$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9B22/D75F985CFC8611EABE8F622DC4F9AE02/Rhxyji1WPw4JJFm6przkudbBi7g.mft File: Rhxyji1WPw4JJFm6przkudbBi7g.mft (raw, json) Hash identifier: vC/M+AheTuoGeYIDpXPmzF6IJSGXfN9ZIyguyY6ZrJQ= Subject key identifier: 1F:D4:D7:3D:57:2B:7D:A9:8A:7C:84:7E:D1:F1:26:9A:6D:EE:9F:36 Authority key identifier: 46:1C:72:8E:2D:56:3F:0E:09:24:59:BA:A6:BC:E4:B9:D6:C1:8B:B8 Certificate issuer: /CN=A91A9B22/serialNumber=461C728E2D563F0E092459BAA6BCE4B9D6C18BB8 Certificate serial: 07C9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rhxyji1WPw4JJFm6przkudbBi7g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A9B22/D75F985CFC8611EABE8F622DC4F9AE02/Rhxyji1WPw4JJFm6przkudbBi7g.mft Manifest number: 07C2 Signing time: Thu 12 Jun 2025 20:51:36 +0000 Manifest this update: Thu 12 Jun 2025 20:51:35 +0000 Manifest next update: Thu 19 Jun 2025 20:51:35 +0000 Files and hashes: 1: Rhxyji1WPw4JJFm6przkudbBi7g.crl (hash: ePaS15kpqGoFBoZR2y2Yi0wdz3ZU3tSXCThuidGZqJg=) 2: AF0AC0A63D0A11EB9F59D648C4F9AE02.roa (hash: +xXZdocc+DAKSGVr9i3J1ZCcXvPRm7qfVi4qSp6nPXU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A9B22/D75F985CFC8611EABE8F622DC4F9AE02/Rhxyji1WPw4JJFm6przkudbBi7g.crl rsync://rpki.apnic.net/member_repository/A91A9B22/D75F985CFC8611EABE8F622DC4F9AE02/Rhxyji1WPw4JJFm6przkudbBi7g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rhxyji1WPw4JJFm6przkudbBi7g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 20:51:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1993 (0x7c9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A9B22, serialNumber=461C728E2D563F0E092459BAA6BCE4B9D6C18BB8 Validity Not Before: Jun 12 20:51:35 2025 GMT Not After : Jun 19 20:51:35 2025 GMT Subject: CN=684b3dd8-c2df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:6f:ea:0a:49:dd:96:15:90:10:b0:7d:0a:ba: 93:1b:c7:65:43:2f:66:6b:bf:42:5b:1e:1b:3d:ba: 3f:dd:27:a1:4f:13:23:82:11:9c:a1:8d:d8:0c:c6: 79:1d:48:34:02:09:d1:9c:30:42:8a:11:02:64:44: 40:0b:8b:54:09:45:87:6c:1c:f9:a5:81:56:b8:b8: f7:77:9d:34:ce:a8:13:61:6c:4c:fe:54:cf:d3:f7: cd:51:67:6d:c8:aa:ef:a7:63:18:ed:61:c0:7b:f3: 1f:6b:81:d4:f3:9f:86:a9:73:64:f6:0b:16:f1:df: 55:84:03:16:55:35:eb:34:5f:b3:9a:4f:27:17:ae: 96:5f:9a:b9:03:6b:22:c9:ae:13:ba:9a:34:33:7a: 11:48:cc:0a:9f:8c:ce:b7:59:aa:69:92:61:97:1c: 56:83:db:00:94:18:c5:b7:5a:57:0b:21:3d:96:73: 51:b0:48:7e:4d:2a:db:80:aa:c0:c4:67:d4:b2:59: 44:d7:64:a7:22:fd:b3:d4:a6:d4:a7:92:5a:3c:8c: 75:35:99:39:4c:25:8a:97:fb:df:94:d2:6b:41:ef: c0:29:83:bf:8f:38:8c:81:34:24:9e:7d:2b:b2:49: 2d:58:b6:12:b5:e3:0d:19:19:32:04:0d:39:54:fa: 30:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:D4:D7:3D:57:2B:7D:A9:8A:7C:84:7E:D1:F1:26:9A:6D:EE:9F:36 X509v3 Authority Key Identifier: