$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1B92/AABFC49ABD6011E9956A0F19C4F9AE02/t0bN0xcqIBHwIYn_La14fSnAEek.mft File: t0bN0xcqIBHwIYn_La14fSnAEek.mft (raw, json) Hash identifier: tagBtKGfRkyCxoclt3YGgSe44vKPWE5WzWCWhXBTsrI= Subject key identifier: 0D:8C:29:9C:62:5A:71:36:BF:3D:1F:D5:6F:98:12:90:F9:C3:9C:2C Authority key identifier: B7:46:CD:D3:17:2A:20:11:F0:21:89:FF:2D:AD:78:7D:29:C0:11:E9 Certificate issuer: /CN=A91C1B92/serialNumber=B746CDD3172A2011F02189FF2DAD787D29C011E9 Certificate serial: 0DBF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t0bN0xcqIBHwIYn_La14fSnAEek.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1B92/AABFC49ABD6011E9956A0F19C4F9AE02/t0bN0xcqIBHwIYn_La14fSnAEek.mft Manifest number: 0DB7 Signing time: Sat 14 Jun 2025 17:49:13 +0000 Manifest this update: Sat 14 Jun 2025 17:49:12 +0000 Manifest next update: Sat 21 Jun 2025 17:49:12 +0000 Files and hashes: 1: t0bN0xcqIBHwIYn_La14fSnAEek.crl (hash: HAvsQBYGzTCYS9h2Smn9KfxZ1mrFvCQ4wlx4e8Lj0/Q=) 2: F8AC3DD8DB9111E9B70EDD2EC4F9AE02.roa (hash: Ik/3X8YIb0qhd0Fqkle1gmGuYbSdF2VymS/D7TZSlFk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1B92/AABFC49ABD6011E9956A0F19C4F9AE02/t0bN0xcqIBHwIYn_La14fSnAEek.crl rsync://rpki.apnic.net/member_repository/A91C1B92/AABFC49ABD6011E9956A0F19C4F9AE02/t0bN0xcqIBHwIYn_La14fSnAEek.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t0bN0xcqIBHwIYn_La14fSnAEek.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 17:49:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3519 (0xdbf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1B92, serialNumber=B746CDD3172A2011F02189FF2DAD787D29C011E9 Validity Not Before: Jun 14 17:49:12 2025 GMT Not After : Jun 21 17:49:12 2025 GMT Subject: CN=684db618-6c08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:7c:16:b3:dc:75:76:2e:a4:3a:0a:17:bf:cf: 38:c3:4e:ee:e0:b6:6b:6d:11:0d:e3:3a:d1:18:de: 27:ce:18:c0:27:86:92:5a:40:01:f6:ba:29:a8:18: 09:66:ab:ff:48:50:07:2e:b5:be:0e:e1:83:b9:d3: 86:17:1c:97:f5:74:00:ae:53:84:7b:00:6b:a8:16: 70:ff:70:34:94:79:09:38:3e:3f:56:c5:10:78:8a: a5:58:df:93:0b:0c:cf:b8:f7:f6:95:59:de:f6:e6: 36:c7:5c:e7:c4:68:41:9a:8f:53:43:94:a0:6f:f4: c3:0f:f3:49:0d:91:5a:f0:4c:c9:a6:23:1a:b8:86: 4b:25:10:99:b3:a7:61:85:7d:ac:11:7c:a3:7f:b8: 47:96:0d:25:6e:a2:f3:84:a0:69:e9:bd:7a:a8:35: 0d:23:94:c2:a2:ea:d3:41:30:f5:75:a4:5d:0e:1c: 7f:eb:08:f9:28:c5:27:10:94:74:5f:eb:45:5d:36: c6:42:31:55:5f:ed:f4:16:c6:22:4c:84:eb:dd:50: d8:53:61:c7:9e:26:47:0f:39:51:a8:79:28:f4:eb: 0c:c5:83:58:07:da:c8:6a:6e:d4:6a:f7:62:0c:7a: be:27:3a:d3:5d:4d:4b:aa:0c:1f:38:92:37:9d:8d: a9:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:8C:29:9C:62:5A:71:36:BF:3D:1F:D5:6F:98:12:90:F9:C3:9C:2C X509v3 Authority Key Identifier: keyid:B7:46:CD:D3:17:2A:20:11:F0:21:89:FF:2D:AD:78:7D:29:C0:11:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1B92/AABFC49ABD6011E9956A0F19C4F9AE02/t0bN0xcqIBHwIYn_La14fSnAEek.