$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD096/E5042C2ACA3211E9A739B753C4F9AE02/Ci5d8bLD15feoVNn-qncOITNGzM.mft File: Ci5d8bLD15feoVNn-qncOITNGzM.mft (raw, json) Hash identifier: dbJUfwa+AJGFErSf3LCWq23s34svda7p5pV+hJoLec0= Subject key identifier: 54:21:E8:7B:93:C9:DA:05:FA:05:4E:6D:A6:7E:DC:1F:CD:54:BF:72 Authority key identifier: 0A:2E:5D:F1:B2:C3:D7:97:DE:A1:53:67:FA:A9:DC:38:84:CD:1B:33 Certificate issuer: /CN=A91CD096/serialNumber=0A2E5DF1B2C3D797DEA15367FAA9DC3884CD1B33 Certificate serial: 0D8A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ci5d8bLD15feoVNn-qncOITNGzM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CD096/E5042C2ACA3211E9A739B753C4F9AE02/Ci5d8bLD15feoVNn-qncOITNGzM.mft Manifest number: 0D7E Signing time: Mon 16 Jun 2025 17:55:46 +0000 Manifest this update: Mon 16 Jun 2025 17:55:46 +0000 Manifest next update: Mon 23 Jun 2025 17:55:46 +0000 Files and hashes: 1: Ci5d8bLD15feoVNn-qncOITNGzM.crl (hash: eyOT79XdlROq02VFKXA/pPVWGB4KBfVbe5j4bgEGxoo=) 2: 4EEE01FCE15611EF9560323EC4F9AE02.roa (hash: 9Nz/F+iPTsdfTjIzxhDauJBST5Z1hrA/MujlPAQ3LmU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CD096/E5042C2ACA3211E9A739B753C4F9AE02/Ci5d8bLD15feoVNn-qncOITNGzM.crl rsync://rpki.apnic.net/member_repository/A91CD096/E5042C2ACA3211E9A739B753C4F9AE02/Ci5d8bLD15feoVNn-qncOITNGzM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ci5d8bLD15feoVNn-qncOITNGzM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Jun 2025 17:55:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3466 (0xd8a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD096, serialNumber=0A2E5DF1B2C3D797DEA15367FAA9DC3884CD1B33 Validity Not Before: Jun 16 17:55:46 2025 GMT Not After : Jun 23 17:55:46 2025 GMT Subject: CN=68505aa2-b91a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:e5:d7:12:e2:0a:3d:9d:b1:9e:45:38:09:28: b0:4c:d2:67:1d:78:85:8e:86:19:97:0b:58:05:36: 0c:32:bc:e8:41:e3:b4:99:ce:99:88:78:a9:b8:d1: 8d:7d:01:f9:14:d7:64:cc:bc:f3:1f:55:c8:32:82: 59:6f:39:03:5b:fc:5c:b5:1e:52:43:a1:52:f7:79: cb:7e:5d:7d:79:2a:ba:d2:c7:10:60:8e:3d:19:79: 00:68:4a:aa:25:12:80:ac:d1:cc:c1:4c:60:73:85: 78:1f:53:d3:15:50:e8:44:6f:fd:4c:bb:b0:82:ea: 11:c4:0d:49:29:23:59:02:11:88:ea:8e:0e:83:37: 84:22:77:29:c2:6c:7a:f9:0b:22:19:d0:fa:fa:51: 1d:bd:1c:b8:3c:96:1f:6f:05:63:01:3c:1a:35:58: 35:a0:54:5f:2d:6d:1e:1f:56:a4:df:3c:c2:7d:f8: 2a:d4:82:fe:a6:61:87:c8:ee:1b:95:a9:b5:c0:1d: f7:e9:28:74:0a:59:b3:27:46:25:5d:36:8a:cb:9b: 09:5a:54:1f:31:86:84:9f:39:50:5d:15:79:43:6a: 89:97:05:69:30:15:b8:a2:c6:a0:62:84:5b:03:3a: 49:a9:f1:43:c6:3c:a9:69:78:dc:16:8c:53:b1:28: 6d:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:21:E8:7B:93:C9:DA:05:FA:05:4E:6D:A6:7E:DC:1F:CD:54:BF:72 X509v3 Authority Key Identifier: