$ rpki-client -vvf rpki.apnic.net/member_repository/A91A04B9/CE840568D23511EF8FE29C5CC4F9AE02/J23PPyNBrcfQvEbzY0T3FWANmlg.mft File: J23PPyNBrcfQvEbzY0T3FWANmlg.mft (raw, json) Hash identifier: wZ8dRjHcvtYzlJ101LoSb1zkFfwlc5/+qtKWnrJL3js= Subject key identifier: 67:1F:53:32:89:9E:C6:48:0C:19:4D:86:50:1E:ED:11:F6:D5:6B:03 Authority key identifier: 27:6D:CF:3F:23:41:AD:C7:D0:BC:46:F3:63:44:F7:15:60:0D:9A:58 Certificate issuer: /CN=A91A04B9/serialNumber=276DCF3F2341ADC7D0BC46F36344F715600D9A58 Certificate serial: 52 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J23PPyNBrcfQvEbzY0T3FWANmlg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A04B9/CE840568D23511EF8FE29C5CC4F9AE02/J23PPyNBrcfQvEbzY0T3FWANmlg.mft Manifest number: 51 Signing time: Thu 19 Jun 2025 06:38:25 +0000 Manifest this update: Thu 19 Jun 2025 06:38:24 +0000 Manifest next update: Thu 26 Jun 2025 06:38:24 +0000 Files and hashes: 1: J23PPyNBrcfQvEbzY0T3FWANmlg.crl (hash: zZfn5z4w5FLNb4DTkHfB+jf95rsw9tIN/uxGBmjNhwY=) 2: 197A8B3CD23611EF9EA7495DC4F9AE02.roa (hash: cWI1CNGvgjuWGw7j5Q/yYWJkIlWwLO+A7fIPZIXhqyc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A04B9/CE840568D23511EF8FE29C5CC4F9AE02/J23PPyNBrcfQvEbzY0T3FWANmlg.crl rsync://rpki.apnic.net/member_repository/A91A04B9/CE840568D23511EF8FE29C5CC4F9AE02/J23PPyNBrcfQvEbzY0T3FWANmlg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J23PPyNBrcfQvEbzY0T3FWANmlg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 06:38:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 82 (0x52) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A04B9, serialNumber=276DCF3F2341ADC7D0BC46F36344F715600D9A58 Validity Not Before: Jun 19 06:38:24 2025 GMT Not After : Jun 26 06:38:24 2025 GMT Subject: CN=6853b061-16b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:92:45:bc:2d:2a:a2:f7:83:b9:73:c6:ca:45: 4c:d8:5b:8e:6a:a2:0d:ee:ca:b4:3c:2b:d6:e5:19: c8:3c:24:ef:5f:99:8f:96:89:c1:ac:db:f1:44:7a: a2:bd:88:10:82:74:f3:6f:af:25:5e:ab:e9:e8:84: cd:24:ae:05:69:8a:3a:6b:8c:fc:d0:ca:b3:43:cc: 33:50:a8:99:27:ff:63:cd:6e:19:84:e3:c7:8d:bf: fa:03:d0:22:0b:ee:90:8a:74:9e:be:86:15:de:84: 31:48:1e:db:6a:38:3d:9f:5d:a8:c2:54:0f:55:fb: 9f:9c:5e:7f:7d:24:6b:8c:38:ff:c2:ce:df:c9:e1: 43:57:34:c1:0c:01:16:83:65:0a:cd:d6:5a:b5:c4: df:da:5d:96:dc:69:59:49:b5:3b:eb:f9:6d:f7:9e: 94:36:00:d6:09:de:b4:25:24:8a:e1:2e:06:58:97: 42:18:c0:5a:7c:b4:b1:81:ef:c8:52:1e:13:12:83: be:c0:61:f8:f0:6a:d5:1e:d1:56:e5:ff:1a:7b:50: eb:9d:04:d9:34:8d:79:0b:82:d3:25:bb:7c:f2:a6: 82:a3:d5:5f:4e:d9:18:83:64:85:a5:42:de:9d:5c: 7a:72:70:7c:72:bd:f4:8d:12:b9:53:c6:ef:ab:d7: 6a:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:1F:53:32:89:9E:C6:48:0C:19:4D:86:50:1E:ED:11:F6:D5:6B:03 X509v3 Authority Key Identifier: keyid:27:6D:CF:3F:23:41:AD:C7:D0:BC:46:F3:63:44:F7:15:60:0D:9A:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A04B9/CE840568D23511EF8FE29C5CC4F9AE02/J23PPyNBrcfQvEbzY0T3FWANmlg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J23PPyNBrcfQvEbzY0T3FWANmlg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A04B9/CE840568D23511EF8FE29C5CC4F9AE02/J23PPyNBrcfQvEbzY0T3FWANmlg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:8e:ad:d3:2e:e9:df:5d:2b:c0:98:09:b0:37:30:39:6b:37: 7b:6e:d3:16:5a:a2:19:26:fc:91:c0:91:ae:2b:0e:b4:1a:ee: 4e:20:bf:d1:02:49:bc:8c:6d:88:a6:92:2e:06:96:a7:7b:4f: 24:fc:69:d0:78:6b:48:6c:c3:6f:a6:7d:67:05:68:6d:38:8a: 13:99:04:e3:c4:5b:08:e7:36:2d:7b:c7:52:2e:4a:4f:92:75: a3:4a:5f:b3:fe:da:c4:d7:c3:3b:a2:e6:29:23:83:77:01:36: e8:5d:be:73:61:13:d0:c6:25:25:51:90:d1:63:80:77:86:a9: 44:f6:1a:09:bf:d6:0f:82:d9:35:27:91:b0:7d:43:eb:c6:e6: e5:e3:27:a4:f0:a7:2b:0d:36:2b:12:89:77:a7:56:c1:53:9f: 26:ad:06:32:b9:c1:64:de:69:66:9d:b1:34:b7:86:c8:71:dc: be:f0:21:e0:43:4e:42:35:c6:f5:62:6a:f9:ea:61:07:62:e4: c1:e6:1b:e3:9f:58:c5:b1:69:a7:00:43:ce:37:4f:c3:b9:02: af:30:4e:fc:66:70:46:31:6c:01:a9:68:e5:3a:dc:bb:14:23: 39:c9:07:bc:63:71:6c:59:eb:a8:38:52:95:e9:07:dd:ac:ab: e5:91:68:d6 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBUjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB MDRCOTExMC8GA1UEBRMoMjc2RENGM0YyMzQxQURDN0QwQkM0NkYzNjM0NEY3MTU2 MDBEOUE1ODAeFw0yNTA2MTkwNjM4MjRaFw0yNTA2MjYwNjM4MjRaMBgxFjAUBgNV BAMTDTY4NTNiMDYxLTE2YjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDRkkW8LSqi94O5c8bKRUzYW45qog3uyrQ8K9blGcg8JO9fmY+WicGs2/FEeqK9 iBCCdPNvryVeq+nohM0krgVpijprjPzQyrNDzDNQqJkn/2PNbhmE48eNv/oD0CIL 7pCKdJ6+hhXehDFIHttqOD2fXajCVA9V+5+cXn99JGuMOP/Czt/J4UNXNMEMARaD ZQrN1lq1xN/aXZbcaVlJtTvr+W33npQ2ANYJ3rQlJIrhLgZYl0IYwFp8tLGB78hS HhMSg77AYfjwatUe0Vbl/xp7UOudBNk0jXkLgtMlu3zypoKj1V9O2RiDZIWlQt6d XHpycHxyvfSNErlTxu+r12pdAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUZx9TMome xkgMGU2GUB7tEfbVawMwHwYDVR0jBBgwFoAUJ23PPyNBrcfQvEbzY0T3FWANmlgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEwNEI5L0NFODQwNTY4RDIz NTExRUY4RkUyOUM1Q0M0RjlBRTAyL0oyM1BQeU5CcmNmUXZFYnpZMFQzRldBTm1s Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvSjIzUFB5TkJyY2ZRdkVielkwVDNGV0FObWxnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEw NEI5L0NFODQwNTY4RDIzNTExRUY4RkUyOUM1Q0M0RjlBRTAyL0oyM1BQeU5CcmNm UXZFYnpZMFQzRldBTm1sZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFGOrdMu6d9dK8CYCbA3MDlrN3tu0xZaohkm/JHAka4rDrQa7k4gv9EC SbyMbYimki4Glqd7TyT8adB4a0hsw2+mfWcFaG04ihOZBOPEWwjnNi17x1IuSk+S daNKX7P+2sTXwzui5ikjg3cBNuhdvnNhE9DGJSVRkNFjgHeGqUT2Ggm/1g+C2TUn kbB9Q+vG5uXjJ6TwpysNNisSiXenVsFTnyatBjK5wWTeaWadsTS3hshx3L7wIeBD TkI1xvViavnqYQdi5MHmG+OfWMWxaacAQ843T8O5Aq8wTvxmcEYxbAGpaOU63LsU IznJB7xjcWxZ66g4UpXpB92sq+WRaNY= -----END CERTIFICATE-----Generated at Thu Jun 19 18:57:53 2025 by rpki-client