$ rpki-client -vvf rpki.apnic.net/member_repository/A91B53AF/1F49325C1DB811EB91D04319C4F9AE02/n60jAjoVW9JbIkKAY6wZeHznwr4.mft File: n60jAjoVW9JbIkKAY6wZeHznwr4.mft (raw, json) Hash identifier: 7gAArGWLGgVKnjn7fg89bEIk02wiK2x4V4WNz3IEdV4= Subject key identifier: 39:65:06:66:50:AB:FA:63:AE:D4:A8:57:9E:51:86:9F:5E:3B:37:E7 Authority key identifier: 9F:AD:23:02:3A:15:5B:D2:5B:22:42:80:63:AC:19:78:7C:E7:C2:BE Certificate issuer: /CN=A91B53AF/serialNumber=9FAD23023A155BD25B22428063AC19787CE7C2BE Certificate serial: 076F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n60jAjoVW9JbIkKAY6wZeHznwr4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B53AF/1F49325C1DB811EB91D04319C4F9AE02/n60jAjoVW9JbIkKAY6wZeHznwr4.mft Manifest number: 0769 Signing time: Sat 14 Jun 2025 21:19:54 +0000 Manifest this update: Sat 14 Jun 2025 21:19:54 +0000 Manifest next update: Sat 21 Jun 2025 21:19:54 +0000 Files and hashes: 1: n60jAjoVW9JbIkKAY6wZeHznwr4.crl (hash: r/bWAp59thdPA+sZzEVyjLZyzQpjcHHV2iM/vLY5uxI=) 2: 5E802AC41DB911EB90A5461AC4F9AE02.roa (hash: 41aqCCC0CIJrASUZjn/UMATRac/pjiORpElfAzdM3kk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B53AF/1F49325C1DB811EB91D04319C4F9AE02/n60jAjoVW9JbIkKAY6wZeHznwr4.crl rsync://rpki.apnic.net/member_repository/A91B53AF/1F49325C1DB811EB91D04319C4F9AE02/n60jAjoVW9JbIkKAY6wZeHznwr4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n60jAjoVW9JbIkKAY6wZeHznwr4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 21:19:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1903 (0x76f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B53AF, serialNumber=9FAD23023A155BD25B22428063AC19787CE7C2BE Validity Not Before: Jun 14 21:19:54 2025 GMT Not After : Jun 21 21:19:54 2025 GMT Subject: CN=684de77a-5eb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:31:1b:b3:02:65:74:89:41:71:c8:25:34:a8: f1:38:f4:e7:85:ab:ca:f6:c6:5a:8b:77:09:34:5a: 9f:83:a3:e1:10:1a:23:27:70:da:b1:5a:1f:4e:51: 7c:cd:db:1d:64:ea:2c:46:93:24:79:02:a1:09:7b: 9c:84:8c:03:ed:39:66:61:88:61:4b:72:ca:5f:5f: 2b:a8:41:6e:a1:48:5f:b8:5a:30:60:b6:be:f5:d6: 8e:b2:2d:47:06:a8:c1:79:cc:0d:7b:f1:e4:09:8d: 40:da:d0:1e:33:12:c8:9a:1d:87:cd:67:c7:b3:28: 0b:34:b1:7b:53:a1:85:a1:5e:77:5f:c9:04:10:6b: ec:34:f6:da:1f:ce:1d:3c:af:83:0e:62:75:57:9d: f0:ae:6b:2e:24:64:b9:f6:ef:6b:f2:7a:f9:c9:6e: 63:81:9f:e4:3b:fc:20:37:56:a2:df:9a:77:ee:20: 6a:d7:18:6c:18:25:ac:9b:81:5e:df:1e:37:83:47: 3e:ce:c0:1f:8f:de:4b:5f:00:c8:d1:88:92:40:fa: 52:50:43:ce:18:6c:f2:0c:79:0d:c4:9a:5c:78:34: 9e:d1:3b:cb:57:56:df:5b:00:2b:06:6f:6a:4f:7b: d3:e9:c2:27:9c:75:4e:5c:6f:9e:98:44:a8:92:21: fb:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:65:06:66:50:AB:FA:63:AE:D4:A8:57:9E:51:86:9F:5E:3B:37:E7 X509v3 Authority Key Identifier: keyid:9F:AD:23:02:3A:15:5B:D2:5B:22:42:80:63:AC:19:78:7C:E7:C2:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B53AF/1F49325C1DB811EB91D04319C4F9AE02/n60jAjoVW9JbIkKAY6wZeHznwr4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n60jAjoVW9JbIkKAY6wZeHznwr4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B53AF/1F49325C1DB811EB91D04319C4F9AE02/n60jAjoVW9JbIkKAY6wZeHznwr4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:c5:54:53:dc:ba:6b:28:05:21:90:ef:61:9c:00:6c:99:51: 85:93:26:25:ad:5c:92:a9:8b:c3:72:54:e2:57:40:d8:b7:35: d7:30:40:b4:cb:d1:53:6f:28:a7:c0:29:44:ae:7e:00:c9:ae: 9f:17:0a:bc:11:95:a4:ff:fc:05:8c:35:28:8e:2e:b7:e1:cd: 7a:0e:d4:d9:46:d5:3f:76:cb:19:e2:46:dd:4e:6d:d5:3e:1b: 83:53:46:af:76:71:18:cd:9a:04:24:79:cc:92:d1:7d:25:ac: 7d:88:4d:29:91:e8:c7:f0:c7:17:04:59:85:22:1c:08:5d:0a: b5:12:94:9e:3c:a1:dc:a8:d5:7c:6b:6f:85:55:4f:26:5c:fa: 3b:eb:29:45:3a:10:d7:ef:de:21:74:b3:85:df:2d:df:e8:38: 30:3e:a6:4e:0d:e0:fe:f9:a6:dd:d7:eb:9f:40:2a:7b:24:12: fb:81:9c:58:2e:2f:8f:12:aa:b8:5a:04:20:68:fa:60:f6:ea: 12:2d:f9:d7:40:85:36:0c:3b:94:ae:2c:86:89:00:b3:48:60: cd:cb:76:5e:d8:da:ab:4e:03:a9:9d:d7:a4:94:b7:96:d3:fb: 8b:fc:c8:cf:54:4c:e2:b9:52:8e:ae:f8:0b:88:37:f7:bd:ec: 35:06:39:85 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB28wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjUzQUYxMTAvBgNVBAUTKDlGQUQyMzAyM0ExNTVCRDI1QjIyNDI4MDYzQUMxOTc4 N0NFN0MyQkUwHhcNMjUwNjE0MjExOTU0WhcNMjUwNjIxMjExOTU0WjAYMRYwFAYD VQQDEw02ODRkZTc3YS01ZWI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuDEbswJldIlBccglNKjxOPTnhavK9sZai3cJNFqfg6PhEBojJ3DasVofTlF8 zdsdZOosRpMkeQKhCXuchIwD7TlmYYhhS3LKX18rqEFuoUhfuFowYLa+9daOsi1H BqjBecwNe/HkCY1A2tAeMxLImh2HzWfHsygLNLF7U6GFoV53X8kEEGvsNPbaH84d PK+DDmJ1V53wrmsuJGS59u9r8nr5yW5jgZ/kO/wgN1ai35p37iBq1xhsGCWsm4Fe 3x43g0c+zsAfj95LXwDI0YiSQPpSUEPOGGzyDHkNxJpceDSe0TvLV1bfWwArBm9q T3vT6cInnHVOXG+emESokiH7ewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDllBmZQ q/pjrtSoV55Rhp9eOzfnMB8GA1UdIwQYMBaAFJ+tIwI6FVvSWyJCgGOsGXh858K+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNTNBRi8xRjQ5MzI1QzFE QjgxMUVCOTFEMDQzMTlDNEY5QUUwMi9uNjBqQWpvVlc5SmJJa0tBWTZ3WmVIem53 cjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL242MGpBam9WVzlKYklrS0FZNndaZUh6bndyNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NTNBRi8xRjQ5MzI1QzFEQjgxMUVCOTFEMDQzMTlDNEY5QUUwMi9uNjBqQWpvVlc5 SmJJa0tBWTZ3WmVIem53cjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAVxVRT3LprKAUhkO9hnABsmVGFkyYlrVySqYvDclTiV0DYtzXXMEC0 y9FTbyinwClErn4Aya6fFwq8EZWk//wFjDUoji634c16DtTZRtU/dssZ4kbdTm3V PhuDU0avdnEYzZoEJHnMktF9Jax9iE0pkejH8McXBFmFIhwIXQq1EpSePKHcqNV8 a2+FVU8mXPo76ylFOhDX794hdLOF3y3f6DgwPqZODeD++abd1+ufQCp7JBL7gZxY Li+PEqq4WgQgaPpg9uoSLfnXQIU2DDuUriyGiQCzSGDNy3Ze2NqrTgOpndeklLeW 0/uL/MjPVEziuVKOrvgLiDf3vew1BjmF -----END CERTIFICATE-----Generated at Sun Jun 15 09:46:20 2025 by rpki-client