keyid:0A:2E:5D:F1:B2:C3:D7:97:DE:A1:53:67:FA:A9:DC:38:84:CD:1B:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CD096/E5042C2ACA3211E9A739B753C4F9AE02/Ci5d8bLD15feoVNn-qncOITNGzM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ci5d8bLD15feoVNn-qncOITNGzM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD096/E5042C2ACA3211E9A739B753C4F9AE02/Ci5d8bLD15feoVNn-qncOITNGzM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:57:7f:4f:12:cf:17:71:60:a3:cd:06:63:0b:22:b5:8a:05: 46:9d:22:69:18:85:c3:71:c6:09:60:78:a1:d3:f3:19:da:19: e1:ed:07:42:d3:46:f3:d8:b2:57:f2:0c:5b:74:17:8b:ff:ad: af:b0:2b:0a:2d:5b:9e:6a:16:13:ea:37:0f:82:c7:3d:d4:29: fe:91:c0:08:51:a9:08:7b:8b:b9:ec:2b:41:68:51:0e:5a:f3: ab:47:65:33:0a:c6:bb:53:17:87:01:fd:ee:a5:03:f3:c5:a7: fc:8d:1b:1f:67:ec:60:47:2d:df:6b:4e:07:9b:e4:67:31:0a: e7:e5:52:ae:11:8f:33:30:8e:1d:c1:df:15:55:cb:95:e8:eb: ff:b0:69:d8:b9:19:f3:10:2d:1f:7a:eb:45:52:36:06:c2:fe: a8:2b:1d:e1:96:6d:f8:a4:09:e2:54:51:ad:d3:1b:25:28:f8: 1f:e8:02:de:2c:56:31:6e:73:55:db:4f:bc:78:d2:4d:9b:b7: be:09:3a:ab:be:78:c3:27:f3:42:3a:03:01:7f:a1:82:75:62: 83:75:29:49:53:de:91:2a:95:0f:d7:94:44:0e:db:ef:b3:3c: 69:c5:3a:c9:c4:ba:9c:77:45:f1:85:e3:ca:fa:9f:d7:f1:bd: c1:0b:1f:04 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDYowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0QwOTYxMTAvBgNVBAUTKDBBMkU1REYxQjJDM0Q3OTdERUExNTM2N0ZBQTlEQzM4 ODRDRDFCMzMwHhcNMjUwNjE2MTc1NTQ2WhcNMjUwNjIzMTc1NTQ2WjAYMRYwFAYD VQQDEw02ODUwNWFhMi1iOTFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArOXXEuIKPZ2xnkU4CSiwTNJnHXiFjoYZlwtYBTYMMrzoQeO0mc6ZiHipuNGN fQH5FNdkzLzzH1XIMoJZbzkDW/xctR5SQ6FS93nLfl19eSq60scQYI49GXkAaEqq JRKArNHMwUxgc4V4H1PTFVDoRG/9TLuwguoRxA1JKSNZAhGI6o4OgzeEIncpwmx6 +QsiGdD6+lEdvRy4PJYfbwVjATwaNVg1oFRfLW0eH1ak3zzCffgq1IL+pmGHyO4b lam1wB336Sh0ClmzJ0YlXTaKy5sJWlQfMYaEnzlQXRV5Q2qJlwVpMBW4osagYoRb AzpJqfFDxjypaXjcFoxTsShtDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFQh6HuT ydoF+gVObaZ+3B/NVL9yMB8GA1UdIwQYMBaAFAouXfGyw9eX3qFTZ/qp3DiEzRsz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRDA5Ni9FNTA0MkMyQUNB MzIxMUU5QTczOUI3NTNDNEY5QUUwMi9DaTVkOGJMRDE1ZmVvVk5uLXFuY09JVE5H ek0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NpNWQ4YkxEMTVmZW9WTm4tcW5jT0lUTkd6TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RDA5Ni9FNTA0MkMyQUNBMzIxMUU5QTczOUI3NTNDNEY5QUUwMi9DaTVkOGJMRDE1 ZmVvVk5uLXFuY09JVE5Hek0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAdV39PEs8XcWCjzQZjCyK1igVGnSJpGIXDccYJYHih0/MZ2hnh7QdC 00bz2LJX8gxbdBeL/62vsCsKLVueahYT6jcPgsc91Cn+kcAIUakIe4u57CtBaFEO WvOrR2UzCsa7UxeHAf3upQPzxaf8jRsfZ+xgRy3fa04Hm+RnMQrn5VKuEY8zMI4d wd8VVcuV6Ov/sGnYuRnzEC0feutFUjYGwv6oKx3hlm34pAniVFGt0xslKPgf6ALe LFYxbnNV20+8eNJNm7e+CTqrvnjDJ/NCOgMBf6GCdWKDdSlJU96RKpUP15REDtvv szxpxTrJxLqcd0XxhePK+p/X8b3BCx8E -----END CERTIFICATE-----Generated at Wed Jun 18 05:01:22 2025 by rpki-client