$ rpki-client -vvf rpki.apnic.net/member_repository/A91D615F/F312CA26A63F11EA8D06824AC4F9AE02/THDgIDLqWcKv1UGhhw10sEDRtqI.mft File: THDgIDLqWcKv1UGhhw10sEDRtqI.mft (raw, json) Hash identifier: lCuo7laxvfte/FLnxbSKWqIs5X2u2fCaJK+c9YHIvrY= Subject key identifier: C2:FB:41:87:42:B2:BD:1B:C2:3A:9C:A9:F3:A3:55:E0:4F:73:6E:85 Authority key identifier: 4C:70:E0:20:32:EA:59:C2:AF:D5:41:A1:87:0D:74:B0:40:D1:B6:A2 Certificate issuer: /CN=A91D615F/serialNumber=4C70E02032EA59C2AFD541A1870D74B040D1B6A2 Certificate serial: 091A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/THDgIDLqWcKv1UGhhw10sEDRtqI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D615F/F312CA26A63F11EA8D06824AC4F9AE02/THDgIDLqWcKv1UGhhw10sEDRtqI.mft Manifest number: 0911 Signing time: Thu 12 Jun 2025 20:04:28 +0000 Manifest this update: Thu 12 Jun 2025 20:04:27 +0000 Manifest next update: Thu 19 Jun 2025 20:04:27 +0000 Files and hashes: 1: THDgIDLqWcKv1UGhhw10sEDRtqI.crl (hash: sMasNGce30ejkFazTxoWEkzy/bV7zmB3o04001c1mCg=) 2: 05CABF92A64111EAB544074CC4F9AE02.roa (hash: 9fYoRLuvAE3GnGPowVCGSoqu6QzF0dUDca3PyP5zjdg=) 3: 193128AAD15D11EE8BD5C02BC4F9AE02.roa (hash: /+hXj2B+GgaDbKZ5BK9B4X/m6qkH66B+b+D/QNmlbQE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D615F/F312CA26A63F11EA8D06824AC4F9AE02/THDgIDLqWcKv1UGhhw10sEDRtqI.crl rsync://rpki.apnic.net/member_repository/A91D615F/F312CA26A63F11EA8D06824AC4F9AE02/THDgIDLqWcKv1UGhhw10sEDRtqI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/THDgIDLqWcKv1UGhhw10sEDRtqI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 20:04:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2330 (0x91a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D615F, serialNumber=4C70E02032EA59C2AFD541A1870D74B040D1B6A2 Validity Not Before: Jun 12 20:04:27 2025 GMT Not After : Jun 19 20:04:27 2025 GMT Subject: CN=684b32cc-e525 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:ac:9e:ac:97:af:f9:76:f9:8d:25:60:4d:36: 9f:10:61:9f:fc:b1:d5:56:8a:e4:f4:9b:15:86:aa: c8:76:4e:1c:25:fe:d2:92:80:be:5e:01:84:aa:bd: ef:27:36:a3:3c:72:75:33:bf:d7:2f:17:77:78:6e: 31:19:a6:e4:ae:41:d8:7a:11:10:34:e7:da:39:7d: 07:73:a2:d4:f0:f5:32:78:5f:1b:29:94:f5:ea:f1: e6:d6:ae:5a:29:73:3f:d1:e5:77:70:bc:ea:d7:ef: 12:b2:2c:cf:b6:2c:64:e8:db:34:5c:f5:ff:20:b7: 39:29:a0:b5:19:5f:b2:d2:2b:f4:0a:90:33:a0:b5: 77:df:e0:d7:d2:2d:5b:50:7a:00:e5:cb:b5:a2:60: 95:88:4b:62:6b:8e:c1:13:2d:93:75:7d:ca:f9:d4: 19:1a:8b:dc:61:63:00:5f:57:59:db:cd:87:48:ff: ab:86:b2:81:b0:76:15:6e:08:a8:14:06:f0:b9:04: e8:2c:3c:12:be:00:f9:3a:17:23:d1:da:89:ce:d4: 85:80:dc:5a:f6:0a:70:a9:9f:bc:08:1b:c4:3c:f2: 95:72:f4:7e:0a:67:57:49:16:69:3f:28:bc:3f:b6: d3:b0:5b:47:fa:4a:fd:45:77:6b:65:65:98:4f:1e: 3e:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:FB:41:87:42:B2:BD:1B:C2:3A:9C:A9:F3:A3:55:E0:4F:73:6E:85 X509v3 Authority Key Identifier: