$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9CBB/D53BD14615B111F0A2774A09C4F9AE02/_CT1OQdHh-zqsAwkJgbCvWiBmg0.mft File: _CT1OQdHh-zqsAwkJgbCvWiBmg0.mft (raw, json) Hash identifier: lzESQI1qjNWAbZ24ERXrWlbMLKvtORj8j9JedvK7pyY= Subject key identifier: 1F:22:F0:A5:AD:68:F6:E9:98:E5:41:C7:18:E0:6B:AD:BA:20:9F:4D Authority key identifier: FC:24:F5:39:07:47:87:EC:EA:B0:0C:24:26:06:C2:BD:68:81:9A:0D Certificate issuer: /CN=A91A9CBB/serialNumber=FC24F539074787ECEAB00C242606C2BD68819A0D Certificate serial: 25 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_CT1OQdHh-zqsAwkJgbCvWiBmg0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A9CBB/D53BD14615B111F0A2774A09C4F9AE02/_CT1OQdHh-zqsAwkJgbCvWiBmg0.mft Manifest number: 23 Signing time: Fri 13 Jun 2025 06:45:24 +0000 Manifest this update: Fri 13 Jun 2025 06:45:24 +0000 Manifest next update: Fri 20 Jun 2025 06:45:24 +0000 Files and hashes: 1: _CT1OQdHh-zqsAwkJgbCvWiBmg0.crl (hash: ms21V6A6G0EIorgNxXaz9aiUCcqrg+RSn4n7CwsS6vc=) 2: 947AB09E459C11F0BF881335C4F9AE02.roa (hash: ZL0Aa2llI8aydVHlIy2x+gVqsBcKLbop2xFjrlC+Qtw=) 3: 2A8C8F02198E11F09D302145C4F9AE02.roa (hash: pkFF5f+Vaat+aJOayMibpTMU9Wp7Q864DQvUc24s624=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A9CBB/D53BD14615B111F0A2774A09C4F9AE02/_CT1OQdHh-zqsAwkJgbCvWiBmg0.crl rsync://rpki.apnic.net/member_repository/A91A9CBB/D53BD14615B111F0A2774A09C4F9AE02/_CT1OQdHh-zqsAwkJgbCvWiBmg0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_CT1OQdHh-zqsAwkJgbCvWiBmg0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 06:45:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37 (0x25) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A9CBB, serialNumber=FC24F539074787ECEAB00C242606C2BD68819A0D Validity Not Before: Jun 13 06:45:24 2025 GMT Not After : Jun 20 06:45:24 2025 GMT Subject: CN=684bc904-3992 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:97:16:ca:2b:b8:e1:f7:6d:6e:c6:13:75:9b: 07:ec:3a:7b:be:09:e4:4e:f1:08:6e:6a:38:2a:11: 2f:1a:db:13:50:c6:30:33:fe:e9:1e:7b:4e:23:b2: 0d:31:7d:2e:a9:75:51:c4:59:8c:7b:f4:6d:08:ee: 99:b0:75:1b:a4:05:d7:5a:c0:4a:62:d4:a0:a4:3c: 0d:59:34:58:c4:38:13:c6:9b:8a:c0:a7:f4:b7:45: 69:5e:59:b9:94:d9:a7:35:9d:0f:1e:69:cb:86:33: ba:e5:e5:c3:f0:95:08:7a:69:d2:0f:60:86:61:78: e6:47:e0:13:af:55:af:62:21:b4:6f:f0:3c:80:e3: 82:ed:b1:07:ad:53:34:be:89:b5:d3:d0:54:db:c5: 02:51:83:b7:19:1e:7b:a7:35:98:ea:45:13:fb:ec: 58:ea:5f:4e:04:fa:28:60:4b:d1:54:25:ad:3a:7d: fe:57:a4:03:91:e5:25:51:79:3e:e6:4e:e4:99:e1: a1:68:7a:3a:90:43:39:aa:66:5e:6b:a8:b2:02:ee: 4d:11:8b:5f:3f:cf:14:67:11:27:b9:b4:cc:a4:01: 0d:43:53:6a:c1:ab:bc:73:26:31:fd:46:59:4c:05: 63:a8:48:b5:fa:9a:ea:52:98:a7:05:26:8f:65:b4: c4:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:22:F0:A5:AD:68:F6:E9:98:E5:41:C7:18:E0:6B:AD:BA:20:9F:4D X509v3 Authority Key Identifier: keyid:FC:24:F5:39:07:47:87:EC:EA:B0:0C:24:26:06:C2:BD:68:81:9A:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A9CBB/D53BD14615B111F0A2774A09C4F9AE02/_CT1OQdHh-zqsAwkJgbCvWiBmg0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_CT1OQdHh-zqsAwkJgbCvWiBmg0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9CBB/D53BD14615B111F0A2774A09C4F9AE02/_CT1OQdHh-zqsAwkJgbCvWiBmg0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:72:0d:22:db:92:8f:87:ca:2c:52:41:46:3e:8d:d4:c1:71: b5:70:2a:6e:e4:a4:82:e6:f0:63:95:82:23:a6:cb:ea:39:8c: 77:06:fb:3c:f4:fd:0c:57:53:a2:44:be:c1:2e:7e:a3:2e:65: 25:96:21:78:2d:52:8d:1b:ee:6c:b5:0a:b1:dd:0a:7c:8e:2a: ae:5e:58:31:7f:7e:41:b6:51:28:54:81:fe:60:22:7a:3d:fb: 19:61:b6:f6:07:3d:a3:95:3a:d6:d2:4b:a2:75:98:fb:ee:32: ca:ac:b1:c2:e5:c7:d8:38:37:b0:e3:ab:4e:4c:3a:7a:0e:d0: 3c:53:3b:cc:ce:4c:74:cf:cf:71:e4:1e:22:d4:83:b4:95:de: 38:26:ee:06:39:57:ab:e1:0b:0d:b5:24:6b:11:22:f3:90:43: c3:22:15:0d:90:77:be:3a:dc:51:0c:a6:5f:6b:28:e5:e6:01: de:51:4c:d2:ef:df:b0:5d:c2:c5:b0:c6:b7:6a:d2:17:a6:28: f2:89:b7:45:ee:5d:b4:32:05:c3:b0:fe:ed:96:0a:c4:18:44: 70:b1:2e:88:a4:ba:b8:3f:ef:58:24:cd:28:b4:d6:5d:44:d8: f6:f7:78:58:83:80:4f:fc:b8:ed:ac:51:53:2e:56:cc:cd:56: 8d:1b:3c:f9 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBJTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB OUNCQjExMC8GA1UEBRMoRkMyNEY1MzkwNzQ3ODdFQ0VBQjAwQzI0MjYwNkMyQkQ2 ODgxOUEwRDAeFw0yNTA2MTMwNjQ1MjRaFw0yNTA2MjAwNjQ1MjRaMBgxFjAUBgNV BAMTDTY4NGJjOTA0LTM5OTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC/lxbKK7jh921uxhN1mwfsOnu+CeRO8QhuajgqES8a2xNQxjAz/ukee04jsg0x fS6pdVHEWYx79G0I7pmwdRukBddawEpi1KCkPA1ZNFjEOBPGm4rAp/S3RWleWbmU 2ac1nQ8eacuGM7rl5cPwlQh6adIPYIZheOZH4BOvVa9iIbRv8DyA44LtsQetUzS+ ibXT0FTbxQJRg7cZHnunNZjqRRP77FjqX04E+ihgS9FUJa06ff5XpAOR5SVReT7m TuSZ4aFoejqQQzmqZl5rqLIC7k0Ri18/zxRnESe5tMykAQ1DU2rBq7xzJjH9RllM BWOoSLX6mupSmKcFJo9ltMRTAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUHyLwpa1o 9umY5UHHGOBrrbogn00wHwYDVR0jBBgwFoAU/CT1OQdHh+zqsAwkJgbCvWiBmg0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE5Q0JCL0Q1M0JEMTQ2MTVC MTExRjBBMjc3NEEwOUM0RjlBRTAyL19DVDFPUWRIaC16cXNBd2tKZ2JDdldpQm1n MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvX0NUMU9RZEhoLXpxc0F3a0pnYkN2V2lCbWcwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE5 Q0JCL0Q1M0JEMTQ2MTVCMTExRjBBMjc3NEEwOUM0RjlBRTAyL19DVDFPUWRIaC16 cXNBd2tKZ2JDdldpQm1nMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKNyDSLbko+HyixSQUY+jdTBcbVwKm7kpILm8GOVgiOmy+o5jHcG+zz0 /QxXU6JEvsEufqMuZSWWIXgtUo0b7my1CrHdCnyOKq5eWDF/fkG2UShUgf5gIno9 +xlhtvYHPaOVOtbSS6J1mPvuMsqsscLlx9g4N7Djq05MOnoO0DxTO8zOTHTPz3Hk HiLUg7SV3jgm7gY5V6vhCw21JGsRIvOQQ8MiFQ2Qd7463FEMpl9rKOXmAd5RTNLv 37BdwsWwxrdq0hemKPKJt0XuXbQyBcOw/u2WCsQYRHCxLoikurg/71gkzSi01l1E 2Pb3eFiDgE/8uO2sUVMuVszNVo0bPPk= -----END CERTIFICATE-----Generated at Sun Jun 15 08:34:50 2025 by rpki-client