$ rpki-client -vvf rpki.apnic.net/member_repository/A91D359E/6A4988B60DEB11EAB8E60B25C4F9AE02/77aQcOLEAaX3cTPS27G6NB0X5h4.mft File: 77aQcOLEAaX3cTPS27G6NB0X5h4.mft (raw, json) Hash identifier: cuF9W+W7Vxg6rhueUvRbcq4zDoF7s50S4uSzCinCmKo= Subject key identifier: 56:94:15:33:9E:8D:8E:D8:28:C7:78:7E:A6:2F:C9:85:C3:95:7D:B9 Authority key identifier: EF:B6:90:70:E2:C4:01:A5:F7:71:33:D2:DB:B1:BA:34:1D:17:E6:1E Certificate issuer: /CN=A91D359E/serialNumber=EFB69070E2C401A5F77133D2DBB1BA341D17E61E Certificate serial: 0C23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/77aQcOLEAaX3cTPS27G6NB0X5h4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D359E/6A4988B60DEB11EAB8E60B25C4F9AE02/77aQcOLEAaX3cTPS27G6NB0X5h4.mft Manifest number: 0C1C Signing time: Sat 14 Jun 2025 18:31:15 +0000 Manifest this update: Sat 14 Jun 2025 18:31:14 +0000 Manifest next update: Sat 21 Jun 2025 18:31:14 +0000 Files and hashes: 1: 77aQcOLEAaX3cTPS27G6NB0X5h4.crl (hash: F6yeQkuZMl7dJfAOCm7u9j3KetJZDSC2Oq/Ktlh8mm8=) 2: 606EE7BC0DED11EA88AC0A29C4F9AE02.roa (hash: WgtMqOXutoCTVgnfA2uL+HiTE6KoWpCNsapDLYeBrco=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D359E/6A4988B60DEB11EAB8E60B25C4F9AE02/77aQcOLEAaX3cTPS27G6NB0X5h4.crl rsync://rpki.apnic.net/member_repository/A91D359E/6A4988B60DEB11EAB8E60B25C4F9AE02/77aQcOLEAaX3cTPS27G6NB0X5h4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/77aQcOLEAaX3cTPS27G6NB0X5h4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 18:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3107 (0xc23) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D359E, serialNumber=EFB69070E2C401A5F77133D2DBB1BA341D17E61E Validity Not Before: Jun 14 18:31:14 2025 GMT Not After : Jun 21 18:31:14 2025 GMT Subject: CN=684dbff3-da69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:42:1f:32:ac:20:c6:d6:0c:87:89:3e:d2:0f: 5d:f8:10:06:26:eb:4b:7f:ea:a2:d1:5e:7e:01:ef: 23:28:fd:69:54:c6:12:20:3b:37:df:e4:63:34:19: f4:4e:4e:bd:65:d0:0d:16:d4:85:5b:da:a2:5d:da: 8a:b3:0b:d1:a3:3d:0b:1c:73:36:6e:ec:46:c8:c0: 74:99:a8:73:04:cc:b7:4b:17:5b:28:1d:cf:8a:a2: 5b:1c:9b:78:f3:ed:bb:6b:89:c5:cd:05:39:5d:b3: bc:e2:a4:2e:3b:e4:63:34:9d:ac:47:55:1c:ce:d3: 9e:37:28:23:35:87:e5:aa:b6:c0:80:f5:02:4c:8f: 06:43:63:d0:ab:f5:8a:65:35:f3:79:b8:e7:3d:80: 7c:b0:1c:b8:a5:d9:17:03:8e:32:0a:b9:92:18:89: 43:35:58:04:98:a8:6b:f7:7f:fd:2e:16:2e:2d:11: 0b:6b:7d:07:41:9c:82:97:01:a7:01:35:17:2f:07: 84:6e:3f:8b:ec:20:ce:9b:9f:06:7e:94:3d:8f:f9: 0a:fb:10:0c:05:1e:60:e4:66:f4:90:7b:a2:b3:a2: 48:f4:2d:7d:e0:a5:36:2d:6b:ba:40:50:6f:a8:13: c6:cb:a7:2a:2c:92:74:21:29:c7:ba:2d:e1:b2:db: 0a:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:94:15:33:9E:8D:8E:D8:28:C7:78:7E:A6:2F:C9:85:C3:95:7D:B9 X509v3 Authority Key Identifier: keyid:EF:B6:90:70:E2:C4:01:A5:F7:71:33:D2:DB:B1:BA:34:1D:17:E6:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D359E/6A4988B60DEB11EAB8E60B25C4F9AE02/77aQcOLEAaX3cTPS27G6NB0X5h4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/77aQcOLEAaX3cTPS27G6NB0X5h4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D359E/6A4988B60DEB11EAB8E60B25C4F9AE02/77aQcOLEAaX3cTPS27G6NB0X5h4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:7d:5f:0a:e3:fd:3e:ac:35:07:d4:7d:03:ab:25:df:f8:80: 68:34:54:94:7e:81:dc:b6:87:8b:79:60:3d:c7:00:2a:a2:01: db:b8:96:4b:b0:d8:51:e1:27:73:13:c9:8e:44:b9:b3:87:93: b6:a2:cd:dd:16:d3:14:fb:7b:e2:ab:79:5c:b8:a6:0d:e0:8a: e7:dc:1e:5b:09:19:02:20:46:a7:02:85:06:54:56:b4:1f:df: 0e:78:a8:87:65:7f:b4:93:7d:ef:4b:20:b8:f1:6a:bd:08:8d: 3d:5c:24:e7:8b:86:7c:d3:ad:aa:2a:ea:1d:1c:4e:12:88:2e: 3c:f9:66:2c:23:38:8a:76:72:5b:cb:c8:37:3b:14:2e:e8:0a: b5:66:1e:a0:ea:72:80:be:a1:b9:8d:7d:c2:2b:8e:cd:d3:bf: 7a:4f:4b:86:d6:9b:a2:84:47:19:05:c4:6a:1f:42:bc:ca:f7: d5:84:fe:63:fa:ac:fd:df:7d:b3:ac:0e:9a:a3:68:24:60:83: 79:fe:b2:25:68:34:ce:90:06:ac:4b:39:fd:b2:06:25:fe:3d: 90:81:4d:90:31:8a:d7:f1:3d:94:23:7f:b3:53:8e:f5:73:1c: 9d:36:35:5b:f5:99:35:a9:6c:fd:61:a9:a7:d8:78:64:fd:70: 77:43:74:f9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDCMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDM1OUUxMTAvBgNVBAUTKEVGQjY5MDcwRTJDNDAxQTVGNzcxMzNEMkRCQjFCQTM0 MUQxN0U2MUUwHhcNMjUwNjE0MTgzMTE0WhcNMjUwNjIxMTgzMTE0WjAYMRYwFAYD VQQDEw02ODRkYmZmMy1kYTY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlkIfMqwgxtYMh4k+0g9d+BAGJutLf+qi0V5+Ae8jKP1pVMYSIDs33+RjNBn0 Tk69ZdANFtSFW9qiXdqKswvRoz0LHHM2buxGyMB0mahzBMy3SxdbKB3PiqJbHJt4 8+27a4nFzQU5XbO84qQuO+RjNJ2sR1UcztOeNygjNYflqrbAgPUCTI8GQ2PQq/WK ZTXzebjnPYB8sBy4pdkXA44yCrmSGIlDNVgEmKhr93/9LhYuLRELa30HQZyClwGn ATUXLweEbj+L7CDOm58GfpQ9j/kK+xAMBR5g5Gb0kHuis6JI9C194KU2LWu6QFBv qBPGy6cqLJJ0ISnHui3hstsKMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFaUFTOe jY7YKMd4fqYvyYXDlX25MB8GA1UdIwQYMBaAFO+2kHDixAGl93Ez0tuxujQdF+Ye MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMzU5RS82QTQ5ODhCNjBE RUIxMUVBQjhFNjBCMjVDNEY5QUUwMi83N2FRY09MRUFhWDNjVFBTMjdHNk5CMFg1 aDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzc3YVFjT0xFQWFYM2NUUFMyN0c2TkIwWDVoNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MzU5RS82QTQ5ODhCNjBERUIxMUVBQjhFNjBCMjVDNEY5QUUwMi83N2FRY09MRUFh WDNjVFBTMjdHNk5CMFg1aDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCRfV8K4/0+rDUH1H0DqyXf+IBoNFSUfoHctoeLeWA9xwAqogHbuJZL sNhR4SdzE8mORLmzh5O2os3dFtMU+3viq3lcuKYN4Irn3B5bCRkCIEanAoUGVFa0 H98OeKiHZX+0k33vSyC48Wq9CI09XCTni4Z8062qKuodHE4SiC48+WYsIziKdnJb y8g3OxQu6Aq1Zh6g6nKAvqG5jX3CK47N0796T0uG1puihEcZBcRqH0K8yvfVhP5j +qz9332zrA6ao2gkYIN5/rIlaDTOkAasSzn9sgYl/j2QgU2QMYrX8T2UI3+zU471 cxydNjVb9Zk1qWz9Yamn2Hhk/XB3Q3T5 -----END CERTIFICATE-----Generated at Sun Jun 15 10:05:43 2025 by rpki-client