keyid:4C:70:E0:20:32:EA:59:C2:AF:D5:41:A1:87:0D:74:B0:40:D1:B6:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D615F/F312CA26A63F11EA8D06824AC4F9AE02/THDgIDLqWcKv1UGhhw10sEDRtqI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/THDgIDLqWcKv1UGhhw10sEDRtqI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D615F/F312CA26A63F11EA8D06824AC4F9AE02/THDgIDLqWcKv1UGhhw10sEDRtqI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c0:56:cf:eb:51:42:fd:d1:c7:b1:65:c3:c0:ad:06:3f:2e:0a: 23:a0:5d:34:3a:54:26:e0:2a:0e:e1:b0:a8:4b:8c:d0:d8:ac: 33:67:21:54:3e:20:36:84:d5:92:be:c2:af:5f:8b:18:89:85: c6:e2:58:34:6a:f7:b6:3b:94:f9:c5:44:7e:e6:5b:58:8f:a9: 8b:21:98:d9:33:95:6c:62:a8:34:e3:77:c7:b7:0f:49:27:f7: fd:4a:be:43:e8:77:76:4a:44:b2:e5:bb:8f:b1:b0:19:74:44: e8:14:e3:db:1e:76:67:03:6e:d9:07:37:e8:de:ab:1a:31:5b: 52:65:58:dd:6d:fb:2b:3e:c4:01:6f:20:9c:71:35:30:d7:64: 58:7d:41:c7:98:69:75:6b:78:9e:03:1d:4c:85:05:46:9d:37: de:9a:94:a8:ae:38:31:18:5b:a4:92:38:aa:bb:1f:7a:4a:33: a1:7d:9a:8e:6f:0d:1a:63:31:0a:d6:65:fe:70:a3:aa:52:6b: df:0f:cf:82:f8:f6:ab:e2:06:8b:0d:57:eb:41:a4:e1:33:69: 57:57:e9:e9:4b:0e:5a:7b:d3:ae:39:22:40:41:23:03:53:d4: 5f:e0:0c:31:27:1d:1f:05:b0:73:83:c9:7e:d7:e1:3b:3f:9f: 58:76:8b:f6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCRowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDYxNUYxMTAvBgNVBAUTKDRDNzBFMDIwMzJFQTU5QzJBRkQ1NDFBMTg3MEQ3NEIw NDBEMUI2QTIwHhcNMjUwNjEyMjAwNDI3WhcNMjUwNjE5MjAwNDI3WjAYMRYwFAYD VQQDEw02ODRiMzJjYy1lNTI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlqyerJev+Xb5jSVgTTafEGGf/LHVVork9JsVhqrIdk4cJf7SkoC+XgGEqr3v JzajPHJ1M7/XLxd3eG4xGabkrkHYehEQNOfaOX0Hc6LU8PUyeF8bKZT16vHm1q5a KXM/0eV3cLzq1+8SsizPtixk6Ns0XPX/ILc5KaC1GV+y0iv0CpAzoLV33+DX0i1b UHoA5cu1omCViEtia47BEy2TdX3K+dQZGovcYWMAX1dZ282HSP+rhrKBsHYVbgio FAbwuQToLDwSvgD5Ohcj0dqJztSFgNxa9gpwqZ+8CBvEPPKVcvR+CmdXSRZpPyi8 P7bTsFtH+kr9RXdrZWWYTx4+2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFML7QYdC sr0bwjqcqfOjVeBPc26FMB8GA1UdIwQYMBaAFExw4CAy6lnCr9VBoYcNdLBA0bai MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjE1Ri9GMzEyQ0EyNkE2 M0YxMUVBOEQwNjgyNEFDNEY5QUUwMi9USERnSURMcVdjS3YxVUdoaHcxMHNFRFJ0 cUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RIRGdJRExxV2NLdjFVR2hodzEwc0VEUnRxSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NjE1Ri9GMzEyQ0EyNkE2M0YxMUVBOEQwNjgyNEFDNEY5QUUwMi9USERnSURMcVdj S3YxVUdoaHcxMHNFRFJ0cUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDAVs/rUUL90cexZcPArQY/LgojoF00OlQm4CoO4bCoS4zQ2KwzZyFU PiA2hNWSvsKvX4sYiYXG4lg0ave2O5T5xUR+5ltYj6mLIZjZM5VsYqg043fHtw9J J/f9Sr5D6Hd2SkSy5buPsbAZdEToFOPbHnZnA27ZBzfo3qsaMVtSZVjdbfsrPsQB byCccTUw12RYfUHHmGl1a3ieAx1MhQVGnTfempSorjgxGFukkjiqux96SjOhfZqO bw0aYzEK1mX+cKOqUmvfD8+C+Par4gaLDVfrQaThM2lXV+npSw5ae9OuOSJAQSMD U9Rf4AwxJx0fBbBzg8l+1+E7P59Ydov2 -----END CERTIFICATE-----Generated at Sat Jun 14 18:35:11 2025 by rpki-client