$ rpki-client -vvf rpki.apnic.net/member_repository/A91CAE04/9D8F772A5F9611EE83638F3EC4F9AE02/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.mft File: s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.mft (raw, json) Hash identifier: HLEJoJEdAm7AMgDnxk5TR3AMD0jjre3ODC0pklyxA3w= Subject key identifier: 24:41:F8:1F:F2:AB:B0:67:8A:48:4D:98:49:2D:09:23:63:84:DC:0B Authority key identifier: B3:62:43:7A:B6:7D:29:0C:5C:DF:EF:2F:62:B7:7E:DD:8A:9F:FA:44 Certificate issuer: /CN=A91CAE04/serialNumber=B362437AB67D290C5CDFEF2F62B77EDD8A9FFA44 Certificate serial: 0155 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CAE04/9D8F772A5F9611EE83638F3EC4F9AE02/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.mft Manifest number: 014A Signing time: Fri 13 Jun 2025 03:19:21 +0000 Manifest this update: Fri 13 Jun 2025 03:19:20 +0000 Manifest next update: Fri 20 Jun 2025 03:19:20 +0000 Files and hashes: 1: s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.crl (hash: ppwhmoypFMyGy4VBAcXQwnTEX1WYEPFZ+HwhyW9Xwf4=) 2: ABA6DCF0030F11EFB12D8A18C4F9AE02.roa (hash: 8DzejS8W4fMDZxY9d0U5Ub0yW6L6q7unUQ1/+VEKpFE=) 3: 7E40FBBA09EF11EFAA24237EC4F9AE02.roa (hash: M7N4nEDh5dyTQv8ASFX1wDCT+UJFNgGAfP+B+anOP+c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CAE04/9D8F772A5F9611EE83638F3EC4F9AE02/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.crl rsync://rpki.apnic.net/member_repository/A91CAE04/9D8F772A5F9611EE83638F3EC4F9AE02/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 03:19:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 341 (0x155) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CAE04, serialNumber=B362437AB67D290C5CDFEF2F62B77EDD8A9FFA44 Validity Not Before: Jun 13 03:19:20 2025 GMT Not After : Jun 20 03:19:20 2025 GMT Subject: CN=684b98b8-38b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:5a:a7:9c:99:5c:6e:30:ed:ab:53:ef:27:e8: 01:8b:ea:5b:03:a5:ba:e8:0c:b2:7a:f6:eb:20:34: 70:ca:58:04:ea:72:b1:55:0c:c8:8e:77:6d:75:33: 0c:31:6a:ee:83:2d:7f:c4:50:46:fe:ae:59:19:2b: 68:09:54:f2:c2:3c:e8:5e:99:0b:7d:11:b2:28:44: 7a:1e:de:fb:87:5c:cb:2a:99:bb:1d:d8:41:42:3f: 32:07:7e:04:47:2f:2f:b4:87:4c:72:ca:fa:b7:62: b6:cb:36:ec:f4:2d:fd:8a:2b:10:2d:89:97:46:3e: 15:d3:67:41:90:68:06:13:3b:6c:3e:e6:26:32:55: 4a:97:90:f2:11:ae:2f:d7:48:19:44:95:ed:c9:0b: 6a:62:fb:e4:bd:96:40:6b:d7:30:78:4e:ea:0b:ea: 0a:80:1d:e1:74:87:99:4d:60:94:df:aa:80:58:fb: 18:20:7c:28:ef:fa:97:bf:5a:65:e8:a6:d4:d9:c9: aa:26:a0:9f:7c:28:18:13:d5:0b:04:ee:2c:e8:21: c8:a2:39:63:b0:e2:4d:e6:a7:ba:e6:21:1c:4b:40: 8e:1b:21:5e:f2:e0:1d:0f:a5:f5:71:7a:ef:f3:cb: 74:93:20:8a:2b:24:5d:51:57:ba:ed:66:d8:9b:4a: 0d:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:41:F8:1F:F2:AB:B0:67:8A:48:4D:98:49:2D:09:23:63:84:DC:0B