$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7175/E9A092B868FD11EFA9500187C4F9AE02/cleSPWdwxWeJGbB8vPqK-LnFBT8.mft File: cleSPWdwxWeJGbB8vPqK-LnFBT8.mft (raw, json) Hash identifier: DK3AvSDFx6mKPWGp9KMqCJl2acIjXCdv9ingZrlLnTU= Subject key identifier: DE:CC:71:1E:EC:AB:22:3F:C7:8C:FA:D8:41:7F:F5:5A:58:ED:E1:39 Authority key identifier: 72:57:92:3D:67:70:C5:67:89:19:B0:7C:BC:FA:8A:F8:B9:C5:05:3F Certificate issuer: /CN=A91C7175/serialNumber=7257923D6770C5678919B07CBCFA8AF8B9C5053F Certificate serial: 95 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cleSPWdwxWeJGbB8vPqK-LnFBT8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7175/E9A092B868FD11EFA9500187C4F9AE02/cleSPWdwxWeJGbB8vPqK-LnFBT8.mft Manifest number: 94 Signing time: Tue 17 Jun 2025 05:18:53 +0000 Manifest this update: Tue 17 Jun 2025 05:18:53 +0000 Manifest next update: Tue 24 Jun 2025 05:18:53 +0000 Files and hashes: 1: cleSPWdwxWeJGbB8vPqK-LnFBT8.crl (hash: YH1AmbYHTd54FZRvz1jmFDTW4nuiGO4ZxO15Pvs9kEs=) 2: 65783A3A68FE11EFB904E587C4F9AE02.roa (hash: W9AbIPs04msR2L8j2qpbp6FWBUlEN2nJFHSFxYkcZYc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7175/E9A092B868FD11EFA9500187C4F9AE02/cleSPWdwxWeJGbB8vPqK-LnFBT8.crl rsync://rpki.apnic.net/member_repository/A91C7175/E9A092B868FD11EFA9500187C4F9AE02/cleSPWdwxWeJGbB8vPqK-LnFBT8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cleSPWdwxWeJGbB8vPqK-LnFBT8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Jun 2025 05:18:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 149 (0x95) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7175, serialNumber=7257923D6770C5678919B07CBCFA8AF8B9C5053F Validity Not Before: Jun 17 05:18:53 2025 GMT Not After : Jun 24 05:18:53 2025 GMT Subject: CN=6850fabd-7114 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:de:af:a3:c8:a8:87:e9:63:eb:63:d5:92:68: 72:b3:ee:42:be:f7:e0:0b:08:f0:11:f3:2c:25:07: 1b:34:e8:4f:0b:a7:85:a2:b7:a4:7d:b3:3b:28:72: d3:a6:88:56:33:e4:3c:70:fe:dc:eb:70:d0:ae:63: 44:98:e0:09:52:3d:33:c3:19:ab:ed:78:df:33:a0: f6:35:8c:9d:f4:ad:a8:68:67:8d:07:72:b3:c1:b6: 31:11:bb:4f:26:a8:cc:46:ce:f7:22:71:b9:b0:e0: 2e:68:5e:03:38:b1:f4:ec:fa:71:40:a1:66:b8:cc: 41:dc:9f:ad:93:6f:61:a1:4a:a1:23:4e:c9:11:55: 65:ea:1c:81:ed:7c:5d:c1:0b:48:5c:bb:be:47:2b: 0a:ea:8a:c5:d2:3d:0a:76:3a:bc:c7:52:b2:36:97: 61:8f:b8:7e:07:b7:c4:e4:29:cd:5b:5d:a1:e0:18: 17:9f:4c:3a:5b:7d:1d:e5:f5:8c:ec:f9:ab:23:f8: 84:18:ab:eb:13:b8:9a:9e:6a:73:b9:9d:1a:4b:9e: 8a:aa:c1:30:89:22:37:57:e7:25:a7:16:7c:5e:01: ce:26:68:55:d4:6c:d0:59:93:c8:49:37:5f:0a:b8: 5f:7d:a0:fb:7c:6b:47:3e:14:8c:5d:23:74:f6:3c: 9a:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:CC:71:1E:EC:AB:22:3F:C7:8C:FA:D8:41:7F:F5:5A:58:ED:E1:39 X509v3 Authority Key Identifier: keyid:72:57:92:3D:67:70:C5:67:89:19:B0:7C:BC:FA:8A:F8:B9:C5:05:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7175/E9A092B868FD11EFA9500187C4F9AE02/cleSPWdwxWeJGbB8vPqK-LnFBT8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cleSPWdwxWeJGbB8vPqK-LnFBT8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7175/E9A092B868FD11EFA9500187C4F9AE02/cleSPWdwxWeJGbB8vPqK-LnFBT8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:c1:e3:8d:66:c9:6a:7c:81:64:e5:2f:07:a6:56:fd:30:b5: 85:34:43:26:ff:3c:51:23:5a:e4:90:32:6f:1d:11:7f:4f:1a: 44:dd:71:4a:10:1a:0f:75:6e:6f:cc:4c:4d:c4:ef:ac:12:ae: 56:23:99:83:ed:d0:a0:12:28:87:1d:2f:7d:e4:f5:bc:12:8d: 1b:68:a4:c3:34:7e:92:de:08:94:ac:8e:9c:35:e3:14:44:90: c7:d2:3f:d8:e7:c7:1d:b5:d6:f0:6a:f3:a7:ba:25:3c:1d:b3: 78:d3:e7:cc:59:6e:6a:a4:71:c9:db:c6:1f:a6:f0:e0:df:59: 43:19:a0:8e:f8:b3:71:ff:bb:c6:73:e3:92:bb:db:81:f6:9d: 30:d9:b0:f4:d2:58:60:28:d1:32:90:cc:16:ba:b3:02:66:5a: 06:15:78:ef:b5:62:10:fc:d9:79:bc:86:fb:81:39:6f:ee:ca: bc:3b:8e:7a:f2:4d:91:92:e8:ef:fc:c3:a5:d6:b2:3a:60:41: 50:bc:31:49:16:37:11:62:c1:ae:4d:5d:20:5f:cd:a9:12:02: 9a:d8:6c:93:01:99:f2:af:00:9b:6f:85:86:8b:36:f5:3d:5a: 27:0d:2f:c6:a4:e4:10:5d:d3:d7:3f:46:5d:79:7a:20:01:dd: 57:f2:6d:55 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzcxNzUxMTAvBgNVBAUTKDcyNTc5MjNENjc3MEM1Njc4OTE5QjA3Q0JDRkE4QUY4 QjlDNTA1M0YwHhcNMjUwNjE3MDUxODUzWhcNMjUwNjI0MDUxODUzWjAYMRYwFAYD VQQDEw02ODUwZmFiZC03MTE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA896vo8ioh+lj62PVkmhys+5CvvfgCwjwEfMsJQcbNOhPC6eForekfbM7KHLT pohWM+Q8cP7c63DQrmNEmOAJUj0zwxmr7XjfM6D2NYyd9K2oaGeNB3KzwbYxEbtP JqjMRs73InG5sOAuaF4DOLH07PpxQKFmuMxB3J+tk29hoUqhI07JEVVl6hyB7Xxd wQtIXLu+RysK6orF0j0Kdjq8x1KyNpdhj7h+B7fE5CnNW12h4BgXn0w6W30d5fWM 7PmrI/iEGKvrE7ianmpzuZ0aS56KqsEwiSI3V+clpxZ8XgHOJmhV1GzQWZPISTdf CrhffaD7fGtHPhSMXSN09jyaLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN7McR7s qyI/x4z62EF/9VpY7eE5MB8GA1UdIwQYMBaAFHJXkj1ncMVniRmwfLz6ivi5xQU/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzE3NS9FOUEwOTJCODY4 RkQxMUVGQTk1MDAxODdDNEY5QUUwMi9jbGVTUFdkd3hXZUpHYkI4dlBxSy1MbkZC VDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2NsZVNQV2R3eFdlSkdiQjh2UHFLLUxuRkJUOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NzE3NS9FOUEwOTJCODY4RkQxMUVGQTk1MDAxODdDNEY5QUUwMi9jbGVTUFdkd3hX ZUpHYkI4dlBxSy1MbkZCVDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBoweONZslqfIFk5S8Hplb9MLWFNEMm/zxRI1rkkDJvHRF/TxpE3XFK EBoPdW5vzExNxO+sEq5WI5mD7dCgEiiHHS995PW8Eo0baKTDNH6S3giUrI6cNeMU RJDH0j/Y58cdtdbwavOnuiU8HbN40+fMWW5qpHHJ28YfpvDg31lDGaCO+LNx/7vG c+OSu9uB9p0w2bD00lhgKNEykMwWurMCZloGFXjvtWIQ/Nl5vIb7gTlv7sq8O456 8k2Rkujv/MOl1rI6YEFQvDFJFjcRYsGuTV0gX82pEgKa2GyTAZnyrwCbb4WGizb1 PVonDS/GpOQQXdPXP0ZdeXogAd1X8m1V -----END CERTIFICATE-----Generated at Tue Jun 17 23:10:02 2025 by rpki-client