$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADA93/5CCBD4E0B6AC11EABA83CB86C4F9AE02/SO9orVG71xh-JKCji6u6pfwRE-4.mft File: SO9orVG71xh-JKCji6u6pfwRE-4.mft (raw, json) Hash identifier: sb+roVb+0zLiYKWdwyDytWKMpRKxPqKO91T1jC6vmck= Subject key identifier: 2A:2D:03:9A:27:11:75:4B:DD:47:49:0F:10:2F:6A:44:1B:BB:9D:7E Authority key identifier: 48:EF:68:AD:51:BB:D7:18:7E:24:A0:A3:8B:AB:BA:A5:FC:11:13:EE Certificate issuer: /CN=A91ADA93/serialNumber=48EF68AD51BBD7187E24A0A38BABBAA5FC1113EE Certificate serial: 08B5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SO9orVG71xh-JKCji6u6pfwRE-4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ADA93/5CCBD4E0B6AC11EABA83CB86C4F9AE02/SO9orVG71xh-JKCji6u6pfwRE-4.mft Manifest number: 08B4 Signing time: Thu 12 Jun 2025 20:15:00 +0000 Manifest this update: Thu 12 Jun 2025 20:14:59 +0000 Manifest next update: Thu 19 Jun 2025 20:14:59 +0000 Files and hashes: 1: SO9orVG71xh-JKCji6u6pfwRE-4.crl (hash: I/xA4RJmRCYKGVTljBxPT4GnYOXp2PvVoXk52WCs2rM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ADA93/5CCBD4E0B6AC11EABA83CB86C4F9AE02/SO9orVG71xh-JKCji6u6pfwRE-4.crl rsync://rpki.apnic.net/member_repository/A91ADA93/5CCBD4E0B6AC11EABA83CB86C4F9AE02/SO9orVG71xh-JKCji6u6pfwRE-4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SO9orVG71xh-JKCji6u6pfwRE-4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 20:14:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2229 (0x8b5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ADA93, serialNumber=48EF68AD51BBD7187E24A0A38BABBAA5FC1113EE Validity Not Before: Jun 12 20:14:59 2025 GMT Not After : Jun 19 20:14:59 2025 GMT Subject: CN=684b3544-e88d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:d1:c9:63:b7:fa:11:8a:48:86:79:b3:07:41: c5:00:14:c7:e0:be:ff:19:0f:cc:c7:f4:a1:46:13: a6:af:c1:be:9f:a5:5e:68:49:7b:d7:ec:fb:2f:ec: 6e:7e:fd:f0:b5:5a:8d:4b:d2:56:19:63:63:57:3c: 61:8c:8b:8e:6a:eb:bc:90:a0:c8:54:79:61:89:13: c7:57:3e:0d:fc:69:eb:d8:76:0c:81:9c:d2:75:dd: 80:c1:25:77:71:8c:a8:ff:5d:75:9d:45:05:fa:31: 65:81:56:1c:bd:d9:f3:a7:62:ed:f0:0a:c8:63:dd: f1:5e:26:16:b3:0d:69:14:33:e9:e1:9b:27:05:a1: 3f:9e:9c:5a:5e:0e:9f:20:d4:66:9c:85:70:aa:a4: 43:eb:80:15:28:c1:3f:ad:45:d7:a3:f0:aa:a5:f2: e1:b2:8a:b5:da:eb:d3:11:1a:5e:6a:e3:ee:61:e0: 67:e8:fa:c9:cc:f2:79:bd:28:d2:b1:bc:1f:d3:c0: f7:4b:31:d0:6f:0f:80:e3:cd:06:00:5a:ba:ad:58: 07:d1:dc:39:72:e5:ab:67:35:43:85:1a:0b:02:30: 48:93:ec:ef:47:e5:2c:a2:ea:1b:3f:37:66:ed:67: 3c:15:0d:d5:46:94:7d:8b:17:e6:eb:bf:d4:05:e0: ab:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:2D:03:9A:27:11:75:4B:DD:47:49:0F:10:2F:6A:44:1B:BB:9D:7E X509v3 Authority Key Identifier: keyid:48:EF:68:AD:51:BB:D7:18:7E:24:A0:A3:8B:AB:BA:A5:FC:11:13:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ADA93/5CCBD4E0B6AC11EABA83CB86C4F9AE02/SO9orVG71xh-JKCji6u6pfwRE-4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SO9orVG71xh-JKCji6u6pfwRE-4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADA93/5CCBD4E0B6AC11EABA83CB86C4F9AE02/SO9orVG71xh-JKCji6u6pfwRE-4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:1d:eb:85:a6:39:b9:26:b4:14:d0:ae:b6:ab:0c:b8:bf:77: 8f:39:3f:9f:76:00:91:d5:94:21:4b:45:e3:c4:7a:5c:73:71: 81:60:bf:16:c1:8f:54:b1:8d:17:82:87:15:b3:ff:52:63:a3: 61:11:d3:68:72:00:2d:82:0b:3b:a3:c9:48:26:6b:44:eb:94: ae:00:0d:97:0f:15:94:f9:40:ac:4f:2c:f4:25:a8:d5:f0:e3: 1d:42:d6:39:1a:d8:09:51:db:10:cd:42:b8:13:39:bd:21:a6: ec:0c:e1:16:ab:d6:e1:b3:b0:4b:0d:d6:b3:a0:c5:4f:d3:af: 50:d6:5e:b8:56:b7:e9:39:36:78:ae:c8:75:af:b3:53:9c:09: 4f:e7:b0:fd:17:03:a7:b4:79:73:ad:a3:98:a3:2a:77:93:30: 86:18:2e:3f:c3:0e:97:81:0d:27:19:0a:31:b3:37:b3:7e:f8: 3f:ca:bb:a3:dd:9e:01:43:ea:6c:a3:21:c7:35:2b:c7:9e:27: 35:17:d2:a7:c9:69:0d:08:a9:03:97:7f:0f:bc:a4:58:0d:5e: e5:2d:9f:82:a8:88:f5:b1:65:8e:07:27:87:64:bf:1e:1e:ee: 28:9b:ad:18:8f:9a:69:57:a9:3a:c7:18:a2:1a:e5:3c:5d:e0: 9d:04:e1:bb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCLUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QURBOTMxMTAvBgNVBAUTKDQ4RUY2OEFENTFCQkQ3MTg3RTI0QTBBMzhCQUJCQUE1 RkMxMTEzRUUwHhcNMjUwNjEyMjAxNDU5WhcNMjUwNjE5MjAxNDU5WjAYMRYwFAYD VQQDEw02ODRiMzU0NC1lODhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvdHJY7f6EYpIhnmzB0HFABTH4L7/GQ/Mx/ShRhOmr8G+n6VeaEl71+z7L+xu fv3wtVqNS9JWGWNjVzxhjIuOauu8kKDIVHlhiRPHVz4N/Gnr2HYMgZzSdd2AwSV3 cYyo/111nUUF+jFlgVYcvdnzp2Lt8ArIY93xXiYWsw1pFDPp4ZsnBaE/npxaXg6f INRmnIVwqqRD64AVKME/rUXXo/CqpfLhsoq12uvTERpeauPuYeBn6PrJzPJ5vSjS sbwf08D3SzHQbw+A480GAFq6rVgH0dw5cuWrZzVDhRoLAjBIk+zvR+UsouobPzdm 7Wc8FQ3VRpR9ixfm67/UBeCrEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCotA5on EXVL3UdJDxAvakQbu51+MB8GA1UdIwQYMBaAFEjvaK1Ru9cYfiSgo4uruqX8ERPu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBREE5My81Q0NCRDRFMEI2 QUMxMUVBQkE4M0NCODZDNEY5QUUwMi9TTzlvclZHNzF4aC1KS0NqaTZ1NnBmd1JF LTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NPOW9yVkc3MXhoLUpLQ2ppNnU2cGZ3UkUtNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB REE5My81Q0NCRDRFMEI2QUMxMUVBQkE4M0NCODZDNEY5QUUwMi9TTzlvclZHNzF4 aC1KS0NqaTZ1NnBmd1JFLTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCaHeuFpjm5JrQU0K62qwy4v3ePOT+fdgCR1ZQhS0XjxHpcc3GBYL8W wY9UsY0XgocVs/9SY6NhEdNocgAtggs7o8lIJmtE65SuAA2XDxWU+UCsTyz0JajV 8OMdQtY5GtgJUdsQzUK4Ezm9IabsDOEWq9bhs7BLDdazoMVP069Q1l64VrfpOTZ4 rsh1r7NTnAlP57D9FwOntHlzraOYoyp3kzCGGC4/ww6XgQ0nGQoxszezfvg/yruj 3Z4BQ+psoyHHNSvHnic1F9KnyWkNCKkDl38PvKRYDV7lLZ+CqIj1sWWOByeHZL8e Hu4om60Yj5ppV6k6xxiiGuU8XeCdBOG7 -----END CERTIFICATE-----Generated at Sat Jun 14 19:39:59 2025 by rpki-client