$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC6A6/A2C621A05F3911EF85DC8E2DC4F9AE02/pLh_nflqIHJhuXtMnjjIO1yA1m4.mft File: pLh_nflqIHJhuXtMnjjIO1yA1m4.mft (raw, json) Hash identifier: k8G/bIXYAm/mR8PWdT6yWOTBi1lO+ywefOUWCW2VbWY= Subject key identifier: 49:A6:8A:C2:9A:53:0F:19:0C:92:B3:F1:17:27:21:CD:DA:5E:C3:D7 Authority key identifier: A4:B8:7F:9D:F9:6A:20:72:61:B9:7B:4C:9E:38:C8:3B:5C:80:D6:6E Certificate issuer: /CN=A91BC6A6/serialNumber=A4B87F9DF96A207261B97B4C9E38C83B5C80D66E Certificate serial: 9C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pLh_nflqIHJhuXtMnjjIO1yA1m4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BC6A6/A2C621A05F3911EF85DC8E2DC4F9AE02/pLh_nflqIHJhuXtMnjjIO1yA1m4.mft Manifest number: 9A Signing time: Fri 13 Jun 2025 05:15:45 +0000 Manifest this update: Fri 13 Jun 2025 05:15:45 +0000 Manifest next update: Fri 20 Jun 2025 05:15:45 +0000 Files and hashes: 1: pLh_nflqIHJhuXtMnjjIO1yA1m4.crl (hash: ANIDLPEnwu8is5hZ26Oeq87vuLKJLdXuhKbscaMIBpE=) 2: E2FE5F1C5F3911EF9C33492EC4F9AE02.roa (hash: w7XAoEqzOUn2fN+Z5QNERvhpDDcLRxuYcXrspPvLSME=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BC6A6/A2C621A05F3911EF85DC8E2DC4F9AE02/pLh_nflqIHJhuXtMnjjIO1yA1m4.crl rsync://rpki.apnic.net/member_repository/A91BC6A6/A2C621A05F3911EF85DC8E2DC4F9AE02/pLh_nflqIHJhuXtMnjjIO1yA1m4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pLh_nflqIHJhuXtMnjjIO1yA1m4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 05:15:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 156 (0x9c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BC6A6, serialNumber=A4B87F9DF96A207261B97B4C9E38C83B5C80D66E Validity Not Before: Jun 13 05:15:45 2025 GMT Not After : Jun 20 05:15:45 2025 GMT Subject: CN=684bb401-8c56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:44:95:3b:34:55:a9:a3:ca:74:c5:2b:42:5d: 0f:78:a4:f0:76:f0:5c:74:c4:96:a4:5d:5b:60:b1: 13:31:07:7a:51:54:8a:68:ff:40:b3:6a:54:72:dc: ac:18:74:3d:86:1b:c1:e0:b2:2c:9a:9c:7b:98:b1: 3a:39:96:d0:42:ea:b2:04:6b:c4:61:e9:9c:1a:49: 4c:58:66:e2:5f:e8:12:9b:79:fa:4c:fe:69:79:3f: 91:79:df:a0:58:06:31:aa:58:57:73:6f:83:e1:7c: 8e:4e:18:be:c3:9a:0d:18:77:2e:a9:56:dc:25:77: 43:16:63:2c:c2:a4:30:a4:91:de:c8:5a:53:09:c1: 80:89:a3:e7:e5:2a:85:20:7e:46:5f:bd:e5:0e:b3: c0:94:49:84:ee:e3:5e:7b:30:ab:92:49:7a:ba:07: 93:20:b6:5a:5f:2d:6f:28:81:a8:59:7f:2d:72:6e: 4f:a7:79:22:dc:29:7c:a1:f7:75:84:bc:20:2a:05: c1:08:39:40:14:d1:20:2b:1b:56:12:ed:64:f2:e8: 63:5d:4c:c5:26:72:b8:13:8d:a1:6f:aa:6c:41:30: ab:29:cb:2d:fb:64:6b:3f:81:04:00:36:ac:17:0b: 2b:ac:49:59:b0:d1:ec:e8:64:4e:0b:e2:b7:d1:11: 77:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:A6:8A:C2:9A:53:0F:19:0C:92:B3:F1:17:27:21:CD:DA:5E:C3:D7 X509v3 Authority Key Identifier: keyid:A4:B8:7F:9D:F9:6A:20:72:61:B9:7B:4C:9E:38:C8:3B:5C:80:D6:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BC6A6/A2C621A05F3911EF85DC8E2DC4F9AE02/pLh_nflqIHJhuXtMnjjIO1yA1m4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pLh_nflqIHJhuXtMnjjIO1yA1m4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC6A6/A2C621A05F3911EF85DC8E2DC4F9AE02/pLh_nflqIHJhuXtMnjjIO1yA1m4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:a9:fa:c8:f0:d4:20:19:f2:6c:ec:b4:e1:cd:ad:09:8c:24: 80:61:d6:c7:a6:80:93:76:cd:f0:e2:ba:ed:c3:8c:19:15:05: 01:1b:5d:b9:8c:c7:ce:44:a6:69:7c:45:be:81:82:13:11:41: 8a:9b:b1:b3:b5:9c:25:db:9a:6c:06:ba:27:b0:ae:7a:3f:ce: 7b:c4:ac:fa:03:75:6e:be:10:4a:fe:01:49:84:10:3f:62:bc: a7:59:21:01:c1:e5:1d:45:e7:c9:7f:48:3a:40:92:15:c2:a2: d0:ed:95:72:fa:1d:cc:1f:61:8c:8b:68:96:3c:09:33:a9:3d: 62:63:61:35:56:29:67:7f:f4:01:aa:0c:ff:a3:fe:3e:7b:ef: 4d:3f:88:e8:eb:62:67:06:b0:8f:62:51:23:2d:97:b4:2d:a0: 88:84:04:38:80:f1:44:e7:49:f4:af:cb:e7:9f:d3:99:88:3c: 7b:52:70:70:52:19:44:f7:76:fb:65:f4:78:d3:6e:89:29:7e: 3f:0e:18:a3:65:8f:83:e8:32:34:61:e8:a5:b4:fe:09:ec:6b: 65:bf:e3:ec:d4:64:68:b4:33:de:6e:1b:b3:4e:3b:bd:f0:2c: 5f:14:fc:4a:c4:8f:d8:01:6b:e4:62:c9:d8:3c:f1:8a:07:0e: 4f:7c:49:a4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkM2QTYxMTAvBgNVBAUTKEE0Qjg3RjlERjk2QTIwNzI2MUI5N0I0QzlFMzhDODNC NUM4MEQ2NkUwHhcNMjUwNjEzMDUxNTQ1WhcNMjUwNjIwMDUxNTQ1WjAYMRYwFAYD VQQDEw02ODRiYjQwMS04YzU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvESVOzRVqaPKdMUrQl0PeKTwdvBcdMSWpF1bYLETMQd6UVSKaP9As2pUctys GHQ9hhvB4LIsmpx7mLE6OZbQQuqyBGvEYemcGklMWGbiX+gSm3n6TP5peT+Red+g WAYxqlhXc2+D4XyOThi+w5oNGHcuqVbcJXdDFmMswqQwpJHeyFpTCcGAiaPn5SqF IH5GX73lDrPAlEmE7uNeezCrkkl6ugeTILZaXy1vKIGoWX8tcm5Pp3ki3Cl8ofd1 hLwgKgXBCDlAFNEgKxtWEu1k8uhjXUzFJnK4E42hb6psQTCrKcst+2RrP4EEADas FwsrrElZsNHs6GROC+K30RF3lwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEmmisKa Uw8ZDJKz8RcnIc3aXsPXMB8GA1UdIwQYMBaAFKS4f535aiByYbl7TJ44yDtcgNZu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzZBNi9BMkM2MjFBMDVG MzkxMUVGODVEQzhFMkRDNEY5QUUwMi9wTGhfbmZscUlISmh1WHRNbmpqSU8xeUEx bTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BMaF9uZmxxSUhKaHVYdE1uampJTzF5QTFtNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QzZBNi9BMkM2MjFBMDVGMzkxMUVGODVEQzhFMkRDNEY5QUUwMi9wTGhfbmZscUlI Smh1WHRNbmpqSU8xeUExbTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAGqfrI8NQgGfJs7LThza0JjCSAYdbHpoCTds3w4rrtw4wZFQUBG125 jMfORKZpfEW+gYITEUGKm7GztZwl25psBronsK56P857xKz6A3VuvhBK/gFJhBA/ YrynWSEBweUdRefJf0g6QJIVwqLQ7ZVy+h3MH2GMi2iWPAkzqT1iY2E1Vilnf/QB qgz/o/4+e+9NP4jo62JnBrCPYlEjLZe0LaCIhAQ4gPFE50n0r8vnn9OZiDx7UnBw UhlE93b7ZfR4026JKX4/DhijZY+D6DI0YeiltP4J7Gtlv+Ps1GRotDPebhuzTju9 8CxfFPxKxI/YAWvkYsnYPPGKBw5PfEmk -----END CERTIFICATE-----Generated at Sat Jun 14 19:33:58 2025 by rpki-client