$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4EE6/9570B2E6DCD911E48D789A54C4F9AE02/k1dEQbQWn1y-Mxwu7Vbog9zvRSM.mft File: k1dEQbQWn1y-Mxwu7Vbog9zvRSM.mft (raw, json) Hash identifier: GpL0TvY5ZM0jjXlBZrf21KnujZ4lLzZVwJA0xDlNVYE= Subject key identifier: D7:DA:3C:BB:46:8D:E2:47:DC:7B:89:7F:CB:12:66:83:6E:B3:52:C0 Authority key identifier: 93:57:44:41:B4:16:9F:5C:BE:33:1C:2E:ED:56:E8:83:DC:EF:45:23 Certificate issuer: /CN=A91C4EE6/serialNumber=93574441B4169F5CBE331C2EED56E883DCEF4523 Certificate serial: 2692 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k1dEQbQWn1y-Mxwu7Vbog9zvRSM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C4EE6/9570B2E6DCD911E48D789A54C4F9AE02/k1dEQbQWn1y-Mxwu7Vbog9zvRSM.mft Manifest number: 2690 Signing time: Sat 14 Jun 2025 15:39:24 +0000 Manifest this update: Sat 14 Jun 2025 15:39:24 +0000 Manifest next update: Sat 21 Jun 2025 15:39:24 +0000 Files and hashes: 1: k1dEQbQWn1y-Mxwu7Vbog9zvRSM.crl (hash: nJzTmOCL59SnuqoL25ng3dXFCy8VdkSk+muSzKIEvcs=) 2: 2E078068008111F0AB00F337C4F9AE02.roa (hash: VJHoTPQ0jea+ijUJEtlYJDCyIW2/0tYaKWZJwfLhYW0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C4EE6/9570B2E6DCD911E48D789A54C4F9AE02/k1dEQbQWn1y-Mxwu7Vbog9zvRSM.crl rsync://rpki.apnic.net/member_repository/A91C4EE6/9570B2E6DCD911E48D789A54C4F9AE02/k1dEQbQWn1y-Mxwu7Vbog9zvRSM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k1dEQbQWn1y-Mxwu7Vbog9zvRSM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 15:39:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9874 (0x2692) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C4EE6, serialNumber=93574441B4169F5CBE331C2EED56E883DCEF4523 Validity Not Before: Jun 14 15:39:24 2025 GMT Not After : Jun 21 15:39:24 2025 GMT Subject: CN=684d97ac-110d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:f8:35:ea:8d:92:0b:16:26:38:3f:b0:cd:40: 54:e2:62:f4:86:e0:3f:5c:b6:f4:6b:62:8b:f3:c3: 48:5a:5a:7a:76:ae:97:81:1a:a8:23:5a:f0:4f:32: a8:48:de:a6:78:d8:ca:c2:01:e1:3b:ca:7e:02:58: 00:06:17:f2:2f:e3:08:18:7b:0d:ea:22:9b:c7:c7: 1d:c2:64:15:0f:50:b7:c6:7c:2a:e3:f6:b1:5c:10: 84:04:16:c7:89:14:c8:fa:b3:89:51:83:97:35:19: d8:a5:98:89:6c:15:49:76:db:a8:68:89:b2:03:e9: 15:32:25:0a:45:67:16:91:c4:17:68:f9:fb:ee:3b: f8:06:96:9e:d5:2b:1c:53:63:24:64:09:05:b6:9d: d7:cf:c9:b6:4c:f0:7d:6e:e7:92:3c:25:94:d6:6c: 48:07:93:6e:08:29:0a:2f:53:f4:bf:ae:92:d8:dd: 3c:6e:41:a7:50:38:64:03:23:a2:92:e8:7b:41:f2: 16:4f:03:e4:33:71:23:25:47:07:bc:7b:ef:35:e6: 72:75:e3:49:20:43:f5:80:d9:dc:4a:1f:18:ca:45: 57:55:4a:be:7f:29:73:68:ac:62:00:9a:d1:27:31: 2a:b2:52:94:b8:ab:05:bb:ef:ba:15:de:ff:00:e9: 10:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:DA:3C:BB:46:8D:E2:47:DC:7B:89:7F:CB:12:66:83:6E:B3:52:C0 X509v3 Authority Key Identifier: