$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9EF3/2519CDF0492311EAA069A566C4F9AE02/9ssujrx6iSv6FcRHs5gkoFjHVa4.mft File: 9ssujrx6iSv6FcRHs5gkoFjHVa4.mft (raw, json) Hash identifier: SDeL9bI1BCchhjMScD+CfAXPu3W08G+mvTL4TTYOiNA= Subject key identifier: B3:37:54:34:CA:BA:EB:D8:86:8B:82:D7:D7:6B:E5:8F:25:7E:DD:5E Authority key identifier: F6:CB:2E:8E:BC:7A:89:2B:FA:15:C4:47:B3:98:24:A0:58:C7:55:AE Certificate issuer: /CN=A91B9EF3/serialNumber=F6CB2E8EBC7A892BFA15C447B39824A058C755AE Certificate serial: 0AF8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ssujrx6iSv6FcRHs5gkoFjHVa4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B9EF3/2519CDF0492311EAA069A566C4F9AE02/9ssujrx6iSv6FcRHs5gkoFjHVa4.mft Manifest number: 0AEA Signing time: Mon 16 Jun 2025 19:16:02 +0000 Manifest this update: Mon 16 Jun 2025 19:16:01 +0000 Manifest next update: Mon 23 Jun 2025 19:16:01 +0000 Files and hashes: 1: 9ssujrx6iSv6FcRHs5gkoFjHVa4.crl (hash: RBdzrZpniUS8P3ibZy96NJpuVAsrzAL4ESmAtL1yamU=) 2: 2902D956492411EAAC15FB67C4F9AE02.roa (hash: ndMYLuFm1npGXhTqyafB2ux+qylKnhbABDCIs0+SmbQ=) 3: 82C388B8492511EAB59F4F6EC4F9AE02.roa (hash: DJ5UPh4W8eU78pV9FNPBPxM5RGyD7+r3WrHHI7kvMUo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B9EF3/2519CDF0492311EAA069A566C4F9AE02/9ssujrx6iSv6FcRHs5gkoFjHVa4.crl rsync://rpki.apnic.net/member_repository/A91B9EF3/2519CDF0492311EAA069A566C4F9AE02/9ssujrx6iSv6FcRHs5gkoFjHVa4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ssujrx6iSv6FcRHs5gkoFjHVa4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Jun 2025 19:16:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2808 (0xaf8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B9EF3, serialNumber=F6CB2E8EBC7A892BFA15C447B39824A058C755AE Validity Not Before: Jun 16 19:16:01 2025 GMT Not After : Jun 23 19:16:01 2025 GMT Subject: CN=68506d72-cfd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:30:75:ff:94:82:55:2a:c2:08:43:f6:98:d4: 1a:21:ec:3f:76:17:29:51:7f:45:09:f3:c2:be:9b: 10:33:24:4b:51:13:56:30:de:f9:e3:15:ce:89:51: 5b:7d:e4:7a:6e:b6:9e:22:2a:4f:2a:7f:e9:01:a7: d9:88:ea:52:a6:1f:38:c2:4a:4d:18:ce:3a:28:8d: 4c:84:e0:d5:ae:2c:14:85:22:a3:d9:78:37:ba:70: c1:58:0a:19:e2:81:eb:07:46:4b:2d:f9:c3:4e:95: e6:e3:c2:a3:6d:67:75:34:ad:cd:cb:1c:0f:4d:f2: c2:d6:bd:a3:e6:7b:b7:f1:60:49:44:ec:c5:9b:6c: 18:cc:da:6c:9f:5d:e6:79:91:f1:c0:3f:36:60:85: be:58:95:f7:77:e4:68:ff:1e:29:2c:3b:48:86:13: 2b:35:81:64:7a:bd:39:61:a0:9e:71:27:67:55:ad: 36:46:8d:8f:c2:37:55:03:19:72:cb:0d:7f:27:67: 10:e7:2d:96:c1:39:d1:b8:64:26:d5:f2:20:56:83: d1:96:69:34:8c:5c:01:76:8e:e4:8c:42:b3:8d:73: 7f:b4:77:47:f2:3b:4f:d1:8f:50:25:66:40:c7:9b: 6b:30:61:90:f1:fe:79:e9:af:63:37:bd:3a:01:79: 5b:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:37:54:34:CA:BA:EB:D8:86:8B:82:D7:D7:6B:E5:8F:25:7E:DD:5E X509v3 Authority Key Identifier: keyid:F6:CB:2E:8E:BC:7A:89:2B:FA:15:C4:47:B3:98:24:A0:58:C7:55:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B9EF3/2519CDF0492311EAA069A566C4F9AE02/9ssujrx6iSv6FcRHs5gkoFjHVa4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ssujrx6iSv6FcRHs5gkoFjHVa4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9EF3/2519CDF0492311EAA069A566C4F9AE02/9ssujrx6iSv6FcRHs5gkoFjHVa4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:fe:f5:69:0e:6c:71:2b:cd:e4:cf:e5:6d:3d:2b:0e:c2:81: a1:d1:1a:92:22:85:e1:9a:4e:60:cd:2e:47:d3:5b:f1:3f:a5: 86:71:c8:34:3c:59:12:5e:4f:ff:6b:96:7f:56:8d:23:66:a4: da:4c:59:9d:6f:4c:4b:31:b6:fe:66:85:2f:40:cd:4f:40:de: 5f:6f:d4:0f:c7:f2:ad:40:c9:f1:4e:4b:6f:fe:95:51:51:ea: 95:a7:ac:54:65:73:fb:95:7c:64:ec:d8:ae:f8:ee:f6:b0:1b: 8c:a5:21:07:2c:30:da:82:88:fc:05:de:d3:48:99:10:fe:d6: af:15:79:47:5a:e5:8b:36:cf:6d:16:75:4d:ff:98:39:11:3f: 56:c5:9d:64:e3:04:06:20:78:bf:e0:e1:ac:8f:68:69:e2:5e: b9:60:53:af:17:96:4a:96:50:c4:31:60:b4:05:e8:4e:32:3f: d6:94:d1:60:c5:ed:8d:e9:ec:8e:52:f5:02:6c:6d:6a:d5:61: 8f:17:69:88:00:c6:33:1b:fe:ff:7c:d8:fc:d8:b5:47:38:ef: f2:06:f9:4e:a8:61:43:f1:09:5a:15:11:97:16:b3:07:69:5c: 64:91:17:03:64:22:da:1a:51:7c:97:98:9f:a4:93:a5:29:f5: d5:e7:25:ec -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCvgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjlFRjMxMTAvBgNVBAUTKEY2Q0IyRThFQkM3QTg5MkJGQTE1QzQ0N0IzOTgyNEEw NThDNzU1QUUwHhcNMjUwNjE2MTkxNjAxWhcNMjUwNjIzMTkxNjAxWjAYMRYwFAYD VQQDEw02ODUwNmQ3Mi1jZmQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8zB1/5SCVSrCCEP2mNQaIew/dhcpUX9FCfPCvpsQMyRLURNWMN754xXOiVFb feR6braeIipPKn/pAafZiOpSph84wkpNGM46KI1MhODVriwUhSKj2Xg3unDBWAoZ 4oHrB0ZLLfnDTpXm48KjbWd1NK3NyxwPTfLC1r2j5nu38WBJROzFm2wYzNpsn13m eZHxwD82YIW+WJX3d+Ro/x4pLDtIhhMrNYFker05YaCecSdnVa02Ro2PwjdVAxly yw1/J2cQ5y2WwTnRuGQm1fIgVoPRlmk0jFwBdo7kjEKzjXN/tHdH8jtP0Y9QJWZA x5trMGGQ8f556a9jN706AXlbTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLM3VDTK uuvYhouC19dr5Y8lft1eMB8GA1UdIwQYMBaAFPbLLo68eokr+hXER7OYJKBYx1Wu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOUVGMy8yNTE5Q0RGMDQ5 MjMxMUVBQTA2OUE1NjZDNEY5QUUwMi85c3N1anJ4NmlTdjZGY1JIczVna29GakhW YTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlzc3Vqcng2aVN2NkZjUkhzNWdrb0ZqSFZhNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OUVGMy8yNTE5Q0RGMDQ5MjMxMUVBQTA2OUE1NjZDNEY5QUUwMi85c3N1anJ4NmlT djZGY1JIczVna29GakhWYTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBE/vVpDmxxK83kz+VtPSsOwoGh0RqSIoXhmk5gzS5H01vxP6WGccg0 PFkSXk//a5Z/Vo0jZqTaTFmdb0xLMbb+ZoUvQM1PQN5fb9QPx/KtQMnxTktv/pVR UeqVp6xUZXP7lXxk7Niu+O72sBuMpSEHLDDagoj8Bd7TSJkQ/tavFXlHWuWLNs9t FnVN/5g5ET9WxZ1k4wQGIHi/4OGsj2hp4l65YFOvF5ZKllDEMWC0BehOMj/WlNFg xe2N6eyOUvUCbG1q1WGPF2mIAMYzG/7/fNj82LVHOO/yBvlOqGFD8QlaFRGXFrMH aVxkkRcDZCLaGlF8l5ifpJOlKfXV5yXs -----END CERTIFICATE-----Generated at Wed Jun 18 06:47:05 2025 by rpki-client