$ rpki-client -vvf rpki.apnic.net/member_repository/A91BAFCE/2D34C392B29C11ED98A8314AC4F9AE02/-9GoSKH4mo0k2wtoF6CH-y313wg.mft File: -9GoSKH4mo0k2wtoF6CH-y313wg.mft (raw, json) Hash identifier: ldNrZ7QbrOzjw/dDmzeGZ3NZA/JkLavm9tPiNKU5Mv4= Subject key identifier: 14:8B:EA:D8:DC:87:A6:1D:E2:E7:03:02:B7:44:3A:E7:67:39:A0:5C Authority key identifier: FB:D1:A8:48:A1:F8:9A:8D:24:DB:0B:68:17:A0:87:FB:2D:F5:DF:08 Certificate issuer: /CN=A91BAFCE/serialNumber=FBD1A848A1F89A8D24DB0B6817A087FB2DF5DF08 Certificate serial: 01B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-9GoSKH4mo0k2wtoF6CH-y313wg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BAFCE/2D34C392B29C11ED98A8314AC4F9AE02/-9GoSKH4mo0k2wtoF6CH-y313wg.mft Manifest number: 01B0 Signing time: Fri 13 Jun 2025 02:12:05 +0000 Manifest this update: Fri 13 Jun 2025 02:12:04 +0000 Manifest next update: Fri 20 Jun 2025 02:12:04 +0000 Files and hashes: 1: -9GoSKH4mo0k2wtoF6CH-y313wg.crl (hash: 9vyp0+m9/MmS33E6cOxd6UMjUYmP7BkYwTLevYxn4qY=) 2: 37C8FE80B2A211ED9A5C4B53C4F9AE02.roa (hash: RFveBx12nYjQL7C6dI7Z0G+EUk4Kgzyh1OTU3yziD98=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BAFCE/2D34C392B29C11ED98A8314AC4F9AE02/-9GoSKH4mo0k2wtoF6CH-y313wg.crl rsync://rpki.apnic.net/member_repository/A91BAFCE/2D34C392B29C11ED98A8314AC4F9AE02/-9GoSKH4mo0k2wtoF6CH-y313wg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-9GoSKH4mo0k2wtoF6CH-y313wg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 02:12:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 435 (0x1b3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BAFCE, serialNumber=FBD1A848A1F89A8D24DB0B6817A087FB2DF5DF08 Validity Not Before: Jun 13 02:12:04 2025 GMT Not After : Jun 20 02:12:04 2025 GMT Subject: CN=684b88f5-65c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:70:6e:ea:3b:f9:88:e0:3a:3a:9d:16:7b:97: 99:d3:bd:ea:86:f3:79:95:58:64:f2:a1:ad:35:85: 36:78:8d:ef:d0:0f:71:f6:64:8e:f6:72:04:a3:9b: 87:2c:56:55:6c:66:4e:80:53:0a:da:e4:13:35:78: 97:b0:c4:0f:d6:b6:1b:ba:d0:11:8a:b0:1e:da:96: 83:75:af:fb:b1:2e:02:5e:5e:f8:9c:c8:4e:2b:23: 32:cd:46:fd:41:bc:2c:7f:3e:e7:5c:9c:7e:da:33: 49:84:08:b4:6c:2f:ab:d7:31:0b:83:47:ff:3c:67: 25:c6:2c:a3:d8:a7:ec:b1:eb:0b:38:01:76:5c:75: 40:5b:e4:bf:59:7b:3c:0c:e6:0f:1b:53:7a:02:ad: 3e:00:73:27:e6:4f:8b:4b:59:4d:ec:3b:d0:fc:66: 58:a4:d9:79:30:30:fd:22:20:42:27:d6:87:c1:8d: 7b:56:08:fb:e4:a9:b4:46:18:b6:af:a5:52:29:b7: f1:a9:4a:c2:8b:c3:81:24:25:23:da:22:66:b9:cd: 8e:6f:87:cd:bd:04:fa:c0:ad:75:dc:dd:29:58:65: 34:f5:dd:4f:84:65:ee:4c:5a:57:ca:a8:6f:13:9d: b6:3f:d2:fc:f9:ce:03:74:c9:8a:25:ef:00:1f:13: 77:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:8B:EA:D8:DC:87:A6:1D:E2:E7:03:02:B7:44:3A:E7:67:39:A0:5C X509v3 Authority Key Identifier: keyid:FB:D1:A8:48:A1:F8:9A:8D:24:DB:0B:68:17:A0:87:FB:2D:F5:DF:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BAFCE/2D34C392B29C11ED98A8314AC4F9AE02/-9GoSKH4mo0k2wtoF6CH-y313wg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-9GoSKH4mo0k2wtoF6CH-y313wg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BAFCE/2D34C392B29C11ED98A8314AC4F9AE02/-9GoSKH4mo0k2wtoF6CH-y313wg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:58:28:9a:e4:4a:83:92:4e:b2:fb:7b:5f:aa:d8:54:37:ec: ca:78:be:aa:77:28:b1:d4:79:af:e8:35:67:bd:75:a9:7c:f3: 59:73:79:29:3c:c7:58:4f:41:7b:a1:34:31:94:4a:79:c9:03: 4f:2a:ac:e6:26:16:67:27:6c:bf:21:95:c2:bd:30:44:9f:9c: f1:74:4d:7c:91:33:93:c9:65:c4:c5:6e:bf:ee:a4:a2:45:50: 1b:d5:8a:cc:04:38:c8:1d:b5:73:3f:71:52:ab:aa:fa:b5:46: 2d:af:9a:bb:c6:95:7c:07:50:1b:1a:30:bc:9f:3b:e4:e5:08: 4a:03:60:6b:af:bb:05:c4:a6:1f:a3:1f:b4:a3:95:ec:9d:2a: 14:99:43:dd:7a:d1:0c:f7:9e:a8:25:0f:42:7d:f5:b5:0d:4e: 07:b7:7a:c7:cb:fc:8a:3b:29:12:bb:a1:42:6e:fe:f0:c6:3a: 18:a7:ae:04:95:13:bf:1c:e8:f4:42:e8:0f:7e:e5:0c:00:e1: fe:eb:5a:b0:7a:da:28:5d:06:f4:87:1c:4e:fc:3f:2b:a0:50: 55:4d:06:5d:46:b0:c6:19:8c:07:49:d7:5b:c2:83:e5:d2:f2: 20:76:49:66:f8:6e:b6:97:a8:66:a8:c4:63:9d:6a:09:18:5c: d3:bb:ef:69 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkFGQ0UxMTAvBgNVBAUTKEZCRDFBODQ4QTFGODlBOEQyNERCMEI2ODE3QTA4N0ZC MkRGNURGMDgwHhcNMjUwNjEzMDIxMjA0WhcNMjUwNjIwMDIxMjA0WjAYMRYwFAYD VQQDEw02ODRiODhmNS02NWM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAznBu6jv5iOA6Op0We5eZ073qhvN5lVhk8qGtNYU2eI3v0A9x9mSO9nIEo5uH LFZVbGZOgFMK2uQTNXiXsMQP1rYbutARirAe2paDda/7sS4CXl74nMhOKyMyzUb9 Qbwsfz7nXJx+2jNJhAi0bC+r1zELg0f/PGclxiyj2KfssesLOAF2XHVAW+S/WXs8 DOYPG1N6Aq0+AHMn5k+LS1lN7DvQ/GZYpNl5MDD9IiBCJ9aHwY17Vgj75Km0Rhi2 r6VSKbfxqUrCi8OBJCUj2iJmuc2Ob4fNvQT6wK113N0pWGU09d1PhGXuTFpXyqhv E522P9L8+c4DdMmKJe8AHxN3WwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBSL6tjc h6Yd4ucDArdEOudnOaBcMB8GA1UdIwQYMBaAFPvRqEih+JqNJNsLaBegh/st9d8I MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQUZDRS8yRDM0QzM5MkIy OUMxMUVEOThBODMxNEFDNEY5QUUwMi8tOUdvU0tING1vMGsyd3RvRjZDSC15MzEz d2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy05R29TS0g0bW8wazJ3dG9GNkNILXkzMTN3Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QUZDRS8yRDM0QzM5MkIyOUMxMUVEOThBODMxNEFDNEY5QUUwMi8tOUdvU0tING1v MGsyd3RvRjZDSC15MzEzd2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAEWCia5EqDkk6y+3tfqthUN+zKeL6qdyix1Hmv6DVnvXWpfPNZc3kp PMdYT0F7oTQxlEp5yQNPKqzmJhZnJ2y/IZXCvTBEn5zxdE18kTOTyWXExW6/7qSi RVAb1YrMBDjIHbVzP3FSq6r6tUYtr5q7xpV8B1AbGjC8nzvk5QhKA2Brr7sFxKYf ox+0o5XsnSoUmUPdetEM956oJQ9CffW1DU4Ht3rHy/yKOykSu6FCbv7wxjoYp64E lRO/HOj0QugPfuUMAOH+61qwetooXQb0hxxO/D8roFBVTQZdRrDGGYwHSddbwoPl 0vIgdklm+G62l6hmqMRjnWoJGFzTu+9p -----END CERTIFICATE-----Generated at Sat Jun 14 18:49:24 2025 by rpki-client