$ rpki-client -vvf rpki.apnic.net/member_repository/A91BCC23/925C80CE81E111EE8CF66B0AC4F9AE02/88hJQLK99AJViHBvWcHm7D0hR_A.mft File: 88hJQLK99AJViHBvWcHm7D0hR_A.mft (raw, json) Hash identifier: wvvffzrevNxdtePxRBMF8QRAVlsk0t76Mn1rIv7zACQ= Subject key identifier: 92:D0:CC:ED:51:68:03:53:A9:63:B6:96:76:8D:29:5D:73:37:61:A3 Authority key identifier: F3:C8:49:40:B2:BD:F4:02:55:88:70:6F:59:C1:E6:EC:3D:21:47:F0 Certificate issuer: /CN=A91BCC23/serialNumber=F3C84940B2BDF4025588706F59C1E6EC3D2147F0 Certificate serial: 012A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/88hJQLK99AJViHBvWcHm7D0hR_A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BCC23/925C80CE81E111EE8CF66B0AC4F9AE02/88hJQLK99AJViHBvWcHm7D0hR_A.mft Manifest number: 0127 Signing time: Fri 13 Jun 2025 03:34:46 +0000 Manifest this update: Fri 13 Jun 2025 03:34:46 +0000 Manifest next update: Fri 20 Jun 2025 03:34:46 +0000 Files and hashes: 1: 88hJQLK99AJViHBvWcHm7D0hR_A.crl (hash: j9OCvrQd8E7exk1EEKNc6aRF/y8RhPyNvI88jyJ/rC0=) 2: D36C048A81E211EEAF423C87C4F9AE02.roa (hash: AgEcJkKDpEPBaGjrS9V0jt2iST6E+qzc3K1SEhivhc4=) 3: FC3C8A6A81E211EE963BAB87C4F9AE02.roa (hash: 548P4XWsPS3JTWuhyip3nqsrffc51BRt/khZw2JCljI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BCC23/925C80CE81E111EE8CF66B0AC4F9AE02/88hJQLK99AJViHBvWcHm7D0hR_A.crl rsync://rpki.apnic.net/member_repository/A91BCC23/925C80CE81E111EE8CF66B0AC4F9AE02/88hJQLK99AJViHBvWcHm7D0hR_A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/88hJQLK99AJViHBvWcHm7D0hR_A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 03:34:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 298 (0x12a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BCC23, serialNumber=F3C84940B2BDF4025588706F59C1E6EC3D2147F0 Validity Not Before: Jun 13 03:34:46 2025 GMT Not After : Jun 20 03:34:46 2025 GMT Subject: CN=684b9c56-5257 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:cb:93:0a:c9:8f:51:e4:37:4e:f1:e8:61:87: 67:c7:fa:08:0e:71:64:e5:0a:f0:26:d4:a6:8e:e0: 00:4a:a3:83:b9:f7:61:84:0d:ad:e7:96:b8:1e:e1: 3c:d0:fe:56:22:84:8c:49:c7:f5:4c:c6:c3:6a:3a: 12:2a:4e:e2:3a:d7:2d:7e:97:fc:ad:f9:c4:fc:9e: d7:cb:9e:6a:98:17:a4:a1:17:9c:e8:b6:e3:d7:7b: a8:04:51:63:25:c7:89:b5:b1:26:f4:e7:51:5e:a9: d7:1d:36:b0:9d:b1:cf:7e:5f:26:07:01:99:6b:25: 27:5f:80:2e:90:d0:93:c9:9b:a3:b4:bb:6f:b4:54: 57:2a:12:83:74:fe:bb:f7:b0:e9:84:5f:a8:96:81: 5f:80:4f:4f:33:fc:45:89:86:bc:18:7a:f6:83:8e: d9:7a:e7:d1:9e:ff:46:31:1b:63:9f:18:bb:e7:c3: fc:eb:16:3a:61:2e:ad:92:3d:07:8d:c7:d3:99:9a: db:6f:16:05:89:1e:3b:63:1b:e6:ea:ec:18:76:ed: bf:e3:94:65:b9:5a:94:09:de:fb:25:3b:8f:40:5d: f0:df:e3:a5:f2:fe:19:21:26:3a:53:04:5d:cc:e1: 5f:85:7a:f4:a9:2e:a8:32:a2:51:34:82:7b:a7:93: 0a:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:D0:CC:ED:51:68:03:53:A9:63:B6:96:76:8D:29:5D:73:37:61:A3 X509v3 Authority