$ rpki-client -vvf rpki.apnic.net/member_repository/A91B88CA/5696E746346511EFAF6DEB4EC4F9AE02/9iXmzAOQJv9byda9xC2NHBir8zs.mft File: 9iXmzAOQJv9byda9xC2NHBir8zs.mft (raw, json) Hash identifier: 56agWoofXUWt9zZxZPwAqUimVgf+6Qcpug9swIO7BQ0= Subject key identifier: F7:DD:0B:BB:9F:E6:F6:9F:54:18:BE:F1:22:73:92:0B:60:CA:C6:03 Authority key identifier: F6:25:E6:CC:03:90:26:FF:5B:C9:D6:BD:C4:2D:8D:1C:18:AB:F3:3B Certificate issuer: /CN=A91B88CA/serialNumber=F625E6CC039026FF5BC9D6BDC42D8D1C18ABF33B Certificate serial: FA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9iXmzAOQJv9byda9xC2NHBir8zs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B88CA/5696E746346511EFAF6DEB4EC4F9AE02/9iXmzAOQJv9byda9xC2NHBir8zs.mft Manifest number: DA Signing time: Fri 13 Jun 2025 04:54:52 +0000 Manifest this update: Fri 13 Jun 2025 04:54:52 +0000 Manifest next update: Fri 20 Jun 2025 04:54:52 +0000 Files and hashes: 1: 9iXmzAOQJv9byda9xC2NHBir8zs.crl (hash: E0AP1UB9EERMOlC5g4zuFD80d+6maFuCbuAPLBykiAk=) 2: 4857445643A911F0AD37044DC4F9AE02.roa (hash: WkSg+sBSiJcoCE4RbowJKmOS2e9RO49Iq4fHf9Kfe8E=) 3: 5149E2D2320411F0A7F47652C4F9AE02.roa (hash: HH3GlG7L/oizFHurekpyH+8XRzajvV/dWmWXqsnoI54=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B88CA/5696E746346511EFAF6DEB4EC4F9AE02/9iXmzAOQJv9byda9xC2NHBir8zs.crl rsync://rpki.apnic.net/member_repository/A91B88CA/5696E746346511EFAF6DEB4EC4F9AE02/9iXmzAOQJv9byda9xC2NHBir8zs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9iXmzAOQJv9byda9xC2NHBir8zs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 04:54:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 250 (0xfa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B88CA, serialNumber=F625E6CC039026FF5BC9D6BDC42D8D1C18ABF33B Validity Not Before: Jun 13 04:54:52 2025 GMT Not After : Jun 20 04:54:52 2025 GMT Subject: CN=684baf1c-2a17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:76:d0:d0:df:04:0c:4e:4e:24:53:e4:81:4e: d0:9b:08:22:1b:7a:2e:de:dd:b0:f1:cc:cf:88:ac: 25:7e:6b:6d:b7:91:23:1a:5d:6c:d6:8f:1d:2a:2e: 05:5a:91:40:77:61:06:b1:f9:69:a9:4d:11:9d:a3: 00:86:ce:9e:14:b8:87:00:b9:d3:4d:a0:c6:40:c8: 64:4b:ad:44:e3:3c:8c:2e:a8:61:0c:e5:46:b8:6d: 58:61:6e:d6:34:0b:43:db:6f:2c:d4:41:06:0b:e7: b9:69:c6:33:f7:75:62:68:62:79:06:f9:d7:c9:e5: 6d:58:a6:93:d1:32:f6:3e:e5:70:a2:78:1a:45:24: f0:cb:9f:91:87:ca:00:74:8c:0e:ee:7e:79:95:7b: 1e:10:9a:7e:e3:ba:1d:0b:09:8d:80:cb:d0:dc:1d: 85:96:a2:26:15:b5:c6:83:99:a9:37:3d:3c:6c:33: 42:4a:b9:42:0a:65:94:af:7a:f2:be:77:67:ba:ea: 62:28:d7:43:95:7f:43:74:56:0d:cd:c6:cc:ca:c0: 80:50:56:d7:7e:ca:f0:d9:6d:0e:40:cd:74:bf:2e: ca:0e:b1:57:5f:53:d8:c3:d5:2d:79:51:89:73:7a: ad:2a:88:3e:4a:63:32:2e:07:b4:76:a9:5f:e7:3f: b4:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:DD:0B:BB:9F:E6:F6:9F:54:18:BE:F1:22:73:92:0B:60:CA:C6:03 X509v3 Authority Key