$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8DD9/A387CF8E2FD211F0A9AC5E2FC4F9AE02/f_yAVlB0LOpQmG0Rq8tz4PVQWPk.mft File: f_yAVlB0LOpQmG0Rq8tz4PVQWPk.mft (raw, json) Hash identifier: biIbQ0S7xl1nQqTkvYadanIaduxI03ecqKlPR+JnwjA= Subject key identifier: 17:C6:0C:00:E3:B9:40:F2:FB:6D:F0:F2:39:A7:9A:68:AC:D3:84:7A Authority key identifier: 7F:FC:80:56:50:74:2C:EA:50:98:6D:11:AB:CB:73:E0:F5:50:58:F9 Certificate issuer: /CN=A91D8DD9/serialNumber=7FFC805650742CEA50986D11ABCB73E0F55058F9 Certificate serial: 11 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_yAVlB0LOpQmG0Rq8tz4PVQWPk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D8DD9/A387CF8E2FD211F0A9AC5E2FC4F9AE02/f_yAVlB0LOpQmG0Rq8tz4PVQWPk.mft Manifest number: 10 Signing time: Fri 13 Jun 2025 06:55:17 +0000 Manifest this update: Fri 13 Jun 2025 06:55:16 +0000 Manifest next update: Fri 20 Jun 2025 06:55:16 +0000 Files and hashes: 1: f_yAVlB0LOpQmG0Rq8tz4PVQWPk.crl (hash: qgiS2NUfkxg7rY7u7HWCCQF4bJDNuzyVS5r14EpworU=) 2: 9BCD7C8E2FD311F0A93F2250C4F9AE02.roa (hash: vDWq5W9RCH51uCc7RR26CZCfoA3jrfAEXK2LnEYPwlQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D8DD9/A387CF8E2FD211F0A9AC5E2FC4F9AE02/f_yAVlB0LOpQmG0Rq8tz4PVQWPk.crl rsync://rpki.apnic.net/member_repository/A91D8DD9/A387CF8E2FD211F0A9AC5E2FC4F9AE02/f_yAVlB0LOpQmG0Rq8tz4PVQWPk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_yAVlB0LOpQmG0Rq8tz4PVQWPk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 06:55:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17 (0x11) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D8DD9, serialNumber=7FFC805650742CEA50986D11ABCB73E0F55058F9 Validity Not Before: Jun 13 06:55:16 2025 GMT Not After : Jun 20 06:55:16 2025 GMT Subject: CN=684bcb55-243d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:e6:78:a7:81:76:70:bd:ef:88:43:84:e3:85: dc:39:10:b2:8c:d4:f4:bf:f7:30:12:9d:38:5a:69: 1d:f6:ba:f6:a1:bd:0d:87:ad:2f:a7:71:35:5a:e5: c4:9d:04:63:05:e1:3a:14:b3:60:51:8d:cf:fd:e3: 94:05:55:c9:60:44:1c:3d:a1:ba:df:63:6b:e6:b8: a5:13:37:2b:e9:e9:9e:ab:dd:d0:be:bd:83:ad:ae: e0:de:80:94:43:db:0c:1a:49:7c:8b:b1:62:ef:d4: 59:63:c5:2e:67:41:42:e2:a2:a5:74:8f:43:6a:bc: c5:fd:0a:a1:1a:40:55:d8:23:75:b7:4c:72:5b:a3: d3:28:8e:96:48:ae:60:8a:0b:b3:bb:6c:60:91:c2: 0c:61:7b:52:6c:89:12:1c:e7:9c:d4:5f:b9:19:2b: 53:56:ea:96:23:74:53:5b:d2:1d:9b:b5:ad:cf:42: cb:e7:cb:7e:71:62:80:66:60:0e:ed:05:85:ba:6c: 7c:8a:16:1f:23:4e:5d:47:b5:ae:06:ea:94:c3:de: 63:40:ad:60:75:3f:16:fb:af:ae:e7:7d:a2:a1:9f: 79:a6:be:99:76:07:f0:1f:91:6f:47:ad:10:c4:3f: 82:45:b6:10:4d:30:f3:78:79:9c:68:0f:a7:3a:4c: 57:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:C6:0C:00:E3:B9:40:F2:FB:6D:F0:F2:39:A7:9A:68:AC:D3:84:7A X509v3 Authority Key Identifier: