$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0913/DA713F9612FA11ED84AD7251C4F9AE02/D3l9fCpdNafL2-hN_HPLmBnV7yM.mft File: D3l9fCpdNafL2-hN_HPLmBnV7yM.mft (raw, json) Hash identifier: epNiexJ5hFQezbWUFVdUKAxn/w58rVA0ed/qR+ibTJc= Subject key identifier: 8C:D1:C6:96:F6:FA:99:C7:E2:5E:72:4B:A5:E3:7E:AE:28:DB:C8:FA Authority key identifier: 0F:79:7D:7C:2A:5D:35:A7:CB:DB:E8:4D:FC:73:CB:98:19:D5:EF:23 Certificate issuer: /CN=A91B0913/serialNumber=0F797D7C2A5D35A7CBDBE84DFC73CB9819D5EF23 Certificate serial: 0272 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D3l9fCpdNafL2-hN_HPLmBnV7yM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0913/DA713F9612FA11ED84AD7251C4F9AE02/D3l9fCpdNafL2-hN_HPLmBnV7yM.mft Manifest number: 026F Signing time: Sun 15 Jun 2025 01:25:07 +0000 Manifest this update: Sun 15 Jun 2025 01:25:07 +0000 Manifest next update: Sun 22 Jun 2025 01:25:07 +0000 Files and hashes: 1: D3l9fCpdNafL2-hN_HPLmBnV7yM.crl (hash: lY63Twdw/cgahnxyHAwAj5GAtH+ypDvXBqIlnGKBR+A=) 2: A1B8513612FE11ED8A1DA356C4F9AE02.roa (hash: zKt5rIlG3Ic7UH3iJOhsHCuRIq5p4/W7QWgInl/Ff3o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0913/DA713F9612FA11ED84AD7251C4F9AE02/D3l9fCpdNafL2-hN_HPLmBnV7yM.crl rsync://rpki.apnic.net/member_repository/A91B0913/DA713F9612FA11ED84AD7251C4F9AE02/D3l9fCpdNafL2-hN_HPLmBnV7yM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D3l9fCpdNafL2-hN_HPLmBnV7yM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 01:25:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 626 (0x272) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0913, serialNumber=0F797D7C2A5D35A7CBDBE84DFC73CB9819D5EF23 Validity Not Before: Jun 15 01:25:07 2025 GMT Not After : Jun 22 01:25:07 2025 GMT Subject: CN=684e20f3-e407 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:7e:a0:48:99:07:48:80:e4:81:59:30:9f:85: 25:56:f2:fc:5e:53:ee:95:f7:31:fb:32:9e:39:bc: a3:00:38:a6:bb:1b:7b:91:41:f5:3d:4c:37:e1:6a: bb:7d:88:d5:c3:d5:21:1a:51:c7:86:4b:60:60:0d: 42:83:d0:1b:f2:c2:9f:37:0e:96:52:44:8a:05:e1: 88:c3:e8:ed:5d:5e:fc:8c:24:24:3b:a9:8d:d4:87: 0b:2f:01:5c:06:47:f4:d8:3e:7e:59:02:e2:75:aa: 0a:40:b1:26:63:62:86:7c:45:4a:fe:66:34:58:a4: 33:f1:ed:7e:ad:ff:5b:f2:03:d9:1d:fa:76:41:08: 12:5c:35:46:90:28:e7:e2:22:50:fd:35:dd:85:dd: 13:85:64:26:94:f6:f1:79:9a:20:9a:97:77:e5:83: 89:1a:33:0f:24:0f:cf:2e:3f:4e:66:82:e0:52:0b: dd:da:ae:fa:2c:0d:a2:57:fa:52:e7:ff:8d:eb:d6: 9b:4f:1d:f0:9e:0f:47:a7:cb:a3:2f:2e:f4:da:c6: 4d:9e:1d:ca:b3:c1:5d:27:d4:a6:b9:21:b7:09:73: 5f:86:25:61:43:e5:24:e2:d0:e8:41:43:8d:d0:6b: cf:94:fa:82:df:11:78:5e:aa:31:c3:6b:46:26:3c: 54:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:D1:C6:96:F6:FA:99:C7:E2:5E:72:4B:A5:E3:7E:AE:28:DB:C8:FA X509v3 Authority Key Identifier: