$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8A67/5511AF68B35111EE98BA021DC4F9AE02/A1Tb4e09meGUXicnS6L2A-tqF4E.mft File: A1Tb4e09meGUXicnS6L2A-tqF4E.mft (raw, json) Hash identifier: 9ahD98lvPEWsIOB2QdBScRVLNF5gB1km270WM7O+eQc= Subject key identifier: 52:77:52:9D:2F:23:69:80:9E:A9:C0:DE:2B:50:19:F8:19:B9:F7:F3 Authority key identifier: 03:54:DB:E1:ED:3D:99:E1:94:5E:27:27:4B:A2:F6:03:EB:6A:17:81 Certificate issuer: /CN=A91D8A67/serialNumber=0354DBE1ED3D99E1945E27274BA2F603EB6A1781 Certificate serial: 0110 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A1Tb4e09meGUXicnS6L2A-tqF4E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D8A67/5511AF68B35111EE98BA021DC4F9AE02/A1Tb4e09meGUXicnS6L2A-tqF4E.mft Manifest number: 010C Signing time: Sun 15 Jun 2025 04:08:44 +0000 Manifest this update: Sun 15 Jun 2025 04:08:44 +0000 Manifest next update: Sun 22 Jun 2025 04:08:44 +0000 Files and hashes: 1: A1Tb4e09meGUXicnS6L2A-tqF4E.crl (hash: 0lXms1j7Eme79RsT4KQMz539g8quRWAqhChN3imJshE=) 2: DDCCD058B35111EE96186E1EC4F9AE02.roa (hash: uxPFrv/qJkuVD9/YdePXL9+7rk2TcQQl1VlKRTfOD/8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D8A67/5511AF68B35111EE98BA021DC4F9AE02/A1Tb4e09meGUXicnS6L2A-tqF4E.crl rsync://rpki.apnic.net/member_repository/A91D8A67/5511AF68B35111EE98BA021DC4F9AE02/A1Tb4e09meGUXicnS6L2A-tqF4E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A1Tb4e09meGUXicnS6L2A-tqF4E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 272 (0x110) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D8A67, serialNumber=0354DBE1ED3D99E1945E27274BA2F603EB6A1781 Validity Not Before: Jun 15 04:08:44 2025 GMT Not After : Jun 22 04:08:44 2025 GMT Subject: CN=684e474c-06a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:6e:02:f8:a6:33:50:d5:4a:1c:3f:c5:8e:64: 3c:6b:e4:09:6d:3c:08:0b:43:30:99:fb:15:24:f3: 4c:d1:63:ad:a1:6f:c1:6a:77:32:e0:21:18:58:ff: 7e:8c:39:cc:21:d3:e4:7f:85:09:55:2a:d1:1d:62: 3e:35:2c:a0:d8:22:b4:78:28:3d:a4:61:d1:fe:27: d0:cb:0a:b1:2d:ad:47:05:e6:6a:7d:1a:ac:d4:27: a4:2f:f1:67:84:cf:96:3f:33:0f:02:9d:98:ce:0f: df:0c:24:2f:50:fb:40:94:a6:af:4a:fb:d4:8b:ed: 8e:20:6c:5b:69:fd:08:74:57:90:47:50:be:09:99: ab:b9:51:cd:5f:9f:8f:a2:51:d2:db:65:7c:cc:5c: 69:d9:ce:b9:8c:7b:55:d4:42:1a:10:3a:cc:48:0b: 46:51:67:c0:8f:f9:e1:2a:0a:99:df:df:8f:e8:2c: eb:0d:e4:b4:1f:8d:61:db:98:dc:70:86:5f:b4:2b: 5d:ee:31:75:3e:c8:22:a2:d8:87:d6:e7:cc:d8:f3: 33:2e:72:c0:bd:7f:04:aa:60:a4:7f:ff:fa:e6:21: b2:b3:0f:9a:8b:69:c7:42:b6:83:ed:66:95:a3:f3: 92:51:57:05:f0:53:cf:f8:9c:86:12:95:56:8f:46: 11:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:77:52:9D:2F:23:69:80:9E:A9:C0:DE:2B:50:19:F8:19:B9:F7:F3 X509v3 Authority Key Identifier: