$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8100/AAC72E0CFCCE11EA8C19D87FC4F9AE02/K99csyKL7Ic-zuddZ1g1RlOCNJI.mft File: K99csyKL7Ic-zuddZ1g1RlOCNJI.mft (raw, json) Hash identifier: h1O1UYKL/OSI6AzTG7YdqTHoWFH6G0G0TEuRp8gO3oM= Subject key identifier: F7:98:A9:AC:B3:F8:41:43:DB:A9:C6:C0:FE:59:81:97:ED:39:63:61 Authority key identifier: 2B:DF:5C:B3:22:8B:EC:87:3E:CE:E7:5D:67:58:35:46:53:82:34:92 Certificate issuer: /CN=A91D8100/serialNumber=2BDF5CB3228BEC873ECEE75D6758354653823492 Certificate serial: 07CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K99csyKL7Ic-zuddZ1g1RlOCNJI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D8100/AAC72E0CFCCE11EA8C19D87FC4F9AE02/K99csyKL7Ic-zuddZ1g1RlOCNJI.mft Manifest number: 07C2 Signing time: Thu 12 Jun 2025 20:52:10 +0000 Manifest this update: Thu 12 Jun 2025 20:52:09 +0000 Manifest next update: Thu 19 Jun 2025 20:52:09 +0000 Files and hashes: 1: K99csyKL7Ic-zuddZ1g1RlOCNJI.crl (hash: S2q6xlW09IiLxMor6/JTjmMamBbhZ/pXHpGiVErmksE=) 2: 353932A29B3111EEAFB64748C4F9AE02.roa (hash: 9uk0usjnIlSyDjwPsAY9kObLcGremCDO3bEAYN35jzU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D8100/AAC72E0CFCCE11EA8C19D87FC4F9AE02/K99csyKL7Ic-zuddZ1g1RlOCNJI.crl rsync://rpki.apnic.net/member_repository/A91D8100/AAC72E0CFCCE11EA8C19D87FC4F9AE02/K99csyKL7Ic-zuddZ1g1RlOCNJI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K99csyKL7Ic-zuddZ1g1RlOCNJI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 20:52:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1996 (0x7cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D8100, serialNumber=2BDF5CB3228BEC873ECEE75D6758354653823492 Validity Not Before: Jun 12 20:52:09 2025 GMT Not After : Jun 19 20:52:09 2025 GMT Subject: CN=684b3dfa-06cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:52:f9:17:1d:e2:b7:3d:af:ce:5d:5a:77:29: fd:a4:34:f2:ff:23:e1:6a:0d:7f:4b:a5:c7:49:82: 12:71:36:bc:2a:7c:12:3a:de:9f:df:34:33:2c:e6: 73:5c:83:3b:3b:72:bc:dc:49:2d:98:5e:b8:eb:5b: eb:13:d2:e2:2d:c7:3c:d9:05:de:42:e4:fc:d5:ae: 58:51:69:fa:d0:f8:ee:fe:bc:14:e0:3d:e4:3f:09: 13:7e:0e:1b:86:e0:c6:0b:a8:be:9d:b5:f4:6a:f6: 2a:02:6a:0e:ba:4d:bc:78:c5:2c:35:ba:0f:f7:6e: 96:a7:4e:80:e3:1f:e3:be:f1:59:27:9c:55:0e:7f: 7b:fc:5c:28:95:49:15:e5:b1:ba:a5:cf:e2:d8:13: aa:f5:4d:d7:09:64:af:9e:cf:d5:72:6a:4a:c4:05: 5d:d1:27:cf:e2:e0:7e:f1:4d:19:a6:7c:ce:1b:75: 71:08:98:43:9f:98:fb:54:4a:1e:f3:86:13:5f:be: 54:11:d0:b1:c2:b2:5f:62:e8:28:a1:ec:e4:35:d2: 78:1c:7c:0b:cb:96:df:e8:49:30:20:56:cd:c6:3b: 88:31:5f:be:44:c2:57:c9:24:c0:b5:20:d5:c9:43: 5e:75:ba:aa:c4:5d:9b:22:48:23:6c:3b:6b:ce:16: 51:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:98:A9:AC:B3:F8:41:43:DB:A9:C6:C0:FE:59:81:97:ED:39:63:61 X509v3 Authority Key Identifier: keyid:2B:DF:5C:B3:22:8B:EC:87:3E:CE:E7:5D:67:58:35:46:53:82:34:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D8100/AAC72E0CFCCE11EA8C19D87FC4F9AE02/K99csyKL7Ic-zuddZ1g1RlOCNJI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K99csyKL7Ic-zuddZ1g1RlOCNJI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8100/AAC72E0CFCCE11EA8C19D87FC4F9AE02/K99csyKL7Ic-zuddZ1g1RlOCNJI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:f8:f3:41:9b:68:e1:c8:b1:dc:3d:dd:2a:b3:ef:3b:5b:89: c5:6a:13:39:46:94:75:51:00:66:4e:48:22:1e:3f:62:42:7e: 8a:95:6b:d0:96:ef:18:30:e1:51:44:18:f2:0d:27:44:64:48: 72:0d:23:12:9e:b4:07:c4:47:3e:96:10:6c:09:03:90:bf:40: a8:b6:5e:f2:0a:1d:68:45:2f:b3:30:ad:30:a9:48:df:c5:b1: 85:8f:db:b2:c3:a8:d5:48:51:c3:c0:0b:56:25:04:41:57:9c: d7:74:83:dc:25:88:f8:b0:16:e0:90:f7:06:55:b1:a1:51:08: 7b:39:18:50:fe:80:21:41:cc:a7:ef:4b:fc:c2:e2:7d:99:71: 8f:dd:1f:74:d7:47:92:5f:3c:2b:f3:1c:d6:d0:25:6b:63:0b: 1f:81:a3:2a:f4:cf:e5:25:1a:7f:2d:89:b8:b1:16:0a:44:f7: 58:2f:48:8e:a0:d4:3e:30:49:4c:6c:56:f4:f8:39:9b:6e:03: 8c:fb:1e:d5:de:75:95:cf:d7:dc:c2:d2:63:9d:33:78:af:5e: 88:90:37:a1:62:aa:e8:2f:8c:d0:32:b0:22:34:51:be:d5:0a: 9e:73:4f:c2:83:c6:75:17:a4:38:a7:1e:c8:3c:eb:7d:8e:c4: d9:70:3a:8e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB8wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDgxMDAxMTAvBgNVBAUTKDJCREY1Q0IzMjI4QkVDODczRUNFRTc1RDY3NTgzNTQ2 NTM4MjM0OTIwHhcNMjUwNjEyMjA1MjA5WhcNMjUwNjE5MjA1MjA5WjAYMRYwFAYD VQQDEw02ODRiM2RmYS0wNmNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4FL5Fx3itz2vzl1adyn9pDTy/yPhag1/S6XHSYIScTa8KnwSOt6f3zQzLOZz XIM7O3K83EktmF6461vrE9LiLcc82QXeQuT81a5YUWn60Pju/rwU4D3kPwkTfg4b huDGC6i+nbX0avYqAmoOuk28eMUsNboP926Wp06A4x/jvvFZJ5xVDn97/FwolUkV 5bG6pc/i2BOq9U3XCWSvns/VcmpKxAVd0SfP4uB+8U0ZpnzOG3VxCJhDn5j7VEoe 84YTX75UEdCxwrJfYugooezkNdJ4HHwLy5bf6EkwIFbNxjuIMV++RMJXySTAtSDV yUNedbqqxF2bIkgjbDtrzhZROwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPeYqayz +EFD26nGwP5ZgZftOWNhMB8GA1UdIwQYMBaAFCvfXLMii+yHPs7nXWdYNUZTgjSS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODEwMC9BQUM3MkUwQ0ZD Q0UxMUVBOEMxOUQ4N0ZDNEY5QUUwMi9LOTljc3lLTDdJYy16dWRkWjFnMVJsT0NO SkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0s5OWNzeUtMN0ljLXp1ZGRaMWcxUmxPQ05KSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE ODEwMC9BQUM3MkUwQ0ZDQ0UxMUVBOEMxOUQ4N0ZDNEY5QUUwMi9LOTljc3lLTDdJ Yy16dWRkWjFnMVJsT0NOSkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCw+PNBm2jhyLHcPd0qs+87W4nFahM5RpR1UQBmTkgiHj9iQn6KlWvQ lu8YMOFRRBjyDSdEZEhyDSMSnrQHxEc+lhBsCQOQv0Cotl7yCh1oRS+zMK0wqUjf xbGFj9uyw6jVSFHDwAtWJQRBV5zXdIPcJYj4sBbgkPcGVbGhUQh7ORhQ/oAhQcyn 70v8wuJ9mXGP3R9010eSXzwr8xzW0CVrYwsfgaMq9M/lJRp/LYm4sRYKRPdYL0iO oNQ+MElMbFb0+DmbbgOM+x7V3nWVz9fcwtJjnTN4r16IkDehYqroL4zQMrAiNFG+ 1Qqec0/Cg8Z1F6Q4px7IPOt9jsTZcDqO -----END CERTIFICATE-----Generated at Sat Jun 14 19:26:57 2025 by rpki-client