keyid:46:1C:72:8E:2D:56:3F:0E:09:24:59:BA:A6:BC:E4:B9:D6:C1:8B:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A9B22/D75F985CFC8611EABE8F622DC4F9AE02/Rhxyji1WPw4JJFm6przkudbBi7g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rhxyji1WPw4JJFm6przkudbBi7g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9B22/D75F985CFC8611EABE8F622DC4F9AE02/Rhxyji1WPw4JJFm6przkudbBi7g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:db:1a:5f:c3:a6:45:53:aa:9e:d5:89:c7:51:1f:6d:e3:2d: 24:e9:98:9d:51:ae:50:2e:a7:ac:70:ca:ac:36:01:9a:85:6b: 75:63:ad:55:94:4b:1b:3f:8d:d8:88:e8:e4:e5:6e:d8:8a:6c: d0:24:63:e7:77:4d:ba:09:8d:fd:1f:3d:94:de:b9:41:9e:23: 2f:85:fe:27:18:56:40:6b:65:02:60:e6:98:4d:02:17:9c:35: f9:d4:c0:c3:b6:4a:8f:52:97:b0:b5:74:ff:5e:2d:be:4a:3c: 92:bb:d9:b6:71:d2:6b:bf:30:e5:7d:bf:57:99:3e:be:8d:5b: 2c:a4:d0:27:04:d8:3a:f8:0e:f9:6f:a5:45:9c:d4:a6:78:a7: d8:9f:20:bc:88:72:5b:24:d8:f8:00:e8:8d:25:4f:aa:f6:99: 2f:8b:72:b9:96:b4:db:dc:23:f5:a4:d6:65:b8:a9:d6:bc:5c: 0d:25:30:3f:52:b1:ea:7e:2f:0e:a8:2c:68:97:06:fa:9f:2d: 06:a0:f2:f4:b4:6d:fa:21:12:36:17:32:77:32:2f:b7:43:02: d1:d0:f6:a9:79:b5:d1:bd:9e:e4:f9:1e:eb:3e:c9:85:2f:27: b9:8d:e2:47:b7:03:0b:c7:15:df:c0:44:e1:68:f6:0e:6e:74: de:b4:11:81 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB8kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTlCMjIxMTAvBgNVBAUTKDQ2MUM3MjhFMkQ1NjNGMEUwOTI0NTlCQUE2QkNFNEI5 RDZDMThCQjgwHhcNMjUwNjEyMjA1MTM1WhcNMjUwNjE5MjA1MTM1WjAYMRYwFAYD VQQDEw02ODRiM2RkOC1jMmRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp2/qCkndlhWQELB9CrqTG8dlQy9ma79CWx4bPbo/3SehTxMjghGcoY3YDMZ5 HUg0AgnRnDBCihECZERAC4tUCUWHbBz5pYFWuLj3d500zqgTYWxM/lTP0/fNUWdt yKrvp2MY7WHAe/Mfa4HU85+GqXNk9gsW8d9VhAMWVTXrNF+zmk8nF66WX5q5A2si ya4Tupo0M3oRSMwKn4zOt1mqaZJhlxxWg9sAlBjFt1pXCyE9lnNRsEh+TSrbgKrA xGfUsllE12SnIv2z1KbUp5JaPIx1NZk5TCWKl/vflNJrQe/AKYO/jziMgTQknn0r skktWLYSteMNGRkyBA05VPowBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB/U1z1X K32pinyEftHxJppt7p82MB8GA1UdIwQYMBaAFEYcco4tVj8OCSRZuqa85LnWwYu4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOUIyMi9ENzVGOTg1Q0ZD ODYxMUVBQkU4RjYyMkRDNEY5QUUwMi9SaHh5amkxV1B3NEpKRm02cHJ6a3VkYkJp N2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JoeHlqaTFXUHc0SkpGbTZwcnprdWRiQmk3Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OUIyMi9ENzVGOTg1Q0ZDODYxMUVBQkU4RjYyMkRDNEY5QUUwMi9SaHh5amkxV1B3 NEpKRm02cHJ6a3VkYkJpN2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAf2xpfw6ZFU6qe1YnHUR9t4y0k6ZidUa5QLqescMqsNgGahWt1Y61V lEsbP43YiOjk5W7YimzQJGPnd026CY39Hz2U3rlBniMvhf4nGFZAa2UCYOaYTQIX nDX51MDDtkqPUpewtXT/Xi2+SjySu9m2cdJrvzDlfb9XmT6+jVsspNAnBNg6+A75 b6VFnNSmeKfYnyC8iHJbJNj4AOiNJU+q9pkvi3K5lrTb3CP1pNZluKnWvFwNJTA/ UrHqfi8OqCxolwb6ny0GoPL0tG36IRI2FzJ3Mi+3QwLR0PapebXRvZ7k+R7rPsmF Lye5jeJHtwMLxxXfwEThaPYObnTetBGB -----END CERTIFICATE-----Generated at Sat Jun 14 18:11:27 2025 by rpki-client