Identifier: keyid:F6:25:E6:CC:03:90:26:FF:5B:C9:D6:BD:C4:2D:8D:1C:18:AB:F3:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B88CA/5696E746346511EFAF6DEB4EC4F9AE02/9iXmzAOQJv9byda9xC2NHBir8zs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9iXmzAOQJv9byda9xC2NHBir8zs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B88CA/5696E746346511EFAF6DEB4EC4F9AE02/9iXmzAOQJv9byda9xC2NHBir8zs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c8:7e:4b:c8:6f:63:9e:9e:ec:2b:11:c1:a1:16:c4:b3:7a:a5: c3:9a:54:2a:0e:f8:d6:31:58:62:9c:e0:1c:1f:d3:9e:3d:16: 4b:82:db:bb:a3:f0:81:ae:3f:e3:93:fe:dc:af:ca:9a:f3:f9: f4:19:52:44:18:a5:43:be:eb:1f:b0:c4:56:a4:71:18:3a:79: 41:d9:03:4c:d2:98:64:b0:05:91:e9:c9:92:35:e4:74:17:1b: 3d:c1:be:1c:1b:92:fa:d6:8c:43:b4:ea:b4:e9:b0:a6:2f:88: 30:c3:c1:ca:a5:8b:d0:0c:75:79:a4:b9:0d:31:a5:d8:cb:99: 6a:e3:88:2b:06:b9:e9:10:55:cb:61:73:66:5f:bc:03:b8:7f: 3e:65:8f:8b:c9:14:d4:13:04:64:be:ca:fa:c6:bf:d5:c8:e9: b1:ff:45:32:5c:5b:d1:0c:21:91:91:fe:09:cf:63:b7:21:7b: 8c:75:99:c5:45:90:19:c2:56:ac:58:74:10:c1:15:ff:d3:43: 5d:49:31:21:51:9e:55:61:61:10:86:d9:c7:7e:d8:64:20:3a: 57:90:42:14:05:69:f3:4d:8a:37:5e:bd:ed:e9:70:ff:aa:d9: 07:84:8d:31:c4:9f:44:e6:ab:e1:a7:8c:9d:d7:40:66:f9:0b: a5:7c:ea:a0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjg4Q0ExMTAvBgNVBAUTKEY2MjVFNkNDMDM5MDI2RkY1QkM5RDZCREM0MkQ4RDFD MThBQkYzM0IwHhcNMjUwNjEzMDQ1NDUyWhcNMjUwNjIwMDQ1NDUyWjAYMRYwFAYD VQQDEw02ODRiYWYxYy0yYTE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA73bQ0N8EDE5OJFPkgU7QmwgiG3ou3t2w8czPiKwlfmttt5EjGl1s1o8dKi4F WpFAd2EGsflpqU0RnaMAhs6eFLiHALnTTaDGQMhkS61E4zyMLqhhDOVGuG1YYW7W NAtD228s1EEGC+e5acYz93ViaGJ5BvnXyeVtWKaT0TL2PuVwongaRSTwy5+Rh8oA dIwO7n55lXseEJp+47odCwmNgMvQ3B2FlqImFbXGg5mpNz08bDNCSrlCCmWUr3ry vndnuupiKNdDlX9DdFYNzcbMysCAUFbXfsrw2W0OQM10vy7KDrFXX1PYw9UteVGJ c3qtKog+SmMyLge0dqlf5z+0gwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPfdC7uf 5vafVBi+8SJzkgtgysYDMB8GA1UdIwQYMBaAFPYl5swDkCb/W8nWvcQtjRwYq/M7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCODhDQS81Njk2RTc0NjM0 NjUxMUVGQUY2REVCNEVDNEY5QUUwMi85aVhtekFPUUp2OWJ5ZGE5eEMyTkhCaXI4 enMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlpWG16QU9RSnY5YnlkYTl4QzJOSEJpcjh6cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC ODhDQS81Njk2RTc0NjM0NjUxMUVGQUY2REVCNEVDNEY5QUUwMi85aVhtekFPUUp2 OWJ5ZGE5eEMyTkhCaXI4enMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDIfkvIb2OenuwrEcGhFsSzeqXDmlQqDvjWMVhinOAcH9OePRZLgtu7 o/CBrj/jk/7cr8qa8/n0GVJEGKVDvusfsMRWpHEYOnlB2QNM0phksAWR6cmSNeR0 Fxs9wb4cG5L61oxDtOq06bCmL4gww8HKpYvQDHV5pLkNMaXYy5lq44grBrnpEFXL YXNmX7wDuH8+ZY+LyRTUEwRkvsr6xr/VyOmx/0UyXFvRDCGRkf4Jz2O3IXuMdZnF RZAZwlasWHQQwRX/00NdSTEhUZ5VYWEQhtnHfthkIDpXkEIUBWnzTYo3Xr3t6XD/ qtkHhI0xxJ9E5qvhp4yd10Bm+QulfOqg -----END CERTIFICATE-----Generated at Sat Jun 14 18:24:00 2025 by rpki-client