$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9AB9/C76F92C06E8411EFA3CD983FC4F9AE02/-c1w52K-aV9LpJAqoguUD3cKBjg.mft File: -c1w52K-aV9LpJAqoguUD3cKBjg.mft (raw, json) Hash identifier: hl2iNBy2Yd7HO9v7JfAop9yXXOoA/pUY7mQIKRbSYaI= Subject key identifier: BD:36:33:01:02:48:61:7F:1F:D3:54:B7:CB:58:52:04:E0:6E:E4:3D Authority key identifier: F9:CD:70:E7:62:BE:69:5F:4B:A4:90:2A:A2:0B:94:0F:77:0A:06:38 Certificate issuer: /CN=A91B9AB9/serialNumber=F9CD70E762BE695F4BA4902AA20B940F770A0638 Certificate serial: 91 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-c1w52K-aV9LpJAqoguUD3cKBjg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B9AB9/C76F92C06E8411EFA3CD983FC4F9AE02/-c1w52K-aV9LpJAqoguUD3cKBjg.mft Manifest number: 90 Signing time: Tue 17 Jun 2025 05:21:59 +0000 Manifest this update: Tue 17 Jun 2025 05:21:59 +0000 Manifest next update: Tue 24 Jun 2025 05:21:59 +0000 Files and hashes: 1: -c1w52K-aV9LpJAqoguUD3cKBjg.crl (hash: mHiw9ansgIloSLOZ4iCutk4S4LuwaW8AuEAQLxrW68U=) 2: 723EACFE6E8511EF83048D43C4F9AE02.roa (hash: SORlAdQ9FssMHlMIfPwfvKAJ6kXMG+aUvNMZPsDTNq4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B9AB9/C76F92C06E8411EFA3CD983FC4F9AE02/-c1w52K-aV9LpJAqoguUD3cKBjg.crl rsync://rpki.apnic.net/member_repository/A91B9AB9/C76F92C06E8411EFA3CD983FC4F9AE02/-c1w52K-aV9LpJAqoguUD3cKBjg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-c1w52K-aV9LpJAqoguUD3cKBjg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Jun 2025 05:21:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 145 (0x91) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B9AB9, serialNumber=F9CD70E762BE695F4BA4902AA20B940F770A0638 Validity Not Before: Jun 17 05:21:59 2025 GMT Not After : Jun 24 05:21:59 2025 GMT Subject: CN=6850fb77-a488 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:50:1a:f5:0b:91:7e:12:3e:79:83:3c:c9:5e: 46:8c:9a:c3:5f:de:c7:49:fd:65:02:d8:fb:5b:85: 62:f6:4d:66:cb:96:95:38:8e:1a:3c:33:54:9f:04: dc:63:d7:88:53:42:bb:fa:d8:fa:56:9b:87:a0:c9: 38:53:67:b5:d8:c8:74:fb:f3:a7:e5:f2:37:0d:22: 49:68:7e:8e:45:66:85:19:2e:78:bc:73:62:85:14: 08:c6:4d:6a:ea:3c:0b:de:63:38:ad:37:48:cb:99: 5a:88:96:d9:cf:e4:18:4a:04:7e:11:99:cd:cd:41: 3b:5b:ce:0d:29:db:f3:ce:50:d8:3e:b4:ee:a8:cb: 77:a6:ae:52:45:f3:07:1b:ce:4a:c0:b3:b8:92:71: 1a:c7:e8:bb:d6:a5:98:68:d6:e1:04:ff:f0:ff:e6: d8:4c:a0:c0:88:ff:bb:d4:2a:75:51:8d:63:ed:79: 7d:15:75:9e:aa:4b:b3:8a:5d:cd:71:60:69:22:30: 01:00:da:1a:9e:cc:f0:c4:68:50:2c:e0:7a:20:4a: 18:ed:18:52:3b:8d:af:23:c6:a0:6b:41:0a:af:c3: 7e:ff:6c:42:82:1b:47:be:96:7b:7d:7d:29:58:3a: 5e:4a:c7:ab:60:58:70:07:58:2b:4e:19:44:06:36: c3:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:36:33:01:02:48:61:7F:1F:D3:54:B7:CB:58:52:04:E0:6E:E4:3D X509v3 Authority Key Identifier: keyid:F9:CD:70:E7:62:BE:69:5F:4B:A4:90:2A:A2:0B:94:0F:77:0A:06:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B9AB9/C76F92C06E8411EFA3CD983FC4F9AE02/-c1w52K-aV9LpJAqoguUD3cKBjg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-c1w52K-aV9LpJAqoguUD3cKBjg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9AB9/C76F92C06E8411EFA3CD983FC4F9AE02/-c1w52K-aV9LpJAqoguUD3cKBjg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:35:43:89:97:b8:fe:8f:ea:e2:02:50:9c:88:35:5c:de:8e: 8a:31:e8:3c:80:4f:c5:e9:6f:4b:4a:6d:b3:fa:a2:d8:a9:59: 93:b4:65:9b:c1:df:38:7c:02:82:03:8f:14:bf:a5:22:0b:ce: c1:e3:62:ec:c2:54:74:58:ba:1d:44:f5:e7:4b:54:e6:a1:2d: c0:25:0e:6e:c1:fc:10:53:71:d8:78:c3:e0:c2:67:cc:fd:3a: 87:f5:c9:29:3b:5a:6c:6c:8b:33:b2:f3:09:44:0f:76:af:59: 42:0f:5b:dc:00:a0:6c:1e:dc:b1:72:c7:6d:3c:39:50:f8:07: 20:55:c6:25:62:3e:fa:8b:e4:b4:63:81:07:04:a3:eb:38:c5: 64:4a:f1:09:02:2b:3a:b8:75:af:e8:01:93:ae:0c:78:ad:6e: 70:c3:37:83:ec:e7:1e:8b:9d:f2:c5:ac:e2:5b:f0:48:8f:4e: be:11:ca:14:e4:0a:cd:9c:36:29:a3:da:4b:63:73:99:76:bd: 79:52:58:c4:51:dc:8d:d0:dc:94:45:12:ab:9d:52:57:16:5d: a3:6b:5d:73:75:e3:63:fe:32:a1:a7:67:8b:79:7b:06:2d:2c: 5d:4d:51:fd:03:c9:f6:f3:67:bf:4f:76:7c:3d:34:af:6b:51: 74:d0:3a:fe -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjlBQjkxMTAvBgNVBAUTKEY5Q0Q3MEU3NjJCRTY5NUY0QkE0OTAyQUEyMEI5NDBG NzcwQTA2MzgwHhcNMjUwNjE3MDUyMTU5WhcNMjUwNjI0MDUyMTU5WjAYMRYwFAYD VQQDEw02ODUwZmI3Ny1hNDg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxFAa9QuRfhI+eYM8yV5GjJrDX97HSf1lAtj7W4Vi9k1my5aVOI4aPDNUnwTc Y9eIU0K7+tj6VpuHoMk4U2e12Mh0+/On5fI3DSJJaH6ORWaFGS54vHNihRQIxk1q 6jwL3mM4rTdIy5laiJbZz+QYSgR+EZnNzUE7W84NKdvzzlDYPrTuqMt3pq5SRfMH G85KwLO4knEax+i71qWYaNbhBP/w/+bYTKDAiP+71Cp1UY1j7Xl9FXWeqkuzil3N cWBpIjABANoanszwxGhQLOB6IEoY7RhSO42vI8aga0EKr8N+/2xCghtHvpZ7fX0p WDpeSserYFhwB1grThlEBjbDfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL02MwEC SGF/H9NUt8tYUgTgbuQ9MB8GA1UdIwQYMBaAFPnNcOdivmlfS6SQKqILlA93CgY4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOUFCOS9DNzZGOTJDMDZF ODQxMUVGQTNDRDk4M0ZDNEY5QUUwMi8tYzF3NTJLLWFWOUxwSkFxb2d1VUQzY0tC amcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLy1jMXc1MkstYVY5THBKQXFvZ3VVRDNjS0JqZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OUFCOS9DNzZGOTJDMDZFODQxMUVGQTNDRDk4M0ZDNEY5QUUwMi8tYzF3NTJLLWFW OUxwSkFxb2d1VUQzY0tCamcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBFNUOJl7j+j+riAlCciDVc3o6KMeg8gE/F6W9LSm2z+qLYqVmTtGWb wd84fAKCA48Uv6UiC87B42LswlR0WLodRPXnS1TmoS3AJQ5uwfwQU3HYeMPgwmfM /TqH9ckpO1psbIszsvMJRA92r1lCD1vcAKBsHtyxcsdtPDlQ+AcgVcYlYj76i+S0 Y4EHBKPrOMVkSvEJAis6uHWv6AGTrgx4rW5wwzeD7Ocei53yxaziW/BIj06+EcoU 5ArNnDYpo9pLY3OZdr15UljEUdyN0NyURRKrnVJXFl2ja11zdeNj/jKhp2eLeXsG LSxdTVH9A8n282e/T3Z8PTSva1F00Dr+ -----END CERTIFICATE-----Generated at Wed Jun 18 03:01:48 2025 by rpki-client