$ rpki-client -vvf rpki.apnic.net/member_repository/A91D37E4/36FB11441D5A11EBB7988D17C4F9AE02/i9qKH-B7RsMwYwRqcl6rhWQrnC0.mft File: i9qKH-B7RsMwYwRqcl6rhWQrnC0.mft (raw, json) Hash identifier: TzKOWc+MAV99KI2r8BYPpksXAo3jef2YMKbgrQIWeAQ= Subject key identifier: 11:0F:2A:C1:BA:B6:42:BC:D9:AB:BE:DA:E0:CE:73:FF:D6:0B:1B:31 Authority key identifier: 8B:DA:8A:1F:E0:7B:46:C3:30:63:04:6A:72:5E:AB:85:64:2B:9C:2D Certificate issuer: /CN=A91D37E4/serialNumber=8BDA8A1FE07B46C33063046A725EAB85642B9C2D Certificate serial: 0778 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i9qKH-B7RsMwYwRqcl6rhWQrnC0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D37E4/36FB11441D5A11EBB7988D17C4F9AE02/i9qKH-B7RsMwYwRqcl6rhWQrnC0.mft Manifest number: 076B Signing time: Sat 14 Jun 2025 21:19:17 +0000 Manifest this update: Sat 14 Jun 2025 21:19:16 +0000 Manifest next update: Sat 21 Jun 2025 21:19:16 +0000 Files and hashes: 1: i9qKH-B7RsMwYwRqcl6rhWQrnC0.crl (hash: d1FzvhGh1PwPXvcoiVfCm3fqM0Mx65mXkZl8c3k0dks=) 2: D933655E23B511EBA7BDD50FC4F9AE02.roa (hash: 8WBXx40LoIwub2WeF3ccrcQG4fq4wKZ7IVrDku/6ikQ=) 3: BD764EAE1D5B11EBAB008D19C4F9AE02.roa (hash: faL6wM9GsLMo9++JSpEkUSiwl7+QPEuIOOkR0NTNngU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D37E4/36FB11441D5A11EBB7988D17C4F9AE02/i9qKH-B7RsMwYwRqcl6rhWQrnC0.crl rsync://rpki.apnic.net/member_repository/A91D37E4/36FB11441D5A11EBB7988D17C4F9AE02/i9qKH-B7RsMwYwRqcl6rhWQrnC0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i9qKH-B7RsMwYwRqcl6rhWQrnC0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 21:19:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1912 (0x778) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D37E4, serialNumber=8BDA8A1FE07B46C33063046A725EAB85642B9C2D Validity Not Before: Jun 14 21:19:16 2025 GMT Not After : Jun 21 21:19:16 2025 GMT Subject: CN=684de755-90ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:72:ba:57:27:20:42:b7:a3:8a:59:bd:e3:12: d2:86:9d:cf:35:4e:2d:c8:ea:41:32:32:9f:39:99: 65:12:46:54:5c:f8:3b:cc:1d:65:0f:55:26:ba:25: c3:d4:35:7c:d6:ab:a6:04:80:01:37:96:a2:fd:83: c5:84:3a:54:90:10:5b:5b:1c:73:2f:57:99:22:e6: 07:a3:cb:ea:0d:70:c2:dc:4b:55:75:37:57:7c:d4: 53:a1:50:70:b3:51:7f:6c:b0:44:c9:f1:23:47:16: 97:5e:99:1e:6a:1c:e0:fb:df:f1:b7:7d:67:14:00: 19:f2:50:91:cd:6a:d6:43:52:93:a2:0b:89:2d:f6: cf:c8:4a:30:ef:fa:f5:c6:88:56:17:83:3d:91:0f: c5:cb:2c:42:d4:80:c1:d9:9a:35:ba:3c:cf:04:16: 3f:76:66:e2:f0:a1:f9:ed:32:a3:9b:d9:ad:2c:26: 39:fc:49:18:ef:f4:3e:63:99:29:3c:b8:40:19:f6: 64:f4:92:3c:0e:8e:e7:63:1c:e1:c0:25:77:26:ae: 51:2d:fe:99:2b:b9:95:7e:30:7b:c3:3e:a9:d2:f3: 20:e3:f7:41:70:80:09:b4:11:6b:f2:f4:d3:de:17: e6:98:5a:49:70:60:ec:a8:34:52:c6:11:f5:45:28: c8:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:0F:2A:C1:BA:B6:42:BC:D9:AB:BE:DA:E0:CE:73:FF:D6:0B:1B:31 X509v3 Authority Key Identifier: keyid:8B:DA:8A:1F:E0:7B:46:C3:30:63:04:6A:72:5E:AB:85:64:2B:9C:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D37E4/36FB11441D5A11EBB7988D17C4F9AE02/i9qKH-B7RsMwYwRqcl6rhWQrnC0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i9qKH-B7RsMwYwRqcl6rhWQrnC0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D37E4/36FB11441D5A11EBB7988D17C4F9AE02/i9qKH-B7RsMwYwRqcl6rhWQrnC0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:39:b9:c2:44:ca:75:4e:50:3c:46:e3:3d:6b:e6:93:a7:44: 8f:64:e2:4a:e8:c4:02:8f:46:43:8c:1b:2a:35:19:62:63:a9: aa:32:cf:18:94:b4:39:1a:b0:02:8b:af:e4:d1:bc:bd:05:8c: 25:cf:1e:11:fb:48:14:05:48:fd:7a:35:46:a7:ac:c2:73:ba: 8d:2d:27:f1:65:10:c4:44:51:7b:bb:6a:19:6b:9d:ce:81:ad: 08:b0:d8:75:68:f1:4b:10:78:11:50:cf:d9:68:0a:25:48:41: 63:91:4e:4f:56:64:a3:4b:c8:43:83:14:bc:8c:7e:3a:73:62: b0:eb:21:66:42:5e:a7:69:1a:41:14:b0:60:07:0a:62:1c:4e: d2:ad:58:b6:01:5f:01:6d:d8:9a:3a:0c:1e:af:f9:d6:93:4f: 9c:c3:c8:2d:ee:1d:dd:bf:7a:ae:93:10:ec:c3:8d:af:2d:b1: d0:76:2b:0d:ba:9b:b7:cb:47:69:b4:e2:46:05:97:c0:74:32: 0c:68:88:61:3f:10:0a:d5:bc:68:99:c0:d2:f7:ce:5e:d7:ee: f4:db:86:0a:18:ed:65:6d:f2:ed:d5:bf:ac:61:8f:f6:0d:eb: e8:bd:72:e0:2b:e2:2c:bb:8b:15:51:a4:b0:51:9c:81:87:ba: d7:11:e6:ef -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB3gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDM3RTQxMTAvBgNVBAUTKDhCREE4QTFGRTA3QjQ2QzMzMDYzMDQ2QTcyNUVBQjg1 NjQyQjlDMkQwHhcNMjUwNjE0MjExOTE2WhcNMjUwNjIxMjExOTE2WjAYMRYwFAYD VQQDEw02ODRkZTc1NS05MGFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApHK6VycgQrejilm94xLShp3PNU4tyOpBMjKfOZllEkZUXPg7zB1lD1UmuiXD 1DV81qumBIABN5ai/YPFhDpUkBBbWxxzL1eZIuYHo8vqDXDC3EtVdTdXfNRToVBw s1F/bLBEyfEjRxaXXpkeahzg+9/xt31nFAAZ8lCRzWrWQ1KToguJLfbPyEow7/r1 xohWF4M9kQ/FyyxC1IDB2Zo1ujzPBBY/dmbi8KH57TKjm9mtLCY5/EkY7/Q+Y5kp PLhAGfZk9JI8Do7nYxzhwCV3Jq5RLf6ZK7mVfjB7wz6p0vMg4/dBcIAJtBFr8vTT 3hfmmFpJcGDsqDRSxhH1RSjI7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBEPKsG6 tkK82au+2uDOc//WCxsxMB8GA1UdIwQYMBaAFIvaih/ge0bDMGMEanJeq4VkK5wt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMzdFNC8zNkZCMTE0NDFE NUExMUVCQjc5ODhEMTdDNEY5QUUwMi9pOXFLSC1CN1JzTXdZd1JxY2w2cmhXUXJu QzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2k5cUtILUI3UnNNd1l3UnFjbDZyaFdRcm5DMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MzdFNC8zNkZCMTE0NDFENUExMUVCQjc5ODhEMTdDNEY5QUUwMi9pOXFLSC1CN1Jz TXdZd1JxY2w2cmhXUXJuQzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA5ObnCRMp1TlA8RuM9a+aTp0SPZOJK6MQCj0ZDjBsqNRliY6mqMs8Y lLQ5GrACi6/k0by9BYwlzx4R+0gUBUj9ejVGp6zCc7qNLSfxZRDERFF7u2oZa53O ga0IsNh1aPFLEHgRUM/ZaAolSEFjkU5PVmSjS8hDgxS8jH46c2Kw6yFmQl6naRpB FLBgBwpiHE7SrVi2AV8BbdiaOgwer/nWk0+cw8gt7h3dv3qukxDsw42vLbHQdisN upu3y0dptOJGBZfAdDIMaIhhPxAK1bxomcDS985e1+7024YKGO1lbfLt1b+sYY/2 DevovXLgK+Isu4sVUaSwUZyBh7rXEebv -----END CERTIFICATE-----Generated at Sun Jun 15 08:32:02 2025 by rpki-client