$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5AD4/11226B7E8F8A11EA9828C65DC4F9AE02/M1KIaoOU86z15jXjxHVvTQpuRek.mft File: M1KIaoOU86z15jXjxHVvTQpuRek.mft (raw, json) Hash identifier: cv6A5h5HVqfo97WH3cJUg/nbE34a/y5oUEyEGzJlaRo= Subject key identifier: 53:7C:3E:32:20:87:A7:DD:56:21:6C:26:F8:6F:C5:41:EC:97:A8:A3 Authority key identifier: 33:52:88:6A:83:94:F3:AC:F5:E6:35:E3:C4:75:6F:4D:0A:6E:45:E9 Certificate issuer: /CN=A91B5AD4/serialNumber=3352886A8394F3ACF5E635E3C4756F4D0A6E45E9 Certificate serial: 0994 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M1KIaoOU86z15jXjxHVvTQpuRek.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B5AD4/11226B7E8F8A11EA9828C65DC4F9AE02/M1KIaoOU86z15jXjxHVvTQpuRek.mft Manifest number: 098B Signing time: Thu 12 Jun 2025 19:22:58 +0000 Manifest this update: Thu 12 Jun 2025 19:22:58 +0000 Manifest next update: Thu 19 Jun 2025 19:22:58 +0000 Files and hashes: 1: M1KIaoOU86z15jXjxHVvTQpuRek.crl (hash: XOZxcmrL3uRpKd/DppM72qE0qWfZI7LfcEDT4Q+oEL4=) 2: 67A60C64441E11EB861F005AC4F9AE02.roa (hash: JcavRD/UkGMKefo40xrhCPb2PgEwMsvZQrFanuv4C9k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B5AD4/11226B7E8F8A11EA9828C65DC4F9AE02/M1KIaoOU86z15jXjxHVvTQpuRek.crl rsync://rpki.apnic.net/member_repository/A91B5AD4/11226B7E8F8A11EA9828C65DC4F9AE02/M1KIaoOU86z15jXjxHVvTQpuRek.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M1KIaoOU86z15jXjxHVvTQpuRek.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 19:22:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2452 (0x994) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B5AD4, serialNumber=3352886A8394F3ACF5E635E3C4756F4D0A6E45E9 Validity Not Before: Jun 12 19:22:58 2025 GMT Not After : Jun 19 19:22:58 2025 GMT Subject: CN=684b2912-4d3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:64:4f:96:e0:db:61:54:fb:75:6b:64:31:06: 20:70:17:9b:05:8a:e5:3e:92:9f:c3:05:49:53:f5: 9e:51:0e:29:ac:82:b1:ce:39:2d:de:3c:05:51:fb: cf:95:cc:ca:9b:6c:d8:1f:b8:b5:e4:46:70:c4:08: 4c:ed:a6:a9:a0:78:cc:b4:74:da:ed:89:54:0b:cf: e0:c4:c6:1c:19:eb:1d:89:53:06:1f:87:61:6f:1d: 23:7c:39:11:d4:65:52:2b:db:89:05:34:5a:a4:20: cb:b2:01:79:13:bd:3a:15:7d:5b:d5:65:00:ac:f0: 4e:a2:98:ca:21:42:6a:cd:a2:7d:6c:ac:19:82:70: 06:51:3c:32:43:67:d2:70:1d:76:99:53:6b:50:cb: 09:61:e0:08:8e:ca:54:7c:d1:99:04:cb:82:f4:fe: 15:b8:52:e9:f6:38:25:c3:37:49:69:0e:cc:b0:0c: c5:2e:97:fb:9d:cd:f0:8a:e2:de:82:1b:34:91:5e: a2:51:06:d8:59:2b:ba:da:2e:d0:c9:99:b1:17:2f: 12:ae:97:e8:56:b8:4f:c1:58:72:a3:12:e3:28:aa: 62:b4:62:39:38:64:20:42:6b:13:3e:ef:8f:90:8f: 11:87:90:61:d5:8b:93:79:7b:38:5a:40:0e:2f:33: 8b:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:7C:3E:32:20:87:A7:DD:56:21:6C:26:F8:6F:C5:41:EC:97:A8:A3 X509v3 Authority Key Identifier: keyid:33:52:88:6A:83:94:F3:AC:F5:E6:35:E3:C4:75:6F:4D:0A:6E:45:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B5AD4/11226B7E8F8A11EA9828C65DC4F9AE02/M1KIaoOU86z15jXjxHVvTQpuRek.