$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE9D6/9E66F5127A5511EABFBE947AC4F9AE02/E2dBvZ6HDwbs5cs1W4x1ccyWunQ.mft File: E2dBvZ6HDwbs5cs1W4x1ccyWunQ.mft (raw, json) Hash identifier: 5757A7lGutBreqGkiGbtKKj1CEseetLrjeQqxqvWTZ8= Subject key identifier: 10:1E:20:86:E9:3C:84:C5:A4:B0:0F:83:C4:B9:FB:53:8E:4D:EB:B8 Authority key identifier: 13:67:41:BD:9E:87:0F:06:EC:E5:CB:35:5B:8C:75:71:CC:96:BA:74 Certificate issuer: /CN=A91CE9D6/serialNumber=136741BD9E870F06ECE5CB355B8C7571CC96BA74 Certificate serial: 0A09 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E2dBvZ6HDwbs5cs1W4x1ccyWunQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE9D6/9E66F5127A5511EABFBE947AC4F9AE02/E2dBvZ6HDwbs5cs1W4x1ccyWunQ.mft Manifest number: 09F6 Signing time: Thu 12 Jun 2025 19:40:09 +0000 Manifest this update: Thu 12 Jun 2025 19:40:08 +0000 Manifest next update: Thu 19 Jun 2025 19:40:08 +0000 Files and hashes: 1: E2dBvZ6HDwbs5cs1W4x1ccyWunQ.crl (hash: KIIXw63VegX9RNY8eZnD/TQvTyZVa/HnOsOpw9pYE4Q=) 2: 722D43AC7A5A11EABD77E486C4F9AE02.roa (hash: gpPg/16kKxPZtosxwk3uS2OGAiNWAdV4RvEaBetwtjY=) 3: E4EFE6905ECB11ECA9B55A3BC4F9AE02.roa (hash: 2/vrRanjIvJ85A1uVxImmh8dfMsQj3ydRiChMXIyicw=) 4: A1C764027A5B11EA98745A0EC4F9AE02.roa (hash: Nzvt2pSeGZD3qdrCxDPbO/iQuuVNl0d8y3dg1zJR1Nk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE9D6/9E66F5127A5511EABFBE947AC4F9AE02/E2dBvZ6HDwbs5cs1W4x1ccyWunQ.crl rsync://rpki.apnic.net/member_repository/A91CE9D6/9E66F5127A5511EABFBE947AC4F9AE02/E2dBvZ6HDwbs5cs1W4x1ccyWunQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E2dBvZ6HDwbs5cs1W4x1ccyWunQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 19:40:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2569 (0xa09) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE9D6, serialNumber=136741BD9E870F06ECE5CB355B8C7571CC96BA74 Validity Not Before: Jun 12 19:40:08 2025 GMT Not After : Jun 19 19:40:08 2025 GMT Subject: CN=684b2d19-d745 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:06:e4:bc:c6:8b:b9:61:e2:bb:cb:d1:69:e7: dd:2c:dc:3b:a1:94:3a:0e:85:16:bd:5a:85:ad:aa: 14:85:c8:65:9e:0a:90:aa:1b:36:3c:55:6a:11:32: 19:44:01:87:d4:9e:d7:54:c1:cd:73:b6:2a:2e:3a: ef:c9:85:ef:18:76:e5:ac:cb:9e:d3:41:b3:65:8e: 4c:95:66:b2:69:6a:da:40:34:52:7b:37:01:0a:fd: 5f:02:79:8a:63:27:5b:af:62:e4:5e:26:b4:93:ae: ba:d9:d9:27:7c:f5:03:6a:f8:d8:07:2b:da:b4:73: 7c:d2:fb:7c:e5:ae:a0:92:c3:2b:c2:c9:22:fe:f9: 67:0a:a2:a2:89:02:9a:10:45:1d:c4:b9:a5:27:72: 30:e3:37:45:24:37:78:c6:cb:56:a1:ea:09:83:bc: 3a:d3:6e:ac:aa:cc:f8:65:89:dd:a6:15:70:76:47: c8:fe:2a:11:fd:3b:9b:ad:bc:2b:24:8e:5e:b9:d7: 12:b8:f3:1f:ad:4d:6b:97:c3:3e:a3:ae:53:35:56: b1:f8:f6:7f:58:aa:ad:46:82:32:7f:c3:b5:7a:3a: c5:75:97:87:13:b5:5b:78:44:c7:96:57:ec:43:da: 1f:ef:16:c2:6e:c3:b5:d4:36:8d:5f:bf:01:f3:0c: 25:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:1E:20:86:E9:3C:84:C5:A4:B0:0F:83:C4:B9:FB:53:8E:4D:EB:B8 