keyid:0F:79:7D:7C:2A:5D:35:A7:CB:DB:E8:4D:FC:73:CB:98:19:D5:EF:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0913/DA713F9612FA11ED84AD7251C4F9AE02/D3l9fCpdNafL2-hN_HPLmBnV7yM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D3l9fCpdNafL2-hN_HPLmBnV7yM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0913/DA713F9612FA11ED84AD7251C4F9AE02/D3l9fCpdNafL2-hN_HPLmBnV7yM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:41:44:32:b4:31:98:66:a1:53:3e:80:dc:47:b1:ac:38:14: de:3c:6c:d4:ab:3f:c3:5d:4d:7e:ac:56:f7:73:48:07:3b:56: 8e:ef:e9:ae:91:dc:00:3e:6e:60:26:a4:66:e3:04:95:4d:07: c1:04:cf:e9:b8:8f:37:22:00:36:87:02:3d:b9:92:10:b3:9b: c5:db:0b:ff:63:06:42:2d:c9:61:c5:75:84:ec:fc:e5:a9:20: da:40:6e:71:97:b6:d9:bd:d3:b5:ca:0c:42:9d:ca:f1:39:d2: 79:1b:30:cf:ec:b6:dd:a2:e3:9e:49:cf:67:23:c0:3b:80:2c: d0:8a:37:f5:ca:02:04:a2:bd:eb:c2:13:84:3e:25:ce:45:f3: 72:92:79:77:0e:9c:89:96:d3:ec:16:a2:83:5c:50:50:34:70: 4f:74:f9:ef:ac:67:27:a1:fd:ce:18:9d:25:74:64:2b:94:cc: fe:e5:3f:31:9b:d7:04:31:7e:76:ed:68:1c:3d:85:aa:78:46: 73:1f:f4:12:99:55:09:b7:56:a4:de:8c:83:f6:66:6f:80:9f: 0b:72:98:b1:b4:c1:c7:0e:3a:b8:1b:7d:58:c5:b9:86:35:7d: 2a:12:f2:ed:95:f5:18:1e:b3:42:be:60:de:a4:2e:3e:fb:c5: f9:9d:2a:a6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAnIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjA5MTMxMTAvBgNVBAUTKDBGNzk3RDdDMkE1RDM1QTdDQkRCRTg0REZDNzNDQjk4 MTlENUVGMjMwHhcNMjUwNjE1MDEyNTA3WhcNMjUwNjIyMDEyNTA3WjAYMRYwFAYD VQQDEw02ODRlMjBmMy1lNDA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2n6gSJkHSIDkgVkwn4UlVvL8XlPulfcx+zKeObyjADimuxt7kUH1PUw34Wq7 fYjVw9UhGlHHhktgYA1Cg9Ab8sKfNw6WUkSKBeGIw+jtXV78jCQkO6mN1IcLLwFc Bkf02D5+WQLidaoKQLEmY2KGfEVK/mY0WKQz8e1+rf9b8gPZHfp2QQgSXDVGkCjn 4iJQ/TXdhd0ThWQmlPbxeZogmpd35YOJGjMPJA/PLj9OZoLgUgvd2q76LA2iV/pS 5/+N69abTx3wng9Hp8ujLy702sZNnh3Ks8FdJ9SmuSG3CXNfhiVhQ+Uk4tDoQUON 0GvPlPqC3xF4Xqoxw2tGJjxUcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIzRxpb2 +pnH4l5yS6Xjfq4o28j6MB8GA1UdIwQYMBaAFA95fXwqXTWny9voTfxzy5gZ1e8j MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDkxMy9EQTcxM0Y5NjEy RkExMUVEODRBRDcyNTFDNEY5QUUwMi9EM2w5ZkNwZE5hZkwyLWhOX0hQTG1CblY3 eU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0QzbDlmQ3BkTmFmTDItaE5fSFBMbUJuVjd5TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MDkxMy9EQTcxM0Y5NjEyRkExMUVEODRBRDcyNTFDNEY5QUUwMi9EM2w5ZkNwZE5h ZkwyLWhOX0hQTG1CblY3eU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAyQUQytDGYZqFTPoDcR7GsOBTePGzUqz/DXU1+rFb3c0gHO1aO7+mu kdwAPm5gJqRm4wSVTQfBBM/puI83IgA2hwI9uZIQs5vF2wv/YwZCLclhxXWE7Pzl qSDaQG5xl7bZvdO1ygxCncrxOdJ5GzDP7LbdouOeSc9nI8A7gCzQijf1ygIEor3r whOEPiXORfNyknl3DpyJltPsFqKDXFBQNHBPdPnvrGcnof3OGJ0ldGQrlMz+5T8x m9cEMX527WgcPYWqeEZzH/QSmVUJt1ak3oyD9mZvgJ8LcpixtMHHDjq4G31YxbmG NX0qEvLtlfUYHrNCvmDepC4++8X5nSqm -----END CERTIFICATE-----Generated at Tue Jun 17 01:29:54 2025 by rpki-client