keyid:93:57:44:41:B4:16:9F:5C:BE:33:1C:2E:ED:56:E8:83:DC:EF:45:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C4EE6/9570B2E6DCD911E48D789A54C4F9AE02/k1dEQbQWn1y-Mxwu7Vbog9zvRSM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k1dEQbQWn1y-Mxwu7Vbog9zvRSM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4EE6/9570B2E6DCD911E48D789A54C4F9AE02/k1dEQbQWn1y-Mxwu7Vbog9zvRSM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:9c:ea:c5:1d:e9:1f:7f:fd:2c:bb:a4:91:68:06:98:91:84: 89:0d:17:96:02:fc:e9:0d:af:f3:b5:15:56:5b:81:ac:e5:69: 59:f1:88:cd:32:e7:95:c2:89:e3:d1:d3:bf:2b:f0:29:32:f5: e8:95:f2:17:e8:94:a1:75:e8:6d:70:09:42:ee:80:5b:8e:ba: df:83:b9:35:23:71:69:fe:0b:39:f3:56:8f:b7:da:22:f3:b3: 02:40:5c:3d:7a:83:b7:28:e8:a4:ee:89:ce:6a:ba:c0:89:5d: 6b:99:ab:de:bd:a6:f0:49:b0:f0:6b:97:e3:9e:52:75:81:b7: b4:75:f6:61:38:b1:37:6c:25:af:ef:84:04:a3:76:43:d5:45: 94:fb:68:aa:1a:33:f7:14:99:cd:56:d1:7f:f8:4d:f2:e0:12: ba:c1:1a:64:7c:98:ae:b4:9f:06:e8:16:7e:00:75:de:ba:4e: 57:24:67:c5:43:9c:34:98:a2:f7:2e:00:d0:3d:74:63:f6:e8: 1a:5f:3c:e2:8c:47:6f:09:78:eb:a0:c6:2d:59:fa:70:72:84: 8c:8f:a3:e5:1d:70:2f:79:30:c8:f8:3c:ef:67:7a:e1:56:5b: dd:d7:66:48:28:ab:ae:f4:92:23:9d:b5:e1:68:06:9b:8c:72: 95:6b:88:6e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJpIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzRFRTYxMTAvBgNVBAUTKDkzNTc0NDQxQjQxNjlGNUNCRTMzMUMyRUVENTZFODgz RENFRjQ1MjMwHhcNMjUwNjE0MTUzOTI0WhcNMjUwNjIxMTUzOTI0WjAYMRYwFAYD VQQDEw02ODRkOTdhYy0xMTBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw/g16o2SCxYmOD+wzUBU4mL0huA/XLb0a2KL88NIWlp6dq6XgRqoI1rwTzKo SN6meNjKwgHhO8p+AlgABhfyL+MIGHsN6iKbx8cdwmQVD1C3xnwq4/axXBCEBBbH iRTI+rOJUYOXNRnYpZiJbBVJdtuoaImyA+kVMiUKRWcWkcQXaPn77jv4Bpae1Ssc U2MkZAkFtp3Xz8m2TPB9bueSPCWU1mxIB5NuCCkKL1P0v66S2N08bkGnUDhkAyOi kuh7QfIWTwPkM3EjJUcHvHvvNeZydeNJIEP1gNncSh8YykVXVUq+fylzaKxiAJrR JzEqslKUuKsFu++6Fd7/AOkQ3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNfaPLtG jeJH3HuJf8sSZoNus1LAMB8GA1UdIwQYMBaAFJNXREG0Fp9cvjMcLu1W6IPc70Uj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNEVFNi85NTcwQjJFNkRD RDkxMUU0OEQ3ODlBNTRDNEY5QUUwMi9rMWRFUWJRV24xeS1NeHd1N1Zib2c5enZS U00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2sxZEVRYlFXbjF5LU14d3U3VmJvZzl6dlJTTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NEVFNi85NTcwQjJFNkRDRDkxMUU0OEQ3ODlBNTRDNEY5QUUwMi9rMWRFUWJRV24x eS1NeHd1N1Zib2c5enZSU00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJnOrFHekff/0su6SRaAaYkYSJDReWAvzpDa/ztRVWW4Gs5WlZ8YjN MueVwonj0dO/K/ApMvXolfIX6JShdehtcAlC7oBbjrrfg7k1I3Fp/gs581aPt9oi 87MCQFw9eoO3KOik7onOarrAiV1rmavevabwSbDwa5fjnlJ1gbe0dfZhOLE3bCWv 74QEo3ZD1UWU+2iqGjP3FJnNVtF/+E3y4BK6wRpkfJiutJ8G6BZ+AHXeuk5XJGfF Q5w0mKL3LgDQPXRj9ugaXzzijEdvCXjroMYtWfpwcoSMj6PlHXAveTDI+DzvZ3rh Vlvd12ZIKKuu9JIjnbXhaAabjHKVa4hu -----END CERTIFICATE-----Generated at Sat Jun 14 19:29:30 2025 by rpki-client