$ rpki-client -vvf rpki.apnic.net/member_repository/A91685E9/C928043AD17611EF95C5DE5AC4F9AE02/9pi1tHoG1TB97GCJaQYwdLaP9co.mft File: 9pi1tHoG1TB97GCJaQYwdLaP9co.mft (raw, json) Hash identifier: 0rxm4z51jzpDaT9tzGXDGOWsFEtOUsCUuXvUbwxta0c= Subject key identifier: 52:1C:D5:D6:AE:BC:13:A8:47:43:56:7C:62:D2:A6:68:F1:1F:FF:CA Authority key identifier: F6:98:B5:B4:7A:06:D5:30:7D:EC:60:89:69:06:30:74:B6:8F:F5:CA Certificate issuer: /CN=A91685E9/serialNumber=F698B5B47A06D5307DEC608969063074B68FF5CA Certificate serial: 68 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9pi1tHoG1TB97GCJaQYwdLaP9co.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91685E9/C928043AD17611EF95C5DE5AC4F9AE02/9pi1tHoG1TB97GCJaQYwdLaP9co.mft Manifest number: 5F Signing time: Tue 17 Jun 2025 06:09:12 +0000 Manifest this update: Tue 17 Jun 2025 06:09:11 +0000 Manifest next update: Tue 24 Jun 2025 06:09:11 +0000 Files and hashes: 1: 9pi1tHoG1TB97GCJaQYwdLaP9co.crl (hash: 5QsS/IvSubrs4pU33baCH7pZ5DwFduGpxXi9umtbGRA=) 2: 8D88F6EEDC9011EFA0219858C4F9AE02.roa (hash: jLDieWIRNg8FoWvPe6GNayNZYERhEqz23NTu1Iqy4LY=) 3: 06C84D20DC9B11EFB3BCA087C4F9AE02.roa (hash: jckmyQxpUBI6CgfUPTNi2GpMJpyKjsAzxMXFFNKFXtE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91685E9/C928043AD17611EF95C5DE5AC4F9AE02/9pi1tHoG1TB97GCJaQYwdLaP9co.crl rsync://rpki.apnic.net/member_repository/A91685E9/C928043AD17611EF95C5DE5AC4F9AE02/9pi1tHoG1TB97GCJaQYwdLaP9co.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9pi1tHoG1TB97GCJaQYwdLaP9co.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Jun 2025 06:09:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 104 (0x68) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91685E9, serialNumber=F698B5B47A06D5307DEC608969063074B68FF5CA Validity Not Before: Jun 17 06:09:11 2025 GMT Not After : Jun 24 06:09:11 2025 GMT Subject: CN=68510687-ef35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ab:ac:52:ef:82:2f:a2:00:5b:65:d3:0b:1a: fb:46:12:70:66:b4:2b:f4:5d:f5:e9:2b:0d:0a:5d: 75:76:aa:81:0b:a8:e4:b4:59:85:0b:69:e6:8f:e0: 6c:95:04:a5:8b:4a:1c:38:c6:6e:ca:e5:8f:26:4a: 8b:22:fa:a1:10:2c:c1:f7:14:b2:16:7b:01:43:1c: 67:ac:c5:ab:8c:74:59:63:9e:6c:9b:78:6a:aa:e1: 29:62:5c:2e:bc:7d:48:f2:d1:75:06:fa:6b:7e:f0: 69:22:f9:d9:d6:66:7a:b7:07:84:be:b6:a9:40:65: cf:01:c1:84:f2:ff:fb:97:1d:db:e4:d4:9a:f8:f5: ff:9d:e0:45:ad:ea:b0:b2:ae:dc:45:51:df:04:aa: d0:6c:15:67:c5:17:32:e5:42:ea:1b:92:32:7c:4f: 33:74:8e:35:e1:dc:f3:2f:60:50:6a:43:0f:8d:85: 30:7a:d6:fc:2a:8b:5a:af:ac:3a:a5:6f:6e:1b:7c: 36:5f:cf:50:15:34:8d:bc:72:1b:6d:ee:99:c3:57: ea:3e:bd:2c:67:13:44:5b:b1:f5:25:92:f0:8b:3f: 6b:1a:e1:00:dc:89:4c:79:49:e3:9c:db:03:d8:e4: c8:d3:2a:09:53:84:65:30:62:9d:fc:d0:e1:b3:63: e8:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:1C:D5:D6:AE:BC:13:A8:47:43:56:7C:62:D2:A6:68:F1:1F:FF:CA X509v3 Authority Key Identifier: keyid:F6:98:B5:B4:7A:06:D5:30:7D:EC:60:89:69:06:30:74:B6:8F:F5:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91685E9/C928043AD17611EF95C5DE5AC4F9AE02/9pi1tHoG1TB97GCJaQYwdLaP9co.