$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE08E/B2A3C23CBF4A11EA8C315D31C4F9AE02/0pDdFnIiw5sTT4HlJ_Ai2F7fI_Q.mft File: 0pDdFnIiw5sTT4HlJ_Ai2F7fI_Q.mft (raw, json) Hash identifier: xZgsdyUrHiV1NLp8tv7+vUuFaCNuPLFlOV8bvGfMlEA= Subject key identifier: 1A:60:05:8E:7C:D1:C2:8E:34:DD:BA:FE:5A:8E:A2:F8:F1:B6:FC:80 Authority key identifier: D2:90:DD:16:72:22:C3:9B:13:4F:81:E5:27:F0:22:D8:5E:DF:23:F4 Certificate issuer: /CN=A91AE08E/serialNumber=D290DD167222C39B134F81E527F022D85EDF23F4 Certificate serial: 089C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0pDdFnIiw5sTT4HlJ_Ai2F7fI_Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AE08E/B2A3C23CBF4A11EA8C315D31C4F9AE02/0pDdFnIiw5sTT4HlJ_Ai2F7fI_Q.mft Manifest number: 0892 Signing time: Thu 12 Jun 2025 20:20:10 +0000 Manifest this update: Thu 12 Jun 2025 20:20:10 +0000 Manifest next update: Thu 19 Jun 2025 20:20:10 +0000 Files and hashes: 1: 0pDdFnIiw5sTT4HlJ_Ai2F7fI_Q.crl (hash: WhWV+em9z3ali933s0QhnuyHCKogVDzTqx0ZvwyNUYg=) 2: 6E038820BF6211EA94C2957CC4F9AE02.roa (hash: z3K04y8FAXseRSAao3Z4/OGvZnmija66bg8pyXugrIU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AE08E/B2A3C23CBF4A11EA8C315D31C4F9AE02/0pDdFnIiw5sTT4HlJ_Ai2F7fI_Q.crl rsync://rpki.apnic.net/member_repository/A91AE08E/B2A3C23CBF4A11EA8C315D31C4F9AE02/0pDdFnIiw5sTT4HlJ_Ai2F7fI_Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0pDdFnIiw5sTT4HlJ_Ai2F7fI_Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 20:20:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2204 (0x89c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AE08E, serialNumber=D290DD167222C39B134F81E527F022D85EDF23F4 Validity Not Before: Jun 12 20:20:10 2025 GMT Not After : Jun 19 20:20:10 2025 GMT Subject: CN=684b367a-61f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:3d:e6:6f:bf:df:a3:ae:d7:53:dd:f4:8e:02: da:13:d6:c8:44:38:bd:c3:e8:9a:f2:16:f6:b6:af: 84:3a:20:2b:a0:79:17:3e:ec:23:e5:b7:e0:ee:e6: 05:c0:bc:4c:b9:61:80:65:a9:00:ea:01:0f:d1:e7: 2f:0a:e9:c4:ce:be:7c:d2:90:f8:33:4c:61:4a:b0: 7c:42:e9:99:da:8b:27:d6:e0:2c:18:43:53:bd:29: c8:16:e3:5f:a1:8d:a1:86:c3:15:a3:70:7d:d7:08: 8c:f2:cc:8b:9e:32:ee:f2:0e:ce:58:56:c9:06:a0: 55:06:75:b5:1c:1b:43:03:a7:d7:08:a3:cc:fd:22: 16:77:a8:53:09:f5:70:0b:5c:5d:db:4c:13:c7:3b: ab:71:39:e2:a7:fc:dc:98:1d:7d:12:dd:26:af:94: a8:78:f4:57:9e:c9:8c:f2:4f:16:f1:bb:58:2e:fb: 34:de:85:b1:71:cb:83:f3:cf:58:69:c9:cb:23:bc: b9:b9:0f:71:46:ce:f2:d0:d8:0a:e1:b9:0a:fe:45: e8:4f:cf:7e:d3:3d:65:e7:6f:02:01:da:b3:09:d9: 67:a8:cb:f8:da:ad:61:99:3c:f5:1f:4b:5a:10:fc: d4:89:c7:22:23:37:ab:f8:b1:df:11:bb:f0:e9:ad: 95:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:60:05:8E:7C:D1:C2:8E:34:DD:BA:FE:5A:8E:A2:F8:F1:B6:FC:80 X509v3 Authority Key Identifier: keyid:D2:90:DD:16:72:22:C3:9B:13:4F:81:E5:27:F0:22:D8:5E:DF:23:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AE08E/B2A3C23CBF4A11EA8C315D31C4F9AE02/0pDdFnIiw5sTT4HlJ_Ai2F7fI_Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0pDdFnIiw5sTT4HlJ_Ai2F7fI_Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE08E/B2A3C23CBF4A11EA8C315D31C4F9AE02/0pDdFnIiw5sTT4HlJ_Ai2F7fI_Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:97:fd:3e:54:0f:29:2b:15:6a:8b:66:33:50:72:e4:e1:a3: 78:86:66:f0:ad:5d:85:84:1d:d5:1a:f3:f7:1f:e3:14:aa:81: 14:92:4a:60:1f:c6:87:2c:b7:47:33:d1:50:8d:85:6a:88:2d: 91:a1:7d:16:ef:f2:8b:36:18:20:24:48:07:dd:cd:08:2e:ea: cb:0d:d5:3b:21:e1:dc:2c:66:e3:14:75:04:e9:44:55:ab:39: 00:d9:5d:57:5f:05:a0:ef:99:35:9c:f2:73:60:44:46:3c:5b: e0:33:14:83:6f:53:e6:23:1d:5d:09:99:b3:41:4f:28:b2:51: 50:61:4e:b3:19:b8:8f:08:83:49:1b:d7:99:fc:81:28:11:f1: 74:27:01:6c:4b:ae:9f:90:73:6b:62:10:08:52:15:bc:3a:cc: c2:14:de:e3:d8:7a:ca:b0:59:e0:54:7a:ad:41:c1:b5:5d:bd: 83:b8:3b:6d:11:49:dc:fa:fe:0e:43:4c:b6:04:47:4c:6c:10: 17:06:6a:85:3e:40:50:8f:f6:91:72:7b:93:94:51:67:b8:4b: 66:48:db:51:b8:c4:b2:96:b6:8b:37:f6:77:8a:4f:3c:49:43: 82:01:35:ca:02:5c:e6:8b:24:38:00:da:4d:4d:42:f4:d5:90: 97:6d:24:87 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCJwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUUwOEUxMTAvBgNVBAUTKEQyOTBERDE2NzIyMkMzOUIxMzRGODFFNTI3RjAyMkQ4 NUVERjIzRjQwHhcNMjUwNjEyMjAyMDEwWhcNMjUwNjE5MjAyMDEwWjAYMRYwFAYD VQQDEw02ODRiMzY3YS02MWY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtT3mb7/fo67XU930jgLaE9bIRDi9w+ia8hb2tq+EOiAroHkXPuwj5bfg7uYF wLxMuWGAZakA6gEP0ecvCunEzr580pD4M0xhSrB8QumZ2osn1uAsGENTvSnIFuNf oY2hhsMVo3B91wiM8syLnjLu8g7OWFbJBqBVBnW1HBtDA6fXCKPM/SIWd6hTCfVw C1xd20wTxzurcTnip/zcmB19Et0mr5SoePRXnsmM8k8W8btYLvs03oWxccuD889Y acnLI7y5uQ9xRs7y0NgK4bkK/kXoT89+0z1l528CAdqzCdlnqMv42q1hmTz1H0ta EPzUicciIzer+LHfEbvw6a2VkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBpgBY58 0cKONN26/lqOovjxtvyAMB8GA1UdIwQYMBaAFNKQ3RZyIsObE0+B5SfwIthe3yP0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRTA4RS9CMkEzQzIzQ0JG NEExMUVBOEMzMTVEMzFDNEY5QUUwMi8wcERkRm5JaXc1c1RUNEhsSl9BaTJGN2ZJ X1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBwRGRGbklpdzVzVFQ0SGxKX0FpMkY3ZklfUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RTA4RS9CMkEzQzIzQ0JGNEExMUVBOEMzMTVEMzFDNEY5QUUwMi8wcERkRm5JaXc1 c1RUNEhsSl9BaTJGN2ZJX1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBel/0+VA8pKxVqi2YzUHLk4aN4hmbwrV2FhB3VGvP3H+MUqoEUkkpg H8aHLLdHM9FQjYVqiC2RoX0W7/KLNhggJEgH3c0ILurLDdU7IeHcLGbjFHUE6URV qzkA2V1XXwWg75k1nPJzYERGPFvgMxSDb1PmIx1dCZmzQU8oslFQYU6zGbiPCINJ G9eZ/IEoEfF0JwFsS66fkHNrYhAIUhW8OszCFN7j2HrKsFngVHqtQcG1Xb2DuDtt EUnc+v4OQ0y2BEdMbBAXBmqFPkBQj/aRcnuTlFFnuEtmSNtRuMSylraLN/Z3ik88 SUOCATXKAlzmiyQ4ANpNTUL01ZCXbSSH -----END CERTIFICATE-----Generated at Sat Jun 14 19:38:39 2025 by rpki-client