X509v3 Authority Key Identifier: keyid:B3:62:43:7A:B6:7D:29:0C:5C:DF:EF:2F:62:B7:7E:DD:8A:9F:FA:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CAE04/9D8F772A5F9611EE83638F3EC4F9AE02/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CAE04/9D8F772A5F9611EE83638F3EC4F9AE02/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:23:fc:8c:01:58:41:e8:3e:5b:9b:1f:22:b5:09:d6:43:5a: 63:07:1e:df:6a:b9:97:15:0a:68:ff:68:55:4d:c7:3f:46:99: 9d:04:33:75:36:99:0e:ed:ed:38:c0:94:10:6b:3d:ab:cb:56: dc:52:0c:92:96:aa:f1:c0:11:21:1f:d5:b9:ac:d4:f2:36:e9: 36:9a:46:2f:0a:d2:2d:ce:47:5d:2a:33:0e:5c:07:d1:d3:d2: ac:92:1e:cb:2c:b3:d9:4b:14:a2:68:43:1f:43:69:51:91:2a: 07:fa:b1:16:e6:9d:76:e1:c5:0a:1f:b5:1e:6c:1d:31:30:c7: d8:dd:3e:14:cc:1c:93:00:d1:41:60:3d:78:a7:b9:d3:a9:fc: 0a:9f:c1:c1:2e:09:f2:df:c9:75:1f:ee:39:84:0b:cc:c9:76: b0:b5:5a:db:01:cc:e4:e7:4e:62:2f:51:78:3f:50:04:8e:08: 62:be:db:0e:6d:ea:83:75:b9:10:70:6c:9f:b9:1f:6a:d7:cf: 54:a2:cf:dd:95:5d:19:89:a9:48:0c:e4:41:4a:a4:b9:ec:79: c4:57:d5:4d:36:2d:a2:50:29:fb:7c:bb:c3:53:f9:ef:8e:81: b3:a4:2b:a9:92:3f:49:cc:02:ca:5f:b9:9d:47:ff:e8:1a:d6: 47:1b:7e:1e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0FFMDQxMTAvBgNVBAUTKEIzNjI0MzdBQjY3RDI5MEM1Q0RGRUYyRjYyQjc3RURE OEE5RkZBNDQwHhcNMjUwNjEzMDMxOTIwWhcNMjUwNjIwMDMxOTIwWjAYMRYwFAYD VQQDEw02ODRiOThiOC0zOGIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArFqnnJlcbjDtq1PvJ+gBi+pbA6W66AyyevbrIDRwylgE6nKxVQzIjndtdTMM MWrugy1/xFBG/q5ZGStoCVTywjzoXpkLfRGyKER6Ht77h1zLKpm7HdhBQj8yB34E Ry8vtIdMcsr6t2K2yzbs9C39iisQLYmXRj4V02dBkGgGEztsPuYmMlVKl5DyEa4v 10gZRJXtyQtqYvvkvZZAa9cweE7qC+oKgB3hdIeZTWCU36qAWPsYIHwo7/qXv1pl 6KbU2cmqJqCffCgYE9ULBO4s6CHIojljsOJN5qe65iEcS0COGyFe8uAdD6X1cXrv 88t0kyCKKyRdUVe67WbYm0oNAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCRB+B/y q7BnikhNmEktCSNjhNwLMB8GA1UdIwQYMBaAFLNiQ3q2fSkMXN/vL2K3ft2Kn/pE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQUUwNC85RDhGNzcyQTVG OTYxMUVFODM2MzhGM0VDNEY5QUUwMi9zMkpEZXJaOUtReGMzLTh2WXJkLTNZcWYt a1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3MySkRlclo5S1F4YzMtOHZZcmQtM1lxZi1rUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QUUwNC85RDhGNzcyQTVGOTYxMUVFODM2MzhGM0VDNEY5QUUwMi9zMkpEZXJaOUtR eGMzLTh2WXJkLTNZcWYta1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCMI/yMAVhB6D5bmx8itQnWQ1pjBx7farmXFQpo/2hVTcc/RpmdBDN1 NpkO7e04wJQQaz2ry1bcUgySlqrxwBEhH9W5rNTyNuk2mkYvCtItzkddKjMOXAfR 09Kskh7LLLPZSxSiaEMfQ2lRkSoH+rEW5p124cUKH7UebB0xMMfY3T4UzByTANFB YD14p7nTqfwKn8HBLgny38l1H+45hAvMyXawtVrbAczk505iL1F4P1AEjghivtsO beqDdbkQcGyfuR9q189Uos/dlV0ZialIDORBSqS57HnEV9VNNi2iUCn7fLvDU/nv joGzpCupkj9JzALKX7mdR//oGtZHG34e -----END CERTIFICATE-----Generated at Sat Jun 14 19:32:23 2025 by rpki-client