$ rpki-client -vvf rpki.apnic.net/member_repository/A91C92DC/C60578A0F99811EB8AF49C1DC4F9AE02/iXCkAMzM8BCTPDMMN2Ch7F204K0.mft File: iXCkAMzM8BCTPDMMN2Ch7F204K0.mft (raw, json) Hash identifier: KyIRSFIk5V0MORviqF5Y8J8XZwJ3CdV+GuYmHuRkTPA= Subject key identifier: 27:AC:5B:E1:B1:FF:55:E7:BA:8A:72:71:DE:6A:00:00:E4:89:E3:8F Authority key identifier: 89:70:A4:00:CC:CC:F0:10:93:3C:33:0C:37:60:A1:EC:5D:B4:E0:AD Certificate issuer: /CN=A91C92DC/serialNumber=8970A400CCCCF010933C330C3760A1EC5DB4E0AD Certificate serial: 0549 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXCkAMzM8BCTPDMMN2Ch7F204K0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C92DC/C60578A0F99811EB8AF49C1DC4F9AE02/iXCkAMzM8BCTPDMMN2Ch7F204K0.mft Manifest number: 053D Signing time: Sat 14 Jun 2025 23:11:58 +0000 Manifest this update: Sat 14 Jun 2025 23:11:58 +0000 Manifest next update: Sat 21 Jun 2025 23:11:57 +0000 Files and hashes: 1: iXCkAMzM8BCTPDMMN2Ch7F204K0.crl (hash: kf94Ov2H5fWgLkYeG/t1S56NThasueIo1CfssUxUJrw=) 2: C3CE90CEF99A11EB936CCA1EC4F9AE02.roa (hash: xQl2oR7pAbge5iF8YPhv/hbmMFqMQxGSZC11zhknFak=) 3: AD1469EC7A3911ECB5639D41C4F9AE02.roa (hash: M0rop6u3XFd48CsMz0Ik0R+4A+HjyQyG2cdgIdeoY8E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C92DC/C60578A0F99811EB8AF49C1DC4F9AE02/iXCkAMzM8BCTPDMMN2Ch7F204K0.crl rsync://rpki.apnic.net/member_repository/A91C92DC/C60578A0F99811EB8AF49C1DC4F9AE02/iXCkAMzM8BCTPDMMN2Ch7F204K0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXCkAMzM8BCTPDMMN2Ch7F204K0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 23:11:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1353 (0x549) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C92DC, serialNumber=8970A400CCCCF010933C330C3760A1EC5DB4E0AD Validity Not Before: Jun 14 23:11:58 2025 GMT Not After : Jun 21 23:11:57 2025 GMT Subject: CN=684e01be-f41c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:6c:ea:3b:13:f7:aa:8f:81:08:7c:4e:43:61: f1:20:4a:9d:56:48:59:c2:73:46:2b:b5:b5:ca:12: fb:94:b2:6f:36:51:fb:45:87:7f:06:02:c6:c1:42: 5a:a2:fd:ee:cf:4a:ad:a7:0f:39:f4:78:7a:6f:63: 5b:62:7e:4a:06:95:60:15:77:1b:cb:56:47:84:5c: 2d:ce:a7:f6:a8:57:ba:ec:e1:0c:08:e7:2c:06:0a: 6c:e1:55:86:e6:eb:8e:c0:c3:a6:f3:74:f7:f0:75: 6e:86:51:5d:e0:b9:23:4a:0e:b8:cf:6d:4d:41:49: 3e:c7:54:0e:c2:9d:8a:09:c0:49:b8:34:87:56:ae: c1:b8:b6:cb:4c:62:40:7f:ea:45:25:d4:56:4c:4d: 56:6e:0a:79:77:98:79:47:17:12:0a:fd:33:ce:b4: 87:b5:9d:4e:ee:60:8e:9f:c0:75:d7:2c:f8:6b:ab: 66:65:4d:ff:66:45:61:df:93:54:ed:45:24:e5:a6: ce:9e:e0:d0:77:c2:2d:65:20:5a:b0:87:39:8f:26: eb:8e:10:6b:e5:23:e7:29:79:ed:c0:5f:77:b9:99: 0d:0c:ff:98:67:ec:2d:0d:30:96:47:d8:ff:41:22: 50:75:69:ba:b7:ed:d4:3d:fd:ce:93:a2:96:41:74: d5:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:AC:5B:E1:B1:FF:55:E7:BA:8A:72:71:DE:6A:00:00:E4:89:E3:8F X509v3 Authority Key Identifier: keyid:89:70:A4:00:CC:CC:F0:10:93:3C:33:0C:37:60:A1:EC:5D:B4:E0:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C92DC/C60578A0F99811EB8AF49C1DC4F9AE02/iXCkAMzM8BCTPDMMN2Ch7F204K0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXCkAMzM8BCTPDMMN2Ch7F204K0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C92DC/C60578A0F99811EB8AF49C1DC4F9AE02/iXCkAMzM8BCTPDMMN2Ch7F204K0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:2b:1c:7a:ef:0e:a7:a9:df:fd:0f:f5:bf:1f:0c:85:a5:7b: c3:f1:49:e5:d6:3b:9d:a3:e4:61:b5:14:e0:02:bb:51:74:47: 0f:64:73:9c:4c:d6:65:68:e7:f6:ce:e0:d0:d2:80:96:7a:d9: 88:6a:03:76:f5:83:ad:1d:5f:38:e1:a3:ce:eb:17:73:17:ed: ce:1d:32:8e:b2:f6:6c:3c:50:3c:6b:14:65:f2:52:69:3f:2d: 85:47:75:1e:f8:0b:7d:07:d9:f9:8d:6b:2a:96:88:5d:80:15: 7b:a5:97:44:41:57:a1:ee:5c:42:ab:6b:1d:4f:4d:63:79:ca: df:26:b6:17:c3:9f:bc:ed:74:14:20:0b:93:f8:8f:1b:04:94: 13:3f:52:4c:89:b1:78:0f:2c:34:f5:a6:50:70:68:0d:41:c6: e5:19:dc:00:73:2b:9e:8f:d8:79:19:79:f5:97:e4:cf:e4:1f: 45:25:3f:d4:31:26:16:62:d5:ca:c6:ad:29:93:aa:d4:2e:bf: 4f:43:6f:ec:ec:96:03:06:d8:d6:23:c8:88:56:7d:2d:7c:27: ea:42:e7:4a:9b:59:a5:4a:18:ef:90:c9:a6:28:3b:9e:7d:26: 68:20:e8:9d:1d:3c:2f:60:82:67:85:ba:1d:8a:16:09:95:ca: c2:79:3e:38 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBUkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzkyREMxMTAvBgNVBAUTKDg5NzBBNDAwQ0NDQ0YwMTA5MzNDMzMwQzM3NjBBMUVD NURCNEUwQUQwHhcNMjUwNjE0MjMxMTU4WhcNMjUwNjIxMjMxMTU3WjAYMRYwFAYD VQQDEw02ODRlMDFiZS1mNDFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvWzqOxP3qo+BCHxOQ2HxIEqdVkhZwnNGK7W1yhL7lLJvNlH7RYd/BgLGwUJa ov3uz0qtpw859Hh6b2NbYn5KBpVgFXcby1ZHhFwtzqf2qFe67OEMCOcsBgps4VWG 5uuOwMOm83T38HVuhlFd4LkjSg64z21NQUk+x1QOwp2KCcBJuDSHVq7BuLbLTGJA f+pFJdRWTE1Wbgp5d5h5RxcSCv0zzrSHtZ1O7mCOn8B11yz4a6tmZU3/ZkVh35NU 7UUk5abOnuDQd8ItZSBasIc5jybrjhBr5SPnKXntwF93uZkNDP+YZ+wtDTCWR9j/ QSJQdWm6t+3UPf3Ok6KWQXTVFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCesW+Gx /1Xnuopycd5qAADkieOPMB8GA1UdIwQYMBaAFIlwpADMzPAQkzwzDDdgoexdtOCt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTJEQy9DNjA1NzhBMEY5 OTgxMUVCOEFGNDlDMURDNEY5QUUwMi9pWENrQU16TThCQ1RQRE1NTjJDaDdGMjA0 SzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lYQ2tBTXpNOEJDVFBETU1OMkNoN0YyMDRLMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTJEQy9DNjA1NzhBMEY5OTgxMUVCOEFGNDlDMURDNEY5QUUwMi9pWENrQU16TThC Q1RQRE1NTjJDaDdGMjA0SzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCyKxx67w6nqd/9D/W/HwyFpXvD8Unl1judo+RhtRTgArtRdEcPZHOc TNZlaOf2zuDQ0oCWetmIagN29YOtHV844aPO6xdzF+3OHTKOsvZsPFA8axRl8lJp Py2FR3Ue+At9B9n5jWsqlohdgBV7pZdEQVeh7lxCq2sdT01jecrfJrYXw5+87XQU IAuT+I8bBJQTP1JMibF4Dyw09aZQcGgNQcblGdwAcyuej9h5GXn1l+TP5B9FJT/U MSYWYtXKxq0pk6rULr9PQ2/s7JYDBtjWI8iIVn0tfCfqQudKm1mlShjvkMmmKDue fSZoIOidHTwvYIJnhbodihYJlcrCeT44 -----END CERTIFICATE-----Generated at Sun Jun 15 04:44:59 2025 by rpki-client