$ rpki-client -vvf rpki.apnic.net/member_repository/A91C83EA/D82C61E81C4511E494A76F1BC4F9AE02/92dQUVu3YtGADFrmxsLbJP6VLQI.mft File: 92dQUVu3YtGADFrmxsLbJP6VLQI.mft (raw, json) Hash identifier: mswcneH0TbK7eBLrLPQtacGWvVJV/96ZqHrbdz94y4U= Subject key identifier: 61:10:CB:8B:66:82:6C:0C:DA:48:AD:81:3F:4E:DD:74:83:53:61:4F Authority key identifier: F7:67:50:51:5B:B7:62:D1:80:0C:5A:E6:C6:C2:DB:24:FE:95:2D:02 Certificate issuer: /CN=A91C83EA/serialNumber=F76750515BB762D1800C5AE6C6C2DB24FE952D02 Certificate serial: 2A94 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/92dQUVu3YtGADFrmxsLbJP6VLQI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C83EA/D82C61E81C4511E494A76F1BC4F9AE02/92dQUVu3YtGADFrmxsLbJP6VLQI.mft Manifest number: 2A7E Signing time: Sat 14 Jun 2025 15:32:57 +0000 Manifest this update: Sat 14 Jun 2025 15:32:56 +0000 Manifest next update: Sat 21 Jun 2025 15:32:56 +0000 Files and hashes: 1: 92dQUVu3YtGADFrmxsLbJP6VLQI.crl (hash: 18eRKowh7ISPnd0ydvFfm42hKS9T42hIzMkjVc+Po3M=) 2: 2ED1150C561D11E7B003DF26C4F9AE02.roa (hash: VWQv/IH7NsqTcNchTqEWHo8sER9hJVbk+Ml69dI7l0g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C83EA/D82C61E81C4511E494A76F1BC4F9AE02/92dQUVu3YtGADFrmxsLbJP6VLQI.crl rsync://rpki.apnic.net/member_repository/A91C83EA/D82C61E81C4511E494A76F1BC4F9AE02/92dQUVu3YtGADFrmxsLbJP6VLQI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/92dQUVu3YtGADFrmxsLbJP6VLQI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 15:32:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10900 (0x2a94) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C83EA, serialNumber=F76750515BB762D1800C5AE6C6C2DB24FE952D02 Validity Not Before: Jun 14 15:32:56 2025 GMT Not After : Jun 21 15:32:56 2025 GMT Subject: CN=684d9629-461c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:49:be:f2:cf:c2:8a:09:4a:95:b1:fe:dd:2a: 4c:f1:96:ce:ce:30:15:6c:05:67:58:4a:f9:a8:ee: 08:61:71:60:de:a8:f2:a4:53:2d:c4:bf:8a:fa:c4: 76:fc:ab:6b:f3:0c:9d:14:96:af:b2:bc:0f:c7:5d: 54:b7:fc:44:8f:13:3a:96:5c:26:24:11:6b:a9:bf: b0:88:af:85:66:f5:dc:77:04:bd:1a:fd:32:0e:0d: dc:fd:98:99:43:e9:df:ae:e9:77:6b:fb:9b:8d:45: f3:11:40:54:32:98:c5:68:00:9f:09:ca:4b:d2:a5: ad:68:d6:c7:63:4c:c6:12:97:aa:fa:4c:22:b6:b7: c0:3d:a3:12:93:e0:9f:bb:32:da:e7:ec:aa:e7:d6: cc:6f:4a:12:28:76:e4:6c:91:46:2e:37:66:97:41: 4e:61:88:b9:bd:99:96:8c:2d:42:38:82:b0:60:9a: 2d:0a:f3:0c:10:e7:b7:47:97:8d:be:d0:5e:c2:7b: dc:e9:aa:6b:69:09:b8:55:4e:9d:c2:36:6a:29:8a: 73:6d:bc:1c:1f:8c:fb:95:e5:ab:bc:0e:80:dc:67: a7:bb:5f:ad:92:3b:1a:fc:93:64:89:43:fb:2e:40: f8:41:99:36:7f:b4:31:cf:d1:4e:79:b9:ac:1a:91: 3f:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:10:CB:8B:66:82:6C:0C:DA:48:AD:81:3F:4E:DD:74:83:53:61:4F X509v3 Authority Key Identifier: keyid:F7:67:50:51:5B:B7:62:D1:80:0C:5A:E6:C6:C2:DB:24:FE:95:2D:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C83EA/D82C61E81C4511E494A76F1BC4F9AE02/92dQUVu3YtGADFrmxsLbJP6VLQI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/92dQUVu3YtGADFrmxsLbJP6VLQI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C83EA/D82C61E81C4511E494A76F1BC4F9AE02/92dQUVu3YtGADFrmxsLbJP6VLQI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:39:e3:46:12:43:70:0d:2a:ba:7b:13:05:db:9a:c1:44:47: 95:52:fd:61:dd:f2:c6:a9:79:ee:f0:5e:d5:6c:70:cb:99:73: fc:4f:75:8f:fc:57:19:c4:4d:cb:c6:13:16:3d:30:84:7b:4a: 76:44:b3:62:bf:85:c3:c3:a6:36:80:b3:2a:24:d0:8c:cc:f3: 72:86:64:c7:97:a9:d1:21:fd:57:e6:51:9b:49:2c:9f:6c:de: 35:22:24:9b:e7:b8:db:ee:13:76:27:60:67:b9:5e:95:11:d9: b4:4f:19:02:76:de:9a:5c:6c:0a:7e:40:00:75:82:6d:6d:70: cd:40:c5:0a:9e:c7:16:95:47:f1:1c:cf:49:c1:7e:31:e4:d2: 45:a0:ec:e0:46:6d:7d:27:8b:a0:4a:37:d0:2b:e2:35:00:ae: a9:a7:fb:99:29:35:ef:5e:51:97:6e:72:ce:92:d0:02:99:03: 37:a8:3f:0d:72:e0:1f:d1:c3:37:13:6f:2c:9e:58:3a:4b:84: 24:7e:ff:bc:57:c2:26:b6:23:4d:96:7d:cf:f2:15:ac:ba:3a: d6:ae:a6:5c:65:df:ab:d3:e2:b6:8b:2e:17:c9:06:83:aa:57: b5:0b:71:cf:d5:6c:dd:38:0f:ed:a0:9f:8a:7b:5a:ed:9e:15: d4:71:ad:a0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICKpQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzgzRUExMTAvBgNVBAUTKEY3Njc1MDUxNUJCNzYyRDE4MDBDNUFFNkM2QzJEQjI0 RkU5NTJEMDIwHhcNMjUwNjE0MTUzMjU2WhcNMjUwNjIxMTUzMjU2WjAYMRYwFAYD VQQDEw02ODRkOTYyOS00NjFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvEm+8s/CiglKlbH+3SpM8ZbOzjAVbAVnWEr5qO4IYXFg3qjypFMtxL+K+sR2 /Ktr8wydFJavsrwPx11Ut/xEjxM6llwmJBFrqb+wiK+FZvXcdwS9Gv0yDg3c/ZiZ Q+nfrul3a/ubjUXzEUBUMpjFaACfCcpL0qWtaNbHY0zGEpeq+kwitrfAPaMSk+Cf uzLa5+yq59bMb0oSKHbkbJFGLjdml0FOYYi5vZmWjC1COIKwYJotCvMMEOe3R5eN vtBewnvc6apraQm4VU6dwjZqKYpzbbwcH4z7leWrvA6A3Genu1+tkjsa/JNkiUP7 LkD4QZk2f7Qxz9FOebmsGpE/LQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGEQy4tm gmwM2kitgT9O3XSDU2FPMB8GA1UdIwQYMBaAFPdnUFFbt2LRgAxa5sbC2yT+lS0C MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDODNFQS9EODJDNjFFODFD NDUxMUU0OTRBNzZGMUJDNEY5QUUwMi85MmRRVVZ1M1l0R0FERnJteHNMYkpQNlZM UUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzkyZFFVVnUzWXRHQURGcm14c0xiSlA2VkxRSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD ODNFQS9EODJDNjFFODFDNDUxMUU0OTRBNzZGMUJDNEY5QUUwMi85MmRRVVZ1M1l0 R0FERnJteHNMYkpQNlZMUUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBROeNGEkNwDSq6exMF25rBREeVUv1h3fLGqXnu8F7VbHDLmXP8T3WP /FcZxE3LxhMWPTCEe0p2RLNiv4XDw6Y2gLMqJNCMzPNyhmTHl6nRIf1X5lGbSSyf bN41IiSb57jb7hN2J2BnuV6VEdm0TxkCdt6aXGwKfkAAdYJtbXDNQMUKnscWlUfx HM9JwX4x5NJFoOzgRm19J4ugSjfQK+I1AK6pp/uZKTXvXlGXbnLOktACmQM3qD8N cuAf0cM3E28snlg6S4Qkfv+8V8ImtiNNln3P8hWsujrWrqZcZd+r0+K2iy4XyQaD qle1C3HP1WzdOA/toJ+Ke1rtnhXUca2g -----END CERTIFICATE-----Generated at Sun Jun 15 09:32:36 2025 by rpki-client