$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9161/70CC24863F8B11E7A9E67244C4F9AE02/dfDxcTIKeOUHAm-fL1T0smcMYhE.mft File: dfDxcTIKeOUHAm-fL1T0smcMYhE.mft (raw, json) Hash identifier: BRdq5lZxMUuioA7a/0pmTCo2MpCSX89/XTSi3GyvCYU= Subject key identifier: 2E:2E:17:DF:AE:9A:10:D2:27:4F:DA:A7:F1:2F:11:B3:A6:0A:70:5A Authority key identifier: 75:F0:F1:71:32:0A:78:E5:07:02:6F:9F:2F:54:F4:B2:67:0C:62:11 Certificate issuer: /CN=A91C9161/serialNumber=75F0F171320A78E507026F9F2F54F4B2670C6211 Certificate serial: 1A76 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dfDxcTIKeOUHAm-fL1T0smcMYhE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9161/70CC24863F8B11E7A9E67244C4F9AE02/dfDxcTIKeOUHAm-fL1T0smcMYhE.mft Manifest number: 1A6A Signing time: Sat 14 Jun 2025 16:17:40 +0000 Manifest this update: Sat 14 Jun 2025 16:17:40 +0000 Manifest next update: Sat 21 Jun 2025 16:17:40 +0000 Files and hashes: 1: dfDxcTIKeOUHAm-fL1T0smcMYhE.crl (hash: TglhMglFaVfqyt/m2FwSoj3/bn1oLRBazAGhFU5VoWg=) 2: 95A226D0EF3C11E9A7190355C4F9AE02.roa (hash: 1daEoei36geA2L+OhDw4+YDumwBLUAs+Z5wiCTxRQ6A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9161/70CC24863F8B11E7A9E67244C4F9AE02/dfDxcTIKeOUHAm-fL1T0smcMYhE.crl rsync://rpki.apnic.net/member_repository/A91C9161/70CC24863F8B11E7A9E67244C4F9AE02/dfDxcTIKeOUHAm-fL1T0smcMYhE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dfDxcTIKeOUHAm-fL1T0smcMYhE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 16:17:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6774 (0x1a76) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9161, serialNumber=75F0F171320A78E507026F9F2F54F4B2670C6211 Validity Not Before: Jun 14 16:17:40 2025 GMT Not After : Jun 21 16:17:40 2025 GMT Subject: CN=684da0a4-2e6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:9e:95:7a:9d:6a:54:fb:26:45:6e:e2:23:e7: e7:13:3c:54:61:f0:e0:42:c3:51:b4:a8:f8:28:67: a4:d5:12:66:4f:04:22:ef:81:7e:15:ca:d6:3e:ce: f4:81:95:ab:9b:75:08:22:ed:20:b0:03:78:32:2e: 10:1d:11:43:b9:9e:9b:a4:38:27:9c:1b:8d:7f:50: 8c:d4:f6:5e:41:3e:ac:01:ae:33:f1:3b:f7:d8:1c: 67:81:54:5f:8f:8b:db:ee:36:6b:a7:7a:51:6b:e8: 7e:4f:53:4e:98:4b:79:2f:e9:0e:83:98:c7:b8:73: cd:4d:3d:ed:16:fb:84:6a:78:ca:87:ad:31:f5:b5: aa:5d:b1:c3:6a:7d:12:23:62:42:cf:01:16:79:8f: d8:57:c6:46:1f:78:a6:e6:1e:b6:8f:f4:17:f6:04: 64:b6:b7:23:7c:e8:ab:9b:4e:fd:58:91:f4:1f:05: ba:fc:17:cf:6d:26:9a:2a:84:56:60:84:61:37:5b: 58:5e:c9:6d:c0:15:64:fd:49:63:10:e9:c2:01:d5: 09:38:4f:3a:67:89:aa:e7:bb:7f:26:c6:90:7a:25: 39:b5:52:34:f0:dd:fa:1a:bb:45:66:2f:68:2e:dc: 29:67:b7:ce:9d:83:4f:d5:74:68:a0:27:82:8e:4f: 97:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:2E:17:DF:AE:9A:10:D2:27:4F:DA:A7:F1:2F:11:B3:A6:0A:70:5A X509v3 Authority Key Identifier: keyid:75:F0:F1:71:32:0A:78:E5:07:02:6F:9F:2F:54:F4:B2:67:0C:62:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9161/70CC24863F8B11E7A9E67244C4F9AE02/dfDxcTIKeOUHAm-fL1T0smcMYhE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dfDxcTIKeOUHAm-fL1T0smcMYhE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9161/70CC24863F8B11E7A9E67244C4F9AE02/dfDxcTIKeOUHAm-fL1T0smcMYhE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:af:1d:0f:46:eb:df:e0:f9:f4:02:8f:fa:fa:72:02:24:4e: 95:a9:7c:64:3a:7f:e5:66:b1:80:ae:9c:51:e2:f0:0e:23:fd: 2d:6d:e2:3e:9a:90:07:af:0a:10:d7:53:d5:3f:2f:1a:22:2a: 25:f1:36:06:e2:1c:22:67:99:6e:0d:a3:23:e3:50:7e:ac:7d: ac:ae:3d:9a:62:77:dc:68:aa:23:82:7d:e0:4e:04:8d:cc:92: 95:10:9d:fd:da:9e:c2:8a:b4:8e:95:a9:b0:84:92:47:76:31: c7:ca:2b:6a:db:72:8c:7c:36:f8:ba:1b:31:67:70:4b:39:58: c4:f2:5a:2f:a9:01:8b:d5:5b:40:eb:11:c1:82:6b:05:26:f4: 14:c8:ce:4d:8d:a5:be:7a:22:30:21:1d:e9:75:4e:4b:54:e2: 48:43:1c:62:96:f6:48:21:1e:85:18:05:0a:ef:70:fc:f8:3a: 3d:a4:c0:54:3e:f8:74:c1:b9:e2:31:92:01:da:c0:41:3d:9a: bf:af:44:a4:2d:40:2e:68:f7:fa:4d:b4:3e:f5:19:a2:ea:12: c7:a6:0a:15:ad:a3:29:d5:03:53:77:d1:57:eb:85:1b:7e:58: cb:20:91:f8:15:bb:9b:f9:00:ec:13:70:5e:1d:29:ed:20:08: 47:40:a6:37 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGnYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzkxNjExMTAvBgNVBAUTKDc1RjBGMTcxMzIwQTc4RTUwNzAyNkY5RjJGNTRGNEIy NjcwQzYyMTEwHhcNMjUwNjE0MTYxNzQwWhcNMjUwNjIxMTYxNzQwWjAYMRYwFAYD VQQDEw02ODRkYTBhNC0yZTZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwJ6Vep1qVPsmRW7iI+fnEzxUYfDgQsNRtKj4KGek1RJmTwQi74F+FcrWPs70 gZWrm3UIIu0gsAN4Mi4QHRFDuZ6bpDgnnBuNf1CM1PZeQT6sAa4z8Tv32BxngVRf j4vb7jZrp3pRa+h+T1NOmEt5L+kOg5jHuHPNTT3tFvuEanjKh60x9bWqXbHDan0S I2JCzwEWeY/YV8ZGH3im5h62j/QX9gRktrcjfOirm079WJH0HwW6/BfPbSaaKoRW YIRhN1tYXsltwBVk/UljEOnCAdUJOE86Z4mq57t/JsaQeiU5tVI08N36GrtFZi9o LtwpZ7fOnYNP1XRooCeCjk+XYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC4uF9+u mhDSJ0/ap/EvEbOmCnBaMB8GA1UdIwQYMBaAFHXw8XEyCnjlBwJvny9U9LJnDGIR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTE2MS83MENDMjQ4NjNG OEIxMUU3QTlFNjcyNDRDNEY5QUUwMi9kZkR4Y1RJS2VPVUhBbS1mTDFUMHNtY01Z aEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RmRHhjVElLZU9VSEFtLWZMMVQwc21jTVloRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTE2MS83MENDMjQ4NjNGOEIxMUU3QTlFNjcyNDRDNEY5QUUwMi9kZkR4Y1RJS2VP VUhBbS1mTDFUMHNtY01ZaEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBYrx0PRuvf4Pn0Ao/6+nICJE6VqXxkOn/lZrGArpxR4vAOI/0tbeI+ mpAHrwoQ11PVPy8aIiol8TYG4hwiZ5luDaMj41B+rH2srj2aYnfcaKojgn3gTgSN zJKVEJ392p7CirSOlamwhJJHdjHHyitq23KMfDb4uhsxZ3BLOVjE8lovqQGL1VtA 6xHBgmsFJvQUyM5NjaW+eiIwIR3pdU5LVOJIQxxilvZIIR6FGAUK73D8+Do9pMBU Pvh0wbniMZIB2sBBPZq/r0SkLUAuaPf6TbQ+9Rmi6hLHpgoVraMp1QNTd9FX64Ub fljLIJH4Fbub+QDsE3BeHSntIAhHQKY3 -----END CERTIFICATE-----Generated at Sat Jun 14 19:29:33 2025 by rpki-client