X509v3 Authority Key Identifier: keyid:13:67:41:BD:9E:87:0F:06:EC:E5:CB:35:5B:8C:75:71:CC:96:BA:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE9D6/9E66F5127A5511EABFBE947AC4F9AE02/E2dBvZ6HDwbs5cs1W4x1ccyWunQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E2dBvZ6HDwbs5cs1W4x1ccyWunQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE9D6/9E66F5127A5511EABFBE947AC4F9AE02/E2dBvZ6HDwbs5cs1W4x1ccyWunQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:ac:e0:71:8d:c3:84:07:67:aa:9e:d9:ac:07:63:b3:4c:ba: 8e:c9:43:fb:c8:76:89:9f:92:c9:2b:6d:43:f9:b9:b3:2e:82: fd:78:a9:b3:cb:f1:9d:95:99:7f:ca:65:e3:00:af:dd:68:fe: f6:a7:18:95:8c:c8:ca:51:71:65:79:25:bc:42:99:6f:06:f1: e9:97:e3:82:5e:cb:f1:b6:7e:57:91:57:a8:9c:aa:a0:72:f3: a9:46:04:35:34:5e:97:a4:78:61:45:6e:f5:0b:96:37:66:3d: d7:37:39:ab:b8:96:ab:4f:44:29:50:4a:7e:ff:f2:81:5b:06: ca:7e:ec:7b:04:04:9a:e7:4c:2a:7e:bc:a5:ca:b7:ca:aa:1d: 97:35:90:ff:bc:7a:35:0e:cd:86:69:b5:02:22:7b:e6:d0:4c: b2:70:67:29:c8:1b:5d:42:aa:04:83:2e:cf:b5:a3:1a:68:59: cf:2a:be:33:b3:e0:e3:4b:e7:f8:5e:ce:a6:7d:51:c7:91:13: f6:98:1d:56:6e:6c:c7:fa:05:72:a8:bb:92:95:ec:5d:86:30: 6d:2a:43:e8:9a:da:63:4f:f4:b4:33:af:eb:c0:09:0c:24:d3: 83:a1:d6:c6:49:ba:b6:99:7e:7a:eb:81:38:a9:77:45:9d:e9: 1f:cd:b2:36 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCgkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U5RDYxMTAvBgNVBAUTKDEzNjc0MUJEOUU4NzBGMDZFQ0U1Q0IzNTVCOEM3NTcx Q0M5NkJBNzQwHhcNMjUwNjEyMTk0MDA4WhcNMjUwNjE5MTk0MDA4WjAYMRYwFAYD VQQDEw02ODRiMmQxOS1kNzQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuQbkvMaLuWHiu8vRaefdLNw7oZQ6DoUWvVqFraoUhchlngqQqhs2PFVqETIZ RAGH1J7XVMHNc7YqLjrvyYXvGHblrMue00GzZY5MlWayaWraQDRSezcBCv1fAnmK Yydbr2LkXia0k6662dknfPUDavjYByvatHN80vt85a6gksMrwski/vlnCqKiiQKa EEUdxLmlJ3Iw4zdFJDd4xstWoeoJg7w6026sqsz4ZYndphVwdkfI/ioR/Tubrbwr JI5eudcSuPMfrU1rl8M+o65TNVax+PZ/WKqtRoIyf8O1ejrFdZeHE7VbeETHllfs Q9of7xbCbsO11DaNX78B8wwlewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBAeIIbp PITFpLAPg8S5+1OOTeu4MB8GA1UdIwQYMBaAFBNnQb2ehw8G7OXLNVuMdXHMlrp0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTlENi85RTY2RjUxMjdB NTUxMUVBQkZCRTk0N0FDNEY5QUUwMi9FMmRCdlo2SER3YnM1Y3MxVzR4MWNjeVd1 blEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0UyZEJ2WjZIRHdiczVjczFXNHgxY2N5V3VuUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTlENi85RTY2RjUxMjdBNTUxMUVBQkZCRTk0N0FDNEY5QUUwMi9FMmRCdlo2SER3 YnM1Y3MxVzR4MWNjeVd1blEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAxrOBxjcOEB2eqntmsB2OzTLqOyUP7yHaJn5LJK21D+bmzLoL9eKmz y/GdlZl/ymXjAK/daP72pxiVjMjKUXFleSW8QplvBvHpl+OCXsvxtn5XkVeonKqg cvOpRgQ1NF6XpHhhRW71C5Y3Zj3XNzmruJarT0QpUEp+//KBWwbKfux7BASa50wq frylyrfKqh2XNZD/vHo1Ds2GabUCInvm0EyycGcpyBtdQqoEgy7PtaMaaFnPKr4z s+DjS+f4Xs6mfVHHkRP2mB1WbmzH+gVyqLuSlexdhjBtKkPomtpjT/S0M6/rwAkM JNODodbGSbq2mX5664E4qXdFnekfzbI2 -----END CERTIFICATE-----Generated at Sat Jun 14 18:46:25 2025 by rpki-client