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9pi1tHoG1TB97GCJaQYwdLaP9co.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91685E9/C928043AD17611EF95C5DE5AC4F9AE02/9pi1tHoG1TB97GCJaQYwdLaP9co.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:4d:2a:0f:11:47:af:13:93:a8:68:d5:24:be:6b:e6:af:fc: 9b:ce:08:b8:fc:19:80:33:ca:c7:eb:60:43:ae:98:07:9d:38: ac:9c:d1:0b:3b:5a:d1:e1:82:eb:79:25:ff:6a:1c:fe:64:de: 4f:ed:85:d3:c7:99:91:b6:ec:a8:68:30:1e:6c:0c:20:49:36: a9:e7:39:a1:86:34:db:41:8b:09:89:7c:a2:15:69:88:d1:21: bb:d9:11:fb:17:54:d4:05:3f:0d:26:88:22:5d:e8:47:ef:86: c0:b1:c8:cf:9d:5f:e7:04:13:13:9b:64:0b:95:2b:b6:61:bb: fc:6e:98:c0:20:b4:eb:8f:56:d3:b9:40:75:b0:21:81:4f:d7: c5:9e:c4:60:a6:f3:d5:6b:f1:01:7f:3c:74:5c:26:bc:38:4b: c8:ce:d3:4d:c7:71:ea:3f:2e:ac:52:d4:0f:f5:c5:74:7b:35: e3:9d:11:6d:bd:47:2e:07:e7:c7:6a:22:c9:26:41:86:31:e4: 4c:9e:fc:22:0f:ad:9b:f3:23:df:90:72:ea:1e:da:c9:57:b0: e6:d0:aa:5e:06:dc:33:5a:c3:4a:87:78:16:e6:e9:a1:2a:de: 72:82:38:96:b3:da:34:de:b9:ea:02:ff:27:78:38:a9:5d:e5: e3:51:39:70 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBaDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 ODVFOTExMC8GA1UEBRMoRjY5OEI1QjQ3QTA2RDUzMDdERUM2MDg5NjkwNjMwNzRC NjhGRjVDQTAeFw0yNTA2MTcwNjA5MTFaFw0yNTA2MjQwNjA5MTFaMBgxFjAUBgNV BAMTDTY4NTEwNjg3LWVmMzUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC3q6xS74IvogBbZdMLGvtGEnBmtCv0XfXpKw0KXXV2qoELqOS0WYULaeaP4GyV BKWLShw4xm7K5Y8mSosi+qEQLMH3FLIWewFDHGesxauMdFljnmybeGqq4SliXC68 fUjy0XUG+mt+8Gki+dnWZnq3B4S+tqlAZc8BwYTy//uXHdvk1Jr49f+d4EWt6rCy rtxFUd8EqtBsFWfFFzLlQuobkjJ8TzN0jjXh3PMvYFBqQw+NhTB61vwqi1qvrDql b24bfDZfz1AVNI28chtt7pnDV+o+vSxnE0RbsfUlkvCLP2sa4QDciUx5SeOc2wPY 5MjTKglThGUwYp380OGzY+iVAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUUhzV1q68 E6hHQ1Z8YtKmaPEf/8owHwYDVR0jBBgwFoAU9pi1tHoG1TB97GCJaQYwdLaP9cow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY4NUU5L0M5MjgwNDNBRDE3 NjExRUY5NUM1REU1QUM0RjlBRTAyLzlwaTF0SG9HMVRCOTdHQ0phUVl3ZExhUDlj by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOXBpMXRIb0cxVEI5N0dDSmFRWXdkTGFQOWNvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY4 NUU5L0M5MjgwNDNBRDE3NjExRUY5NUM1REU1QUM0RjlBRTAyLzlwaTF0SG9HMVRC OTdHQ0phUVl3ZExhUDljby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGJNKg8RR68Tk6ho1SS+a+av/JvOCLj8GYAzysfrYEOumAedOKyc0Qs7 WtHhgut5Jf9qHP5k3k/thdPHmZG27KhoMB5sDCBJNqnnOaGGNNtBiwmJfKIVaYjR IbvZEfsXVNQFPw0miCJd6EfvhsCxyM+dX+cEExObZAuVK7Zhu/xumMAgtOuPVtO5 QHWwIYFP18WexGCm89Vr8QF/PHRcJrw4S8jO003Hceo/LqxS1A/1xXR7NeOdEW29 Ry4H58dqIskmQYYx5Eye/CIPrZvzI9+Qcuoe2slXsObQql4G3DNaw0qHeBbm6aEq 3nKCOJaz2jTeueoC/yd4OKld5eNROXA= -----END CERTIFICATE-----Generated at Wed Jun 18 08:21:31 2025 by rpki-client