$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4B1A/B45F3FC4819A11ED8D61BA2BC4F9AE02/mFjOS0vHLnbmaMR9RImMCQiWq-s.mft File: mFjOS0vHLnbmaMR9RImMCQiWq-s.mft (raw, json) Hash identifier: P1QLoNFZzhue74gUA7cHn2JlDwKFDgcePSzSqPou09g= Subject key identifier: 89:AF:36:9D:D2:9D:32:AD:8D:32:55:62:A0:A6:46:C4:CD:7A:BE:48 Authority key identifier: 98:58:CE:4B:4B:C7:2E:76:E6:68:C4:7D:44:89:8C:09:08:96:AB:EB Certificate issuer: /CN=A91A4B1A/serialNumber=9858CE4B4BC72E76E668C47D44898C090896ABEB Certificate serial: 01E5 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mFjOS0vHLnbmaMR9RImMCQiWq-s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4B1A/B45F3FC4819A11ED8D61BA2BC4F9AE02/mFjOS0vHLnbmaMR9RImMCQiWq-s.mft Manifest number: 01DF Signing time: Sat 14 Jun 2025 16:03:22 +0000 Manifest this update: Sat 14 Jun 2025 16:03:21 +0000 Manifest next update: Sat 21 Jun 2025 16:03:21 +0000 Files and hashes: 1: mFjOS0vHLnbmaMR9RImMCQiWq-s.crl (hash: 05+9MeY0RIr5j+XScnawvj0BLGXJQQ+fQ9evctsUtUM=) 2: 4C3A869614DF11EEAB46A86DC4F9AE02.roa (hash: lu38CDRBmX2eL86FuDGblRO37V7hVT/nMCfbmUIJkQk=) 3: 4BC4F6A614DF11EEAB46A86DC4F9AE02.roa (hash: UFLmIYqMMQZsSlXO+J3Nx0+Pb9WqTG32RlxuAiHOUdE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4B1A/B45F3FC4819A11ED8D61BA2BC4F9AE02/mFjOS0vHLnbmaMR9RImMCQiWq-s.crl rsync://rpki.apnic.net/member_repository/A91A4B1A/B45F3FC4819A11ED8D61BA2BC4F9AE02/mFjOS0vHLnbmaMR9RImMCQiWq-s.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mFjOS0vHLnbmaMR9RImMCQiWq-s.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 16:03:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 485 (0x1e5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4B1A, serialNumber=9858CE4B4BC72E76E668C47D44898C090896ABEB Validity Not Before: Jun 14 16:03:21 2025 GMT Not After : Jun 21 16:03:21 2025 GMT Subject: CN=684d9d49-f28e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:3e:bd:20:c1:b3:b8:c2:30:a4:2b:cf:61:e8: d2:ab:49:5d:e4:08:3f:d6:60:08:49:a0:d9:0e:10: b7:2c:de:7a:ea:aa:84:f5:07:b4:71:ae:18:bd:53: fd:9b:c8:55:5a:86:35:8e:67:38:a5:0a:6c:cf:8d: 72:02:6b:1c:79:db:b0:9c:f3:77:e4:54:7d:39:cb: 02:9e:32:80:de:c8:48:7c:b9:c0:c3:62:41:2c:30: 7f:0b:f4:97:09:fd:05:60:dc:e9:ad:9e:9e:c3:44: 7a:51:8d:dc:0b:fd:f0:76:5c:cb:0d:85:81:47:0c: f1:d3:23:30:4c:67:4e:73:48:da:4e:bf:91:f1:9f: 4d:c2:39:b1:6c:ce:af:0d:1e:5c:c5:d9:14:05:d0: f5:b5:99:92:b1:e9:42:31:3f:fa:a4:54:d8:9c:18: f9:f0:b2:2f:c9:31:c9:4b:e5:5f:06:7d:a2:c0:2d: b5:08:8b:f8:1f:c2:79:54:8f:29:57:de:f2:4f:08: 55:7b:37:d6:21:1a:50:e5:05:fb:19:cd:18:86:09: 37:d0:4d:79:24:0c:cf:09:62:c3:b0:ea:21:f8:d1: ae:fe:51:10:1a:65:77:b9:46:e9:4f:56:9e:a8:9f: 79:4c:0c:a4:c9:7f:b7:c6:1d:37:6b:74:76:b7:89: aa:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:AF:36:9D:D2:9D:32:AD:8D:32:55:62:A0:A6:46:C4:CD:7A:BE:48 X509v3 Authority Key Identifier: keyid:98:58:CE:4B:4B:C7:2E:76:E6:68:C4:7D:44:89:8C:09:08:96:AB:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4B1A/B45F3FC4819A11ED8D61BA2BC4F9AE02/mFjOS0vHLnbmaMR9RImMCQiWq-s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mFjOS0vHLnbmaMR9RImMCQiWq-s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4B1A/B45F3FC4819A11ED8D61BA2BC4F9AE02/mFjOS0vHLnbmaMR9RImMCQiWq-s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:d1:b3:23:ad:9b:9f:bf:ad:cf:0c:be:89:14:09:39:b4:ea: d3:ed:e8:49:f2:06:cc:87:af:b4:ea:21:2e:54:37:fc:5c:1b: 33:f2:f2:7b:d4:e8:44:bf:56:1e:f2:7f:f7:75:63:3b:08:e3: 73:90:0b:30:49:56:a1:ef:7d:8a:40:3f:50:1b:ac:79:61:57: a5:fb:52:ee:1b:5f:fe:1e:14:a8:3d:73:c7:de:03:86:a8:2b: 98:87:03:e0:6a:e5:f7:d7:7c:69:52:2d:89:16:99:93:9b:6a: 63:0c:3f:d7:bc:8a:cd:39:56:c8:e2:02:af:cd:31:24:c2:ad: 66:9f:8a:fd:38:26:8f:7d:66:3f:2c:ae:9f:b6:2b:10:9c:49: e7:4c:60:91:16:fc:6f:8c:1c:e0:a2:74:85:cb:bc:a6:81:eb: 11:fa:ab:3d:5d:87:56:90:36:a7:1f:e0:35:bf:d7:88:96:a6: 06:8b:17:59:fd:84:a8:58:74:48:cc:7f:35:6f:62:d4:2d:56: 0b:35:87:5e:99:1c:69:7b:13:b5:1a:be:13:d7:ae:6c:a1:18: a4:52:81:3b:55:ea:ac:f9:f8:ab:f5:53:25:ff:fb:1b:85:5e: 13:23:6a:a0:c0:b8:f4:6d:6a:72:0a:93:94:a7:c1:a6:4e:2b: a7:81:0d:6c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAeUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTRCMUExMTAvBgNVBAUTKDk4NThDRTRCNEJDNzJFNzZFNjY4QzQ3RDQ0ODk4QzA5 MDg5NkFCRUIwHhcNMjUwNjE0MTYwMzIxWhcNMjUwNjIxMTYwMzIxWjAYMRYwFAYD VQQDEw02ODRkOWQ0OS1mMjhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuD69IMGzuMIwpCvPYejSq0ld5Ag/1mAISaDZDhC3LN566qqE9Qe0ca4YvVP9 m8hVWoY1jmc4pQpsz41yAmsceduwnPN35FR9OcsCnjKA3shIfLnAw2JBLDB/C/SX Cf0FYNzprZ6ew0R6UY3cC/3wdlzLDYWBRwzx0yMwTGdOc0jaTr+R8Z9NwjmxbM6v DR5cxdkUBdD1tZmSselCMT/6pFTYnBj58LIvyTHJS+VfBn2iwC21CIv4H8J5VI8p V97yTwhVezfWIRpQ5QX7Gc0Yhgk30E15JAzPCWLDsOoh+NGu/lEQGmV3uUbpT1ae qJ95TAykyX+3xh03a3R2t4mqEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFImvNp3S nTKtjTJVYqCmRsTNer5IMB8GA1UdIwQYMBaAFJhYzktLxy525mjEfUSJjAkIlqvr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNEIxQS9CNDVGM0ZDNDgx OUExMUVEOEQ2MUJBMkJDNEY5QUUwMi9tRmpPUzB2SExuYm1hTVI5UkltTUNRaVdx LXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL21Gak9TMHZITG5ibWFNUjlSSW1NQ1FpV3Etcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NEIxQS9CNDVGM0ZDNDgxOUExMUVEOEQ2MUJBMkJDNEY5QUUwMi9tRmpPUzB2SExu Ym1hTVI5UkltTUNRaVdxLXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAJ0bMjrZufv63PDL6JFAk5tOrT7ehJ8gbMh6+06iEuVDf8XBsz8vJ7 1OhEv1Ye8n/3dWM7CONzkAswSVah732KQD9QG6x5YVel+1LuG1/+HhSoPXPH3gOG qCuYhwPgauX313xpUi2JFpmTm2pjDD/XvIrNOVbI4gKvzTEkwq1mn4r9OCaPfWY/ LK6ftisQnEnnTGCRFvxvjBzgonSFy7ymgesR+qs9XYdWkDanH+A1v9eIlqYGixdZ /YSoWHRIzH81b2LULVYLNYdemRxpexO1Gr4T165soRikUoE7Veqs+fir9VMl//sb hV4TI2qgwLj0bWpyCpOUp8GmTiungQ1s -----END CERTIFICATE-----Generated at Mon Jun 16 16:38:42 2025 by rpki-client