$ rpki-client -vvf rpki.apnic.net/member_repository/A91D32F4/B4CA77964DE011EDA6F01048C4F9AE02/acCJt6SOfabuTwH-xqmOCtL6gQs.mft File: acCJt6SOfabuTwH-xqmOCtL6gQs.mft (raw, json) Hash identifier: S9hXtfZ/31uCGjTV5QF/fL97wKpKtPVcozRRZ9yutLY= Subject key identifier: D2:E0:90:51:65:A0:93:D7:7B:EF:C5:3B:03:FA:1F:1B:56:BC:D3:64 Authority key identifier: 69:C0:89:B7:A4:8E:7D:A6:EE:4F:01:FE:C6:A9:8E:0A:D2:FA:81:0B Certificate issuer: /CN=A91D32F4/serialNumber=69C089B7A48E7DA6EE4F01FEC6A98E0AD2FA810B Certificate serial: 0208 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/acCJt6SOfabuTwH-xqmOCtL6gQs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D32F4/B4CA77964DE011EDA6F01048C4F9AE02/acCJt6SOfabuTwH-xqmOCtL6gQs.mft Manifest number: 01FC Signing time: Sun 15 Jun 2025 01:47:05 +0000 Manifest this update: Sun 15 Jun 2025 01:47:04 +0000 Manifest next update: Sun 22 Jun 2025 01:47:04 +0000 Files and hashes: 1: acCJt6SOfabuTwH-xqmOCtL6gQs.crl (hash: HH2riNwNlAhgTpdIuUQ70rGE29FlN5rmtWCoAIEIY8Y=) 2: 350CDCB44ED611ED84336740C4F9AE02.roa (hash: Rl7cC9aD2+HUzvALoJy+W3POWuoH4LCYbv/U7VQpjNA=) 3: 4214E284606911EFBDF1A71AC4F9AE02.roa (hash: 6Nzq1WoXAkjRrieEemeMX09rMtSXxNTIJXhrfWNFeNg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D32F4/B4CA77964DE011EDA6F01048C4F9AE02/acCJt6SOfabuTwH-xqmOCtL6gQs.crl rsync://rpki.apnic.net/member_repository/A91D32F4/B4CA77964DE011EDA6F01048C4F9AE02/acCJt6SOfabuTwH-xqmOCtL6gQs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/acCJt6SOfabuTwH-xqmOCtL6gQs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 01:47:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 520 (0x208) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D32F4, serialNumber=69C089B7A48E7DA6EE4F01FEC6A98E0AD2FA810B Validity Not Before: Jun 15 01:47:04 2025 GMT Not After : Jun 22 01:47:04 2025 GMT Subject: CN=684e2618-7897 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:37:e4:6d:8d:18:d6:87:02:2c:14:99:f9:b8: 65:84:08:c3:96:fc:18:f4:fd:e1:30:8f:60:91:26: 97:c1:0c:c8:6d:60:e7:94:c4:d4:9e:ba:d6:fb:99: de:6b:83:8d:f8:c5:4b:62:0b:83:ca:9c:62:b4:4d: a5:b2:f2:ed:74:75:71:fd:93:d1:7c:38:f2:24:6c: a6:20:f4:7d:86:9e:8e:25:c3:87:9d:5d:92:f5:76: 92:7b:26:2d:8a:67:9f:de:fd:c8:57:c3:f1:bb:a1: 38:24:94:74:83:35:6a:2b:6a:db:ae:f0:f4:70:2c: 00:39:ec:6a:e8:79:78:68:c6:14:a1:69:ca:26:d5: 2e:3f:ba:3e:7a:12:22:65:99:9b:0d:44:a8:0e:3a: 09:30:c5:73:b0:eb:52:4b:8e:bc:68:1c:3f:d1:a4: 60:90:07:7a:8e:c1:ff:01:1d:1d:7e:2a:e4:90:f3: 44:86:04:67:17:99:5a:4c:1c:72:18:5f:a4:74:78: cf:03:d3:e8:33:a8:80:65:e2:4a:ce:9e:c5:5d:6e: b2:c9:89:02:4d:8b:33:54:ec:7d:a4:1e:a8:e1:3d: 3f:81:4f:ed:d6:fb:b5:0a:e1:ca:5d:2c:1c:5b:3c: fb:b7:0e:09:14:4e:13:13:2e:fa:af:83:99:54:fc: 8e:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:E0:90:51:65:A0:93:D7:7B:EF:C5:3B:03:FA:1F:1B:56:BC:D3:64 X509v3 Authority Key Identifier: keyid:69:C0:89:B7:A4:8E:7D:A6:EE:4F:01:FE:C6:A9:8E:0A:D2:FA:81:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D32F4/B4CA77964DE011EDA6F01048C4F9AE02/acCJt6SOfabuTwH-xqmOCtL6gQs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/acCJt6SOfabuTwH-xqmOCtL6gQs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D32F4/B4CA77964DE011EDA6F01048C4F9AE02/acCJt6SOfabuTwH-xqmOCtL6gQs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c4:78:58:2a:35:53:c3:99:59:f1:a9:b8:77:2f:a5:7d:d9:2f: 3b:cf:78:24:ec:1a:04:a5:e3:39:28:ea:76:85:4a:58:d6:70: ef:4d:d1:73:7a:96:93:ee:1f:60:44:f4:79:7d:10:d0:78:e1: 11:e9:78:1c:dc:68:99:79:c3:c4:86:c6:77:72:21:30:4b:73: 08:0f:de:2f:1c:25:40:00:0b:7c:17:a8:1a:6c:d2:25:8e:97: 15:7a:64:0a:ca:57:97:5b:dc:41:cf:54:1d:f5:92:0e:67:8c: 5b:22:3d:54:47:31:5a:c5:36:ae:2a:5d:5f:f3:dc:14:4d:bb: 14:e9:c2:45:3c:26:8e:36:2e:b1:ee:e4:77:15:a3:d5:5f:21: 53:82:f1:a7:cc:fd:68:85:33:7b:fa:25:34:28:4a:b7:33:eb: ac:84:40:d3:b3:6e:34:13:1f:a3:c3:cd:47:0c:e7:7e:fd:5a: 73:65:d9:54:cb:bb:17:b3:28:0e:46:35:62:6e:7b:7c:27:3b: a2:c8:aa:0f:65:bf:b7:46:ea:22:be:91:3f:7a:d5:f8:42:d2: 5c:f1:bb:4a:9e:a7:53:1c:42:41:82:02:ba:e7:38:5b:5d:cc: 57:0d:44:79:16:01:ea:ea:cf:23:fa:02:c1:eb:73:ee:c8:1a: a1:02:38:50 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAggwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDMyRjQxMTAvBgNVBAUTKDY5QzA4OUI3QTQ4RTdEQTZFRTRGMDFGRUM2QTk4RTBB RDJGQTgxMEIwHhcNMjUwNjE1MDE0NzA0WhcNMjUwNjIyMDE0NzA0WjAYMRYwFAYD VQQDEw02ODRlMjYxOC03ODk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyjfkbY0Y1ocCLBSZ+bhlhAjDlvwY9P3hMI9gkSaXwQzIbWDnlMTUnrrW+5ne a4ON+MVLYguDypxitE2lsvLtdHVx/ZPRfDjyJGymIPR9hp6OJcOHnV2S9XaSeyYt imef3v3IV8Pxu6E4JJR0gzVqK2rbrvD0cCwAOexq6Hl4aMYUoWnKJtUuP7o+ehIi ZZmbDUSoDjoJMMVzsOtSS468aBw/0aRgkAd6jsH/AR0dfirkkPNEhgRnF5laTBxy GF+kdHjPA9PoM6iAZeJKzp7FXW6yyYkCTYszVOx9pB6o4T0/gU/t1vu1CuHKXSwc Wzz7tw4JFE4TEy76r4OZVPyOkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNLgkFFl oJPXe+/FOwP6HxtWvNNkMB8GA1UdIwQYMBaAFGnAibekjn2m7k8B/sapjgrS+oEL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMzJGNC9CNENBNzc5NjRE RTAxMUVEQTZGMDEwNDhDNEY5QUUwMi9hY0NKdDZTT2ZhYnVUd0gteHFtT0N0TDZn UXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FjQ0p0NlNPZmFidVR3SC14cW1PQ3RMNmdRcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MzJGNC9CNENBNzc5NjRERTAxMUVEQTZGMDEwNDhDNEY5QUUwMi9hY0NKdDZTT2Zh YnVUd0gteHFtT0N0TDZnUXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDEeFgqNVPDmVnxqbh3L6V92S87z3gk7BoEpeM5KOp2hUpY1nDvTdFz epaT7h9gRPR5fRDQeOER6Xgc3GiZecPEhsZ3ciEwS3MID94vHCVAAAt8F6gabNIl jpcVemQKyleXW9xBz1Qd9ZIOZ4xbIj1URzFaxTauKl1f89wUTbsU6cJFPCaONi6x 7uR3FaPVXyFTgvGnzP1ohTN7+iU0KEq3M+ushEDTs240Ex+jw81HDOd+/VpzZdlU y7sXsygORjVibnt8JzuiyKoPZb+3RuoivpE/etX4QtJc8btKnqdTHEJBggK65zhb XcxXDUR5FgHq6s8j+gLB63PuyBqhAjhQ -----END CERTIFICATE-----Generated at Sun Jun 15 09:56:46 2025 by rpki-client