$ rpki-client -vvf rpki.apnic.net/member_repository/A91DAC6A/90662EB69C0A11EFAED65738C4F9AE02/RJ0H2pINoCY0K_biaJzH4PCjyvw.mft File: RJ0H2pINoCY0K_biaJzH4PCjyvw.mft (raw, json) Hash identifier: zM/4q6rcn7L2EzyEXU6DijF/YeMozfs356S9/AzxYVM= Subject key identifier: C2:57:2B:93:0F:4E:DA:EF:8B:35:6B:39:54:9F:89:5F:9D:FB:98:FD Authority key identifier: 44:9D:07:DA:92:0D:A0:26:34:2B:F6:E2:68:9C:C7:E0:F0:A3:CA:FC Certificate issuer: /CN=A91DAC6A/serialNumber=449D07DA920DA026342BF6E2689CC7E0F0A3CAFC Certificate serial: 77 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RJ0H2pINoCY0K_biaJzH4PCjyvw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DAC6A/90662EB69C0A11EFAED65738C4F9AE02/RJ0H2pINoCY0K_biaJzH4PCjyvw.mft Manifest number: 75 Signing time: Tue 17 Jun 2025 05:43:25 +0000 Manifest this update: Tue 17 Jun 2025 05:43:25 +0000 Manifest next update: Tue 24 Jun 2025 05:43:25 +0000 Files and hashes: 1: RJ0H2pINoCY0K_biaJzH4PCjyvw.crl (hash: OBUjBo2CgSqorGfF1xJTVB6WO/s82lf9H0Jd9PXRrQk=) 2: 24E9EF3C9C0B11EFABD74439C4F9AE02.roa (hash: UxagGWZX5GRBTZt0jQYki52H3QWf9jW1QGZTQhh7RfI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DAC6A/90662EB69C0A11EFAED65738C4F9AE02/RJ0H2pINoCY0K_biaJzH4PCjyvw.crl rsync://rpki.apnic.net/member_repository/A91DAC6A/90662EB69C0A11EFAED65738C4F9AE02/RJ0H2pINoCY0K_biaJzH4PCjyvw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RJ0H2pINoCY0K_biaJzH4PCjyvw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Jun 2025 05:43:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 119 (0x77) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DAC6A, serialNumber=449D07DA920DA026342BF6E2689CC7E0F0A3CAFC Validity Not Before: Jun 17 05:43:25 2025 GMT Not After : Jun 24 05:43:25 2025 GMT Subject: CN=6851007d-0cc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:22:cf:e0:6c:fd:c6:fd:e3:2f:dd:2e:8b:fb: 8a:5f:eb:66:2a:a0:3f:16:16:86:c0:4d:50:08:bd: ec:28:90:1b:26:2e:ce:02:97:cf:30:c8:bb:13:3c: 53:4d:72:9b:80:90:ac:ec:19:ae:5a:fc:ee:3a:39: ae:6c:3e:0c:4c:a4:1a:5d:48:61:aa:4c:cf:ce:a0: d5:ba:a2:3c:e7:c3:90:72:6a:0c:12:23:68:a2:9d: 52:20:a0:7b:07:c1:53:f1:a0:2b:d5:f9:21:0f:d4: c3:e5:7d:e2:d5:3b:7e:5b:d4:6e:d4:6e:d5:54:f0: 73:fd:bf:60:b8:7e:de:f6:7b:d9:70:eb:f4:64:04: f8:bc:44:e8:dc:d5:5c:95:35:2a:85:27:59:55:bc: 2f:0d:e1:cb:e1:2c:e4:82:69:8e:16:47:25:c8:53: 32:95:16:ba:4b:b9:8b:83:49:21:e9:e0:c2:63:90: 79:81:93:49:66:06:86:d9:51:48:dc:7e:22:19:4a: 00:82:14:2c:76:b3:70:a9:bc:0a:32:4a:0d:60:5b: f8:80:2d:2c:b5:94:e0:ba:6e:97:bc:5e:c6:7c:c2: 04:42:f7:5b:f7:d0:65:cc:7a:97:ed:43:ea:72:13: e1:1b:35:e2:a4:66:b6:2c:aa:68:c8:6a:b5:f6:8c: cb:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:57:2B:93:0F:4E:DA:EF:8B:35:6B:39:54:9F:89:5F:9D:FB:98:FD X509v3 Authority Key Identifier: keyid:44:9D:07:DA:92:0D:A0:26:34:2B:F6:E2:68:9C:C7:E0:F0:A3:CA:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DAC6A/90662EB69C0A11EFAED65738C4F9AE02/RJ0H2pINoCY0K_biaJzH4PCjyvw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RJ0H2pINoCY0K_biaJzH4PCjyvw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DAC6A/90662EB69C0A11EFAED65738C4F9AE02/RJ0H2pINoCY0K_biaJzH4PCjyvw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:eb:02:e1:e8:eb:53:73:e3:9d:3a:f6:f2:3b:a2:d8:46:3e: 52:79:51:0e:a0:7f:b4:27:76:74:54:b3:dd:cf:76:ce:62:f3: 52:b2:f5:77:29:85:46:3b:26:ec:a6:ed:85:54:bd:99:02:0e: ac:32:6a:10:0f:22:ff:f7:ed:64:3c:fd:15:b6:9a:59:e9:28: 44:8f:61:6a:e6:5e:dd:9c:26:04:8e:27:9b:ce:2d:ad:14:d9: 75:7e:92:24:58:11:f7:54:c2:4a:4c:7f:25:4d:39:5d:ef:c0: 54:29:5d:d1:a9:31:e4:23:a7:de:5d:cc:61:0c:82:22:9a:f9: b2:a4:5a:a5:f9:a7:d9:eb:ce:d7:d4:5f:0a:b3:e7:c7:e7:e0: 06:e1:12:c6:c6:a3:2d:76:80:bf:83:a6:e9:4f:cf:f2:91:67: 9f:f9:40:06:1b:43:04:37:be:72:1c:92:9d:54:a3:1e:8e:83: 96:ea:e4:40:b1:83:e7:d1:f6:c4:c9:4c:fe:55:7c:95:3d:1b: 08:7a:b9:ef:88:bf:db:85:f3:54:ac:25:24:55:fb:7d:16:f9: f7:7e:fc:33:88:af:10:a5:a5:71:7e:54:65:57:ea:c9:0d:d6: ff:ee:79:29:e5:73:f3:0c:fe:89:19:71:f1:a6:a7:8d:1f:5e: 57:66:fc:97 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBdzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE QUM2QTExMC8GA1UEBRMoNDQ5RDA3REE5MjBEQTAyNjM0MkJGNkUyNjg5Q0M3RTBG MEEzQ0FGQzAeFw0yNTA2MTcwNTQzMjVaFw0yNTA2MjQwNTQzMjVaMBgxFjAUBgNV BAMTDTY4NTEwMDdkLTBjYzAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDXIs/gbP3G/eMv3S6L+4pf62YqoD8WFobATVAIvewokBsmLs4Cl88wyLsTPFNN cpuAkKzsGa5a/O46Oa5sPgxMpBpdSGGqTM/OoNW6ojznw5ByagwSI2iinVIgoHsH wVPxoCvV+SEP1MPlfeLVO35b1G7UbtVU8HP9v2C4ft72e9lw6/RkBPi8ROjc1VyV NSqFJ1lVvC8N4cvhLOSCaY4WRyXIUzKVFrpLuYuDSSHp4MJjkHmBk0lmBobZUUjc fiIZSgCCFCx2s3CpvAoySg1gW/iALSy1lOC6bpe8XsZ8wgRC91v30GXMepftQ+py E+EbNeKkZrYsqmjIarX2jMtrAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUwlcrkw9O 2u+LNWs5VJ+JX537mP0wHwYDVR0jBBgwFoAURJ0H2pINoCY0K/biaJzH4PCjyvww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURBQzZBLzkwNjYyRUI2OUMw QTExRUZBRUQ2NTczOEM0RjlBRTAyL1JKMEgycElOb0NZMEtfYmlhSnpINFBDanl2 dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUkowSDJwSU5vQ1kwS19iaWFKekg0UENqeXZ3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURB QzZBLzkwNjYyRUI2OUMwQTExRUZBRUQ2NTczOEM0RjlBRTAyL1JKMEgycElOb0NZ MEtfYmlhSnpINFBDanl2dy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFXrAuHo61Nz45069vI7othGPlJ5UQ6gf7QndnRUs93Pds5i81Ky9Xcp hUY7Juym7YVUvZkCDqwyahAPIv/37WQ8/RW2mlnpKESPYWrmXt2cJgSOJ5vOLa0U 2XV+kiRYEfdUwkpMfyVNOV3vwFQpXdGpMeQjp95dzGEMgiKa+bKkWqX5p9nrztfU Xwqz58fn4AbhEsbGoy12gL+DpulPz/KRZ5/5QAYbQwQ3vnIckp1Uox6Og5bq5ECx g+fR9sTJTP5VfJU9Gwh6ue+Iv9uF81SsJSRV+30W+fd+/DOIrxClpXF+VGVX6skN 1v/ueSnlc/MM/okZcfGmp40fXldm/Jc= -----END CERTIFICATE-----Generated at Thu Jun 19 03:39:25 2025 by rpki-client