$ rpki-client -vvf rpki.apnic.net/member_repository/A91C798A/CF5FD6B8C0A111EC8AE24528C4F9AE02/9jTAsSwZeK8-iQxSj8csj3R9uYA.mft File: 9jTAsSwZeK8-iQxSj8csj3R9uYA.mft (raw, json) Hash identifier: QmivO9Jfq24I1TBEnO9t91pl6KRPCiX246WGn7rZR+U= Subject key identifier: 0C:AA:5C:3B:C9:F0:B5:5E:C6:D9:E5:46:EE:9F:5B:41:06:14:34:CF Authority key identifier: F6:34:C0:B1:2C:19:78:AF:3E:89:0C:52:8F:C7:2C:8F:74:7D:B9:80 Certificate issuer: /CN=A91C798A/serialNumber=F634C0B12C1978AF3E890C528FC72C8F747DB980 Certificate serial: 0348 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9jTAsSwZeK8-iQxSj8csj3R9uYA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C798A/CF5FD6B8C0A111EC8AE24528C4F9AE02/9jTAsSwZeK8-iQxSj8csj3R9uYA.mft Manifest number: 0343 Signing time: Fri 13 Jun 2025 00:34:54 +0000 Manifest this update: Fri 13 Jun 2025 00:34:54 +0000 Manifest next update: Fri 20 Jun 2025 00:34:54 +0000 Files and hashes: 1: 9jTAsSwZeK8-iQxSj8csj3R9uYA.crl (hash: PUxppdOmLEhi5xL849WH7/NAg5Vq79OS+hjZDNNHqcc=) 2: 2173FE4EC0A611ECB6A6996CC4F9AE02.roa (hash: AvM4EHFc35a+/i0JOm+PYVnypM/t1zc/v7lGdHSDzQQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C798A/CF5FD6B8C0A111EC8AE24528C4F9AE02/9jTAsSwZeK8-iQxSj8csj3R9uYA.crl rsync://rpki.apnic.net/member_repository/A91C798A/CF5FD6B8C0A111EC8AE24528C4F9AE02/9jTAsSwZeK8-iQxSj8csj3R9uYA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9jTAsSwZeK8-iQxSj8csj3R9uYA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 00:34:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 840 (0x348) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C798A, serialNumber=F634C0B12C1978AF3E890C528FC72C8F747DB980 Validity Not Before: Jun 13 00:34:54 2025 GMT Not After : Jun 20 00:34:54 2025 GMT Subject: CN=684b722e-4593 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:dc:6c:1e:ad:90:14:e2:17:7a:79:4e:49:25: 7b:f4:33:a3:04:fd:b5:c8:bd:2e:21:9f:d7:c8:a3: b1:c4:8b:5a:41:49:1c:2d:ba:f9:a6:c3:0e:d3:87: b0:a5:96:1b:94:91:62:d8:20:02:b3:7a:0d:a7:a3: c2:d2:5e:a3:08:4e:77:e7:e5:38:53:7b:8a:df:47: f3:49:ec:52:9a:c3:5f:01:e4:bd:a3:8b:c7:51:20: 1f:68:44:eb:c5:75:bf:58:ae:fd:66:cf:6a:94:8a: 2a:6a:db:29:a5:56:46:cd:63:0c:e4:70:88:5d:fa: 9c:1b:b6:57:a4:20:48:03:b5:30:4d:1c:cc:6f:7f: da:1d:ae:34:70:c6:84:39:31:48:c3:fc:88:ba:ab: df:b5:c4:e4:fc:7c:46:40:19:81:17:c6:e3:c8:70: f1:7c:b4:6f:37:90:b2:db:41:a7:5d:18:98:b4:71: 42:3d:62:1e:e3:9d:88:7d:d0:7f:bc:2f:f7:96:15: d8:9e:12:46:fd:5f:08:b2:06:5f:0e:44:1d:5b:e4: 83:9c:59:a1:92:78:89:15:f0:71:30:2c:47:b5:8f: 86:17:78:bd:91:e3:73:84:71:33:64:6b:6f:2b:14: cc:ca:6a:8f:98:14:62:c5:2a:af:bf:6a:2b:e1:b6: 72:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:AA:5C:3B:C9:F0:B5:5E:C6:D9:E5:46:EE:9F:5B:41:06:14:34:CF X509v3 Authority Key Identifier: keyid:F6:34:C0:B1:2C:19:78:AF:3E:89:0C:52:8F:C7:2C:8F:74:7D:B9:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C798A/CF5FD6B8C0A111EC8AE24528C4F9AE02/9jTAsSwZeK8-iQxSj8csj3R9uYA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9jTAsSwZeK8-iQxSj8csj3R9uYA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C798A/CF5FD6B8C0A111EC8AE24528C4F9AE02/9jTAsSwZeK8-iQxSj8csj3R9uYA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:b9:b0:5f:9f:45:df:53:fb:13:bf:e2:2f:c3:8b:24:a3:d4: f3:61:a4:64:f0:dc:d6:aa:86:5d:ff:dd:2a:91:9e:eb:b7:6e: ea:14:95:10:b1:0e:35:56:8e:f8:75:48:b6:54:95:3c:e7:3e: 63:78:f3:4b:7b:44:12:0f:b2:1d:9d:ec:c0:d0:5b:f1:83:89: 7f:26:95:63:d3:7b:a8:49:26:fc:44:b4:29:b1:88:d4:4a:6d: 3e:59:1a:e9:e4:d6:ff:d9:98:b6:a7:e7:b5:98:3a:aa:82:5d: 86:ae:13:62:d6:79:04:ee:26:90:2c:d9:96:29:8a:00:d7:f2: c4:80:e7:06:aa:17:d8:da:b9:a0:9c:31:b9:d3:e1:82:10:39: 06:e5:d1:ae:e2:a6:c4:b2:84:8e:db:f8:4e:29:85:3f:a5:e8: ec:ad:b3:7b:ea:9d:e2:2b:63:b1:15:64:79:32:90:dd:ee:1c: 3a:db:89:55:8b:63:a5:16:62:83:a7:01:9c:4d:9d:9e:2a:03: 86:93:f4:c9:65:4b:31:09:6f:8d:55:02:9e:bc:09:4f:55:bf: b1:e8:a1:b6:cb:8b:67:5d:66:e8:6b:5e:aa:bb:e8:8c:3a:ca: 03:55:77:9c:1f:77:01:e0:dc:06:f9:96:e0:3a:81:0d:fa:96: cd:af:63:01 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA0gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzc5OEExMTAvBgNVBAUTKEY2MzRDMEIxMkMxOTc4QUYzRTg5MEM1MjhGQzcyQzhG NzQ3REI5ODAwHhcNMjUwNjEzMDAzNDU0WhcNMjUwNjIwMDAzNDU0WjAYMRYwFAYD VQQDEw02ODRiNzIyZS00NTkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzNxsHq2QFOIXenlOSSV79DOjBP21yL0uIZ/XyKOxxItaQUkcLbr5psMO04ew pZYblJFi2CACs3oNp6PC0l6jCE535+U4U3uK30fzSexSmsNfAeS9o4vHUSAfaETr xXW/WK79Zs9qlIoqatsppVZGzWMM5HCIXfqcG7ZXpCBIA7UwTRzMb3/aHa40cMaE OTFIw/yIuqvftcTk/HxGQBmBF8bjyHDxfLRvN5Cy20GnXRiYtHFCPWIe452IfdB/ vC/3lhXYnhJG/V8IsgZfDkQdW+SDnFmhkniJFfBxMCxHtY+GF3i9keNzhHEzZGtv KxTMymqPmBRixSqvv2or4bZyhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAyqXDvJ 8LVextnlRu6fW0EGFDTPMB8GA1UdIwQYMBaAFPY0wLEsGXivPokMUo/HLI90fbmA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzk4QS9DRjVGRDZCOEMw QTExMUVDOEFFMjQ1MjhDNEY5QUUwMi85alRBc1N3WmVLOC1pUXhTajhjc2ozUjl1 WUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlqVEFzU3daZUs4LWlReFNqOGNzajNSOXVZQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Nzk4QS9DRjVGRDZCOEMwQTExMUVDOEFFMjQ1MjhDNEY5QUUwMi85alRBc1N3WmVL OC1pUXhTajhjc2ozUjl1WUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCxubBfn0XfU/sTv+Ivw4sko9TzYaRk8NzWqoZd/90qkZ7rt27qFJUQ sQ41Vo74dUi2VJU85z5jePNLe0QSD7IdnezA0Fvxg4l/JpVj03uoSSb8RLQpsYjU Sm0+WRrp5Nb/2Zi2p+e1mDqqgl2GrhNi1nkE7iaQLNmWKYoA1/LEgOcGqhfY2rmg nDG50+GCEDkG5dGu4qbEsoSO2/hOKYU/pejsrbN76p3iK2OxFWR5MpDd7hw624lV i2OlFmKDpwGcTZ2eKgOGk/TJZUsxCW+NVQKevAlPVb+x6KG2y4tnXWboa16qu+iM OsoDVXecH3cB4NwG+ZbgOoEN+pbNr2MB -----END CERTIFICATE-----Generated at Sat Jun 14 18:47:34 2025 by rpki-client