$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1B9F/569229026E1511EE8D6ED458C4F9AE02/9T5WQHaYwfqnXSV2VRO1B2Usl6s.mft File: 9T5WQHaYwfqnXSV2VRO1B2Usl6s.mft (raw, json) Hash identifier: V05DSmuQwUVHhCIzuN0GwVxKZeiLs50g82ezM8Z8jhs= Subject key identifier: 83:61:99:78:D8:D2:A9:98:63:5F:69:34:22:CB:6E:C4:8C:3A:D6:C8 Authority key identifier: F5:3E:56:40:76:98:C1:FA:A7:5D:25:76:55:13:B5:07:65:2C:97:AB Certificate issuer: /CN=A91A1B9F/serialNumber=F53E56407698C1FAA75D25765513B507652C97AB Certificate serial: 0138 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9T5WQHaYwfqnXSV2VRO1B2Usl6s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A1B9F/569229026E1511EE8D6ED458C4F9AE02/9T5WQHaYwfqnXSV2VRO1B2Usl6s.mft Manifest number: 0136 Signing time: Sun 15 Jun 2025 03:38:56 +0000 Manifest this update: Sun 15 Jun 2025 03:38:56 +0000 Manifest next update: Sun 22 Jun 2025 03:38:56 +0000 Files and hashes: 1: 9T5WQHaYwfqnXSV2VRO1B2Usl6s.crl (hash: g7VpS+ViMUWfqFzHaZUWGO46mwydsGV/TCI+exNCOfQ=) 2: 37E179CC6F0011EEAFD97016C4F9AE02.roa (hash: sf8Mnz1qsHdpKeF1ILemxPeqebYjdCIUvrzVLMZpW/o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A1B9F/569229026E1511EE8D6ED458C4F9AE02/9T5WQHaYwfqnXSV2VRO1B2Usl6s.crl rsync://rpki.apnic.net/member_repository/A91A1B9F/569229026E1511EE8D6ED458C4F9AE02/9T5WQHaYwfqnXSV2VRO1B2Usl6s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9T5WQHaYwfqnXSV2VRO1B2Usl6s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 312 (0x138) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A1B9F, serialNumber=F53E56407698C1FAA75D25765513B507652C97AB Validity Not Before: Jun 15 03:38:56 2025 GMT Not After : Jun 22 03:38:56 2025 GMT Subject: CN=684e4050-3a99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:54:54:f5:4b:77:40:72:40:78:e0:2b:fc:f0: 04:c9:7a:76:21:05:d0:20:19:b9:da:0c:0d:9c:40: 5a:e5:c7:f7:3d:f7:d1:e1:50:c0:be:4a:a8:3c:4e: 8a:16:3d:20:b3:0d:b7:f5:b8:56:75:c7:e2:9a:59: a8:ca:2c:72:24:0a:0a:c9:fc:3f:0f:14:aa:62:a5: 16:68:1f:84:ea:e3:5b:d3:c8:7a:0c:3c:f9:ee:03: f2:1e:4a:e7:54:f9:f7:15:ed:5b:28:83:d7:0a:17: 6e:5c:13:78:74:1c:6a:1f:cf:a7:d9:a0:e4:d1:cb: 50:c7:e5:b5:6d:ad:79:d8:f5:13:2b:1f:95:08:c6: b3:35:7c:2b:54:e1:26:95:26:e1:d9:af:fb:01:b0: a7:3b:a1:66:f0:8a:2f:c0:31:d7:c3:71:1c:1c:5a: b8:0c:93:a9:81:be:82:d5:8e:8f:89:d2:c3:a4:0b: a1:c4:63:55:b6:c6:cf:dd:8c:aa:fb:f5:bd:aa:17: ae:54:c9:1c:66:83:0d:b4:a6:24:8b:b9:43:62:f7: 94:b8:f6:a9:10:78:21:58:3d:06:4e:6b:69:c0:06: 01:04:73:7d:89:a0:67:49:b1:13:0a:f7:b0:29:e2: 94:68:fc:cb:d2:6e:c0:9a:06:d6:ba:20:a9:fe:e3: 51:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:61:99:78:D8:D2:A9:98:63:5F:69:34:22:CB:6E:C4:8C:3A:D6:C8 X509v3 Authority Key Identifier: keyid:F5:3E:56:40:76:98:C1:FA:A7:5D:25:76:55:13:B5:07:65:2C:97:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A1B9F/569229026E1511EE8D6ED458C4F9AE02/9T5WQHaYwfqnXSV2VRO1B2Usl6s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9T5WQHaYwfqnXSV2VRO1B2Usl6s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1B9F/569229026E1511EE8D6ED458C4F9AE02/9T5WQHaYwfqnXSV2VRO1B2Usl6s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:5c:80:aa:ac:56:b6:f0:be:b4:e3:7c:7f:9e:1a:50:d3:52: ba:d9:c9:71:57:59:5d:d4:ee:20:87:d9:a9:9c:a1:46:f3:54: 5b:11:d6:4c:a6:80:de:c3:36:e0:ef:6a:af:17:1e:6c:14:82: 96:9a:57:72:89:a7:21:1d:c4:1e:dc:ef:ca:1b:ed:49:fb:5e: 91:6e:31:c8:c0:d9:c4:6c:27:42:5c:38:3b:c6:56:c2:6e:75: a1:48:d4:cf:f5:45:f1:a5:66:43:9b:e0:c8:d9:22:ff:de:db: cc:98:bc:00:a2:69:8c:54:08:f9:3b:0c:a2:d5:9c:95:9b:9e: 2e:21:44:b9:0d:af:aa:e7:0d:1c:c1:0e:0d:b6:59:2f:e4:28: 6d:a5:6b:cf:b8:58:e6:08:78:66:2f:2e:ed:e6:19:0b:9b:5c: 75:57:dc:51:0b:13:68:7b:9d:2f:ba:f7:eb:6a:b0:95:22:21: 9b:cb:53:9b:18:c8:0a:42:5f:39:81:c4:d5:c8:33:49:e4:90: ea:64:06:ff:3b:fb:32:a2:6f:7b:df:d6:3a:8e:68:80:bd:e6: 1e:2d:92:f7:62:89:05:63:b7:4b:55:fd:73:07:66:43:e0:02: e9:20:b3:3d:1c:7a:7e:41:45:7b:f5:aa:92:e7:3b:93:90:a6: ca:43:ff:c5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTFCOUYxMTAvBgNVBAUTKEY1M0U1NjQwNzY5OEMxRkFBNzVEMjU3NjU1MTNCNTA3 NjUyQzk3QUIwHhcNMjUwNjE1MDMzODU2WhcNMjUwNjIyMDMzODU2WjAYMRYwFAYD VQQDEw02ODRlNDA1MC0zYTk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtVRU9Ut3QHJAeOAr/PAEyXp2IQXQIBm52gwNnEBa5cf3PffR4VDAvkqoPE6K Fj0gsw239bhWdcfimlmoyixyJAoKyfw/DxSqYqUWaB+E6uNb08h6DDz57gPyHkrn VPn3Fe1bKIPXChduXBN4dBxqH8+n2aDk0ctQx+W1ba152PUTKx+VCMazNXwrVOEm lSbh2a/7AbCnO6Fm8IovwDHXw3EcHFq4DJOpgb6C1Y6PidLDpAuhxGNVtsbP3Yyq +/W9qheuVMkcZoMNtKYki7lDYveUuPapEHghWD0GTmtpwAYBBHN9iaBnSbETCvew KeKUaPzL0m7AmgbWuiCp/uNRpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFINhmXjY 0qmYY19pNCLLbsSMOtbIMB8GA1UdIwQYMBaAFPU+VkB2mMH6p10ldlUTtQdlLJer MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMUI5Ri81NjkyMjkwMjZF MTUxMUVFOEQ2RUQ0NThDNEY5QUUwMi85VDVXUUhhWXdmcW5YU1YyVlJPMUIyVXNs NnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlUNVdRSGFZd2ZxblhTVjJWUk8xQjJVc2w2cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MUI5Ri81NjkyMjkwMjZFMTUxMUVFOEQ2RUQ0NThDNEY5QUUwMi85VDVXUUhhWXdm cW5YU1YyVlJPMUIyVXNsNnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBsXICqrFa28L6043x/nhpQ01K62clxV1ld1O4gh9mpnKFG81RbEdZM poDewzbg72qvFx5sFIKWmldyiachHcQe3O/KG+1J+16RbjHIwNnEbCdCXDg7xlbC bnWhSNTP9UXxpWZDm+DI2SL/3tvMmLwAommMVAj5Owyi1ZyVm54uIUS5Da+q5w0c wQ4Ntlkv5ChtpWvPuFjmCHhmLy7t5hkLm1x1V9xRCxNoe50vuvfrarCVIiGby1Ob GMgKQl85gcTVyDNJ5JDqZAb/O/syom9739Y6jmiAveYeLZL3YokFY7dLVf1zB2ZD 4ALpILM9HHp+QUV79aqS5zuTkKbKQ//F -----END CERTIFICATE-----Generated at Sun Jun 15 08:44:13 2025 by rpki-client