$ rpki-client -vvf rpki.apnic.net/member_repository/A91A657F/E94BCC48603211EFA5F8EE7EC4F9AE02/R_rmMixRsd0CJJdveh0rkibQkOo.mft File: R_rmMixRsd0CJJdveh0rkibQkOo.mft (raw, json) Hash identifier: 2xSCwKwGCewGrggdxoCNGsfN/Ba1+tJ7lK7g1jIz6uQ= Subject key identifier: A7:30:C4:EE:32:2F:BC:C9:AD:94:10:41:C2:38:DA:C8:FF:FB:5F:02 Authority key identifier: 47:FA:E6:32:2C:51:B1:DD:02:24:97:6F:7A:1D:2B:92:26:D0:90:EA Certificate issuer: /CN=A91A657F/serialNumber=47FAE6322C51B1DD0224976F7A1D2B9226D090EA Certificate serial: A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R_rmMixRsd0CJJdveh0rkibQkOo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A657F/E94BCC48603211EFA5F8EE7EC4F9AE02/R_rmMixRsd0CJJdveh0rkibQkOo.mft Manifest number: 9E Signing time: Fri 13 Jun 2025 05:16:35 +0000 Manifest this update: Fri 13 Jun 2025 05:16:34 +0000 Manifest next update: Fri 20 Jun 2025 05:16:34 +0000 Files and hashes: 1: R_rmMixRsd0CJJdveh0rkibQkOo.crl (hash: SckykWW/9OYsmhFty8qeXqqXgjShPg32HQZgMNAxIH4=) 2: 7564FD08603311EFA997483AC4F9AE02.roa (hash: j5L2oMlmz/AOJc/zBZV6x799FBe2Mb9/ypYCcp0WrrY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A657F/E94BCC48603211EFA5F8EE7EC4F9AE02/R_rmMixRsd0CJJdveh0rkibQkOo.crl rsync://rpki.apnic.net/member_repository/A91A657F/E94BCC48603211EFA5F8EE7EC4F9AE02/R_rmMixRsd0CJJdveh0rkibQkOo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R_rmMixRsd0CJJdveh0rkibQkOo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 05:16:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 162 (0xa2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A657F, serialNumber=47FAE6322C51B1DD0224976F7A1D2B9226D090EA Validity Not Before: Jun 13 05:16:34 2025 GMT Not After : Jun 20 05:16:34 2025 GMT Subject: CN=684bb432-b69e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:ed:ff:c3:15:34:8e:07:13:2b:fe:0c:58:a5: 13:bf:3b:ad:0e:75:a7:62:06:9f:76:eb:d9:14:52: e3:d8:e0:0f:0d:46:98:40:bc:35:a8:20:17:3a:1a: b7:b1:c0:65:62:53:39:93:b3:1c:95:bd:25:9a:4e: 6d:4f:1b:b1:f5:ac:6e:5d:1f:e3:ec:a0:28:47:0e: b7:a9:1d:6a:b2:ff:94:86:d6:b6:be:11:fd:94:55: c6:a0:5b:4f:25:b8:e9:9f:6d:dc:13:e3:d5:12:5d: a3:ed:70:d7:bf:29:d3:dc:ee:8b:f7:10:b8:24:36: 76:d3:75:a1:b5:83:f6:89:6b:d5:cb:d4:dd:ed:73: 27:e8:64:3e:92:c8:55:7c:80:f5:30:a1:02:a8:46: 6c:f8:27:9c:7a:d6:15:c5:30:29:78:ac:ff:e5:2a: 00:28:15:0b:7b:46:25:25:c7:2f:19:92:22:c8:03: 01:1c:4b:ab:46:38:9c:1d:33:90:2a:44:f0:7f:ca: 66:1b:e3:55:4b:23:8d:5c:9f:e0:3b:40:cd:b8:0b: fa:e9:31:4e:44:0b:4e:bb:87:95:5c:ae:2f:12:f4: 0c:8e:bf:5e:40:b1:c9:d2:fc:8d:05:4c:e2:88:50: 8f:47:84:88:8b:dc:85:db:22:f2:20:bb:b1:93:75: ce:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:30:C4:EE:32:2F:BC:C9:AD:94:10:41:C2:38:DA:C8:FF:FB:5F:02 X509v3 Authority Key Identifier: keyid:47:FA:E6:32:2C:51:B1:DD:02:24:97:6F:7A:1D:2B:92:26:D0:90:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A657F/E94BCC48603211EFA5F8EE7EC4F9AE02/R_rmMixRsd0CJJdveh0rkibQkOo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R_rmMixRsd0CJJdveh0rkibQkOo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A657F/E94BCC48603211EFA5F8EE7EC4F9AE02/R_rmMixRsd0CJJdveh0rkibQkOo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:41:f5:2e:6b:12:9a:f2:df:f8:4c:84:2e:9f:ed:09:78:a0: 11:3e:73:e1:c9:bc:dc:ae:13:7d:51:5a:d5:e2:85:da:37:79: 93:1d:91:0e:13:54:df:20:92:6d:de:af:bb:32:bb:57:cf:0b: ca:a8:b6:6c:5c:79:98:01:34:cb:53:0c:f0:91:93:58:3e:5c: d8:3d:b1:84:07:1d:e5:9a:b5:d0:88:cd:72:64:5c:a3:6e:62: 89:19:4e:74:e2:44:48:53:d0:8b:75:6c:70:a3:1e:8c:7c:e5: 0d:6e:ae:57:e3:73:d7:3f:d3:47:da:8f:4a:74:fc:81:57:ee: 31:72:c4:d1:44:d5:2a:d0:0f:12:ef:3f:35:7f:85:f0:5d:c5: 52:15:aa:65:03:33:85:21:91:bf:64:37:ae:41:6e:a8:d0:59: 31:3f:34:d3:16:83:49:f5:39:ee:92:65:20:2d:3a:db:4e:7a: 9f:7f:98:02:d9:1f:92:b2:13:d0:e7:e4:89:05:4d:47:bc:85: 5c:4c:15:55:3c:56:62:db:8d:76:b3:44:fb:3e:58:5b:a4:84: c4:e8:33:92:79:13:b5:bb:74:99:d5:cf:37:6d:d2:f2:26:ea: c0:a4:90:c4:43:91:26:40:42:b3:26:0d:1a:b7:77:f4:87:52: f3:4c:ae:e0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTY1N0YxMTAvBgNVBAUTKDQ3RkFFNjMyMkM1MUIxREQwMjI0OTc2RjdBMUQyQjky MjZEMDkwRUEwHhcNMjUwNjEzMDUxNjM0WhcNMjUwNjIwMDUxNjM0WjAYMRYwFAYD VQQDEw02ODRiYjQzMi1iNjllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq+3/wxU0jgcTK/4MWKUTvzutDnWnYgafduvZFFLj2OAPDUaYQLw1qCAXOhq3 scBlYlM5k7Mclb0lmk5tTxux9axuXR/j7KAoRw63qR1qsv+Uhta2vhH9lFXGoFtP Jbjpn23cE+PVEl2j7XDXvynT3O6L9xC4JDZ203WhtYP2iWvVy9Td7XMn6GQ+kshV fID1MKECqEZs+CecetYVxTApeKz/5SoAKBULe0YlJccvGZIiyAMBHEurRjicHTOQ KkTwf8pmG+NVSyONXJ/gO0DNuAv66TFORAtOu4eVXK4vEvQMjr9eQLHJ0vyNBUzi iFCPR4SIi9yF2yLyILuxk3XOIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKcwxO4y L7zJrZQQQcI42sj/+18CMB8GA1UdIwQYMBaAFEf65jIsUbHdAiSXb3odK5Im0JDq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNjU3Ri9FOTRCQ0M0ODYw MzIxMUVGQTVGOEVFN0VDNEY5QUUwMi9SX3JtTWl4UnNkMENKSmR2ZWgwcmtpYlFr T28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Jfcm1NaXhSc2QwQ0pKZHZlaDBya2liUWtPby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NjU3Ri9FOTRCQ0M0ODYwMzIxMUVGQTVGOEVFN0VDNEY5QUUwMi9SX3JtTWl4UnNk MENKSmR2ZWgwcmtpYlFrT28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQADQfUuaxKa8t/4TIQun+0JeKARPnPhybzcrhN9UVrV4oXaN3mTHZEO E1TfIJJt3q+7MrtXzwvKqLZsXHmYATTLUwzwkZNYPlzYPbGEBx3lmrXQiM1yZFyj bmKJGU504kRIU9CLdWxwox6MfOUNbq5X43PXP9NH2o9KdPyBV+4xcsTRRNUq0A8S 7z81f4XwXcVSFaplAzOFIZG/ZDeuQW6o0FkxPzTTFoNJ9TnukmUgLTrbTnqff5gC 2R+SshPQ5+SJBU1HvIVcTBVVPFZi2412s0T7PlhbpITE6DOSeRO1u3SZ1c83bdLy JurApJDEQ5EmQEKzJg0at3f0h1LzTK7g -----END CERTIFICATE-----Generated at Sun Jun 15 05:50:11 2025 by rpki-client