$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.mft File: _0lSk8tfFeXRS6zC2xBSsuLIJcg.mft (raw, json) Hash identifier: oL75UDfc083AWPgY1u90+NQt4lstRbf8epRv8QJHEsw= Subject key identifier: 1D:30:17:93:D4:E9:36:65:85:80:06:11:92:A0:BD:DE:A6:44:D6:01 Authority key identifier: FF:49:52:93:CB:5F:15:E5:D1:4B:AC:C2:DB:10:52:B2:E2:C8:25:C8 Certificate issuer: /CN=A91CEAA2/serialNumber=FF495293CB5F15E5D14BACC2DB1052B2E2C825C8 Certificate serial: 34C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.mft Manifest number: 34A7 Signing time: Sat 14 Jun 2025 14:54:05 +0000 Manifest this update: Sat 14 Jun 2025 14:54:04 +0000 Manifest next update: Sat 21 Jun 2025 14:54:04 +0000 Files and hashes: 1: _0lSk8tfFeXRS6zC2xBSsuLIJcg.crl (hash: 85/HOt/F/BxeeAQSeMm/g71p0oPzITrvmmPfkBnsch8=) 2: 767E7B3CA60211EFBFCDB65FC4F9AE02.roa (hash: sDAVT78GpTIvV3Pk7DGbULa+i4kn7uu7qVMnxNmpH28=) 3: B2306182F3F911EAB9D11D26C4F9AE02.roa (hash: XuAw72l1y8+xZhjG02bLa91Tpql6DxMPw1rT8RJ+tTY=) 4: 0DEF13D4FC1711EC919B6757C4F9AE02.roa (hash: ZplEo/zP0jHGZr0dLBLSTaxCxcoclbSDg8qfGUwBkSQ=) 5: 75906378FC1F11ECAD09AF21C4F9AE02.roa (hash: KUnun5lZEQw4kuW5EOrvbt/fHn0giqX+CGkWFRK4Ts8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.crl rsync://rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 14:54:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13505 (0x34c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CEAA2, serialNumber=FF495293CB5F15E5D14BACC2DB1052B2E2C825C8 Validity Not Before: Jun 14 14:54:04 2025 GMT Not After : Jun 21 14:54:04 2025 GMT Subject: CN=684d8d0d-d878 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:a2:e7:9a:3c:fd:fe:75:1c:d2:77:e7:1e:00: 6b:f1:0c:c8:5a:9c:7e:d1:03:ad:a3:18:35:3c:91: 0b:0c:80:71:f7:1a:ed:19:13:56:2f:67:92:0b:1d: c5:ff:7d:21:26:ee:88:f2:d2:8e:41:84:e0:25:51: 82:53:67:d0:e1:0f:60:6e:99:b1:14:f5:1c:f1:6e: c2:44:3d:41:94:f6:d3:4f:3f:75:85:88:60:7e:6b: 75:94:58:e8:15:38:80:cf:69:69:13:98:3c:57:6c: ef:58:39:a7:de:1b:46:98:6a:db:26:8e:d3:1e:b7: 80:5d:a0:71:8f:57:79:aa:73:e7:6d:69:c2:d8:f4: 0f:17:86:d9:e3:f1:dc:5b:2c:9f:35:07:03:3a:52: 6b:16:3b:3b:0b:6a:62:44:21:d9:22:b5:67:03:00: 1b:71:bf:b2:ef:b6:a0:96:50:95:41:92:34:00:00: 3b:b5:a1:28:dd:c8:d5:8b:bf:02:48:4f:cd:8a:f1: 56:59:9b:12:6f:cf:d2:b2:dc:68:7c:58:b4:77:53: 69:df:67:48:aa:3d:c2:31:a3:54:a9:6b:e8:22:f4: f6:97:e7:c2:ca:77:a7:d0:b5:4d:93:4c:a8:76:85: c4:5f:68:91:9b:9e:f7:3e:53:15:75:95:66:1a:09: 7b:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:30:17:93:D4:E9:36:65:85:80:06:11:92:A0:BD:DE:A6:44:D6:01 X509v3 Authority Key