$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB128/7BF23AC4DDE811EDBF8C973AC4F9AE02/cM9awmFE6NdDsVID4mwiBG-iQHo.mft File: cM9awmFE6NdDsVID4mwiBG-iQHo.mft (raw, json) Hash identifier: 7mUU/0Qpw8KAw0keFDHDuFkyraN5J1aXsgsstXheEsQ= Subject key identifier: 4C:90:59:19:86:0F:58:77:68:30:76:E6:5B:1F:9B:42:31:F3:63:68 Authority key identifier: 70:CF:5A:C2:61:44:E8:D7:43:B1:52:03:E2:6C:22:04:6F:A2:40:7A Certificate issuer: /CN=A91DB128/serialNumber=70CF5AC26144E8D743B15203E26C22046FA2407A Certificate serial: 019E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cM9awmFE6NdDsVID4mwiBG-iQHo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB128/7BF23AC4DDE811EDBF8C973AC4F9AE02/cM9awmFE6NdDsVID4mwiBG-iQHo.mft Manifest number: 0198 Signing time: Fri 13 Jun 2025 02:29:04 +0000 Manifest this update: Fri 13 Jun 2025 02:29:04 +0000 Manifest next update: Fri 20 Jun 2025 02:29:04 +0000 Files and hashes: 1: cM9awmFE6NdDsVID4mwiBG-iQHo.crl (hash: 660dfL1EL6C1vqe82ayvYU3I03y+1JFsibqyADZ0LrQ=) 2: ABD7D9FCDDEC11EDB14EDA32C4F9AE02.roa (hash: ViKM5e5iyaoZ2fwSNhoyHsddKA5yuwX0C7qKIyKJX7Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB128/7BF23AC4DDE811EDBF8C973AC4F9AE02/cM9awmFE6NdDsVID4mwiBG-iQHo.crl rsync://rpki.apnic.net/member_repository/A91DB128/7BF23AC4DDE811EDBF8C973AC4F9AE02/cM9awmFE6NdDsVID4mwiBG-iQHo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cM9awmFE6NdDsVID4mwiBG-iQHo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 02:29:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 414 (0x19e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB128, serialNumber=70CF5AC26144E8D743B15203E26C22046FA2407A Validity Not Before: Jun 13 02:29:04 2025 GMT Not After : Jun 20 02:29:04 2025 GMT Subject: CN=684b8cf0-7bbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:af:13:6e:ad:93:8b:fb:30:9d:6f:87:2e:ad: 62:20:69:d0:71:f4:72:81:82:e1:f1:2e:56:05:da: 68:ad:26:91:0d:1d:a2:79:05:cd:85:05:a5:c3:c4: e0:3b:9e:54:af:1f:0c:e1:6f:aa:aa:53:1c:d4:75: fe:a7:f9:d7:d2:81:bb:36:aa:96:db:7e:99:ea:eb: 39:83:02:6d:6d:91:3a:39:74:02:94:a1:66:80:e1: 0c:83:0a:70:0f:9a:89:58:1a:f2:86:8e:f8:e0:0e: d5:66:5e:b5:86:28:35:03:4f:39:c3:22:1c:2f:21: 09:28:6a:97:34:dc:a6:c9:ef:0b:aa:d2:d7:e8:b5: 0f:50:9f:89:c6:0b:56:5e:b3:1f:58:83:a1:80:8c: a2:94:e2:04:57:bd:d6:d6:5a:ab:cf:32:cd:d3:6d: 6d:eb:4e:fb:cf:5a:31:65:a8:bd:5d:eb:04:70:6c: e9:7d:95:7f:2c:c7:f6:a1:bc:8d:96:9e:78:20:08: 96:c5:c2:99:f0:b9:b8:5b:e8:fe:5d:43:49:68:df: a3:90:3b:3b:aa:58:0c:fb:75:a6:e6:9b:31:ae:42: 97:a8:da:ab:f5:eb:51:e2:37:5c:05:51:04:6b:43: 74:e6:32:9e:bb:24:82:55:0f:cf:b2:dc:73:f3:32: 8a:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:90:59:19:86:0F:58:77:68:30:76:E6:5B:1F:9B:42:31:F3:63:68 X509v3 Authority Key Identifier: keyid:70:CF:5A:C2:61:44:E8:D7:43:B1:52:03:E2:6C:22:04:6F:A2:40:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB128/7BF23AC4DDE811EDBF8C973AC4F9AE02/cM9awmFE6NdDsVID4mwiBG-iQHo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cM9awmFE6NdDsVID4mwiBG-iQHo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB128/7BF23AC4DDE811EDBF8C973AC4F9AE02/cM9awmFE6NdDsVID4mwiBG-iQHo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:67:a4:6d:35:d7:4c:45:1c:a0:3b:7a:ec:8b:71:4a:98:f5: af:11:61:ac:6e:55:8f:4b:e7:fa:b4:41:00:5a:4a:ea:fd:17: ac:2d:b3:3e:4a:d5:05:8d:1e:44:40:52:5f:f4:77:bd:df:43: fb:ad:76:67:fb:8b:d0:a9:5a:c4:27:f4:2e:83:04:fd:12:db: 6c:0e:1d:74:44:07:a3:df:96:ea:78:15:4e:05:18:b1:db:f3: 79:fc:61:e6:b5:c1:d9:a0:25:60:ed:75:9f:6c:de:a2:a4:b2: 19:0c:bd:29:c0:28:5b:e8:f6:22:0b:e5:64:16:e6:3f:4b:93: e6:7f:35:de:82:90:30:65:5a:7c:d4:ca:13:a2:ec:ea:dd:8f: 78:32:63:ae:8d:a3:ba:4a:88:b3:be:c9:c4:7e:d0:01:75:e5: d1:f7:bd:3e:01:be:81:65:6c:05:59:0c:07:ac:32:b3:92:11: 03:00:2c:cf:86:74:3e:de:91:c9:fd:bb:b3:20:a2:e3:47:9d: 84:16:f3:c7:62:30:9f:d8:d1:6f:d9:89:4e:85:94:29:55:ee: 42:26:72:c0:db:3f:20:8c:5a:ef:ed:81:06:79:d4:c4:9e:56: 95:b5:07:30:14:07:9a:4e:13:37:2c:79:b9:04:6d:1d:f3:73: f9:de:66:48 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REIxMjgxMTAvBgNVBAUTKDcwQ0Y1QUMyNjE0NEU4RDc0M0IxNTIwM0UyNkMyMjA0 NkZBMjQwN0EwHhcNMjUwNjEzMDIyOTA0WhcNMjUwNjIwMDIyOTA0WjAYMRYwFAYD VQQDEw02ODRiOGNmMC03YmJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuK8Tbq2Ti/swnW+HLq1iIGnQcfRygYLh8S5WBdporSaRDR2ieQXNhQWlw8Tg O55Urx8M4W+qqlMc1HX+p/nX0oG7NqqW236Z6us5gwJtbZE6OXQClKFmgOEMgwpw D5qJWBryho744A7VZl61hig1A085wyIcLyEJKGqXNNymye8LqtLX6LUPUJ+JxgtW XrMfWIOhgIyilOIEV73W1lqrzzLN021t6077z1oxZai9XesEcGzpfZV/LMf2obyN lp54IAiWxcKZ8Lm4W+j+XUNJaN+jkDs7qlgM+3Wm5psxrkKXqNqr9etR4jdcBVEE a0N05jKeuySCVQ/Pstxz8zKK6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEyQWRmG D1h3aDB25lsfm0Ix82NoMB8GA1UdIwQYMBaAFHDPWsJhROjXQ7FSA+JsIgRvokB6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjEyOC83QkYyM0FDNERE RTgxMUVEQkY4Qzk3M0FDNEY5QUUwMi9jTTlhd21GRTZOZERzVklENG13aUJHLWlR SG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NNOWF3bUZFNk5kRHNWSUQ0bXdpQkctaVFIby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QjEyOC83QkYyM0FDNERERTgxMUVEQkY4Qzk3M0FDNEY5QUUwMi9jTTlhd21GRTZO ZERzVklENG13aUJHLWlRSG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCVZ6RtNddMRRygO3rsi3FKmPWvEWGsblWPS+f6tEEAWkrq/ResLbM+ StUFjR5EQFJf9He930P7rXZn+4vQqVrEJ/QugwT9EttsDh10RAej35bqeBVOBRix 2/N5/GHmtcHZoCVg7XWfbN6ipLIZDL0pwChb6PYiC+VkFuY/S5PmfzXegpAwZVp8 1MoTouzq3Y94MmOujaO6SoizvsnEftABdeXR970+Ab6BZWwFWQwHrDKzkhEDACzP hnQ+3pHJ/buzIKLjR52EFvPHYjCf2NFv2YlOhZQpVe5CJnLA2z8gjFrv7YEGedTE nlaVtQcwFAeaThM3LHm5BG0d83P53mZI -----END CERTIFICATE-----Generated at Sat Jun 14 17:10:09 2025 by rpki-client