$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9B1B/F9FEE0463CF811EFA367C385C4F9AE02/01nlbdoAA8SD861qQMCA6Qy41HI.mft File: 01nlbdoAA8SD861qQMCA6Qy41HI.mft (raw, json) Hash identifier: FktqSnPPhdNJ6AAToJj5482lOi+txq3UC7jfeFUCh7c= Subject key identifier: 55:89:85:C4:74:79:18:C2:D4:4A:11:6D:35:5D:30:0C:50:B5:A3:F9 Authority key identifier: D3:59:E5:6D:DA:00:03:C4:83:F3:AD:6A:40:C0:80:E9:0C:B8:D4:72 Certificate issuer: /CN=A91D9B1B/serialNumber=D359E56DDA0003C483F3AD6A40C080E90CB8D472 Certificate serial: B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/01nlbdoAA8SD861qQMCA6Qy41HI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D9B1B/F9FEE0463CF811EFA367C385C4F9AE02/01nlbdoAA8SD861qQMCA6Qy41HI.mft Manifest number: B4 Signing time: Sun 15 Jun 2025 05:09:00 +0000 Manifest this update: Sun 15 Jun 2025 05:08:59 +0000 Manifest next update: Sun 22 Jun 2025 05:08:59 +0000 Files and hashes: 1: 01nlbdoAA8SD861qQMCA6Qy41HI.crl (hash: RCwNNmZy7yDeaSiTWlopCI8n+iACn1fJqruUQrKWeTc=) 2: 97530E023D0911EFA33E4A38C4F9AE02.roa (hash: pQpO0/PUmsk8Ne8Tm6dn6viR4Yd/Q34ajbz6wbYS9Zc=) 3: 573BE4DE3D0811EF84157B26C4F9AE02.roa (hash: sO/FcuusJDef8Jgb3m4tmdQe6il72ChJ0DAhA0al1Bs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D9B1B/F9FEE0463CF811EFA367C385C4F9AE02/01nlbdoAA8SD861qQMCA6Qy41HI.crl rsync://rpki.apnic.net/member_repository/A91D9B1B/F9FEE0463CF811EFA367C385C4F9AE02/01nlbdoAA8SD861qQMCA6Qy41HI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/01nlbdoAA8SD861qQMCA6Qy41HI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 05:08:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 185 (0xb9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D9B1B, serialNumber=D359E56DDA0003C483F3AD6A40C080E90CB8D472 Validity Not Before: Jun 15 05:08:59 2025 GMT Not After : Jun 22 05:08:59 2025 GMT Subject: CN=684e556b-3471 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:5e:e6:81:8b:75:60:ba:dc:6b:78:bf:e7:ac: 45:e6:07:6f:63:70:14:8c:7c:0e:fc:8c:e5:9f:14: 2d:ed:ef:14:c1:6f:bb:31:ce:fa:45:7d:7a:75:32: 58:6e:22:17:21:e4:30:3c:e2:dc:c8:9a:97:52:f0: ad:65:9a:9f:73:04:0c:6f:ea:34:2b:27:f7:66:9b: 4a:c1:c0:5f:db:49:ba:80:fe:d7:80:c0:2d:a4:c4: 53:35:27:84:38:16:e6:b7:6d:4c:e9:81:34:d5:81: e8:27:e0:f3:f5:07:55:78:13:52:b0:0e:6d:7a:9b: 2b:d5:c6:f3:29:0c:27:3a:9c:dd:82:2a:68:47:ff: c7:87:f3:8f:b8:1f:2c:0d:75:f1:46:22:3e:bf:17: 97:98:06:cb:8b:2f:5f:1b:96:fa:7a:95:06:6f:c8: c5:0e:93:5d:74:4c:29:bc:1b:16:1c:b6:6f:bc:3c: b0:e2:2d:c6:02:b3:89:71:81:a5:84:57:f9:e7:4c: 8a:a0:9c:b1:61:a6:08:40:95:d1:c1:d9:29:9a:19: 2c:eb:5c:f9:10:de:08:d1:c6:e3:54:96:47:10:17: 90:26:51:e4:83:20:ac:4b:44:85:ac:70:23:33:c5: 25:fa:0e:f6:69:e6:26:43:21:37:df:af:24:95:d5: 67:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:89:85:C4:74:79:18:C2:D4:4A:11:6D:35:5D:30:0C:50:B5:A3:F9 X509v3 Authority Key