keyid:03:54:DB:E1:ED:3D:99:E1:94:5E:27:27:4B:A2:F6:03:EB:6A:17:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D8A67/5511AF68B35111EE98BA021DC4F9AE02/A1Tb4e09meGUXicnS6L2A-tqF4E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A1Tb4e09meGUXicnS6L2A-tqF4E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8A67/5511AF68B35111EE98BA021DC4F9AE02/A1Tb4e09meGUXicnS6L2A-tqF4E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:5d:5c:b7:90:f1:16:b7:07:8f:a8:e9:23:7a:95:56:9e:1e: b2:f2:e8:08:5d:f3:bd:37:0d:80:2d:93:41:fe:fa:71:ef:c1: 65:a3:38:f7:5f:92:5d:90:f7:53:8e:3f:f6:62:66:8a:1c:2e: eb:5e:65:a0:8b:79:3b:4e:f3:88:c6:40:e0:d0:f7:d6:c5:3d: 0d:18:43:75:1b:ab:53:61:38:2a:63:a2:b9:75:38:5a:6b:71: f0:2b:c0:4d:4c:e7:71:23:82:0d:0a:06:db:49:35:db:fe:7b: 7e:57:5c:18:01:29:ae:cf:56:d9:9f:33:88:7d:a6:8c:47:de: 3e:99:40:f2:d3:62:bd:1e:43:ac:dd:2c:30:32:54:28:f6:9b: 2d:3c:ed:37:51:15:6c:9c:46:e1:97:e3:26:a1:06:cc:45:ba: e1:94:cb:35:40:b1:61:fa:a3:a3:73:3c:51:da:7d:e6:f0:12: 0e:60:54:87:52:78:c4:f8:2f:51:e1:ef:24:2d:2e:a3:5d:a5: 7a:d3:39:9e:a2:3d:2b:0d:43:4f:78:82:31:61:3a:2c:a2:3b: fd:c7:52:de:54:b5:16:5c:76:d1:f3:b4:60:bf:cb:74:e0:e6: 1d:47:ec:3b:0c:40:a7:b0:9d:4e:79:b7:d5:95:cb:80:e4:ed: 97:ad:13:f9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDhBNjcxMTAvBgNVBAUTKDAzNTREQkUxRUQzRDk5RTE5NDVFMjcyNzRCQTJGNjAz RUI2QTE3ODEwHhcNMjUwNjE1MDQwODQ0WhcNMjUwNjIyMDQwODQ0WjAYMRYwFAYD VQQDEw02ODRlNDc0Yy0wNmExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsm4C+KYzUNVKHD/FjmQ8a+QJbTwIC0MwmfsVJPNM0WOtoW/Bancy4CEYWP9+ jDnMIdPkf4UJVSrRHWI+NSyg2CK0eCg9pGHR/ifQywqxLa1HBeZqfRqs1CekL/Fn hM+WPzMPAp2Yzg/fDCQvUPtAlKavSvvUi+2OIGxbaf0IdFeQR1C+CZmruVHNX5+P olHS22V8zFxp2c65jHtV1EIaEDrMSAtGUWfAj/nhKgqZ39+P6CzrDeS0H41h25jc cIZftCtd7jF1PsgiotiH1ufM2PMzLnLAvX8EqmCkf//65iGysw+ai2nHQraD7WaV o/OSUVcF8FPP+JyGEpVWj0YRJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFJ3Up0v I2mAnqnA3itQGfgZuffzMB8GA1UdIwQYMBaAFANU2+HtPZnhlF4nJ0ui9gPraheB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOEE2Ny81NTExQUY2OEIz NTExMUVFOThCQTAyMURDNEY5QUUwMi9BMVRiNGUwOW1lR1VYaWNuUzZMMkEtdHFG NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ExVGI0ZTA5bWVHVVhpY25TNkwyQS10cUY0RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OEE2Ny81NTExQUY2OEIzNTExMUVFOThCQTAyMURDNEY5QUUwMi9BMVRiNGUwOW1l R1VYaWNuUzZMMkEtdHFGNEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAVXVy3kPEWtwePqOkjepVWnh6y8ugIXfO9Nw2ALZNB/vpx78Flozj3 X5JdkPdTjj/2YmaKHC7rXmWgi3k7TvOIxkDg0PfWxT0NGEN1G6tTYTgqY6K5dTha a3HwK8BNTOdxI4INCgbbSTXb/nt+V1wYASmuz1bZnzOIfaaMR94+mUDy02K9HkOs 3SwwMlQo9pstPO03URVsnEbhl+MmoQbMRbrhlMs1QLFh+qOjczxR2n3m8BIOYFSH UnjE+C9R4e8kLS6jXaV60zmeoj0rDUNPeIIxYTosojv9x1LeVLUWXHbR87Rgv8t0 4OYdR+w7DECnsJ1OebfVlcuA5O2XrRP5 -----END CERTIFICATE-----Generated at Sun Jun 15 08:40:36 2025 by rpki-client