$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD090/2DCE048CA64511EA861AD35EC4F9AE02/5VpZVzhbbPjKDASB1i3f_asSwfQ.mft File: 5VpZVzhbbPjKDASB1i3f_asSwfQ.mft (raw, json) Hash identifier: oQcUUG/v3mp9FNYjavGNsmJB0ZU4gA5gUkuxWBQMmPw= Subject key identifier: F9:77:96:E3:AC:C6:46:AC:29:79:F1:0D:BB:C7:B5:9B:24:91:64:35 Authority key identifier: E5:5A:59:57:38:5B:6C:F8:CA:0C:04:81:D6:2D:DF:FD:AB:12:C1:F4 Certificate issuer: /CN=A91BD090/serialNumber=E55A5957385B6CF8CA0C0481D62DDFFDAB12C1F4 Certificate serial: 091E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5VpZVzhbbPjKDASB1i3f_asSwfQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BD090/2DCE048CA64511EA861AD35EC4F9AE02/5VpZVzhbbPjKDASB1i3f_asSwfQ.mft Manifest number: 0916 Signing time: Mon 16 Jun 2025 20:07:47 +0000 Manifest this update: Mon 16 Jun 2025 20:07:46 +0000 Manifest next update: Mon 23 Jun 2025 20:07:46 +0000 Files and hashes: 1: 5VpZVzhbbPjKDASB1i3f_asSwfQ.crl (hash: 6IiPlnb1yrD/IYHxKL+Brual8/ARH77bvPFLgchCvKE=) 2: A1F46062A64611EAA24E1461C4F9AE02.roa (hash: WPQQ6V7efa7fb8nJuM/CRZGnnAAa2WyVzIIakNwqKYA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BD090/2DCE048CA64511EA861AD35EC4F9AE02/5VpZVzhbbPjKDASB1i3f_asSwfQ.crl rsync://rpki.apnic.net/member_repository/A91BD090/2DCE048CA64511EA861AD35EC4F9AE02/5VpZVzhbbPjKDASB1i3f_asSwfQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5VpZVzhbbPjKDASB1i3f_asSwfQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Jun 2025 20:07:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2334 (0x91e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BD090, serialNumber=E55A5957385B6CF8CA0C0481D62DDFFDAB12C1F4 Validity Not Before: Jun 16 20:07:46 2025 GMT Not After : Jun 23 20:07:46 2025 GMT Subject: CN=68507992-40e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ab:35:a8:f4:fa:5d:67:5a:36:be:41:06:48: 9b:e1:9f:44:8e:88:65:2a:db:94:39:4a:0f:94:b9: 21:aa:48:3e:a6:97:71:b2:07:ed:7e:57:12:e0:98: b7:3d:1b:a0:63:ce:e0:c5:ed:f9:41:1a:1f:80:c9: 3b:11:ac:e1:bc:06:05:2b:d1:54:e4:72:58:37:25: 62:b7:a1:db:0c:77:1e:6c:f3:95:84:a7:ae:ee:53: 42:35:e0:e8:36:43:77:14:04:fc:bd:71:1e:0d:b3: eb:d7:d4:25:db:df:ed:ae:14:10:0b:e2:af:14:be: 34:a1:d1:29:aa:5c:35:60:29:16:1a:51:29:de:76: 86:5a:c1:50:47:50:6d:d9:a3:f6:15:62:0b:61:c7: 46:f3:b1:eb:5b:5f:24:49:50:fc:3c:50:eb:7e:0d: 03:1d:6d:e4:00:d1:f6:57:5f:62:9e:70:85:3a:05: 2d:1f:ac:c0:c4:cf:73:17:3e:b3:73:61:b6:46:9b: 50:4a:26:25:18:e3:23:2b:92:b0:91:a0:c9:cc:88: 0f:41:b6:e7:b9:84:39:6d:89:8b:f0:a6:a0:a9:e4: 44:d9:f2:3c:a0:3c:d7:29:ef:87:65:49:fb:aa:9c: f4:e2:e2:99:c9:d5:98:86:5b:e2:08:3c:01:a9:2b: 6c:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:77:96:E3:AC:C6:46:AC:29:79:F1:0D:BB:C7:B5:9B:24:91:64:35 X509v3 Authority Key Identifier: