$ rpki-client -vvf rpki.apnic.net/member_repository/A91754C0/FEDF572ECCBB11EE8A0F7748C4F9AE02/0PiwBllsfAN8tUkwWzlpAACq6KQ.mft File: 0PiwBllsfAN8tUkwWzlpAACq6KQ.mft (raw, json) Hash identifier: ctak2KVOV6svIWqEjODjlU0x7QKwnQaMweAlQuo3VXs= Subject key identifier: FF:D4:41:00:78:93:B5:D9:DF:46:EF:FC:C3:AF:CB:5F:51:D5:50:47 Authority key identifier: D0:F8:B0:06:59:6C:7C:03:7C:B5:49:30:5B:39:69:00:00:AA:E8:A4 Certificate issuer: /CN=A91754C0/serialNumber=D0F8B006596C7C037CB549305B39690000AAE8A4 Certificate serial: FF Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0PiwBllsfAN8tUkwWzlpAACq6KQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91754C0/FEDF572ECCBB11EE8A0F7748C4F9AE02/0PiwBllsfAN8tUkwWzlpAACq6KQ.mft Manifest number: FB Signing time: Thu 19 Jun 2025 04:33:18 +0000 Manifest this update: Thu 19 Jun 2025 04:33:18 +0000 Manifest next update: Thu 26 Jun 2025 04:33:18 +0000 Files and hashes: 1: 0PiwBllsfAN8tUkwWzlpAACq6KQ.crl (hash: fkdtqJQTMy5hEOLHoudrs19acTmOJAcCUccgG9YLjrY=) 2: D0CB00D4CCBD11EEAC4BCD4BC4F9AE02.roa (hash: tE5MO0yGqfdQRPhR9mD7EUVj7T64niX8BINnA3y1Amk=) 3: 6BA3FEA4CCBD11EEBADDFC4AC4F9AE02.roa (hash: qBQp3vvSD9elb8dQbwCPuGirBXWWVwR3GT0tS3LqEZA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91754C0/FEDF572ECCBB11EE8A0F7748C4F9AE02/0PiwBllsfAN8tUkwWzlpAACq6KQ.crl rsync://rpki.apnic.net/member_repository/A91754C0/FEDF572ECCBB11EE8A0F7748C4F9AE02/0PiwBllsfAN8tUkwWzlpAACq6KQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0PiwBllsfAN8tUkwWzlpAACq6KQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 04:33:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 255 (0xff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91754C0, serialNumber=D0F8B006596C7C037CB549305B39690000AAE8A4 Validity Not Before: Jun 19 04:33:18 2025 GMT Not After : Jun 26 04:33:18 2025 GMT Subject: CN=6853930e-3b24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:b5:e9:fc:1d:60:df:8d:dd:02:56:cc:91:c7: 5b:8c:14:34:ea:f3:1c:f1:58:bd:ae:53:13:2f:3d: 5a:96:a6:08:aa:1a:ec:ac:4d:39:35:c2:34:cb:6f: b4:85:63:69:d4:44:c8:6d:bc:0e:83:d4:86:38:97: d6:c3:1e:2e:06:6b:e8:6e:53:fa:ce:b0:fd:8c:0d: 48:63:09:3d:ae:93:98:e3:ed:4f:c8:17:10:c8:92: f9:59:97:54:be:5c:2b:90:28:d3:f6:4e:9e:53:6e: f3:78:46:de:da:05:83:2d:db:54:37:92:f2:c4:fc: ce:42:6d:0d:56:4e:a6:0b:30:9e:bd:40:6b:91:21: 46:db:d5:4e:84:1c:d3:cf:51:0a:08:16:dd:a5:6a: 72:b2:52:82:0f:11:34:5a:c4:54:7b:9a:1a:ed:e0: e7:1b:14:9d:7d:81:f9:f1:c8:45:ba:29:85:ec:45: b3:ad:3a:66:14:c4:25:b4:ac:0f:50:c8:7c:fd:c1: 32:0a:4a:a0:4c:2a:35:ac:0f:79:a6:d7:67:c4:92: c1:49:d9:a9:7f:5f:e5:55:73:e0:ec:51:60:55:13: fc:a0:98:0e:f2:bd:6b:c6:cc:d1:b4:30:02:f4:6a: cf:25:2b:1a:c0:c2:17:39:4f:03:d7:7e:4a:e0:06: ea:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:D4:41:00:78:93:B5:D9:DF:46:EF:FC:C3:AF:CB:5F:51:D5:50:47 X509v3 Authority Key Identifier: keyid:D0:F8:B0:06:59:6C:7C:03:7C:B5:49:30:5B:39:69:00:00:AA:E8:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91754C0/FEDF572ECCBB11EE8A0F7748C4F9AE02/0PiwBllsfAN8tUkwWzlpAACq6KQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0PiwBllsfAN8tUkwWzlpAACq6KQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91754C0/FEDF572ECCBB11EE8A0F7748C4F9AE02/0PiwBllsfAN8tUkwWzlpAACq6KQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:80:22:a8:75:79:17:c2:d8:13:13:7c:31:ed:74:d1:5c:60: 66:0f:70:c1:7d:3e:72:d9:db:ae:bd:d1:12:9f:62:50:97:0f: 38:9b:42:cc:10:55:23:cd:d8:5e:1c:be:d2:69:e4:2a:c4:52: bf:1b:f3:81:34:54:55:5f:66:a1:0a:a8:c3:40:43:12:e2:56: a5:95:4d:9a:04:a1:f5:75:28:66:62:6e:28:7a:69:e6:96:75: 42:33:35:96:55:6c:f1:49:4f:79:27:e7:f3:a4:79:36:6d:8d: 52:43:b7:e6:2c:f7:0c:73:75:49:5d:ef:51:ea:8c:27:cc:71: ea:5f:8e:e2:d8:89:0e:ba:c0:68:72:7a:b8:59:fe:02:d9:5f: 6c:8a:96:99:fa:f9:00:66:cd:d0:70:d1:d6:70:3f:f6:4e:90: 42:46:c6:8b:aa:0c:94:4a:ec:20:47:c2:f7:5c:ba:3f:ab:c1: 4b:bd:79:d8:b0:18:cc:38:6a:51:18:ef:a9:41:56:d4:87:17: 8f:1f:ca:fa:32:21:2d:dc:be:8e:48:87:d5:db:ae:77:11:f1: b6:c8:6a:c9:98:f1:1d:31:cb:36:bc:15:d8:70:b1:72:4e:64: 24:4d:4e:38:18:3f:d1:a6:96:24:29:5a:1c:95:95:5b:fb:3a: b3:61:ca:bd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAP8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzU0QzAxMTAvBgNVBAUTKEQwRjhCMDA2NTk2QzdDMDM3Q0I1NDkzMDVCMzk2OTAw MDBBQUU4QTQwHhcNMjUwNjE5MDQzMzE4WhcNMjUwNjI2MDQzMzE4WjAYMRYwFAYD VQQDEw02ODUzOTMwZS0zYjI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr7Xp/B1g343dAlbMkcdbjBQ06vMc8Vi9rlMTLz1alqYIqhrsrE05NcI0y2+0 hWNp1ETIbbwOg9SGOJfWwx4uBmvoblP6zrD9jA1IYwk9rpOY4+1PyBcQyJL5WZdU vlwrkCjT9k6eU27zeEbe2gWDLdtUN5LyxPzOQm0NVk6mCzCevUBrkSFG29VOhBzT z1EKCBbdpWpyslKCDxE0WsRUe5oa7eDnGxSdfYH58chFuimF7EWzrTpmFMQltKwP UMh8/cEyCkqgTCo1rA95ptdnxJLBSdmpf1/lVXPg7FFgVRP8oJgO8r1rxszRtDAC 9GrPJSsawMIXOU8D135K4Abq1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP/UQQB4 k7XZ30bv/MOvy19R1VBHMB8GA1UdIwQYMBaAFND4sAZZbHwDfLVJMFs5aQAAquik MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTRDMC9GRURGNTcyRUND QkIxMUVFOEEwRjc3NDhDNEY5QUUwMi8wUGl3Qmxsc2ZBTjh0VWt3V3pscEFBQ3E2 S1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzBQaXdCbGxzZkFOOHRVa3dXemxwQUFDcTZLUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTRDMC9GRURGNTcyRUNDQkIxMUVFOEEwRjc3NDhDNEY5QUUwMi8wUGl3Qmxsc2ZB Tjh0VWt3V3pscEFBQ3E2S1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCngCKodXkXwtgTE3wx7XTRXGBmD3DBfT5y2duuvdESn2JQlw84m0LM EFUjzdheHL7SaeQqxFK/G/OBNFRVX2ahCqjDQEMS4lallU2aBKH1dShmYm4oemnm lnVCMzWWVWzxSU95J+fzpHk2bY1SQ7fmLPcMc3VJXe9R6ownzHHqX47i2IkOusBo cnq4Wf4C2V9sipaZ+vkAZs3QcNHWcD/2TpBCRsaLqgyUSuwgR8L3XLo/q8FLvXnY sBjMOGpRGO+pQVbUhxePH8r6MiEt3L6OSIfV2653EfG2yGrJmPEdMcs2vBXYcLFy TmQkTU44GD/RppYkKVoclZVb+zqzYcq9 -----END CERTIFICATE-----Generated at Fri Jun 20 01:19:00 2025 by rpki-client