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t0bN0xcqIBHwIYn_La14fSnAEek.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1B92/AABFC49ABD6011E9956A0F19C4F9AE02/t0bN0xcqIBHwIYn_La14fSnAEek.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c9:4f:44:8e:32:ab:e5:68:b1:79:62:df:53:e9:bd:2c:b8:75: ce:2c:97:18:69:ab:4e:cf:d8:3c:c5:dc:c0:b5:da:8f:52:2d: 5b:ca:f3:fd:e1:ca:3c:6c:ce:40:86:cc:ec:a6:f9:1a:05:4b: b3:21:d8:3b:cd:d7:f3:39:04:fc:55:72:e9:1f:7e:23:1a:4b: 40:fb:38:f4:da:1a:7e:17:e0:34:f6:a5:8c:ba:7b:9a:5a:a1: a5:35:2e:26:28:1a:6d:45:00:21:20:7f:ce:c4:ef:bc:e0:c4: fa:86:25:61:10:a7:10:ba:a6:bf:42:bf:d9:24:75:5e:bb:4c: 83:37:cc:6b:9f:0b:e2:88:96:9d:5a:29:20:ab:ea:9b:e8:ea: 66:28:a5:89:7d:43:23:59:66:bd:06:60:d1:82:ec:20:23:db: 81:5d:5e:91:c2:e6:dc:58:e5:f7:30:1c:b0:3d:60:44:de:f7: f9:aa:ce:02:d8:fb:1c:97:bd:68:1c:e5:9c:cf:0d:ac:d0:ac: 8f:1f:6b:10:6f:8f:39:66:bb:6f:e5:7c:65:b3:4c:5c:39:d5: f3:9d:69:ea:83:42:0b:cb:ec:82:1e:55:12:08:4a:96:cb:da: fe:68:42:58:24:08:3a:34:bb:66:bf:33:be:0d:f5:eb:6a:cc: 4d:fb:93:0e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDb8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzFCOTIxMTAvBgNVBAUTKEI3NDZDREQzMTcyQTIwMTFGMDIxODlGRjJEQUQ3ODdE MjlDMDExRTkwHhcNMjUwNjE0MTc0OTEyWhcNMjUwNjIxMTc0OTEyWjAYMRYwFAYD VQQDEw02ODRkYjYxOC02YzA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArHwWs9x1di6kOgoXv884w07u4LZrbREN4zrRGN4nzhjAJ4aSWkAB9ropqBgJ Zqv/SFAHLrW+DuGDudOGFxyX9XQArlOEewBrqBZw/3A0lHkJOD4/VsUQeIqlWN+T CwzPuPf2lVne9uY2x1znxGhBmo9TQ5Sgb/TDD/NJDZFa8EzJpiMauIZLJRCZs6dh hX2sEXyjf7hHlg0lbqLzhKBp6b16qDUNI5TCourTQTD1daRdDhx/6wj5KMUnEJR0 X+tFXTbGQjFVX+30FsYiTITr3VDYU2HHniZHDzlRqHko9OsMxYNYB9rIam7Uavdi DHq+JzrTXU1LqgwfOJI3nY2pVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA2MKZxi WnE2vz0f1W+YEpD5w5wsMB8GA1UdIwQYMBaAFLdGzdMXKiAR8CGJ/y2teH0pwBHp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMUI5Mi9BQUJGQzQ5QUJE NjAxMUU5OTU2QTBGMTlDNEY5QUUwMi90MGJOMHhjcUlCSHdJWW5fTGExNGZTbkFF ZWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3QwYk4weGNxSUJId0lZbl9MYTE0ZlNuQUVlay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MUI5Mi9BQUJGQzQ5QUJENjAxMUU5OTU2QTBGMTlDNEY5QUUwMi90MGJOMHhjcUlC SHdJWW5fTGExNGZTbkFFZWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDJT0SOMqvlaLF5Yt9T6b0suHXOLJcYaatOz9g8xdzAtdqPUi1byvP9 4co8bM5AhszspvkaBUuzIdg7zdfzOQT8VXLpH34jGktA+zj02hp+F+A09qWMunua WqGlNS4mKBptRQAhIH/OxO+84MT6hiVhEKcQuqa/Qr/ZJHVeu0yDN8xrnwviiJad Wikgq+qb6OpmKKWJfUMjWWa9BmDRguwgI9uBXV6RwubcWOX3MBywPWBE3vf5qs4C 2Pscl71oHOWczw2s0KyPH2sQb485Zrtv5Xxls0xcOdXznWnqg0ILy+yCHlUSCEqW y9r+aEJYJAg6NLtmvzO+DfXrasxN+5MO -----END CERTIFICATE-----Generated at Sun Jun 15 08:34:47 2025 by rpki-client