$ rpki-client -vvf rpki.apnic.net/member_repository/A91B85FC/8816EFF8493411EAAD84BF1EC4F9AE02/V09tVmTqm98xXPZMjl5n0mODwgU.mft File: V09tVmTqm98xXPZMjl5n0mODwgU.mft (raw, json) Hash identifier: 3ulslXehmaDxeR7XanIrTun0iv2yk2azK/AmuvwWtfY= Subject key identifier: DA:41:55:17:50:74:E5:83:AB:74:27:07:BE:92:A3:3B:97:6D:94:43 Authority key identifier: 57:4F:6D:56:64:EA:9B:DF:31:5C:F6:4C:8E:5E:67:D2:63:83:C2:05 Certificate issuer: /CN=A91B85FC/serialNumber=574F6D5664EA9BDF315CF64C8E5E67D26383C205 Certificate serial: 0AEE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V09tVmTqm98xXPZMjl5n0mODwgU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B85FC/8816EFF8493411EAAD84BF1EC4F9AE02/V09tVmTqm98xXPZMjl5n0mODwgU.mft Manifest number: 0AE8 Signing time: Thu 12 Jun 2025 19:11:54 +0000 Manifest this update: Thu 12 Jun 2025 19:11:53 +0000 Manifest next update: Thu 19 Jun 2025 19:11:53 +0000 Files and hashes: 1: V09tVmTqm98xXPZMjl5n0mODwgU.crl (hash: iZXm+qdXm+U4XyK6wB1/JTVjQRjUB9A8y0U1ONvgjAw=) 2: 52216250493611EAA0968624C4F9AE02.roa (hash: XjkXLtL5CTFLl3MU4C1ptKiUasRS1cFai/QK6ioOeWA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B85FC/8816EFF8493411EAAD84BF1EC4F9AE02/V09tVmTqm98xXPZMjl5n0mODwgU.crl rsync://rpki.apnic.net/member_repository/A91B85FC/8816EFF8493411EAAD84BF1EC4F9AE02/V09tVmTqm98xXPZMjl5n0mODwgU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V09tVmTqm98xXPZMjl5n0mODwgU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 19:11:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2798 (0xaee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B85FC, serialNumber=574F6D5664EA9BDF315CF64C8E5E67D26383C205 Validity Not Before: Jun 12 19:11:53 2025 GMT Not After : Jun 19 19:11:53 2025 GMT Subject: CN=684b267a-bdd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:f7:63:bd:8e:18:d6:04:4e:87:d5:75:66:0a: a9:2e:e3:6a:44:4a:a2:64:da:d7:49:09:db:18:1c: 24:a1:3a:ac:fb:d7:03:df:6c:19:19:bd:a1:50:ce: ff:55:80:9a:0c:09:28:1c:2f:fb:32:44:12:55:76: b3:9d:96:4e:15:4f:cb:aa:60:44:18:0c:dd:cb:58: 77:98:fe:95:4a:72:c5:ba:97:4b:b5:1d:80:f6:ba: 54:03:63:f9:69:20:59:3a:68:dd:99:77:d7:c3:5c: ee:38:e0:4a:8f:09:cf:4e:cc:a7:9b:f9:d2:1f:54: 95:48:44:e6:f8:91:a1:3f:c9:e3:d8:b9:8b:a9:1f: 2c:c6:ac:5f:fd:ac:5d:f1:18:27:41:06:80:b2:4f: 9d:3a:f2:18:a1:42:74:d8:47:40:ec:96:e9:b4:7a: 88:0a:bd:77:64:b3:06:fd:66:60:4b:3c:39:de:95: 32:4f:51:50:65:ee:a0:e2:6e:fd:c5:ff:ff:4b:c1: 62:b5:8e:fa:f9:46:d3:3f:48:8d:16:2c:49:00:7c: c8:38:6b:06:73:c7:8b:98:20:62:bf:8e:3c:d5:1e: e6:ea:df:f0:f7:23:fb:ee:05:24:f5:86:e2:e9:0c: 1a:1c:bd:60:fd:39:18:bf:77:2f:b9:ca:5c:89:a2: 8d:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:41:55:17:50:74:E5:83:AB:74:27:07:BE:92:A3:3B:97:6D:94:43 X509v3 Authority Key Identifier: keyid:57:4F:6D:56:64:EA:9B:DF:31:5C:F6:4C:8E:5E:67:D2:63:83:C2:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B85FC/8816EFF8493411EAAD84BF1EC4F9AE02/V09tVmTqm98xXPZMjl5n0mODwgU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V09tVmTqm98xXPZMjl5n0mODwgU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B85FC/8816EFF8493411EAAD84BF1EC4F9AE02/V09tVmTqm98xXPZMjl5n0mODwgU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:e3:52:5e:8d:2d:8d:ee:82:8b:db:8c:57:a2:cb:71:e6:c7: 5c:22:e3:fd:85:c4:3c:52:4c:91:dc:1c:ee:a6:79:b6:fc:50: ca:2e:78:e7:66:ec:65:87:cb:1e:8d:10:c5:34:34:1e:58:bb: 7e:ae:31:5f:27:18:4a:9f:2f:36:63:ba:ae:35:d0:66:57:a2: 9d:49:11:69:be:88:4c:bb:cd:66:d6:70:32:1f:cb:5b:a4:0b: 61:87:ae:f3:dd:70:9e:fc:a7:a1:5f:72:e6:17:be:64:53:60: ef:67:b8:b6:72:47:4e:c8:c5:39:84:d0:29:bf:5a:04:92:59: ed:a4:65:9e:7d:1f:05:82:ef:4d:90:26:f0:f0:1b:8f:a2:00: cf:5e:e3:be:a1:ba:6d:b8:9b:3a:d3:0d:9c:77:59:20:fc:1f: c8:b3:29:75:2b:f3:94:81:6f:10:6f:d8:7b:06:34:97:60:44: c8:76:66:9b:4b:90:17:d9:62:c4:4b:3e:6b:08:bf:eb:70:00: 24:c5:4c:3d:63:c3:cd:7c:8d:bd:af:b5:87:16:cd:20:cb:5a: bb:a2:a7:6d:6c:ba:7c:6c:1b:8d:1d:3f:7d:5e:12:a5:2e:c8: 8b:f7:7e:53:42:c5:47:d3:b9:08:4e:6e:48:56:ef:89:16:c7: 80:bd:ad:e3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCu4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjg1RkMxMTAvBgNVBAUTKDU3NEY2RDU2NjRFQTlCREYzMTVDRjY0QzhFNUU2N0Qy NjM4M0MyMDUwHhcNMjUwNjEyMTkxMTUzWhcNMjUwNjE5MTkxMTUzWjAYMRYwFAYD VQQDEw02ODRiMjY3YS1iZGQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqvdjvY4Y1gROh9V1ZgqpLuNqREqiZNrXSQnbGBwkoTqs+9cD32wZGb2hUM7/ VYCaDAkoHC/7MkQSVXaznZZOFU/LqmBEGAzdy1h3mP6VSnLFupdLtR2A9rpUA2P5 aSBZOmjdmXfXw1zuOOBKjwnPTsynm/nSH1SVSETm+JGhP8nj2LmLqR8sxqxf/axd 8RgnQQaAsk+dOvIYoUJ02EdA7JbptHqICr13ZLMG/WZgSzw53pUyT1FQZe6g4m79 xf//S8FitY76+UbTP0iNFixJAHzIOGsGc8eLmCBiv4481R7m6t/w9yP77gUk9Ybi 6QwaHL1g/TkYv3cvucpciaKN6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNpBVRdQ dOWDq3QnB76SozuXbZRDMB8GA1UdIwQYMBaAFFdPbVZk6pvfMVz2TI5eZ9Jjg8IF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCODVGQy84ODE2RUZGODQ5 MzQxMUVBQUQ4NEJGMUVDNEY5QUUwMi9WMDl0Vm1UcW05OHhYUFpNamw1bjBtT0R3 Z1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1YwOXRWbVRxbTk4eFhQWk1qbDVuMG1PRHdnVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC ODVGQy84ODE2RUZGODQ5MzQxMUVBQUQ4NEJGMUVDNEY5QUUwMi9WMDl0Vm1UcW05 OHhYUFpNamw1bjBtT0R3Z1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA441JejS2N7oKL24xXostx5sdcIuP9hcQ8UkyR3Bzupnm2/FDKLnjn Zuxlh8sejRDFNDQeWLt+rjFfJxhKny82Y7quNdBmV6KdSRFpvohMu81m1nAyH8tb pAthh67z3XCe/KehX3LmF75kU2DvZ7i2ckdOyMU5hNApv1oEklntpGWefR8Fgu9N kCbw8BuPogDPXuO+obptuJs60w2cd1kg/B/Isyl1K/OUgW8Qb9h7BjSXYETIdmab S5AX2WLESz5rCL/rcAAkxUw9Y8PNfI29r7WHFs0gy1q7oqdtbLp8bBuNHT99XhKl LsiL935TQsVH07kITm5IVu+JFseAva3j -----END CERTIFICATE-----Generated at Sat Jun 14 19:29:00 2025 by rpki-client