$ rpki-client -vvf rpki.apnic.net/member_repository/A91D890E/8D4135FEA12911EAA0227746C4F9AE02/CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.mft File: CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.mft (raw, json) Hash identifier: m7pAelKaW8lE0qCoPhx6dIu1ekE0id9/WoyR5xE3nGc= Subject key identifier: 0A:A3:55:F8:7D:87:0E:FB:ED:03:E9:E2:48:5D:03:A5:96:1A:5F:46 Authority key identifier: 0B:02:2B:1E:A3:4C:03:7C:51:F6:57:FC:3E:0D:84:A3:C6:18:68:22 Certificate issuer: /CN=A91D890E/serialNumber=0B022B1EA34C037C51F657FC3E0D84A3C6186822 Certificate serial: 092E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D890E/8D4135FEA12911EAA0227746C4F9AE02/CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.mft Manifest number: 0928 Signing time: Thu 12 Jun 2025 20:02:49 +0000 Manifest this update: Thu 12 Jun 2025 20:02:48 +0000 Manifest next update: Thu 19 Jun 2025 20:02:48 +0000 Files and hashes: 1: CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.crl (hash: U2tMxLBpp6A4iugHlWKIop+v8kmwAAbatuWandJvooc=) 2: FDAEEFB0A12A11EAB063A548C4F9AE02.roa (hash: jfGEyrs8irz34ZW5qDRzJ5sduiRp3kjnfVg2NZqBN9E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D890E/8D4135FEA12911EAA0227746C4F9AE02/CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.crl rsync://rpki.apnic.net/member_repository/A91D890E/8D4135FEA12911EAA0227746C4F9AE02/CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 20:02:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2350 (0x92e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D890E, serialNumber=0B022B1EA34C037C51F657FC3E0D84A3C6186822 Validity Not Before: Jun 12 20:02:48 2025 GMT Not After : Jun 19 20:02:48 2025 GMT Subject: CN=684b3269-79d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:6a:f1:39:08:a7:c1:de:a9:63:69:f5:3b:55: 91:09:ea:b0:d7:d6:90:a9:52:2f:f1:b9:c1:12:e6: a6:1b:c4:7f:70:80:b9:9f:e4:dc:0b:fd:69:0b:a2: 8e:77:d2:46:b1:66:a8:2e:ae:f4:92:cc:0d:b7:d9: 23:c0:3e:d4:3f:cd:08:a2:c9:51:95:69:c4:40:d4: 01:30:c8:53:78:02:ec:9d:1f:67:72:1e:4d:4f:be: 28:bc:b6:53:00:41:9d:63:f6:b6:2a:7a:be:16:ad: f9:25:7c:5a:4c:da:c3:06:c5:7d:10:d5:2e:fa:ca: cd:cf:5d:98:a6:d1:a7:10:1e:b4:d6:ad:8a:43:82: 3d:50:da:52:d1:ab:bb:40:51:09:e3:25:0b:3d:e6: 49:3c:28:01:0a:61:21:b6:a5:75:52:f3:9b:f8:53: a6:56:92:5c:31:23:a4:27:fc:f4:5f:85:b6:09:1a: 31:c4:c1:36:67:53:48:1f:e0:d7:c2:d8:03:4d:7f: 59:a6:7f:0b:17:60:e0:da:e0:aa:95:a8:36:21:0d: 73:b9:fa:14:ec:1f:69:72:95:f0:4c:b3:42:a5:67: 11:7f:e4:97:68:57:a1:54:d2:1f:f2:1a:ac:a2:9a: 82:de:4d:b9:70:cd:c2:f6:23:0c:c7:27:69:a7:77: 00:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:A3:55:F8:7D:87:0E:FB:ED:03:E9:E2:48:5D:03:A5:96:1A:5F:46 X509v3 Authority Key Identifier: keyid:0B:02:2B:1E:A3:4C:03:7C:51:F6:57:FC:3E:0D:84:A3:C6:18:68:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D890E/8D4135FEA12911EAA0227746C4F9AE02/CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D890E/8D4135FEA12911EAA0227746C4F9AE02/CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:00:86:c3:f8:95:37:7b:25:f7:42:9a:7b:65:3b:67:80:1b: c6:ea:93:be:bf:8b:6c:7a:9c:7e:52:f1:94:df:1c:d2:c0:03: 0b:f7:b2:3d:cb:2c:55:5b:e4:8e:e3:57:1d:44:3f:d4:28:4e: d1:76:09:13:f4:ed:5c:fe:f6:48:ed:a7:e7:cf:f0:18:10:11: 34:3b:ca:09:a3:4e:b2:cc:0f:53:cc:29:bc:a4:82:93:b4:f2: 49:93:31:cd:bc:9d:59:c2:1b:22:29:22:7b:8c:7a:a5:14:b4: e8:94:6c:d2:83:2d:d0:02:06:e6:0e:77:c0:26:6a:c2:c5:99: 09:1b:74:8c:99:98:45:7b:38:7c:81:74:9e:d5:22:9c:e9:cd: e6:cc:8f:62:1d:f6:d3:ee:2d:9f:e1:ee:73:48:e5:97:b3:e0: fd:d5:5c:92:4d:d3:4e:ee:88:d6:b6:0e:ba:f0:68:ed:6c:74: 59:db:f5:0b:62:bc:c1:92:07:db:92:b0:13:c6:e1:21:e0:47: 58:52:65:86:4a:b5:ab:07:89:00:e3:e7:f7:c9:ae:de:d5:6a: b5:c9:ca:98:8a:cd:eb:76:7e:1e:07:0f:c9:6c:ec:51:64:91: c8:82:7a:61:f7:7b:22:4e:62:99:14:f4:db:4d:78:67:6a:47: 89:76:7a:ba -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCS4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDg5MEUxMTAvBgNVBAUTKDBCMDIyQjFFQTM0QzAzN0M1MUY2NTdGQzNFMEQ4NEEz QzYxODY4MjIwHhcNMjUwNjEyMjAwMjQ4WhcNMjUwNjE5MjAwMjQ4WjAYMRYwFAYD VQQDEw02ODRiMzI2OS03OWQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwWrxOQinwd6pY2n1O1WRCeqw19aQqVIv8bnBEuamG8R/cIC5n+TcC/1pC6KO d9JGsWaoLq70kswNt9kjwD7UP80IoslRlWnEQNQBMMhTeALsnR9nch5NT74ovLZT AEGdY/a2Knq+Fq35JXxaTNrDBsV9ENUu+srNz12YptGnEB601q2KQ4I9UNpS0au7 QFEJ4yULPeZJPCgBCmEhtqV1UvOb+FOmVpJcMSOkJ/z0X4W2CRoxxME2Z1NIH+DX wtgDTX9Zpn8LF2Dg2uCqlag2IQ1zufoU7B9pcpXwTLNCpWcRf+SXaFehVNIf8hqs opqC3k25cM3C9iMMxydpp3cAgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAqjVfh9 hw777QPp4khdA6WWGl9GMB8GA1UdIwQYMBaAFAsCKx6jTAN8UfZX/D4NhKPGGGgi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODkwRS84RDQxMzVGRUEx MjkxMUVBQTAyMjc3NDZDNEY5QUUwMi9Dd0lySHFOTUEzeFI5bGY4UGcyRW84WVlh Q0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0N3SXJIcU5NQTN4UjlsZjhQZzJFbzhZWWFDSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE ODkwRS84RDQxMzVGRUExMjkxMUVBQTAyMjc3NDZDNEY5QUUwMi9Dd0lySHFOTUEz eFI5bGY4UGcyRW84WVlhQ0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAiAIbD+JU3eyX3Qpp7ZTtngBvG6pO+v4tsepx+UvGU3xzSwAML97I9 yyxVW+SO41cdRD/UKE7RdgkT9O1c/vZI7afnz/AYEBE0O8oJo06yzA9TzCm8pIKT tPJJkzHNvJ1ZwhsiKSJ7jHqlFLTolGzSgy3QAgbmDnfAJmrCxZkJG3SMmZhFezh8 gXSe1SKc6c3mzI9iHfbT7i2f4e5zSOWXs+D91VySTdNO7ojWtg668GjtbHRZ2/UL YrzBkgfbkrATxuEh4EdYUmWGSrWrB4kA4+f3ya7e1Wq1ycqYis3rdn4eBw/JbOxR ZJHIgnph93siTmKZFPTbTXhnakeJdnq6 -----END CERTIFICATE-----Generated at Sat Jun 14 17:25:38 2025 by rpki-client