$ rpki-client -vvf rpki.apnic.net/member_repository/A9191A09/3C412C36BF3911E9897D7C2EC4F9AE02/5o7RJO9le2eb0SpY-gNQFODf6Cc.mft File: 5o7RJO9le2eb0SpY-gNQFODf6Cc.mft (raw, json) Hash identifier: Qy5R8Awn2WL+oZ5aNE6kcnDvSNhVFaM80XkSgoSGuZI= Subject key identifier: 1D:FB:9E:2C:82:36:0D:22:51:2D:29:75:E6:6E:ED:4C:EC:37:AA:76 Authority key identifier: E6:8E:D1:24:EF:65:7B:67:9B:D1:2A:58:FA:03:50:14:E0:DF:E8:27 Certificate issuer: /CN=A9191A09/serialNumber=E68ED124EF657B679BD12A58FA035014E0DFE827 Certificate serial: 0DD6 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/5o7RJO9le2eb0SpY-gNQFODf6Cc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191A09/3C412C36BF3911E9897D7C2EC4F9AE02/5o7RJO9le2eb0SpY-gNQFODf6Cc.mft Manifest number: 0DC2 Signing time: Wed 18 Jun 2025 14:40:01 +0000 Manifest this update: Wed 18 Jun 2025 14:40:01 +0000 Manifest next update: Wed 25 Jun 2025 14:40:01 +0000 Files and hashes: 1: 5o7RJO9le2eb0SpY-gNQFODf6Cc.crl (hash: /eQVGBs+/yxPdFr5CkGkuo2fppO9zB4MkwT/XgnzLzw=) 2: 9C06E51EE37A11EA84A20810C4F9AE02.roa (hash: BIq27Hxj0ymd/MyK4xyxLJopPOW9viNW0+I2cxj8GdM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191A09/3C412C36BF3911E9897D7C2EC4F9AE02/5o7RJO9le2eb0SpY-gNQFODf6Cc.crl rsync://rpki.apnic.net/member_repository/A9191A09/3C412C36BF3911E9897D7C2EC4F9AE02/5o7RJO9le2eb0SpY-gNQFODf6Cc.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/5o7RJO9le2eb0SpY-gNQFODf6Cc.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Jun 2025 14:40:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3542 (0xdd6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191A09, serialNumber=E68ED124EF657B679BD12A58FA035014E0DFE827 Validity Not Before: Jun 18 14:40:01 2025 GMT Not After : Jun 25 14:40:01 2025 GMT Subject: CN=6852cfc1-4bd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:07:43:14:41:85:f7:09:13:a5:85:f9:3e:97: 4e:c3:c4:42:74:c4:8a:b3:8d:81:23:aa:e4:2f:4a: cc:de:8b:58:5d:1b:b0:0f:75:5b:01:f9:32:d8:69: 15:9f:ad:91:8f:e8:a9:31:32:5d:37:5e:b5:de:c8: 47:78:5b:bb:b8:6a:d6:e2:10:c8:24:9e:2e:14:38: 96:78:5a:47:b9:67:2d:2f:5a:97:92:6a:4b:df:bc: 21:2f:c0:99:d9:8d:8d:35:99:db:d0:90:84:3e:10: 49:28:65:0f:56:ed:31:66:a1:b0:96:c2:eb:be:26: 7d:4d:74:43:0d:f7:97:62:5c:28:6d:38:7e:9c:7d: a5:14:11:69:9b:1e:39:34:e7:3a:fc:8c:57:cd:be: bb:a8:b2:60:bc:09:aa:25:3a:16:d1:9c:63:5a:be: 88:a1:f6:87:e5:e9:41:f1:82:b9:d0:e3:81:92:d3: 77:a7:67:3e:fb:43:95:03:f5:f3:db:c6:fc:9a:b3: 05:21:0b:d9:ed:a3:f1:83:27:6b:03:09:59:da:96: b7:9a:31:87:5b:ce:65:be:4b:49:15:c7:9b:5e:0e: 45:3c:88:d6:e4:15:44:d3:ca:e3:17:55:50:a8:97: 99:2e:1e:eb:3f:b3:d3:b7:4e:ba:e9:1e:14:a6:dc: 16:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:FB:9E:2C:82:36:0D:22:51:2D:29:75:E6:6E:ED:4C:EC:37:AA:76 X509v3 Authority Key Identifier: keyid:E6:8E:D1:24:EF:65:7B:67:9B:D1:2A:58:FA:03:50:14:E0:DF:E8:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191A09/3C412C36BF3911E9897D7C2EC4F9AE02/5o7RJO9le2eb0SpY-gNQFODf6Cc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/5o7RJO9le2eb0SpY-gNQFODf6Cc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191A09/3C412C36BF3911E9897D7C2EC4F9AE02/5o7RJO9le2eb0SpY-gNQFODf6Cc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:97:8e:fb:a8:e3:97:eb:7c:27:24:9c:ed:32:69:d0:fb:21: 94:25:06:53:74:5f:79:fa:e6:7b:3f:79:df:c2:6e:44:e7:94: 7d:56:eb:71:5f:c0:f5:de:01:9e:a4:f5:ee:f8:1c:15:64:fe: 14:9f:e5:eb:05:03:fa:d8:2f:8f:71:f0:11:9a:6a:35:ac:99: fb:9c:48:7d:c5:86:50:4e:9d:fc:c2:28:66:68:54:78:b3:77: 48:82:36:10:41:61:cb:11:f6:d4:f0:ba:f4:0a:34:d5:25:d6: fa:43:81:f7:55:c3:0f:4a:ab:79:33:18:1f:d1:a2:8b:e9:9d: 69:18:89:75:6f:06:cd:d4:b9:fe:be:8f:af:4e:46:4d:ca:82: d0:82:20:11:23:1f:4e:d4:8c:ed:13:1f:03:2f:e5:50:e8:72: 04:1d:00:fe:dd:97:81:24:c0:24:51:57:01:f4:08:23:c3:40: a8:09:76:15:51:92:bc:03:35:36:b3:bd:08:0a:58:2f:98:bb: ae:77:3a:81:70:86:fc:8e:89:bd:80:c2:07:cd:13:4d:5e:41: 87:eb:df:57:e0:10:e6:a1:fa:af:40:c3:48:d2:8c:04:59:73: 0d:36:ba:5e:f4:66:52:ff:4a:56:4f:3c:25:0c:c0:4b:d2:96: 33:cf:b1:da -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDdYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTFBMDkxMTAvBgNVBAUTKEU2OEVEMTI0RUY2NTdCNjc5QkQxMkE1OEZBMDM1MDE0 RTBERkU4MjcwHhcNMjUwNjE4MTQ0MDAxWhcNMjUwNjI1MTQ0MDAxWjAYMRYwFAYD VQQDEw02ODUyY2ZjMS00YmQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1wdDFEGF9wkTpYX5PpdOw8RCdMSKs42BI6rkL0rM3otYXRuwD3VbAfky2GkV n62Rj+ipMTJdN1613shHeFu7uGrW4hDIJJ4uFDiWeFpHuWctL1qXkmpL37whL8CZ 2Y2NNZnb0JCEPhBJKGUPVu0xZqGwlsLrviZ9TXRDDfeXYlwobTh+nH2lFBFpmx45 NOc6/IxXzb67qLJgvAmqJToW0ZxjWr6IofaH5elB8YK50OOBktN3p2c++0OVA/Xz 28b8mrMFIQvZ7aPxgydrAwlZ2pa3mjGHW85lvktJFcebXg5FPIjW5BVE08rjF1VQ qJeZLh7rP7PTt0666R4UptwWiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB37niyC Ng0iUS0pdeZu7UzsN6p2MB8GA1UdIwQYMBaAFOaO0STvZXtnm9EqWPoDUBTg3+gn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MUEwOS8zQzQxMkMzNkJG MzkxMUU5ODk3RDdDMkVDNEY5QUUwMi81bzdSSk85bGUyZWIwU3BZLWdOUUZPRGY2 Q2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyLzVvN1JKTzlsZTJlYjBTcFktZ05RRk9EZjZDYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MUEwOS8zQzQxMkMzNkJGMzkxMUU5ODk3RDdDMkVDNEY5QUUwMi81bzdSSk85bGUy ZWIwU3BZLWdOUUZPRGY2Q2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCFl477qOOX63wnJJztMmnQ+yGUJQZTdF95+uZ7P3nfwm5E55R9Vutx X8D13gGepPXu+BwVZP4Un+XrBQP62C+PcfARmmo1rJn7nEh9xYZQTp38wihmaFR4 s3dIgjYQQWHLEfbU8Lr0CjTVJdb6Q4H3VcMPSqt5Mxgf0aKL6Z1pGIl1bwbN1Ln+ vo+vTkZNyoLQgiARIx9O1IztEx8DL+VQ6HIEHQD+3ZeBJMAkUVcB9Agjw0CoCXYV UZK8AzU2s70IClgvmLuudzqBcIb8jom9gMIHzRNNXkGH699X4BDmofqvQMNI0owE WXMNNrpe9GZS/0pWTzwlDMBL0pYzz7Ha -----END CERTIFICATE-----Generated at Thu Jun 19 09:21:22 2025 by rpki-client