$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9E72/E6B44902848011EFAAD8E233C4F9AE02/c9kAkk5wFUjm4yA4gPbAlypMKRo.mft File: c9kAkk5wFUjm4yA4gPbAlypMKRo.mft (raw, json) Hash identifier: NwuTY+2VNImpyq7WbArBw9L6qbpgPyfmPjKBn93M9Eg= Subject key identifier: 5F:90:40:71:9F:39:A0:6F:08:27:02:4E:45:D7:6F:C9:7D:96:68:E0 Authority key identifier: 73:D9:00:92:4E:70:15:48:E6:E3:20:38:80:F6:C0:97:2A:4C:29:1A Certificate issuer: /CN=A91C9E72/serialNumber=73D900924E701548E6E3203880F6C0972A4C291A Certificate serial: 84 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c9kAkk5wFUjm4yA4gPbAlypMKRo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9E72/E6B44902848011EFAAD8E233C4F9AE02/c9kAkk5wFUjm4yA4gPbAlypMKRo.mft Manifest number: 82 Signing time: Fri 13 Jun 2025 05:32:39 +0000 Manifest this update: Fri 13 Jun 2025 05:32:39 +0000 Manifest next update: Fri 20 Jun 2025 05:32:39 +0000 Files and hashes: 1: c9kAkk5wFUjm4yA4gPbAlypMKRo.crl (hash: VQr08xofSCcmkg8ndE2uTO6gN+RxYaiJNJ1xB6ck5sQ=) 2: 5440C4C8848111EF9F3ECE34C4F9AE02.roa (hash: 3hnmn/EG7rhYM2a7/Cnm16lA4qC355sf3kWBw8CmIQU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9E72/E6B44902848011EFAAD8E233C4F9AE02/c9kAkk5wFUjm4yA4gPbAlypMKRo.crl rsync://rpki.apnic.net/member_repository/A91C9E72/E6B44902848011EFAAD8E233C4F9AE02/c9kAkk5wFUjm4yA4gPbAlypMKRo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c9kAkk5wFUjm4yA4gPbAlypMKRo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 05:32:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 132 (0x84) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9E72, serialNumber=73D900924E701548E6E3203880F6C0972A4C291A Validity Not Before: Jun 13 05:32:39 2025 GMT Not After : Jun 20 05:32:39 2025 GMT Subject: CN=684bb7f7-de7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:40:8b:1c:9b:bd:09:8e:4e:f8:6a:6b:83:fc: 9a:38:f5:53:39:7c:d2:ae:d6:fc:ee:37:f5:da:b5: e0:b4:90:16:d8:38:c3:de:1c:56:4d:04:e3:10:7c: b4:5e:28:38:7c:51:12:b3:2b:d2:d7:3c:b2:74:59: c5:a3:22:d9:3e:e4:b2:80:c6:15:eb:74:64:b9:c7: 61:00:29:a0:1b:f7:fd:3f:13:0f:89:8a:ca:70:72: 71:e6:b7:1b:41:25:95:a4:12:fc:f9:d1:6b:d6:fc: 5b:57:ad:62:ab:94:8e:cc:60:ff:54:67:02:ff:82: 69:92:a5:91:71:a5:3d:9b:bf:ed:b9:d6:7c:51:1c: 85:b2:44:26:a5:e1:ef:ce:bb:72:af:68:90:fa:34: ad:42:40:1c:e6:b2:78:b5:d1:05:30:b0:64:fb:00: f0:aa:d5:d4:96:93:f9:b4:6c:da:cb:a1:49:ce:1f: f3:51:2a:d6:6e:db:cd:5f:c8:20:08:5d:af:c1:04: df:2f:61:a7:14:23:9c:6a:b8:2b:3e:a7:04:7d:76: 93:44:e2:a5:6e:93:ca:0b:42:68:51:f5:6a:83:2e: b1:ab:b5:86:0d:3f:81:d9:f7:10:47:d6:3b:90:07: 67:39:21:48:95:92:f2:b6:59:2a:c8:8a:67:12:f7: c9:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:90:40:71:9F:39:A0:6F:08:27:02:4E:45:D7:6F:C9:7D:96:68:E0 X509v3 Authority Key Identifier: keyid:73:D9:00:92:4E:70:15:48:E6:E3:20:38:80:F6:C0:97:2A:4C:29:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9E72/E6B44902848011EFAAD8E233C4F9AE02/c9kAkk5wFUjm4yA4gPbAlypMKRo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c9kAkk5wFUjm4yA4gPbAlypMKRo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9E72/E6B44902848011EFAAD8E233C4F9AE02/c9kAkk5wFUjm4yA4gPbAlypMKRo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cb:03:1e:d9:bf:34:83:4c:7b:83:5f:c8:33:7a:fe:00:c0:1c: a2:b7:49:19:9a:e8:7a:d9:f9:57:37:8f:f0:11:eb:40:03:95: 5b:7b:76:78:71:62:22:19:ac:e3:fd:f6:a2:db:64:58:1a:af: 5e:95:5c:bd:15:25:de:de:f7:26:9b:bc:b6:55:74:ce:ae:f0: 37:1d:b4:48:7d:bd:62:61:f7:95:2a:c4:8d:9c:c2:99:93:c8: af:a3:39:50:c7:2b:92:61:78:1d:1c:b9:58:2e:87:ed:d3:b8: 73:4f:cf:e6:02:5f:34:a8:d2:5c:e1:04:33:2b:22:04:3c:bb: 92:36:58:86:0d:b0:19:b5:42:29:8b:b2:59:d5:c1:49:80:9a: dd:df:bc:d6:8a:88:92:5b:98:59:1f:cc:44:35:85:e4:9a:89: 85:5f:5e:6c:83:0c:87:62:af:28:50:95:fa:c6:e9:b6:fa:3f: ab:16:8c:ab:9c:46:14:bf:09:2f:27:18:32:7f:53:04:75:a8: 89:85:9b:37:fc:37:a1:56:3c:f1:d8:ff:dc:52:9a:1f:4b:cc: bb:5a:68:b3:4a:64:1c:69:72:1b:e8:22:66:64:4f:75:e6:79: e9:6f:04:a4:53:5b:ba:36:16:0c:10:ea:15:b4:57:08:b3:92: 63:db:56:8b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzlFNzIxMTAvBgNVBAUTKDczRDkwMDkyNEU3MDE1NDhFNkUzMjAzODgwRjZDMDk3 MkE0QzI5MUEwHhcNMjUwNjEzMDUzMjM5WhcNMjUwNjIwMDUzMjM5WjAYMRYwFAYD VQQDEw02ODRiYjdmNy1kZTdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv0CLHJu9CY5O+Gprg/yaOPVTOXzSrtb87jf12rXgtJAW2DjD3hxWTQTjEHy0 Xig4fFESsyvS1zyydFnFoyLZPuSygMYV63RkucdhACmgG/f9PxMPiYrKcHJx5rcb QSWVpBL8+dFr1vxbV61iq5SOzGD/VGcC/4JpkqWRcaU9m7/tudZ8URyFskQmpeHv zrtyr2iQ+jStQkAc5rJ4tdEFMLBk+wDwqtXUlpP5tGzay6FJzh/zUSrWbtvNX8gg CF2vwQTfL2GnFCOcargrPqcEfXaTROKlbpPKC0JoUfVqgy6xq7WGDT+B2fcQR9Y7 kAdnOSFIlZLytlkqyIpnEvfJEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF+QQHGf OaBvCCcCTkXXb8l9lmjgMB8GA1UdIwQYMBaAFHPZAJJOcBVI5uMgOID2wJcqTCka MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOUU3Mi9FNkI0NDkwMjg0 ODAxMUVGQUFEOEUyMzNDNEY5QUUwMi9jOWtBa2s1d0ZVam00eUE0Z1BiQWx5cE1L Um8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2M5a0FrazV3RlVqbTR5QTRnUGJBbHlwTUtSby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OUU3Mi9FNkI0NDkwMjg0ODAxMUVGQUFEOEUyMzNDNEY5QUUwMi9jOWtBa2s1d0ZV am00eUE0Z1BiQWx5cE1LUm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDLAx7ZvzSDTHuDX8gzev4AwByit0kZmuh62flXN4/wEetAA5Vbe3Z4 cWIiGazj/fai22RYGq9elVy9FSXe3vcmm7y2VXTOrvA3HbRIfb1iYfeVKsSNnMKZ k8ivozlQxyuSYXgdHLlYLoft07hzT8/mAl80qNJc4QQzKyIEPLuSNliGDbAZtUIp i7JZ1cFJgJrd37zWioiSW5hZH8xENYXkmomFX15sgwyHYq8oUJX6xum2+j+rFoyr nEYUvwkvJxgyf1MEdaiJhZs3/DehVjzx2P/cUpofS8y7WmizSmQcaXIb6CJmZE91 5nnpbwSkU1u6NhYMEOoVtFcIs5Jj21aL -----END CERTIFICATE-----Generated at Sat Jun 14 19:28:55 2025 by rpki-client