: 5F:68:CB:FA:3C:FE:AC:8A:62:C8:56:39:F7:CA:78:CD:E6:1F:33:C7 Authority key identifier: 07:4E:16:CC:A0:80:D5:45:FE:F4:F2:D8:AD:CB:90:9F:0E:CB:20:A2 Certificate issuer: /CN=A91655EF/serialNumber=074E16CCA080D545FEF4F2D8ADCB909F0ECB20A2 Certificate serial: 11C6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B04WzKCA1UX-9PLYrcuQnw7LIKI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91655EF/607729D0FAC111E8BC76D671C4F9AE02/B04WzKCA1UX-9PLYrcuQnw7LIKI.mft Manifest number: 11A9 Signing time: Sat 14 Jun 2025 17:08:53 +0000 Manifest this update: Sat 14 Jun 2025 17:08:52 +0000 Manifest next update: Sat 21 Jun 2025 17:08:52 +0000 Files and hashes: 1: B04WzKCA1UX-9PLYrcuQnw7LIKI.crl (hash: ZM3PizaiHtgBUnlCI3pfNApbofB6c7xu0GUTPowFokw=) 2: 70F8E50039AF11EE8486453DC4F9AE02.roa (hash: CQ2YO4KFwTMH/P0kajoe5d8Btg/O5fE6q6xcjIQsWNk=) 3: BA1EA120E6FC11EE96775810C4F9AE02.roa (hash: sB4pmseHL4MX5nc05THnJz70E6W3QfcckHXpmWVSxtQ=) 4: FEDDF63AE6FC11EE8AD61644C4F9AE02.roa (hash: nPDF1Ky8Z4ZJlPWH1PkLPctnsIih8GHSZ5cqXRTU56A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91655EF/607729D0FAC111E8BC76D671C4F9AE02/B04WzKCA1UX-9PLYrcuQnw7LIKI.crl rsync://rpki.apnic.net/member_repository/A91655EF/607729D0FAC111E8BC76D671C4F9AE02/B04WzKCA1UX-9PLYrcuQnw7LIKI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B04WzKCA1UX-9PLYrcuQnw7LIKI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 17:08:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4550 (0x11c6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91655EF, serialNumber=074E16CCA080D545FEF4F2D8ADCB909F0ECB20A2 Validity Not Before: Jun 14 17:08:52 2025 GMT Not After : Jun 21 17:08:52 2025 GMT Subject: CN=684daca4-3d52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:13:1a:e7:ce:69:7f:64:da:7e:96:1f:d4:ff: b1:93:9d:25:5e:15:4b:77:23:2e:2b:69:4d:28:64: 29:24:77:05:cd:f5:84:76:c8:4c:30:7b:91:b1:06: 26:ab:91:be:8f:52:ad:8d:ea:b8:c3:44:f2:79:a3: bb:f1:99:c0:83:cd:dc:7c:cc:b8:41:7d:7d:1f:c5: 51:e6:ea:06:70:e5:58:69:ee:a7:b9:65:c6:4c:18: d4:3e:c6:b2:a6:af:c2:71:3a:07:6b:b5:76:ee:49: 4f:6e:34:d7:fc:df:31:63:97:8f:e9:4f:95:6b:cd: 86:af:cb:e1:a1:fc:27:5c:87:66:63:43:09:b1:cf: 66:e9:14:1d:a3:a5:7c:58:70:fc:79:93:ed:c1:d0: 54:d8:3d:ee:39:be:2f:d1:b3:eb:a8:76:b9:a3:a8: 8d:d2:db:d3:d8:f7:94:df:39:d2:e8:30:0b:e5:49: f1:9a:61:99:38:db:9e:bc:5b:f3:90:c2:05:4f:6e: d3:bb:74:f9:70:1e:53:05:83:be:2f:48:dd:06:83: b0:1c:b2:01:32:c4:01:66:c8:35:1a:ef:46:2a:af: e9:3b:f6:a8:eb:bb:00:ed:81:02:dc:83:04:f8:68: 71:46:19:95:0a:a1:24:ea:b2:ce:0b:ca:fd:cc:02: c8:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:68:CB:FA:3C:FE:AC:8A:62:C8:56:39:F7:CA:78:CD:E6:1F:33:C7 X509v3 Authority Key Identifier: keyid:07:4E:16:CC:A0:80:D5:45:FE:F4:F2:D8:AD:CB:90:9F:0E:CB:20:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91655EF/607729D0FAC111E8BC76D671C4F9AE02/B04WzKCA1UX-9PLYrcuQnw7LIKI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B04WzKCA1UX-9PLYrcuQnw7LIKI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91655EF/607729D0FAC111E8BC76D671C4F9AE02/B04WzKCA1UX-9PLYrcuQnw7LIKI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:a9:0a:57:dc:c7:24:4f:15:3e:d4:66:20:99:af:72:97:93: 3f:d9:ef:fa:0c:c0:3d:f7:32:31:c9:07:8f:44:09:0a:8b:58: 83:ab:ea:42:ae:61:54:ea:b3:b6:69:c1:6c:67:ee:56:22:a4: a4:41:28:2b:74:4f:ea:9d:64:d0:b0:d1:fb:c2:d6:86:a1:47: af:af:3a:33:bb:a6:4a:51:bc:b9:f5:c0:02:da:0b:21:6d:86: 4b:d5:e9:c7:04:49:82:c6:72:26:06:94:08:28:f5:6b:92:0b: 8d:a7:f6:b2:80:80:e3:6c:76:87:f3:a3:ef:38:43:93:dc:a8: ad:50:2c:15:99:5a:67:4e:02:9c:6f:71:a4:7d:0e:00:a8:10: e5:8f:d7:42:48:75:1d:14:15:e9:49:57:9f:b4:f3:ba:df:83: 04:70:d3:73:98:6d:1c:22:df:42:b2:65:99:fd:75:e4:02:9b: 5b:58:fe:ec:7b:1a:13:15:b3:20:4b:f1:5e:37:a4:6e:0b:01: 0e:d4:66:15:c5:55:f2:1d:6e:5d:74:68:21:d1:0d:51:a3:14: 63:ec:fc:8e:af:7d:6f:13:3b:45:12:67:b5:53:27:70:13:9a: 3f:2d:cf:1a:e7:38:65:81:c9:76:eb:93:9b:46:62:ee:6c:dd: 4e:3a:88:62 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEcYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjU1RUYxMTAvBgNVBAUTKDA3NEUxNkNDQTA4MEQ1NDVGRUY0RjJEOEFEQ0I5MDlG MEVDQjIwQTIwHhcNMjUwNjE0MTcwODUyWhcNMjUwNjIxMTcwODUyWjAYMRYwFAYD VQQDEw02ODRkYWNhNC0zZDUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2xMa585pf2TafpYf1P+xk50lXhVLdyMuK2lNKGQpJHcFzfWEdshMMHuRsQYm q5G+j1Ktjeq4w0TyeaO78ZnAg83cfMy4QX19H8VR5uoGcOVYae6nuWXGTBjUPsay pq/CcToHa7V27klPbjTX/N8xY5eP6U+Va82Gr8vhofwnXIdmY0MJsc9m6RQdo6V8 WHD8eZPtwdBU2D3uOb4v0bPrqHa5o6iN0tvT2PeU3znS6DAL5UnxmmGZONuevFvz kMIFT27Tu3T5cB5TBYO+L0jdBoOwHLIBMsQBZsg1Gu9GKq/pO/ao67sA7YEC3IME +GhxRhmVCqEk6rLOC8r9zALIzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF9oy/o8 /qyKYshWOffKeM3mHzPHMB8GA1UdIwQYMBaAFAdOFsyggNVF/vTy2K3LkJ8OyyCi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTVFRi82MDc3MjlEMEZB QzExMUU4QkM3NkQ2NzFDNEY5QUUwMi9CMDRXektDQTFVWC05UExZcmN1UW53N0xJ S0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0IwNFd6S0NBMVVYLTlQTFlyY3VRbnc3TElLSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NTVFRi82MDc3MjlEMEZBQzExMUU4QkM3NkQ2NzFDNEY5QUUwMi9CMDRXektDQTFV WC05UExZcmN1UW53N0xJS0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAFqQpX3MckTxU+1GYgma9yl5M/2e/6DMA99zIxyQePRAkKi1iDq+pC rmFU6rO2acFsZ+5WIqSkQSgrdE/qnWTQsNH7wtaGoUevrzozu6ZKUby59cAC2gsh bYZL1enHBEmCxnImBpQIKPVrkguNp/aygIDjbHaH86PvOEOT3KitUCwVmVpnTgKc b3GkfQ4AqBDlj9dCSHUdFBXpSVeftPO634MEcNNzmG0cIt9CsmWZ/XXkAptbWP7s exoTFbMgS/FeN6RuCwEO1GYVxVXyHW5ddGgh0Q1RoxRj7PyOr31vEztFEme1Uydw E5o/Lc8a5zhlgcl265ObRmLubN1OOohi -----END CERTIFICATE-----Generated at Sun Jun 15 08:36:19 2025 by rpki-client