keyid:E5:5A:59:57:38:5B:6C:F8:CA:0C:04:81:D6:2D:DF:FD:AB:12:C1:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BD090/2DCE048CA64511EA861AD35EC4F9AE02/5VpZVzhbbPjKDASB1i3f_asSwfQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5VpZVzhbbPjKDASB1i3f_asSwfQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD090/2DCE048CA64511EA861AD35EC4F9AE02/5VpZVzhbbPjKDASB1i3f_asSwfQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:2d:f8:f1:0a:18:5e:c7:67:1d:7e:ff:58:82:4f:2a:10:d8: a7:ea:3e:f0:e3:f6:e7:6c:0e:c1:30:25:57:85:00:ce:28:2f: b8:5b:e6:41:12:4c:2c:a5:8a:2a:78:a3:b6:04:44:39:cc:9d: 7e:43:2f:13:0e:87:7b:d8:b6:3d:e3:ee:f4:e3:c3:31:d8:35: 18:6b:78:e9:8a:77:d4:3b:3e:d7:cc:a9:d7:63:e0:ea:a4:e0: bd:42:b2:7e:5d:2b:53:a3:9f:c2:15:c0:01:61:cd:88:a7:dd: e1:a8:1a:8e:73:a3:01:55:7d:7e:04:b1:71:d8:77:06:89:30: 20:a1:a4:19:ae:a2:bb:c4:fd:27:1d:65:0c:6a:f9:b9:ff:5e: ac:df:81:26:d6:2c:a0:71:27:99:b4:b2:0d:db:d1:ee:f9:93: d4:cd:d3:aa:62:ea:f6:2b:39:f4:a1:4f:83:2a:15:59:9b:bb: 49:05:67:8e:93:61:71:98:81:06:34:d2:3f:13:2f:bc:ad:61: 59:05:80:6c:b2:ec:f1:00:a4:2f:4e:98:2a:34:16:ea:cc:ef: be:8d:dd:f2:14:23:31:60:02:ee:5b:e0:a7:a3:63:ef:b8:55: bf:9b:c3:bb:57:7a:8a:74:0f:3e:2f:95:23:2f:99:c3:2d:97: 18:aa:c2:b4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCR4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkQwOTAxMTAvBgNVBAUTKEU1NUE1OTU3Mzg1QjZDRjhDQTBDMDQ4MUQ2MkRERkZE QUIxMkMxRjQwHhcNMjUwNjE2MjAwNzQ2WhcNMjUwNjIzMjAwNzQ2WjAYMRYwFAYD VQQDEw02ODUwNzk5Mi00MGU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwKs1qPT6XWdaNr5BBkib4Z9EjohlKtuUOUoPlLkhqkg+ppdxsgftflcS4Ji3 PRugY87gxe35QRofgMk7EazhvAYFK9FU5HJYNyVit6HbDHcebPOVhKeu7lNCNeDo NkN3FAT8vXEeDbPr19Ql29/trhQQC+KvFL40odEpqlw1YCkWGlEp3naGWsFQR1Bt 2aP2FWILYcdG87HrW18kSVD8PFDrfg0DHW3kANH2V19innCFOgUtH6zAxM9zFz6z c2G2RptQSiYlGOMjK5KwkaDJzIgPQbbnuYQ5bYmL8KagqeRE2fI8oDzXKe+HZUn7 qpz04uKZydWYhlviCDwBqStsDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPl3luOs xkasKXnxDbvHtZskkWQ1MB8GA1UdIwQYMBaAFOVaWVc4W2z4ygwEgdYt3/2rEsH0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRDA5MC8yRENFMDQ4Q0E2 NDUxMUVBODYxQUQzNUVDNEY5QUUwMi81VnBaVnpoYmJQaktEQVNCMWkzZl9hc1N3 ZlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVWcFpWemhiYlBqS0RBU0IxaTNmX2FzU3dmUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RDA5MC8yRENFMDQ4Q0E2NDUxMUVBODYxQUQzNUVDNEY5QUUwMi81VnBaVnpoYmJQ aktEQVNCMWkzZl9hc1N3ZlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBELfjxChhex2cdfv9Ygk8qENin6j7w4/bnbA7BMCVXhQDOKC+4W+ZB EkwspYoqeKO2BEQ5zJ1+Qy8TDod72LY94+7048Mx2DUYa3jpinfUOz7XzKnXY+Dq pOC9QrJ+XStTo5/CFcABYc2Ip93hqBqOc6MBVX1+BLFx2HcGiTAgoaQZrqK7xP0n HWUMavm5/16s34Em1iygcSeZtLIN29Hu+ZPUzdOqYur2Kzn0oU+DKhVZm7tJBWeO k2FxmIEGNNI/Ey+8rWFZBYBssuzxAKQvTpgqNBbqzO++jd3yFCMxYALuW+Cno2Pv uFW/m8O7V3qKdA8+L5UjL5nDLZcYqsK0 -----END CERTIFICATE-----Generated at Tue Jun 17 23:03:12 2025 by rpki-client