Identifier: keyid:FF:49:52:93:CB:5F:15:E5:D1:4B:AC:C2:DB:10:52:B2:E2:C8:25:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:1e:b6:4c:ba:16:8c:ec:42:68:de:db:39:7e:c9:72:cc:be: c7:d9:c2:e1:8a:a6:2c:e9:d6:1c:63:29:b8:f1:9c:a5:0c:dc: d5:dd:22:23:ee:12:e7:8b:74:a4:3d:8f:24:64:0e:fd:96:37: 81:26:17:3e:8c:f7:22:a5:5c:d0:1f:39:4a:38:84:49:a3:5b: 64:ae:c2:25:7c:34:5f:43:5e:a5:34:fb:7e:00:3b:a6:84:3d: 50:86:88:4c:14:b7:87:97:db:38:73:cc:39:43:be:0b:01:f6: ed:c8:f7:64:8a:bd:9e:43:37:61:d8:1b:19:49:27:56:36:61: ef:4d:30:88:91:1b:39:7f:b2:94:0d:2b:56:21:58:d0:c3:68: 70:82:6e:44:9f:b0:48:61:92:c9:bd:aa:de:c1:92:72:f9:15: 48:3f:23:49:ac:4b:c5:fd:e3:20:a7:42:69:a2:23:d4:01:3a: 97:d8:d5:15:5d:59:9e:df:0f:60:a5:98:12:5e:1f:40:3a:0c: 2b:1f:49:78:26:77:96:1a:0e:3d:7c:4a:ab:76:05:ad:02:a8: 65:a0:8f:15:67:c9:e0:1f:da:ad:49:98:38:68:2d:ca:7e:f3: 4e:d6:3a:25:d6:aa:b0:8e:25:5a:f9:01:a3:37:bd:6a:0a:0e: c5:0f:7e:87 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNMEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0VBQTIxMTAvBgNVBAUTKEZGNDk1MjkzQ0I1RjE1RTVEMTRCQUNDMkRCMTA1MkIy RTJDODI1QzgwHhcNMjUwNjE0MTQ1NDA0WhcNMjUwNjIxMTQ1NDA0WjAYMRYwFAYD VQQDEw02ODRkOGQwZC1kODc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv6Lnmjz9/nUc0nfnHgBr8QzIWpx+0QOtoxg1PJELDIBx9xrtGRNWL2eSCx3F /30hJu6I8tKOQYTgJVGCU2fQ4Q9gbpmxFPUc8W7CRD1BlPbTTz91hYhgfmt1lFjo FTiAz2lpE5g8V2zvWDmn3htGmGrbJo7THreAXaBxj1d5qnPnbWnC2PQPF4bZ4/Hc WyyfNQcDOlJrFjs7C2piRCHZIrVnAwAbcb+y77agllCVQZI0AAA7taEo3cjVi78C SE/NivFWWZsSb8/SstxofFi0d1Np32dIqj3CMaNUqWvoIvT2l+fCynen0LVNk0yo doXEX2iRm573PlMVdZVmGgl7HwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB0wF5PU 6TZlhYAGEZKgvd6mRNYBMB8GA1UdIwQYMBaAFP9JUpPLXxXl0UuswtsQUrLiyCXI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRUFBMi9EMkFCMjkyQzFE OTkxMUUyQkE1MjlBODYwOEIwMkNEMi9fMGxTazh0ZkZlWFJTNnpDMnhCU3N1TElK Y2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL18wbFNrOHRmRmVYUlM2ekMyeEJTc3VMSUpjZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RUFBMi9EMkFCMjkyQzFEOTkxMUUyQkE1MjlBODYwOEIwMkNEMi9fMGxTazh0ZkZl WFJTNnpDMnhCU3N1TElKY2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAmHrZMuhaM7EJo3ts5fslyzL7H2cLhiqYs6dYcYym48ZylDNzV3SIj 7hLni3SkPY8kZA79ljeBJhc+jPcipVzQHzlKOIRJo1tkrsIlfDRfQ16lNPt+ADum hD1QhohMFLeHl9s4c8w5Q74LAfbtyPdkir2eQzdh2BsZSSdWNmHvTTCIkRs5f7KU DStWIVjQw2hwgm5En7BIYZLJvarewZJy+RVIPyNJrEvF/eMgp0JpoiPUATqX2NUV XVme3w9gpZgSXh9AOgwrH0l4JneWGg49fEqrdgWtAqhloI8VZ8ngH9qtSZg4aC3K fvNO1jol1qqwjiVa+QGjN71qCg7FD36H -----END CERTIFICATE-----Generated at Sat Jun 14 20:27:15 2025 by rpki-client