Key Identifier: keyid:F3:C8:49:40:B2:BD:F4:02:55:88:70:6F:59:C1:E6:EC:3D:21:47:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BCC23/925C80CE81E111EE8CF66B0AC4F9AE02/88hJQLK99AJViHBvWcHm7D0hR_A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/88hJQLK99AJViHBvWcHm7D0hR_A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BCC23/925C80CE81E111EE8CF66B0AC4F9AE02/88hJQLK99AJViHBvWcHm7D0hR_A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:8c:09:d3:4a:b6:ab:85:2b:36:46:2e:6a:03:3b:48:5c:a3: 43:f4:a8:4a:47:61:6e:ea:a8:3e:06:f4:96:16:88:93:24:f9: 21:a4:d8:54:5c:96:86:60:95:ee:cb:25:32:c1:2f:db:ba:69: ff:b9:aa:ab:a4:c5:e0:81:25:e1:4c:cc:c2:56:5d:45:c6:c5: c3:3b:25:50:97:25:ad:c5:86:a5:8c:19:1a:9a:18:2d:cd:a7: 26:a1:04:41:06:cf:30:4e:77:c5:ee:9b:b2:c4:74:f6:09:dd: c8:33:a9:32:0c:73:48:df:55:14:11:9a:92:f2:9f:e0:93:bf: a2:d2:c7:5b:d1:06:41:ea:7f:b2:f0:0b:42:07:57:32:29:2b: 88:9c:27:05:8a:e0:8e:ec:54:a4:bb:60:03:56:50:f9:e2:66: 8f:af:ae:eb:fd:1e:20:83:83:7c:37:46:b1:3e:c8:98:fe:b4: 5f:10:61:48:aa:af:09:8d:cf:29:97:8d:a0:43:0e:27:dd:49: a0:b1:b9:ed:16:0b:80:05:48:5e:83:88:20:10:25:e3:08:25: 85:bf:42:15:c3:69:a4:28:65:ca:3a:fc:fd:64:bf:db:c2:2c: 35:27:28:66:ca:5e:4d:42:bc:19:dc:80:4a:42:40:f6:0b:d9: 7a:74:50:a4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkNDMjMxMTAvBgNVBAUTKEYzQzg0OTQwQjJCREY0MDI1NTg4NzA2RjU5QzFFNkVD M0QyMTQ3RjAwHhcNMjUwNjEzMDMzNDQ2WhcNMjUwNjIwMDMzNDQ2WjAYMRYwFAYD VQQDEw02ODRiOWM1Ni01MjU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn8uTCsmPUeQ3TvHoYYdnx/oIDnFk5QrwJtSmjuAASqODufdhhA2t55a4HuE8 0P5WIoSMScf1TMbDajoSKk7iOtctfpf8rfnE/J7Xy55qmBekoRec6Lbj13uoBFFj JceJtbEm9OdRXqnXHTawnbHPfl8mBwGZayUnX4AukNCTyZujtLtvtFRXKhKDdP67 97DphF+oloFfgE9PM/xFiYa8GHr2g47ZeufRnv9GMRtjnxi758P86xY6YS6tkj0H jcfTmZrbbxYFiR47Yxvm6uwYdu2/45RluVqUCd77JTuPQF3w3+Ol8v4ZISY6UwRd zOFfhXr0qS6oMqJRNIJ7p5MK3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJLQzO1R aANTqWO2lnaNKV1zN2GjMB8GA1UdIwQYMBaAFPPISUCyvfQCVYhwb1nB5uw9IUfw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQ0MyMy85MjVDODBDRTgx RTExMUVFOENGNjZCMEFDNEY5QUUwMi84OGhKUUxLOTlBSlZpSEJ2V2NIbTdEMGhS X0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzg4aEpRTEs5OUFKVmlIQnZXY0htN0QwaFJfQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Q0MyMy85MjVDODBDRTgxRTExMUVFOENGNjZCMEFDNEY5QUUwMi84OGhKUUxLOTlB SlZpSEJ2V2NIbTdEMGhSX0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBYjAnTSrarhSs2Ri5qAztIXKND9KhKR2Fu6qg+BvSWFoiTJPkhpNhU XJaGYJXuyyUywS/bumn/uaqrpMXggSXhTMzCVl1FxsXDOyVQlyWtxYaljBkamhgt zacmoQRBBs8wTnfF7puyxHT2Cd3IM6kyDHNI31UUEZqS8p/gk7+i0sdb0QZB6n+y 8AtCB1cyKSuInCcFiuCO7FSku2ADVlD54maPr67r/R4gg4N8N0axPsiY/rRfEGFI qq8Jjc8pl42gQw4n3UmgsbntFguABUheg4ggECXjCCWFv0IVw2mkKGXKOvz9ZL/b wiw1Jyhmyl5NQrwZ3IBKQkD2C9l6dFCk -----END CERTIFICATE-----Generated at Sun Jun 15 05:40:58 2025 by rpki-client