$ rpki-client -vvf rpki.apnic.net/member_repository/A91820CE/B73069C66BE911EBB7D5560DC4F9AE02/csG8nD23m0PzVvI_lWiEjJz7jdU.mft File: csG8nD23m0PzVvI_lWiEjJz7jdU.mft (raw, json) Hash identifier: MxYqBV3JPxOZ7kWq8a+t7gPCUGCID7+Cy7yLmv+em6k= Subject key identifier: 51:CE:B0:8C:BE:3C:A7:82:72:C8:47:7E:AF:5F:1D:7B:92:1B:04:42 Authority key identifier: 72:C1:BC:9C:3D:B7:9B:43:F3:56:F2:3F:95:68:84:8C:9C:FB:8D:D5 Certificate issuer: /CN=A91820CE/serialNumber=72C1BC9C3DB79B43F356F23F9568848C9CFB8DD5 Certificate serial: 06AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/csG8nD23m0PzVvI_lWiEjJz7jdU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91820CE/B73069C66BE911EBB7D5560DC4F9AE02/csG8nD23m0PzVvI_lWiEjJz7jdU.mft Manifest number: 06A5 Signing time: Sat 14 Jun 2025 21:55:19 +0000 Manifest this update: Sat 14 Jun 2025 21:55:19 +0000 Manifest next update: Sat 21 Jun 2025 21:55:19 +0000 Files and hashes: 1: csG8nD23m0PzVvI_lWiEjJz7jdU.crl (hash: mBpQLJVZvHtYSwJMdS4DOP0iEtXcW61Cg48unx0b5gk=) 2: EB292D8A6BF811EB8E899650C4F9AE02.roa (hash: QHZWlLh2PyAY4WTgaNICz7qTAAizZpA7yqBBQ8slHlk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91820CE/B73069C66BE911EBB7D5560DC4F9AE02/csG8nD23m0PzVvI_lWiEjJz7jdU.crl rsync://rpki.apnic.net/member_repository/A91820CE/B73069C66BE911EBB7D5560DC4F9AE02/csG8nD23m0PzVvI_lWiEjJz7jdU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/csG8nD23m0PzVvI_lWiEjJz7jdU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 21:55:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1707 (0x6ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91820CE, serialNumber=72C1BC9C3DB79B43F356F23F9568848C9CFB8DD5 Validity Not Before: Jun 14 21:55:19 2025 GMT Not After : Jun 21 21:55:19 2025 GMT Subject: CN=684defc7-eec1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:98:f3:31:65:ed:e4:b3:1b:ff:66:ae:f4:19: 8e:48:a5:6b:33:93:d2:2e:9a:24:25:41:e2:de:f7: f9:dd:82:86:15:ce:0b:57:27:38:d2:86:28:bb:d4: 98:2e:5f:1b:ea:e6:fb:b2:ed:c2:9e:0d:ed:ec:2d: ac:85:4b:44:a1:3c:10:e7:d4:48:0a:e8:3c:9d:01: 30:f8:8c:9b:e4:00:40:60:0f:c0:e9:5d:97:12:e2: 0c:17:49:f3:2a:81:98:a0:5e:9b:75:80:66:ae:ff: 44:5e:26:62:00:44:55:5e:0c:cb:b1:0d:64:5d:49: 37:27:a0:de:fd:73:b3:06:80:85:9d:0a:c2:c6:ac: 81:24:19:d2:cb:8d:80:59:03:0b:77:31:61:3a:d9: 14:2e:43:c7:ea:de:3f:83:85:1d:5a:b2:1b:f6:e5: ba:3c:8f:5b:df:c9:93:ad:8f:c0:0c:ec:32:1f:cb: ee:6f:0f:26:c5:1f:16:42:cd:5c:ff:02:32:6d:22: c2:04:e2:c3:8f:90:6d:34:d4:60:b5:14:67:63:b9: 46:ea:51:ac:9c:5b:51:aa:7e:0e:7c:6d:f7:af:e3: 39:77:20:57:bb:5f:c6:4b:8e:a7:cb:e6:8b:71:5e: 1d:72:07:c8:9d:eb:7e:c5:d8:54:25:0a:e0:1f:7b: 71:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:CE:B0:8C:BE:3C:A7:82:72:C8:47:7E:AF:5F:1D:7B:92:1B:04:42 X509v3 Authority Key Identifier: keyid:72:C1:BC:9C:3D:B7:9B:43:F3:56:F2:3F:95:68:84:8C:9C:FB:8D:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91820CE/B73069C66BE911EBB7D5560DC4F9AE02/csG8nD23m0PzVvI_lWiEjJz7jdU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/csG8nD23m0PzVvI_lWiEjJz7jdU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91820CE/B73069C66BE911EBB7D5560DC4F9AE02/csG8nD23m0PzVvI_lWiEjJz7jdU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:64:2a:eb:f3:6c:5b:ce:99:bb:69:f6:29:2b:ff:12:66:f7: 26:fd:99:89:4a:6c:43:87:94:41:d4:42:ac:68:ef:ca:21:6a: 28:31:46:ee:e9:fa:08:fe:06:1b:09:f7:ed:a6:e5:a9:30:60: bb:86:7d:22:ec:a1:99:15:06:cc:23:f2:09:a6:5f:ba:6c:8c: 13:7a:cb:67:17:65:00:f0:57:8c:45:c8:a2:61:df:e7:2b:a8: b8:44:9d:51:87:f2:4b:c1:df:83:48:2d:f8:df:d1:ef:de:a1: 55:79:8b:aa:57:f6:8b:a1:44:ee:00:c8:58:38:0f:b7:42:90: 53:e3:a5:39:17:3a:bb:2b:c8:75:40:85:84:b8:e7:6c:da:56: 90:38:ac:63:37:4c:07:af:7c:24:9e:d8:5a:7e:25:10:80:a6: bb:32:e2:13:32:2c:7f:00:2b:07:b0:96:d5:f4:4d:ab:96:ee: ce:e5:b6:50:14:fb:22:c8:66:e8:c6:54:c9:53:6e:63:e6:1b: 87:6e:64:f7:d5:0c:8d:b8:1b:c0:db:b7:7d:1d:f7:56:35:1b: bc:86:4d:80:1d:02:c9:39:54:d1:74:39:1d:fb:cc:6e:1e:e5: 45:ba:a9:d8:df:48:77:ab:d6:c1:d1:bf:b7:94:55:1e:50:06: fe:dc:55:83 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBqswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODIwQ0UxMTAvBgNVBAUTKDcyQzFCQzlDM0RCNzlCNDNGMzU2RjIzRjk1Njg4NDhD OUNGQjhERDUwHhcNMjUwNjE0MjE1NTE5WhcNMjUwNjIxMjE1NTE5WjAYMRYwFAYD VQQDEw02ODRkZWZjNy1lZWMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3JjzMWXt5LMb/2au9BmOSKVrM5PSLpokJUHi3vf53YKGFc4LVyc40oYou9SY Ll8b6ub7su3Cng3t7C2shUtEoTwQ59RICug8nQEw+Iyb5ABAYA/A6V2XEuIMF0nz KoGYoF6bdYBmrv9EXiZiAERVXgzLsQ1kXUk3J6De/XOzBoCFnQrCxqyBJBnSy42A WQMLdzFhOtkULkPH6t4/g4UdWrIb9uW6PI9b38mTrY/ADOwyH8vubw8mxR8WQs1c /wIybSLCBOLDj5BtNNRgtRRnY7lG6lGsnFtRqn4OfG33r+M5dyBXu1/GS46ny+aL cV4dcgfInet+xdhUJQrgH3txEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFHOsIy+ PKeCcshHfq9fHXuSGwRCMB8GA1UdIwQYMBaAFHLBvJw9t5tD81byP5VohIyc+43V MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MjBDRS9CNzMwNjlDNjZC RTkxMUVCQjdENTU2MERDNEY5QUUwMi9jc0c4bkQyM20wUHpWdklfbFdpRWpKejdq ZFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NzRzhuRDIzbTBQelZ2SV9sV2lFakp6N2pkVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MjBDRS9CNzMwNjlDNjZCRTkxMUVCQjdENTU2MERDNEY5QUUwMi9jc0c4bkQyM20w UHpWdklfbFdpRWpKejdqZFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAUZCrr82xbzpm7afYpK/8SZvcm/ZmJSmxDh5RB1EKsaO/KIWooMUbu 6foI/gYbCfftpuWpMGC7hn0i7KGZFQbMI/IJpl+6bIwTestnF2UA8FeMRciiYd/n K6i4RJ1Rh/JLwd+DSC3439Hv3qFVeYuqV/aLoUTuAMhYOA+3QpBT46U5Fzq7K8h1 QIWEuOds2laQOKxjN0wHr3wknthafiUQgKa7MuITMix/ACsHsJbV9E2rlu7O5bZQ FPsiyGboxlTJU25j5huHbmT31QyNuBvA27d9HfdWNRu8hk2AHQLJOVTRdDkd+8xu HuVFuqnY30h3q9bB0b+3lFUeUAb+3FWD -----END CERTIFICATE-----Generated at Sun Jun 15 08:45:34 2025 by rpki-client