$ rpki-client -vvf rpki.apnic.net/member_repository/A91B777C/62D03E8CB2DA11EB8B384A60C4F9AE02/sJELB8hrD_owClKsfDH8tSwFMtc.mft File: sJELB8hrD_owClKsfDH8tSwFMtc.mft (raw, json) Hash identifier: 7QKjCWv/PD/Q05/TyaNwX2JdqMRGExJQqtqhcDVHpXw= Subject key identifier: 5B:67:63:C5:12:BD:6A:A0:BB:85:C7:40:3C:7B:C9:BE:97:C8:41:36 Authority key identifier: B0:91:0B:07:C8:6B:0F:FA:30:0A:52:AC:7C:31:FC:B5:2C:05:32:D7 Certificate issuer: /CN=A91B777C/serialNumber=B0910B07C86B0FFA300A52AC7C31FCB52C0532D7 Certificate serial: 05F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sJELB8hrD_owClKsfDH8tSwFMtc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B777C/62D03E8CB2DA11EB8B384A60C4F9AE02/sJELB8hrD_owClKsfDH8tSwFMtc.mft Manifest number: 05F3 Signing time: Mon 16 Jun 2025 22:35:39 +0000 Manifest this update: Mon 16 Jun 2025 22:35:39 +0000 Manifest next update: Mon 23 Jun 2025 22:35:39 +0000 Files and hashes: 1: sJELB8hrD_owClKsfDH8tSwFMtc.crl (hash: VCUp0yBe5XjlhZ/m0HxeO6uOZ8yAMcpAILcJboouCQE=) 2: 9095FC2CB2E811EBADBB3753C4F9AE02.roa (hash: h5dvfa3FRBYPtcjjdPkOqAVQA/qeLJ42SQi+kECAh1M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B777C/62D03E8CB2DA11EB8B384A60C4F9AE02/sJELB8hrD_owClKsfDH8tSwFMtc.crl rsync://rpki.apnic.net/member_repository/A91B777C/62D03E8CB2DA11EB8B384A60C4F9AE02/sJELB8hrD_owClKsfDH8tSwFMtc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sJELB8hrD_owClKsfDH8tSwFMtc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Jun 2025 22:35:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1529 (0x5f9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B777C, serialNumber=B0910B07C86B0FFA300A52AC7C31FCB52C0532D7 Validity Not Before: Jun 16 22:35:39 2025 GMT Not After : Jun 23 22:35:39 2025 GMT Subject: CN=68509c3b-237f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:1f:47:50:59:7e:1c:b1:c0:d1:75:0b:37:2d: 8e:da:b9:be:be:b3:b1:5f:2c:db:ca:7a:85:c8:7b: 10:f6:6e:e7:58:27:b6:d1:ec:95:59:25:a1:3d:a7: 06:5d:9b:87:17:48:9c:72:e5:6f:65:2d:2b:6d:ac: ed:dc:41:96:d2:6b:3f:99:6f:04:92:db:a5:14:4c: 0c:c2:be:c2:97:66:a9:7d:f3:de:2a:d9:f5:e5:d4: cc:31:ab:d3:84:41:2e:e2:64:6f:da:78:e3:f4:66: ce:fc:18:69:31:91:5d:77:84:b4:3c:01:06:e5:c4: f1:e5:7c:6f:81:44:f6:9b:f6:a4:9e:49:f8:50:4c: 47:10:28:32:76:83:ee:31:95:60:04:80:9a:c1:6b: 53:69:75:91:d2:dc:e3:f6:c3:2e:97:b1:e8:48:5a: 83:24:86:39:51:96:2e:7c:b7:25:2f:04:f2:f9:ff: da:7d:b1:00:be:71:d0:2a:ff:89:94:57:57:24:c2: da:94:57:99:ef:8e:a9:81:95:dd:35:b8:0d:b9:6b: ad:02:9c:6c:6e:c6:2a:6a:b3:f3:d5:54:53:2a:e8: 3e:ee:ae:05:41:ad:57:e3:34:5f:5f:2d:06:c3:fd: 9c:7d:54:45:c2:51:84:8d:35:57:8a:ae:0e:b0:f5: 7a:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:67:63:C5:12:BD:6A:A0:BB:85:C7:40:3C:7B:C9:BE:97:C8:41:36 X509v3 Authority Key Identifier: keyid:B0:91:0B:07:C8:6B:0F:FA:30:0A:52:AC:7C:31:FC:B5:2C:05:32:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B777C/62D03E8CB2DA11EB8B384A60C4F9AE02/sJELB8hrD_owClKsfDH8tSwFMtc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sJELB8hrD_owClKsfDH8tSwFMtc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B777C/62D03E8CB2DA11EB8B384A60C4F9AE02/sJELB8hrD_owClKsfDH8tSwFMtc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:12:76:10:44:0c:db:78:ed:d6:87:be:d7:2b:73:6d:91:d1: 28:09:48:6c:c9:56:f2:56:12:f6:e2:da:ca:a3:93:2b:86:59: f9:ea:d9:c2:64:e1:73:d3:6e:22:de:3c:ed:13:d3:27:15:f6: 6a:6a:55:8b:f1:2b:dc:7b:36:10:5d:12:48:e5:9b:22:2c:09: fe:69:ea:ea:fb:41:d6:a4:2a:4e:eb:34:e7:46:0a:2f:5f:4a: 98:71:69:bb:45:13:02:da:96:8b:d0:45:49:bf:83:d6:74:86: 05:b6:f3:81:71:1e:55:be:ab:f9:bd:63:a8:c5:9e:15:bc:9d: a6:13:9b:bb:3e:34:7f:04:04:5c:6d:3e:8c:ce:2d:3b:1b:05: 7b:74:4c:a3:ba:01:60:97:05:4d:89:e1:2d:b8:08:88:96:3e: 53:4f:f7:3b:3d:a6:b9:2e:74:e4:47:e0:83:a1:ff:34:28:ec: e2:e0:76:ca:f1:d3:76:0c:6e:02:db:23:a4:b9:f4:c1:b1:ca: ba:ae:54:82:50:31:69:ef:20:4e:3c:92:d5:c6:f2:f9:a9:1d: f3:15:66:a7:42:cf:5e:a2:d8:9d:70:9e:20:ae:3e:0d:78:fc: 6f:08:d1:51:67:6a:8c:e8:30:c4:6f:0b:92:b3:f9:5e:f0:72: 77:90:39:d1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBfkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjc3N0MxMTAvBgNVBAUTKEIwOTEwQjA3Qzg2QjBGRkEzMDBBNTJBQzdDMzFGQ0I1 MkMwNTMyRDcwHhcNMjUwNjE2MjIzNTM5WhcNMjUwNjIzMjIzNTM5WjAYMRYwFAYD VQQDEw02ODUwOWMzYi0yMzdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzR9HUFl+HLHA0XULNy2O2rm+vrOxXyzbynqFyHsQ9m7nWCe20eyVWSWhPacG XZuHF0iccuVvZS0rbazt3EGW0ms/mW8EktulFEwMwr7Cl2apffPeKtn15dTMMavT hEEu4mRv2njj9GbO/BhpMZFdd4S0PAEG5cTx5XxvgUT2m/aknkn4UExHECgydoPu MZVgBICawWtTaXWR0tzj9sMul7HoSFqDJIY5UZYufLclLwTy+f/afbEAvnHQKv+J lFdXJMLalFeZ746pgZXdNbgNuWutApxsbsYqarPz1VRTKug+7q4FQa1X4zRfXy0G w/2cfVRFwlGEjTVXiq4OsPV6DQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFtnY8US vWqgu4XHQDx7yb6XyEE2MB8GA1UdIwQYMBaAFLCRCwfIaw/6MApSrHwx/LUsBTLX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNzc3Qy82MkQwM0U4Q0Iy REExMUVCOEIzODRBNjBDNEY5QUUwMi9zSkVMQjhockRfb3dDbEtzZkRIOHRTd0ZN dGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3NKRUxCOGhyRF9vd0NsS3NmREg4dFN3Rk10Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Nzc3Qy82MkQwM0U4Q0IyREExMUVCOEIzODRBNjBDNEY5QUUwMi9zSkVMQjhockRf b3dDbEtzZkRIOHRTd0ZNdGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCVEnYQRAzbeO3Wh77XK3NtkdEoCUhsyVbyVhL24trKo5Mrhln56tnC ZOFz024i3jztE9MnFfZqalWL8SvcezYQXRJI5ZsiLAn+aerq+0HWpCpO6zTnRgov X0qYcWm7RRMC2paL0EVJv4PWdIYFtvOBcR5Vvqv5vWOoxZ4VvJ2mE5u7PjR/BARc bT6Mzi07GwV7dEyjugFglwVNieEtuAiIlj5TT/c7Paa5LnTkR+CDof80KOzi4HbK 8dN2DG4C2yOkufTBscq6rlSCUDFp7yBOPJLVxvL5qR3zFWanQs9eotidcJ4grj4N ePxvCNFRZ2qM6DDEbwuSs/le8HJ3kDnR -----END CERTIFICATE-----Generated at Wed Jun 18 06:32:18 2025 by rpki-client