keyid:7F:FC:80:56:50:74:2C:EA:50:98:6D:11:AB:CB:73:E0:F5:50:58:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D8DD9/A387CF8E2FD211F0A9AC5E2FC4F9AE02/f_yAVlB0LOpQmG0Rq8tz4PVQWPk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_yAVlB0LOpQmG0Rq8tz4PVQWPk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8DD9/A387CF8E2FD211F0A9AC5E2FC4F9AE02/f_yAVlB0LOpQmG0Rq8tz4PVQWPk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:d8:5f:68:f5:9f:9f:71:83:9e:58:4a:db:50:0a:e1:7e:22: 64:4c:a5:ad:0a:6b:b7:0a:90:5e:66:f1:7f:b0:df:f1:e6:b5: 61:16:b0:20:66:a5:6f:32:de:7a:24:87:71:3c:eb:d2:33:61: bb:2c:8b:cd:de:e5:08:34:fc:f7:9f:5a:31:a7:99:f8:d6:db: 4b:1a:fb:74:85:28:ce:59:1a:df:f8:0c:19:41:20:9a:b0:2e: a9:a8:92:4b:52:90:b1:ca:5f:77:5e:db:62:6f:38:0f:9f:93: 8e:e2:46:d9:76:c8:d3:63:48:73:ee:cc:29:8a:76:9f:57:8c: 8e:71:58:34:db:1d:92:84:e7:7d:97:67:1d:19:6b:e1:df:13: fe:e5:de:dd:d1:8f:54:14:2d:fe:86:1a:a1:d3:9a:16:6c:87: 4e:d3:67:03:0c:65:6d:f1:88:5f:89:e8:d8:3b:05:4a:99:53: a5:c0:f4:ac:5b:d4:b4:f0:05:53:54:bd:75:8d:99:3b:ee:49: 12:00:95:04:de:0b:bf:fd:8a:3b:b5:2e:dc:72:52:9c:6e:d1: 3f:b7:3b:e9:07:eb:38:d5:2d:6c:1d:15:65:5f:55:03:69:42: 7f:06:e8:43:fe:dc:f3:61:cf:bb:b0:93:8b:3d:dc:8a:ac:8c: 60:7a:12:1a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBETANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE OEREOTExMC8GA1UEBRMoN0ZGQzgwNTY1MDc0MkNFQTUwOTg2RDExQUJDQjczRTBG NTUwNThGOTAeFw0yNTA2MTMwNjU1MTZaFw0yNTA2MjAwNjU1MTZaMBgxFjAUBgNV BAMTDTY4NGJjYjU1LTI0M2QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDA5ningXZwve+IQ4Tjhdw5ELKM1PS/9zASnThaaR32uvahvQ2HrS+ncTVa5cSd BGMF4ToUs2BRjc/945QFVclgRBw9obrfY2vmuKUTNyvp6Z6r3dC+vYOtruDegJRD 2wwaSXyLsWLv1FljxS5nQULioqV0j0NqvMX9CqEaQFXYI3W3THJbo9MojpZIrmCK C7O7bGCRwgxhe1JsiRIc55zUX7kZK1NW6pYjdFNb0h2bta3PQsvny35xYoBmYA7t BYW6bHyKFh8jTl1Hta4G6pTD3mNArWB1Pxb7r67nfaKhn3mmvpl2B/AfkW9HrRDE P4JFthBNMPN4eZxoD6c6TFfzAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUF8YMAOO5 QPL7bfDyOaeaaKzThHowHwYDVR0jBBgwFoAUf/yAVlB0LOpQmG0Rq8tz4PVQWPkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ4REQ5L0EzODdDRjhFMkZE MjExRjBBOUFDNUUyRkM0RjlBRTAyL2ZfeUFWbEIwTE9wUW1HMFJxOHR6NFBWUVdQ ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZl95QVZsQjBMT3BRbUcwUnE4dHo0UFZRV1BrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ4 REQ5L0EzODdDRjhFMkZEMjExRjBBOUFDNUUyRkM0RjlBRTAyL2ZfeUFWbEIwTE9w UW1HMFJxOHR6NFBWUVdQay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACnYX2j1n59xg55YSttQCuF+ImRMpa0Ka7cKkF5m8X+w3/HmtWEWsCBm pW8y3nokh3E869IzYbssi83e5Qg0/PefWjGnmfjW20sa+3SFKM5ZGt/4DBlBIJqw LqmokktSkLHKX3de22JvOA+fk47iRtl2yNNjSHPuzCmKdp9XjI5xWDTbHZKE532X Zx0Za+HfE/7l3t3Rj1QULf6GGqHTmhZsh07TZwMMZW3xiF+J6Ng7BUqZU6XA9Kxb 1LTwBVNUvXWNmTvuSRIAlQTeC7/9iju1LtxyUpxu0T+3O+kH6zjVLWwdFWVfVQNp Qn8G6EP+3PNhz7uwk4s93IqsjGB6Eho= -----END CERTIFICATE-----Generated at Sat Jun 14 18:43:56 2025 by rpki-client