$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9606/9C9F9F9ADB9011E9A3C12F2CC4F9AE02/G0cdrc2RIJM1E26s9syYiChlSyo.mft File: G0cdrc2RIJM1E26s9syYiChlSyo.mft (raw, json) Hash identifier: ABPuaNOO2CgkkokboJuHqKBpPJmRYUukrWpnc5f2Zx0= Subject key identifier: A9:B0:62:2C:E7:20:46:4D:7F:A3:9F:6E:DB:9C:0E:D5:A8:4E:0E:3A Authority key identifier: 1B:47:1D:AD:CD:91:20:93:35:13:6E:AC:F6:CC:98:88:28:65:4B:2A Certificate issuer: /CN=A91C9606/serialNumber=1B471DADCD91209335136EACF6CC988828654B2A Certificate serial: 0D32 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G0cdrc2RIJM1E26s9syYiChlSyo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9606/9C9F9F9ADB9011E9A3C12F2CC4F9AE02/G0cdrc2RIJM1E26s9syYiChlSyo.mft Manifest number: 0D1E Signing time: Thu 12 Jun 2025 17:54:56 +0000 Manifest this update: Thu 12 Jun 2025 17:54:55 +0000 Manifest next update: Thu 19 Jun 2025 17:54:55 +0000 Files and hashes: 1: G0cdrc2RIJM1E26s9syYiChlSyo.crl (hash: trM/yACI626YLKGCboMUQMEogCNvB2L4CQuUn6VnbGU=) 2: 06370CB2DB9211E9B70EDD2EC4F9AE02.roa (hash: tiA64s/MRKlR1BkumxbFlRLnmMmyLTM+IqS1j/mgdbk=) 3: 7A9CD75E23E311F0BB28EA29C4F9AE02.roa (hash: yftNfagXlQP7kWCYM4or16TNugYWxYDf4262IfQW/IU=) 4: 645EF9CADB9311E988E56C33C4F9AE02.roa (hash: 9JHcHgmG+w7bGvnU6/Eo85gv0xWCdlnreQQjOwseAsk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9606/9C9F9F9ADB9011E9A3C12F2CC4F9AE02/G0cdrc2RIJM1E26s9syYiChlSyo.crl rsync://rpki.apnic.net/member_repository/A91C9606/9C9F9F9ADB9011E9A3C12F2CC4F9AE02/G0cdrc2RIJM1E26s9syYiChlSyo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G0cdrc2RIJM1E26s9syYiChlSyo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 17:54:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3378 (0xd32) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9606, serialNumber=1B471DADCD91209335136EACF6CC988828654B2A Validity Not Before: Jun 12 17:54:55 2025 GMT Not After : Jun 19 17:54:55 2025 GMT Subject: CN=684b146f-d7d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:d7:0f:2d:33:c3:69:1c:56:76:eb:7e:d5:21: 81:b3:36:e5:cb:04:48:61:97:cb:49:b0:37:c2:91: 0c:ae:f9:a6:89:88:c2:f8:52:5a:51:8d:44:e9:40: 59:48:9c:7d:29:4b:4e:4a:1d:f1:9e:0a:83:fd:0d: 7e:00:b6:c4:4a:9a:20:9a:d4:b4:14:a2:e8:43:14: 80:ec:a8:7a:d6:73:ba:07:66:c3:8b:d0:f8:bb:29: eb:30:81:5c:1e:1e:29:4f:1a:98:39:6e:ba:da:75: b3:77:59:f1:9b:c9:44:7e:f4:77:0e:67:aa:c7:37: 6f:76:f9:c7:27:a5:dd:20:96:fc:ab:c9:32:6a:8b: fe:c7:2d:3f:c9:f3:17:fa:4d:fe:cc:77:99:7f:38: 16:13:b8:b2:50:26:9e:e0:3a:a2:6d:bc:b9:25:8f: 86:21:22:c8:80:14:47:3c:42:b8:75:d8:a2:ce:15: 53:6e:fc:9b:60:3e:12:c2:eb:da:76:14:3e:13:3a: 31:8a:c5:1d:5a:c0:6f:ca:3f:78:e8:b6:b6:48:b1: e3:f6:c2:2f:8a:01:c0:2d:9a:65:88:e4:8d:d4:73: 19:1e:4c:64:d4:98:bf:92:bf:d2:98:63:ce:de:94: 77:22:45:f2:08:69:1f:9e:e0:98:07:bb:0a:46:d3: 35:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:B0:62:2C:E7:20:46:4D:7F:A3:9F:6E:DB:9C:0E:D5:A8:4E:0E:3A