$ rpki-client -vvf rpki.apnic.net/member_repository/A91B673B/794630CC5DFE11EF8C7E817BC4F9AE02/_J3Ma6xPPZvsntHpBk2bytz5o6k.mft File: _J3Ma6xPPZvsntHpBk2bytz5o6k.mft (raw, json) Hash identifier: LaUMZ+YUGBpTZYP1d9m9l+l7zJkwxVEHw/nyBI3uPj4= Subject key identifier: 17:5C:20:7B:E7:51:3F:83:88:5C:3D:FB:BF:57:59:41:EA:7F:14:3B Authority key identifier: FC:9D:CC:6B:AC:4F:3D:9B:EC:9E:D1:E9:06:4D:9B:CA:DC:F9:A3:A9 Certificate issuer: /CN=A91B673B/serialNumber=FC9DCC6BAC4F3D9BEC9ED1E9064D9BCADCF9A3A9 Certificate serial: 9E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_J3Ma6xPPZvsntHpBk2bytz5o6k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B673B/794630CC5DFE11EF8C7E817BC4F9AE02/_J3Ma6xPPZvsntHpBk2bytz5o6k.mft Manifest number: 9D Signing time: Thu 19 Jun 2025 05:37:40 +0000 Manifest this update: Thu 19 Jun 2025 05:37:40 +0000 Manifest next update: Thu 26 Jun 2025 05:37:40 +0000 Files and hashes: 1: _J3Ma6xPPZvsntHpBk2bytz5o6k.crl (hash: zt/8ujN2D+IgXvff4udFLVFW4B6J5MowJRIgNMpUeM4=) 2: 390757225E1511EFB04EDA1DC4F9AE02.roa (hash: AOHVL3D6FsryT04X8+k30AkGqkWA0TurnsDlj6WqM9k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B673B/794630CC5DFE11EF8C7E817BC4F9AE02/_J3Ma6xPPZvsntHpBk2bytz5o6k.crl rsync://rpki.apnic.net/member_repository/A91B673B/794630CC5DFE11EF8C7E817BC4F9AE02/_J3Ma6xPPZvsntHpBk2bytz5o6k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_J3Ma6xPPZvsntHpBk2bytz5o6k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 02:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 158 (0x9e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B673B, serialNumber=FC9DCC6BAC4F3D9BEC9ED1E9064D9BCADCF9A3A9 Validity Not Before: Jun 19 05:37:40 2025 GMT Not After : Jun 26 05:37:40 2025 GMT Subject: CN=6853a224-0435 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:b2:f9:98:0f:c7:99:db:55:8d:84:1b:ec:52: ea:be:dd:1b:84:74:a6:09:a0:d7:69:f6:46:12:e4: 7c:6b:73:88:28:9e:6c:d1:f5:33:20:9a:db:c6:cf: e9:a2:a0:c0:9a:12:6e:ac:99:eb:50:e5:af:65:62: 04:51:c5:91:17:dd:35:37:94:b5:c8:b9:7b:52:8e: 01:95:03:68:e4:12:7f:a9:65:51:26:18:0c:3c:49: 76:31:df:3f:91:e1:6b:d5:4a:75:0b:98:da:78:5c: e7:1c:12:26:3d:0f:cb:26:1b:47:4e:7a:61:dd:79: ea:51:0e:ee:be:dd:b8:c0:1c:39:d1:4a:49:8d:1d: dd:f4:ea:72:2f:1c:4d:62:f8:9d:00:4d:da:1b:ac: 76:76:e7:62:80:e4:47:fe:f3:b6:32:52:fc:f6:d0: 65:28:3d:3a:64:62:96:c4:8b:6b:60:cb:8d:f6:c1: fd:61:2f:81:9c:82:64:a3:8c:37:bd:5a:55:6a:d9: 78:e8:f3:31:c0:f8:d1:cd:c7:42:db:18:89:13:c1: 88:4b:5b:13:f6:80:6e:e0:c4:42:8e:39:79:f7:83: 13:a7:f1:e2:62:0e:0a:f0:79:a4:20:67:3f:4a:d1: d9:c0:16:cc:74:56:01:28:a2:55:f3:15:a7:1d:59: 90:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:5C:20:7B:E7:51:3F:83:88:5C:3D:FB:BF:57:59:41:EA:7F:14:3B X509v3 Authority Key Identifier: keyid:FC:9D:CC:6B:AC:4F:3D:9B:EC:9E:D1:E9:06:4D:9B:CA:DC:F9:A3:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B673B/794630CC5DFE11EF8C7E817BC4F9AE02/_J3Ma6xPPZvsntHpBk2bytz5o6k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_J3Ma6xPPZvsntHpBk2bytz5o6k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B673B/794630CC5DFE11EF8C7E817BC4F9AE02/_J3Ma6xPPZvsntHpBk2bytz5o6k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:7d:e9:67:28:57:35:b7:0e:79:24:15:5a:37:e2:61:40:90: 15:d5:b4:0b:cf:fa:2d:e9:88:e0:8d:6b:b1:d6:11:2d:7d:eb: d5:70:c7:c3:ea:cf:1c:1a:5e:b6:06:41:cc:3c:7c:f0:53:50: a3:91:76:f9:e2:2b:2c:6b:e7:10:99:a6:6a:26:90:da:17:7d: 71:27:b7:0d:61:25:48:f8:a3:09:29:17:8b:c1:6e:0e:27:f9: f3:94:92:75:65:0b:7c:8c:0e:65:69:43:6a:c3:31:f2:c5:ba: 95:93:93:5b:a5:ff:13:fe:65:71:1e:20:02:2b:9b:8d:22:48: cd:74:65:7e:80:96:6f:fa:b4:7e:41:de:24:16:b0:57:ea:7d: 2d:7b:11:93:f8:a2:b7:47:ad:6d:ff:04:89:43:10:1d:8d:e6: dc:9c:61:29:9b:8f:d0:8e:54:e3:4f:f4:67:83:16:58:a2:74: 5b:f8:a0:c8:46:39:f4:2e:1c:11:42:21:3b:40:e5:06:bb:78: 59:95:cb:38:a7:28:b3:6e:08:67:f6:f6:e0:d7:08:27:cd:b9: 18:27:c3:db:27:fc:2d:74:83:16:a6:00:b6:00:bb:d1:18:13: c6:1e:0c:0c:24:42:52:0d:80:1b:d2:bc:9a:72:37:b5:cb:5c: e9:4b:7f:d9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjY3M0IxMTAvBgNVBAUTKEZDOURDQzZCQUM0RjNEOUJFQzlFRDFFOTA2NEQ5QkNB RENGOUEzQTkwHhcNMjUwNjE5MDUzNzQwWhcNMjUwNjI2MDUzNzQwWjAYMRYwFAYD VQQDEw02ODUzYTIyNC0wNDM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyrL5mA/HmdtVjYQb7FLqvt0bhHSmCaDXafZGEuR8a3OIKJ5s0fUzIJrbxs/p oqDAmhJurJnrUOWvZWIEUcWRF901N5S1yLl7Uo4BlQNo5BJ/qWVRJhgMPEl2Md8/ keFr1Up1C5jaeFznHBImPQ/LJhtHTnph3XnqUQ7uvt24wBw50UpJjR3d9OpyLxxN YvidAE3aG6x2dudigORH/vO2MlL89tBlKD06ZGKWxItrYMuN9sH9YS+BnIJko4w3 vVpVatl46PMxwPjRzcdC2xiJE8GIS1sT9oBu4MRCjjl594MTp/HiYg4K8HmkIGc/ StHZwBbMdFYBKKJV8xWnHVmQnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBdcIHvn UT+DiFw9+79XWUHqfxQ7MB8GA1UdIwQYMBaAFPydzGusTz2b7J7R6QZNm8rc+aOp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjczQi83OTQ2MzBDQzVE RkUxMUVGOEM3RTgxN0JDNEY5QUUwMi9fSjNNYTZ4UFBadnNudEhwQmsyYnl0ejVv NmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL19KM01hNnhQUFp2c250SHBCazJieXR6NW82ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NjczQi83OTQ2MzBDQzVERkUxMUVGOEM3RTgxN0JDNEY5QUUwMi9fSjNNYTZ4UFBa dnNudEhwQmsyYnl0ejVvNmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCYfelnKFc1tw55JBVaN+JhQJAV1bQLz/ot6YjgjWux1hEtfevVcMfD 6s8cGl62BkHMPHzwU1CjkXb54issa+cQmaZqJpDaF31xJ7cNYSVI+KMJKReLwW4O J/nzlJJ1ZQt8jA5laUNqwzHyxbqVk5Nbpf8T/mVxHiACK5uNIkjNdGV+gJZv+rR+ Qd4kFrBX6n0texGT+KK3R61t/wSJQxAdjebcnGEpm4/QjlTjT/RngxZYonRb+KDI Rjn0LhwRQiE7QOUGu3hZlcs4pyizbghn9vbg1wgnzbkYJ8PbJ/wtdIMWpgC2ALvR GBPGHgwMJEJSDYAb0ryacje1y1zpS3/Z -----END CERTIFICATE-----Generated at Thu Jun 19 09:22:34 2025 by rpki-client