Identifier: keyid:D3:59:E5:6D:DA:00:03:C4:83:F3:AD:6A:40:C0:80:E9:0C:B8:D4:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D9B1B/F9FEE0463CF811EFA367C385C4F9AE02/01nlbdoAA8SD861qQMCA6Qy41HI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/01nlbdoAA8SD861qQMCA6Qy41HI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9B1B/F9FEE0463CF811EFA367C385C4F9AE02/01nlbdoAA8SD861qQMCA6Qy41HI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:e1:3d:35:75:34:f9:23:cc:b7:48:b1:7a:ce:ae:a3:a2:7f: b6:47:81:fe:45:fb:f3:8e:2d:93:08:36:64:36:ce:de:91:a5: 6f:29:bd:53:a1:20:3d:92:ff:ab:2f:f3:55:fc:2d:e2:bb:cc: c5:23:30:64:25:2e:df:e6:77:c4:6f:cd:b6:5e:9c:e3:23:ef: 0f:31:85:42:c7:f4:61:3b:60:24:b0:bb:68:c1:a4:98:82:ac: 61:ac:57:5b:a8:f4:d6:74:23:d3:fd:7a:b8:ce:b2:31:46:e6: 75:94:9e:3d:ca:a8:19:c0:78:af:67:f5:a3:35:4c:0c:88:fd: 21:e4:30:20:33:a4:d3:98:7d:ab:33:57:7f:bd:65:74:c6:b0: 37:22:ec:15:68:5c:c6:4e:86:24:2c:b0:ab:ba:69:56:d7:d1: c0:7c:e0:2b:18:d5:91:d7:50:65:49:40:82:c1:b9:53:d4:8a: fd:3f:0a:22:53:5a:43:96:72:61:86:f5:f9:1b:69:9d:a7:85: ca:c5:0f:a6:8d:2c:2d:4f:ca:cf:44:f4:d8:6f:de:bf:b0:a9: 02:75:e0:b2:43:24:62:44:82:5d:e0:61:c9:09:59:23:d7:a1: 3b:79:4e:57:8d:3b:9a:1e:0c:7a:fb:15:cb:fc:47:fa:9e:cf: ea:50:29:b9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDlCMUIxMTAvBgNVBAUTKEQzNTlFNTZEREEwMDAzQzQ4M0YzQUQ2QTQwQzA4MEU5 MENCOEQ0NzIwHhcNMjUwNjE1MDUwODU5WhcNMjUwNjIyMDUwODU5WjAYMRYwFAYD VQQDEw02ODRlNTU2Yi0zNDcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApF7mgYt1YLrca3i/56xF5gdvY3AUjHwO/IzlnxQt7e8UwW+7Mc76RX16dTJY biIXIeQwPOLcyJqXUvCtZZqfcwQMb+o0Kyf3ZptKwcBf20m6gP7XgMAtpMRTNSeE OBbmt21M6YE01YHoJ+Dz9QdVeBNSsA5tepsr1cbzKQwnOpzdgipoR//Hh/OPuB8s DXXxRiI+vxeXmAbLiy9fG5b6epUGb8jFDpNddEwpvBsWHLZvvDyw4i3GArOJcYGl hFf550yKoJyxYaYIQJXRwdkpmhks61z5EN4I0cbjVJZHEBeQJlHkgyCsS0SFrHAj M8Ul+g72aeYmQyE3368kldVnMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFWJhcR0 eRjC1EoRbTVdMAxQtaP5MB8GA1UdIwQYMBaAFNNZ5W3aAAPEg/OtakDAgOkMuNRy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOUIxQi9GOUZFRTA0NjND RjgxMUVGQTM2N0MzODVDNEY5QUUwMi8wMW5sYmRvQUE4U0Q4NjFxUU1DQTZReTQx SEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzAxbmxiZG9BQThTRDg2MXFRTUNBNlF5NDFISS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OUIxQi9GOUZFRTA0NjNDRjgxMUVGQTM2N0MzODVDNEY5QUUwMi8wMW5sYmRvQUE4 U0Q4NjFxUU1DQTZReTQxSEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBl4T01dTT5I8y3SLF6zq6jon+2R4H+Rfvzji2TCDZkNs7ekaVvKb1T oSA9kv+rL/NV/C3iu8zFIzBkJS7f5nfEb822XpzjI+8PMYVCx/RhO2AksLtowaSY gqxhrFdbqPTWdCPT/Xq4zrIxRuZ1lJ49yqgZwHivZ/WjNUwMiP0h5DAgM6TTmH2r M1d/vWV0xrA3IuwVaFzGToYkLLCrumlW19HAfOArGNWR11BlSUCCwblT1Ir9Pwoi U1pDlnJhhvX5G2mdp4XKxQ+mjSwtT8rPRPTYb96/sKkCdeCyQyRiRIJd4GHJCVkj 16E7eU5XjTuaHgx6+xXL/Ef6ns/qUCm5 -----END CERTIFICATE-----Generated at Mon Jun 16 22:15:39 2025 by rpki-client