X509v3 Authority Key Identifier: keyid:1B:47:1D:AD:CD:91:20:93:35:13:6E:AC:F6:CC:98:88:28:65:4B:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9606/9C9F9F9ADB9011E9A3C12F2CC4F9AE02/G0cdrc2RIJM1E26s9syYiChlSyo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G0cdrc2RIJM1E26s9syYiChlSyo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9606/9C9F9F9ADB9011E9A3C12F2CC4F9AE02/G0cdrc2RIJM1E26s9syYiChlSyo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:24:d0:10:8f:eb:61:e6:96:9e:8c:61:1a:1d:a2:ec:be:0c: b3:3a:81:20:68:a7:99:66:5f:43:43:0f:b8:d5:5e:be:b7:de: 26:b7:6f:8d:0f:5b:4e:fa:f8:d4:00:a7:18:05:7e:e8:a2:db: 5a:b4:19:3d:13:bf:0f:dc:58:59:90:04:79:9a:7e:fc:42:f0: 49:ba:3c:aa:51:1c:4d:31:de:19:71:8b:73:5e:63:85:62:f9: 54:10:2d:b1:31:7b:fc:fa:ab:d2:aa:7f:44:07:d4:8d:16:99: f2:66:e3:ba:75:71:c2:a5:4f:de:b9:b9:bf:af:69:49:ae:af: 37:d9:bf:0d:2b:01:0d:a2:a3:2a:82:b9:2a:16:ac:67:43:f9: 95:ae:d2:4b:b3:5a:a4:f0:0d:86:70:93:45:17:8f:f4:92:3e: a3:e4:6a:78:f4:45:30:11:be:72:89:80:97:08:db:ed:23:45: e4:dd:66:bd:e8:42:e8:bb:96:90:6c:47:d6:00:a7:27:61:66: 0e:a8:8b:ee:88:c4:7e:1c:cc:70:ad:b0:e3:b3:2e:aa:3d:37: 5f:42:72:8c:45:6e:f0:d0:41:fd:87:a8:0f:ed:3d:e9:be:8a: 0b:ca:24:63:c4:38:4c:ce:4d:41:79:09:1e:c9:bf:c5:a7:1b: a0:47:6c:61 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDTIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzk2MDYxMTAvBgNVBAUTKDFCNDcxREFEQ0Q5MTIwOTMzNTEzNkVBQ0Y2Q0M5ODg4 Mjg2NTRCMkEwHhcNMjUwNjEyMTc1NDU1WhcNMjUwNjE5MTc1NDU1WjAYMRYwFAYD VQQDEw02ODRiMTQ2Zi1kN2QzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs9cPLTPDaRxWdut+1SGBszblywRIYZfLSbA3wpEMrvmmiYjC+FJaUY1E6UBZ SJx9KUtOSh3xngqD/Q1+ALbESpogmtS0FKLoQxSA7Kh61nO6B2bDi9D4uynrMIFc Hh4pTxqYOW662nWzd1nxm8lEfvR3DmeqxzdvdvnHJ6XdIJb8q8kyaov+xy0/yfMX +k3+zHeZfzgWE7iyUCae4Dqibby5JY+GISLIgBRHPEK4ddiizhVTbvybYD4Swuva dhQ+EzoxisUdWsBvyj946La2SLHj9sIvigHALZpliOSN1HMZHkxk1Ji/kr/SmGPO 3pR3IkXyCGkfnuCYB7sKRtM1qQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKmwYizn IEZNf6OfbtucDtWoTg46MB8GA1UdIwQYMBaAFBtHHa3NkSCTNRNurPbMmIgoZUsq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTYwNi85QzlGOUY5QURC OTAxMUU5QTNDMTJGMkNDNEY5QUUwMi9HMGNkcmMyUklKTTFFMjZzOXN5WWlDaGxT eW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0cwY2RyYzJSSUpNMUUyNnM5c3lZaUNobFN5by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTYwNi85QzlGOUY5QURCOTAxMUU5QTNDMTJGMkNDNEY5QUUwMi9HMGNkcmMyUklK TTFFMjZzOXN5WWlDaGxTeW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB5JNAQj+th5paejGEaHaLsvgyzOoEgaKeZZl9DQw+41V6+t94mt2+N D1tO+vjUAKcYBX7oottatBk9E78P3FhZkAR5mn78QvBJujyqURxNMd4ZcYtzXmOF YvlUEC2xMXv8+qvSqn9EB9SNFpnyZuO6dXHCpU/eubm/r2lJrq832b8NKwENoqMq grkqFqxnQ/mVrtJLs1qk8A2GcJNFF4/0kj6j5Gp49EUwEb5yiYCXCNvtI0Xk3Wa9 6ELou5aQbEfWAKcnYWYOqIvuiMR+HMxwrbDjsy6qPTdfQnKMRW7w0EH9h6gP7T3p vooLyiRjxDhMzk1BeQkeyb/FpxugR2xh -----END CERTIFICATE-----Generated at Sat Jun 14 18:49:18 2025 by rpki-client