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M1KIaoOU86z15jXjxHVvTQpuRek.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5AD4/11226B7E8F8A11EA9828C65DC4F9AE02/M1KIaoOU86z15jXjxHVvTQpuRek.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:23:1e:03:89:48:ff:72:b3:42:d7:3b:b5:8c:f6:d1:97:c9: c6:5f:e3:65:6d:4d:3d:f4:14:08:28:99:e4:73:5b:a5:1d:bf: 9d:d1:56:c0:13:0b:0f:99:ed:1c:c2:61:d7:5c:a9:8d:c2:56: d1:49:5a:7c:48:c8:5c:97:37:05:67:7d:e7:46:23:a7:a3:74: 12:1a:38:0a:91:bb:22:e5:3a:2e:79:7b:cd:3c:d7:14:25:e3: 90:40:02:fa:04:48:56:a2:ad:05:82:76:f7:2f:01:a7:02:71: a4:ce:ab:66:93:08:e8:57:92:97:74:b6:8f:2b:05:a6:d7:93: ea:1d:0d:49:6e:d1:06:dd:a9:21:7d:b3:f4:9b:d3:79:ab:f7: a8:6b:68:5a:b4:8e:0d:b6:10:f0:ed:88:27:9f:28:59:28:cb: b5:6a:e3:b3:d7:38:6b:61:71:35:05:cd:d9:ec:09:47:90:0b: 06:ba:9e:8e:72:d2:8c:b2:02:67:e2:b4:38:c0:ea:a9:a5:12: 37:93:12:bd:c6:f0:56:09:e2:48:c8:f5:c2:8f:f9:5f:ee:58: 55:6f:ce:5e:c9:5f:8c:47:cb:d6:09:10:50:3c:1f:80:09:24: 0d:4d:de:e9:8d:fd:58:19:a9:6a:21:6f:29:03:d3:a8:ce:4e: 91:44:8f:79 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCZQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjVBRDQxMTAvBgNVBAUTKDMzNTI4ODZBODM5NEYzQUNGNUU2MzVFM0M0NzU2RjRE MEE2RTQ1RTkwHhcNMjUwNjEyMTkyMjU4WhcNMjUwNjE5MTkyMjU4WjAYMRYwFAYD VQQDEw02ODRiMjkxMi00ZDNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxGRPluDbYVT7dWtkMQYgcBebBYrlPpKfwwVJU/WeUQ4prIKxzjkt3jwFUfvP lczKm2zYH7i15EZwxAhM7aapoHjMtHTa7YlUC8/gxMYcGesdiVMGH4dhbx0jfDkR 1GVSK9uJBTRapCDLsgF5E706FX1b1WUArPBOopjKIUJqzaJ9bKwZgnAGUTwyQ2fS cB12mVNrUMsJYeAIjspUfNGZBMuC9P4VuFLp9jglwzdJaQ7MsAzFLpf7nc3wiuLe ghs0kV6iUQbYWSu62i7QyZmxFy8SrpfoVrhPwVhyoxLjKKpitGI5OGQgQmsTPu+P kI8Rh5Bh1YuTeXs4WkAOLzOLMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFN8PjIg h6fdViFsJvhvxUHsl6ijMB8GA1UdIwQYMBaAFDNSiGqDlPOs9eY148R1b00KbkXp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNUFENC8xMTIyNkI3RThG OEExMUVBOTgyOEM2NURDNEY5QUUwMi9NMUtJYW9PVTg2ejE1alhqeEhWdlRRcHVS ZWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL00xS0lhb09VODZ6MTVqWGp4SFZ2VFFwdVJlay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NUFENC8xMTIyNkI3RThGOEExMUVBOTgyOEM2NURDNEY5QUUwMi9NMUtJYW9PVTg2 ejE1alhqeEhWdlRRcHVSZWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBvIx4DiUj/crNC1zu1jPbRl8nGX+NlbU099BQIKJnkc1ulHb+d0VbA EwsPme0cwmHXXKmNwlbRSVp8SMhclzcFZ33nRiOno3QSGjgKkbsi5ToueXvNPNcU JeOQQAL6BEhWoq0Fgnb3LwGnAnGkzqtmkwjoV5KXdLaPKwWm15PqHQ1JbtEG3akh fbP0m9N5q/eoa2hatI4NthDw7YgnnyhZKMu1auOz1zhrYXE1Bc3Z7AlHkAsGup6O ctKMsgJn4rQ4wOqppRI3kxK9xvBWCeJIyPXCj/lf7lhVb85eyV+MR8vWCRBQPB+A CSQNTd7pjf1YGalqIW8pA9Oozk6RRI95 -----END CERTIFICATE-----Generated at Sat Jun 14 18:59:01 2025 by rpki-client