$ rpki-client -vvf rpki.apnic.net/member_repository/A91A40AE/86215FD0FC3811EC9D1AA71EC4F9AE02/S91WBs7jg4cxsnbrWuJ0CVXm6DU.mft File: S91WBs7jg4cxsnbrWuJ0CVXm6DU.mft (raw, json) Hash identifier: w04VTBw8t1bG2MJI2K8F42BRVOyOcr5S1LQgjZTJv1w= Subject key identifier: 41:54:68:CB:F4:24:6A:61:E4:71:CC:E5:8B:8E:46:38:A1:F4:0A:DD Authority key identifier: 4B:DD:56:06:CE:E3:83:87:31:B2:76:EB:5A:E2:74:09:55:E6:E8:35 Certificate issuer: /CN=A91A40AE/serialNumber=4BDD5606CEE3838731B276EB5AE2740955E6E835 Certificate serial: 02AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S91WBs7jg4cxsnbrWuJ0CVXm6DU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A40AE/86215FD0FC3811EC9D1AA71EC4F9AE02/S91WBs7jg4cxsnbrWuJ0CVXm6DU.mft Manifest number: 02A9 Signing time: Fri 13 Jun 2025 01:00:08 +0000 Manifest this update: Fri 13 Jun 2025 01:00:07 +0000 Manifest next update: Fri 20 Jun 2025 01:00:07 +0000 Files and hashes: 1: S91WBs7jg4cxsnbrWuJ0CVXm6DU.crl (hash: NnkWGkCc9Pd9CHyG7JBseIf9oKZoXp4nBjnMaPtq8pg=) 2: 0C2902B4FC3D11ECAD619C35C4F9AE02.roa (hash: hVypcOVVHiw3xkPQvZdEii5XB06efgTyPBfdlHWp4xo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A40AE/86215FD0FC3811EC9D1AA71EC4F9AE02/S91WBs7jg4cxsnbrWuJ0CVXm6DU.crl rsync://rpki.apnic.net/member_repository/A91A40AE/86215FD0FC3811EC9D1AA71EC4F9AE02/S91WBs7jg4cxsnbrWuJ0CVXm6DU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S91WBs7jg4cxsnbrWuJ0CVXm6DU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 01:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 684 (0x2ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A40AE, serialNumber=4BDD5606CEE3838731B276EB5AE2740955E6E835 Validity Not Before: Jun 13 01:00:07 2025 GMT Not After : Jun 20 01:00:07 2025 GMT Subject: CN=684b7818-878f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:8c:a1:00:a2:0d:cb:fc:58:ff:8a:ab:53:76: 5a:06:27:8d:0a:52:3e:33:50:94:92:54:2d:65:b1: e9:ae:d9:ff:1a:f0:a4:ed:84:8b:18:35:b7:94:6e: 01:3f:d2:7e:af:dd:bb:55:1c:e4:4c:aa:28:3d:0b: 8a:ac:91:37:d1:ce:e8:11:99:5f:bf:2d:2a:9c:74: 11:e7:5d:52:38:d2:d1:d7:95:9a:d3:5d:44:63:27: b8:86:84:1e:ba:27:31:36:61:db:1a:af:77:66:75: a1:3e:e7:0f:f0:4c:c5:f3:c9:87:07:e4:69:c7:5e: 73:d9:bc:74:2d:78:76:77:a1:f4:27:64:5e:92:1c: bb:d8:08:5d:c4:1c:df:38:e6:6b:1c:62:c4:ba:67: b6:b0:2c:18:24:3d:c2:10:a3:e7:62:8d:c8:f1:3c: 10:4e:d8:fd:dc:99:7c:fa:c3:d8:89:01:0b:6b:d5: 89:89:00:09:0a:50:4f:66:a7:63:2b:cc:ab:03:cb: 20:6a:3b:80:a0:07:95:2b:0a:5b:9c:cd:04:7c:ac: 8f:2d:31:0b:c2:ea:21:f8:92:9b:fe:54:41:d2:a8: e1:21:54:f4:d9:8b:08:68:6c:ec:52:4d:d7:15:45: 44:aa:24:14:1e:c7:e2:43:16:27:bb:37:b5:d8:87: e0:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:54:68:CB:F4:24:6A:61:E4:71:CC:E5:8B:8E:46:38:A1:F4:0A:DD X509v3 Authority Key Identifier: keyid:4B:DD:56:06:CE:E3:83:87:31:B2:76:EB:5A:E2:74:09:55:E6:E8:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A40AE/86215FD0FC3811EC9D1AA71EC4F9AE02/S91WBs7jg4cxsnbrWuJ0CVXm6DU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S91WBs7jg4cxsnbrWuJ0CVXm6DU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A40AE/86215FD0FC3811EC9D1AA71EC4F9AE02/S91WBs7jg4cxsnbrWuJ0CVXm6DU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:a9:e6:a8:b5:2a:d5:40:b5:0f:5d:4d:b4:dc:62:01:28:a2: af:01:ef:b9:f5:93:5b:65:47:b5:fb:55:aa:eb:b3:45:f7:8f: 87:30:56:6b:b8:ab:6d:4c:cc:d6:f2:9b:25:fd:74:b2:70:fb: ca:c8:74:39:77:f0:9c:c3:12:d0:39:88:81:a7:73:98:0d:7f: 3c:30:12:9d:03:25:1d:82:b3:c4:66:ce:b1:a7:46:66:03:e1: 86:fd:c3:4f:bf:fc:d5:30:c5:69:96:ec:17:73:db:8d:b9:c7: cf:da:a6:eb:46:78:0e:7e:3d:ee:24:d6:a4:d6:92:a2:b2:75: b1:a2:c4:03:29:ee:0b:8a:32:1f:b7:4e:41:21:e1:4c:5a:99: 3c:3c:44:41:21:29:2e:5f:cf:7a:ac:52:16:1d:d3:cc:18:ce: 9a:bd:19:2d:bd:23:14:0e:89:7c:9b:f6:99:34:7a:d6:63:cd: 9b:51:43:ef:2d:42:1c:a9:8b:d2:a4:50:18:e4:d8:59:3e:60: c5:61:21:4b:5f:24:84:00:2d:4d:ce:55:d2:07:16:0f:23:fb: e6:c2:1b:c9:89:bd:f6:0d:fe:3d:c5:76:c7:8b:5e:d0:d4:de: c7:67:03:37:a5:7c:3c:9a:fd:32:fe:bd:62:7e:23:9d:a8:be: 78:0f:7b:53 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAqwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQwQUUxMTAvBgNVBAUTKDRCREQ1NjA2Q0VFMzgzODczMUIyNzZFQjVBRTI3NDA5 NTVFNkU4MzUwHhcNMjUwNjEzMDEwMDA3WhcNMjUwNjIwMDEwMDA3WjAYMRYwFAYD VQQDEw02ODRiNzgxOC04NzhmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnIyhAKINy/xY/4qrU3ZaBieNClI+M1CUklQtZbHprtn/GvCk7YSLGDW3lG4B P9J+r927VRzkTKooPQuKrJE30c7oEZlfvy0qnHQR511SONLR15Wa011EYye4hoQe uicxNmHbGq93ZnWhPucP8EzF88mHB+Rpx15z2bx0LXh2d6H0J2Rekhy72AhdxBzf OOZrHGLEume2sCwYJD3CEKPnYo3I8TwQTtj93Jl8+sPYiQELa9WJiQAJClBPZqdj K8yrA8sgajuAoAeVKwpbnM0EfKyPLTELwuoh+JKb/lRB0qjhIVT02YsIaGzsUk3X FUVEqiQUHsfiQxYnuze12IfgBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEFUaMv0 JGph5HHM5YuORjih9ArdMB8GA1UdIwQYMBaAFEvdVgbO44OHMbJ261ridAlV5ug1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDBBRS84NjIxNUZEMEZD MzgxMUVDOUQxQUE3MUVDNEY5QUUwMi9TOTFXQnM3amc0Y3hzbmJyV3VKMENWWG02 RFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1M5MVdCczdqZzRjeHNuYnJXdUowQ1ZYbTZEVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDBBRS84NjIxNUZEMEZDMzgxMUVDOUQxQUE3MUVDNEY5QUUwMi9TOTFXQnM3amc0 Y3hzbmJyV3VKMENWWG02RFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCEqeaotSrVQLUPXU203GIBKKKvAe+59ZNbZUe1+1Wq67NF94+HMFZr uKttTMzW8psl/XSycPvKyHQ5d/CcwxLQOYiBp3OYDX88MBKdAyUdgrPEZs6xp0Zm A+GG/cNPv/zVMMVpluwXc9uNucfP2qbrRngOfj3uJNak1pKisnWxosQDKe4LijIf t05BIeFMWpk8PERBISkuX896rFIWHdPMGM6avRktvSMUDol8m/aZNHrWY82bUUPv LUIcqYvSpFAY5NhZPmDFYSFLXySEAC1NzlXSBxYPI/vmwhvJib32Df49xXbHi17Q 1N7HZwM3pXw8mv0y/r1ifiOdqL54D3tT -----END CERTIFICATE-----Generated at Sat Jun 14 19:01:15 2025 by rpki-client