$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1018/8836FA608D4C11EC988AE85DC4F9AE02/r9CVWn3X-bDsKkShHZNyB8J1SmM.mft File: r9CVWn3X-bDsKkShHZNyB8J1SmM.mft (raw, json) Hash identifier: d4cxAuQLhbSe5GI/dB6yFbBnEo7lqhosquzB3F6ZEp4= Subject key identifier: BB:F8:72:C4:26:86:A1:8D:30:34:3E:7D:30:5D:4F:01:B0:14:D2:24 Authority key identifier: AF:D0:95:5A:7D:D7:F9:B0:EC:2A:44:A1:1D:93:72:07:C2:75:4A:63 Certificate issuer: /CN=A91B1018/serialNumber=AFD0955A7DD7F9B0EC2A44A11D937207C2754A63 Certificate serial: 03F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r9CVWn3X-bDsKkShHZNyB8J1SmM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B1018/8836FA608D4C11EC988AE85DC4F9AE02/r9CVWn3X-bDsKkShHZNyB8J1SmM.mft Manifest number: 03E4 Signing time: Tue 17 Jun 2025 00:13:11 +0000 Manifest this update: Tue 17 Jun 2025 00:13:11 +0000 Manifest next update: Tue 24 Jun 2025 00:13:11 +0000 Files and hashes: 1: r9CVWn3X-bDsKkShHZNyB8J1SmM.crl (hash: D3btEhsg1X89vXAfAGVWdoDobXK/dOp1HAKuhUoKUv8=) 2: E69ABF78033911EFBE28FC1FC4F9AE02.roa (hash: Rg7/HWvbLuN8QkYRlBgqkedDJt7Lv8j0nbDNMsIVYIo=) 3: CB8AA43A4D9B11EFB201E984C4F9AE02.roa (hash: BndO95FjlN4yoYJHwmdg6jMh7CCU5xFJrJ+5TfJ2qvA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B1018/8836FA608D4C11EC988AE85DC4F9AE02/r9CVWn3X-bDsKkShHZNyB8J1SmM.crl rsync://rpki.apnic.net/member_repository/A91B1018/8836FA608D4C11EC988AE85DC4F9AE02/r9CVWn3X-bDsKkShHZNyB8J1SmM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r9CVWn3X-bDsKkShHZNyB8J1SmM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Jun 2025 00:13:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1016 (0x3f8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B1018, serialNumber=AFD0955A7DD7F9B0EC2A44A11D937207C2754A63 Validity Not Before: Jun 17 00:13:11 2025 GMT Not After : Jun 24 00:13:11 2025 GMT Subject: CN=6850b317-ba4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:74:2b:76:27:f5:3d:d9:91:d6:0d:c1:50:48: c9:c6:61:22:d9:23:76:0a:15:05:e8:4e:fb:6a:dd: 64:f3:1c:e1:22:3b:22:2f:9f:c6:6f:ee:db:e2:63: 04:ea:8f:cb:9f:08:e5:b9:36:ba:e1:f7:b7:85:ac: bf:c3:fd:09:a0:35:57:64:8b:76:c4:79:42:61:f8: ea:5f:67:1d:ef:cf:68:ca:75:8b:91:2e:ab:22:5a: 20:29:cf:46:da:9f:12:d6:8e:69:64:04:94:fd:ec: c2:36:55:22:11:ac:0c:82:b1:89:e2:df:dc:38:ad: bf:73:e8:0c:51:02:80:f6:23:c5:b7:78:03:7f:d8: d2:06:44:18:bd:98:01:86:00:62:7b:2f:fe:f9:46: 9f:e4:39:cf:aa:65:30:ac:ec:85:5b:55:97:26:1b: 50:14:6a:b1:fc:d8:65:46:2b:1f:71:de:cf:5a:e9: 34:73:55:85:55:c5:d2:c1:ba:3f:34:6f:47:b6:70: e3:ab:fb:6a:17:18:59:34:1d:bd:73:6a:08:19:75: e6:63:02:ef:1b:31:a1:73:d2:dd:56:1c:7e:61:88: 82:cd:bf:79:18:b6:bb:49:aa:91:a1:0d:1d:d3:1f: f9:be:05:c1:4d:af:b4:3e:12:81:e0:04:ab:1b:28: 91:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:F8:72:C4:26:86:A1:8D:30:34:3E:7D:30:5D:4F:01:B0:14:D2:24 X509v3 Authority Key Identifier: keyid:AF:D0:95:5A:7D:D7:F9:B0:EC:2A:44:A1:1D:93:72:07:C2:75:4A:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B1018/8836FA608D4C11EC988AE85DC4F9AE02/r9CVWn3X-bDsKkShHZNyB8J1SmM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r9CVWn3X-bDsKkShHZNyB8J1SmM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1018/8836FA608D4C11EC988AE85DC4F9AE02/r9CVWn3X-bDsKkShHZNyB8J1SmM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:b8:cb:f8:8a:9b:b1:f2:ec:a1:de:d4:30:c3:e9:63:f3:24: 6b:02:d6:d9:c5:62:ab:b2:da:3e:8a:53:da:2d:8a:b6:f2:3b: f6:4b:e6:e0:ba:7e:a2:bd:be:13:2b:42:34:c5:ba:ab:36:2d: b6:ae:4d:ce:ff:d5:aa:54:81:da:1d:c0:2e:86:c8:d4:a8:8e: da:89:e0:59:73:29:7a:ea:70:58:aa:e2:75:4b:cd:ab:8d:56: 8d:07:8c:f9:11:f2:c6:a8:b1:7a:11:6c:8e:1b:8c:8c:01:ac: b6:e4:3b:f0:75:f4:a5:c2:8e:5b:37:59:8d:86:30:d6:a0:35: 46:50:b5:21:9b:bf:ea:98:5c:c2:90:fa:e7:8b:aa:01:f9:5a: 03:f3:05:d1:d2:de:ae:60:60:56:2e:60:fb:3e:37:73:c3:0f: b3:4c:19:65:e2:64:78:28:90:df:01:a9:8a:d5:d3:a5:31:c3: 04:f2:a0:c9:b8:67:be:33:5c:f0:5e:71:26:f7:2a:6e:79:d2: 09:19:44:28:1c:46:b9:98:a9:cc:f0:5f:f9:85:b0:8a:9e:a8: 38:41:b9:54:29:0e:0f:09:f9:6d:35:c3:a2:25:33:b1:d2:73: 12:a7:1c:ad:29:e2:b3:2d:b2:06:a8:d7:76:7e:13:82:d0:de: 8b:0b:96:f9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA/gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjEwMTgxMTAvBgNVBAUTKEFGRDA5NTVBN0REN0Y5QjBFQzJBNDRBMTFEOTM3MjA3 QzI3NTRBNjMwHhcNMjUwNjE3MDAxMzExWhcNMjUwNjI0MDAxMzExWjAYMRYwFAYD VQQDEw02ODUwYjMxNy1iYTRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw3Qrdif1PdmR1g3BUEjJxmEi2SN2ChUF6E77at1k8xzhIjsiL5/Gb+7b4mME 6o/LnwjluTa64fe3hay/w/0JoDVXZIt2xHlCYfjqX2cd789oynWLkS6rIlogKc9G 2p8S1o5pZASU/ezCNlUiEawMgrGJ4t/cOK2/c+gMUQKA9iPFt3gDf9jSBkQYvZgB hgBiey/++Uaf5DnPqmUwrOyFW1WXJhtQFGqx/NhlRisfcd7PWuk0c1WFVcXSwbo/ NG9HtnDjq/tqFxhZNB29c2oIGXXmYwLvGzGhc9LdVhx+YYiCzb95GLa7SaqRoQ0d 0x/5vgXBTa+0PhKB4ASrGyiRXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLv4csQm hqGNMDQ+fTBdTwGwFNIkMB8GA1UdIwQYMBaAFK/QlVp91/mw7CpEoR2TcgfCdUpj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMTAxOC84ODM2RkE2MDhE NEMxMUVDOTg4QUU4NURDNEY5QUUwMi9yOUNWV24zWC1iRHNLa1NoSFpOeUI4SjFT bU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3I5Q1ZXbjNYLWJEc0trU2hIWk55QjhKMVNtTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MTAxOC84ODM2RkE2MDhENEMxMUVDOTg4QUU4NURDNEY5QUUwMi9yOUNWV24zWC1i RHNLa1NoSFpOeUI4SjFTbU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQChuMv4ipux8uyh3tQww+lj8yRrAtbZxWKrsto+ilPaLYq28jv2S+bg un6ivb4TK0I0xbqrNi22rk3O/9WqVIHaHcAuhsjUqI7aieBZcyl66nBYquJ1S82r jVaNB4z5EfLGqLF6EWyOG4yMAay25DvwdfSlwo5bN1mNhjDWoDVGULUhm7/qmFzC kPrni6oB+VoD8wXR0t6uYGBWLmD7Pjdzww+zTBll4mR4KJDfAamK1dOlMcME8qDJ uGe+M1zwXnEm9ypuedIJGUQoHEa5mKnM8F/5hbCKnqg4QblUKQ4PCfltNcOiJTOx 0nMSpxytKeKzLbIGqNd2fhOC0N6LC5b5 -----END CERTIFICATE-----Generated at Wed Jun 18 07:00:56 2025 by rpki-client