$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA815/8DCD1EA81D9B11E291D2848908B02CD2/K90xURFt6dvFXPw9LNrKWOdLGeY.mft File: K90xURFt6dvFXPw9LNrKWOdLGeY.mft (raw, json) Hash identifier: tnGnxZq6QGrszpL4rgGeHbyqM+3f9+804JT8WaN9tYg= Subject key identifier: B8:61:FC:7B:2B:97:C2:81:64:99:A7:EB:10:86:5E:32:01:0D:71:C8 Authority key identifier: 2B:DD:31:51:11:6D:E9:DB:C5:5C:FC:3D:2C:DA:CA:58:E7:4B:19:E6 Certificate issuer: /CN=A91CA815/serialNumber=2BDD3151116DE9DBC55CFC3D2CDACA58E74B19E6 Certificate serial: 34A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K90xURFt6dvFXPw9LNrKWOdLGeY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CA815/8DCD1EA81D9B11E291D2848908B02CD2/K90xURFt6dvFXPw9LNrKWOdLGeY.mft Manifest number: 349C Signing time: Sat 14 Jun 2025 14:56:15 +0000 Manifest this update: Sat 14 Jun 2025 14:56:14 +0000 Manifest next update: Sat 21 Jun 2025 14:56:14 +0000 Files and hashes: 1: K90xURFt6dvFXPw9LNrKWOdLGeY.crl (hash: TkHvK6IF2mDSRsIidIfcPRkE+pT8+XinKbvu5TlE/1U=) 2: E9E555FA506211EAA2BC3E2EC4F9AE02.roa (hash: 8wn1BShCqNm3QYIhzMCvnBkRSH1pV/AljqzDWjCUBxQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CA815/8DCD1EA81D9B11E291D2848908B02CD2/K90xURFt6dvFXPw9LNrKWOdLGeY.crl rsync://rpki.apnic.net/member_repository/A91CA815/8DCD1EA81D9B11E291D2848908B02CD2/K90xURFt6dvFXPw9LNrKWOdLGeY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K90xURFt6dvFXPw9LNrKWOdLGeY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 14:56:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13479 (0x34a7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CA815, serialNumber=2BDD3151116DE9DBC55CFC3D2CDACA58E74B19E6 Validity Not Before: Jun 14 14:56:14 2025 GMT Not After : Jun 21 14:56:14 2025 GMT Subject: CN=684d8d8f-a5d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:1e:ee:24:ed:da:05:5b:f4:70:e9:fe:73:61: e6:ee:3a:4a:c2:b3:b0:82:a8:4a:ee:df:ed:4c:01: f2:1f:6c:d7:7f:e0:b6:59:d0:63:d2:c7:f8:07:56: ff:a8:5c:9e:1b:35:eb:6d:ca:67:24:d8:60:9f:81: d1:9c:4d:28:f7:8c:b6:95:6f:9d:20:09:f1:f0:8b: e6:95:2e:ec:79:8a:b1:85:50:92:90:7a:71:de:9c: 5e:5e:77:c7:fb:8f:56:d2:df:ef:03:0b:08:22:1e: ca:11:ae:31:64:63:29:bd:a0:7a:3c:06:3e:3d:3d: 34:f3:e4:8b:58:5f:6b:d6:22:58:79:09:ab:18:08: 3f:15:2f:ff:72:c2:68:de:8e:8f:a6:8c:24:aa:ac: 4c:07:69:9e:15:04:97:1a:d7:2b:c7:0f:e7:46:dc: 58:97:67:d3:8c:9e:ec:c8:57:f1:23:a6:c2:93:1b: b2:d1:76:6e:41:92:1a:27:19:3e:06:3a:27:12:73: 91:7f:25:63:ad:f0:f8:5d:fe:f7:90:f2:78:f5:70: fa:5e:85:43:98:ca:f1:db:06:4a:3c:31:87:e0:d6: c0:3f:42:8c:b4:88:1d:51:e8:b5:cb:97:b6:8f:26: df:41:e5:fa:c1:80:60:aa:de:0d:c6:b9:ff:3a:68: 2e:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:61:FC:7B:2B:97:C2:81:64:99:A7:EB:10:86:5E:32:01:0D:71:C8 X509v3 Authority Key Identifier: keyid:2B:DD:31:51:11:6D:E9:DB:C5:5C:FC:3D:2C:DA:CA:58:E7:4B:19:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CA815/8DCD1EA81D9B11E291D2848908B02CD2/K90xURFt6dvFXPw9LNrKWOdLGeY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K90xURFt6dvFXPw9LNrKWOdLGeY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA815/8DCD1EA81D9B11E291D2848908B02CD2/K90xURFt6dvFXPw9LNrKWOdLGeY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:d0:45:63:61:c3:02:4a:8e:3f:a8:7b:a8:67:02:ca:61:37: 29:6c:b6:ac:2d:85:95:dd:e4:e3:23:77:7e:79:e1:07:cd:14: eb:13:92:3e:05:c1:dc:c0:c0:61:24:3e:64:38:5b:4c:10:5c: 69:cb:aa:bd:21:2e:57:eb:e6:e4:bf:8a:1f:51:ca:af:17:5a: 80:87:dc:3b:bc:96:9d:84:b9:f8:bc:7a:14:87:fb:ae:a2:47: 26:97:6a:2b:13:88:76:b2:c2:b5:7c:03:9d:51:cd:12:00:0d: d3:3f:dd:71:1d:bf:80:55:8e:87:08:94:af:ff:2a:58:70:9e: ad:14:0c:9b:94:2d:9e:7b:0b:1f:ce:d5:05:75:26:fe:c8:e6: c3:44:e1:06:d4:ba:13:b6:f4:92:ee:ad:04:79:4a:59:59:3e: 94:1e:a0:35:e9:05:ec:16:a6:51:9a:eb:76:35:51:68:3f:87: fb:ec:74:f6:1d:4c:51:e7:de:a3:69:85:df:e4:c3:06:29:a5: a5:d7:03:74:44:31:44:f7:c8:fd:12:d7:7e:e8:69:a1:1c:b1: d7:f3:fd:9a:e0:c8:7f:a9:c9:30:d6:9b:6c:be:2c:7d:74:9d: 5f:9f:3c:15:94:b8:02:78:15:a2:b1:08:15:1b:2d:34:6e:82: e4:a6:fe:9d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNKcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0E4MTUxMTAvBgNVBAUTKDJCREQzMTUxMTE2REU5REJDNTVDRkMzRDJDREFDQTU4 RTc0QjE5RTYwHhcNMjUwNjE0MTQ1NjE0WhcNMjUwNjIxMTQ1NjE0WjAYMRYwFAYD VQQDEw02ODRkOGQ4Zi1hNWQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlB7uJO3aBVv0cOn+c2Hm7jpKwrOwgqhK7t/tTAHyH2zXf+C2WdBj0sf4B1b/ qFyeGzXrbcpnJNhgn4HRnE0o94y2lW+dIAnx8IvmlS7seYqxhVCSkHpx3pxeXnfH +49W0t/vAwsIIh7KEa4xZGMpvaB6PAY+PT008+SLWF9r1iJYeQmrGAg/FS//csJo 3o6PpowkqqxMB2meFQSXGtcrxw/nRtxYl2fTjJ7syFfxI6bCkxuy0XZuQZIaJxk+ BjonEnORfyVjrfD4Xf73kPJ49XD6XoVDmMrx2wZKPDGH4NbAP0KMtIgdUei1y5e2 jybfQeX6wYBgqt4Nxrn/OmguFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLhh/Hsr l8KBZJmn6xCGXjIBDXHIMB8GA1UdIwQYMBaAFCvdMVERbenbxVz8PSzayljnSxnm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQTgxNS84RENEMUVBODFE OUIxMUUyOTFEMjg0ODkwOEIwMkNEMi9LOTB4VVJGdDZkdkZYUHc5TE5yS1dPZExH ZVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0s5MHhVUkZ0NmR2RlhQdzlMTnJLV09kTEdlWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QTgxNS84RENEMUVBODFEOUIxMUUyOTFEMjg0ODkwOEIwMkNEMi9LOTB4VVJGdDZk dkZYUHc5TE5yS1dPZExHZVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAM0EVjYcMCSo4/qHuoZwLKYTcpbLasLYWV3eTjI3d+eeEHzRTrE5I+ BcHcwMBhJD5kOFtMEFxpy6q9IS5X6+bkv4ofUcqvF1qAh9w7vJadhLn4vHoUh/uu okcml2orE4h2ssK1fAOdUc0SAA3TP91xHb+AVY6HCJSv/ypYcJ6tFAyblC2eewsf ztUFdSb+yObDROEG1LoTtvSS7q0EeUpZWT6UHqA16QXsFqZRmut2NVFoP4f77HT2 HUxR596jaYXf5MMGKaWl1wN0RDFE98j9Etd+6GmhHLHX8/2a4Mh/qckw1ptsvix9 dJ1fnzwVlLgCeBWisQgVGy00boLkpv6d -----END CERTIFICATE-----Generated at Sat Jun 14 19:31:34 2025 by rpki-client