$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDDED/79CC01669DF211ED95949F57C4F9AE02/90n3b5KhbSqHFDf3LIbQ0F3imtU.mft File: 90n3b5KhbSqHFDf3LIbQ0F3imtU.mft (raw, json) Hash identifier: KWR6u+8iG/HBwtlcw+NLNlsinwzZaXWBebJlSth9giM= Subject key identifier: 08:D6:18:EC:B8:51:11:E5:0C:ED:D0:41:6B:C6:6E:9E:3D:C5:6D:96 Authority key identifier: F7:49:F7:6F:92:A1:6D:2A:87:14:37:F7:2C:86:D0:D0:5D:E2:9A:D5 Certificate issuer: /CN=A91DDDED/serialNumber=F749F76F92A16D2A871437F72C86D0D05DE29AD5 Certificate serial: 01C0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/90n3b5KhbSqHFDf3LIbQ0F3imtU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DDDED/79CC01669DF211ED95949F57C4F9AE02/90n3b5KhbSqHFDf3LIbQ0F3imtU.mft Manifest number: 01BD Signing time: Sun 15 Jun 2025 02:18:35 +0000 Manifest this update: Sun 15 Jun 2025 02:18:34 +0000 Manifest next update: Sun 22 Jun 2025 02:18:34 +0000 Files and hashes: 1: 90n3b5KhbSqHFDf3LIbQ0F3imtU.crl (hash: 3xiCkzSESqmQoWNBrDaA9ovHqeZEmoBQlTaMXD51lJM=) 2: 69B6C14A9DF611ED8D51D272C4F9AE02.roa (hash: 54OZtiC3lpeukDDzmCUDt697LQ+SuKtxGSa0nhIWHEA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DDDED/79CC01669DF211ED95949F57C4F9AE02/90n3b5KhbSqHFDf3LIbQ0F3imtU.crl rsync://rpki.apnic.net/member_repository/A91DDDED/79CC01669DF211ED95949F57C4F9AE02/90n3b5KhbSqHFDf3LIbQ0F3imtU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/90n3b5KhbSqHFDf3LIbQ0F3imtU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 02:18:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 448 (0x1c0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DDDED, serialNumber=F749F76F92A16D2A871437F72C86D0D05DE29AD5 Validity Not Before: Jun 15 02:18:34 2025 GMT Not After : Jun 22 02:18:34 2025 GMT Subject: CN=684e2d7a-272c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:4f:58:ea:ac:82:67:ce:28:b8:5d:ab:c8:a9: 38:a8:fe:d0:3e:e8:11:fb:3d:2e:ee:d8:6f:04:19: c7:bc:97:e7:ec:69:20:94:80:4b:bb:4a:1d:49:a6: 20:8b:b1:c8:08:b0:ab:f2:c2:5b:a6:58:7e:67:21: cb:39:f8:bc:15:dd:68:f4:95:cc:2a:ad:44:7f:aa: da:a3:39:22:dd:75:a0:12:c9:47:04:bf:7a:32:d4: 1c:21:7f:c9:ec:47:b6:de:e0:c4:41:ea:9c:29:bf: ab:e3:1f:5b:b7:49:ac:7c:6d:ec:db:62:b6:58:41: 9c:44:07:f6:f8:15:68:c9:02:b2:9e:5d:24:b6:f3: 04:9d:48:fa:d5:05:c3:f1:c0:1d:a1:9b:53:5e:f1: c6:cf:27:ee:84:19:1b:90:d0:d4:68:1b:3c:da:b0: 80:f9:8a:a8:97:b0:fc:2c:4e:5a:85:09:2d:5f:73: 4a:ca:fc:a5:58:c0:17:42:cb:83:bb:98:ed:cd:57: 30:24:20:f8:6c:2d:a8:e6:30:c5:bc:c2:ad:68:6d: 0e:e6:a6:3e:02:04:cd:3e:04:82:be:9b:10:5a:da: b0:b7:ee:a5:c0:1a:05:ea:bf:e7:37:20:2d:6d:4b: 6a:f3:09:d4:f5:d0:10:73:09:16:4f:ce:e4:85:26: 56:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:D6:18:EC:B8:51:11:E5:0C:ED:D0:41:6B:C6:6E:9E:3D:C5:6D:96 X509v3 Authority Key Identifier: keyid:F7:49:F7:6F:92:A1:6D:2A:87:14:37:F7:2C:86:D0:D0:5D:E2:9A:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DDDED/79CC01669DF211ED95949F57C4F9AE02/90n3b5KhbSqHFDf3LIbQ0F3imtU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/90n3b5KhbSqHFDf3LIbQ0F3imtU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDDED/79CC01669DF211ED95949F57C4F9AE02/90n3b5KhbSqHFDf3LIbQ0F3imtU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:7e:1a:1e:61:85:d1:20:1b:1b:f1:b7:54:ac:85:9c:33:df: 31:a5:30:8e:58:e5:a3:a4:32:1f:68:0a:5e:e6:6a:dd:98:4f: 7f:24:4f:43:0c:05:ac:ac:8d:27:9c:6f:fc:76:d1:70:81:d4: 3b:6a:b6:38:ba:ca:71:22:98:f2:2e:15:c0:bf:82:f5:13:2a: c5:e4:3b:fe:8c:f7:db:bf:11:54:c0:3a:15:a7:5d:21:46:7b: f2:a8:ac:6c:37:76:1b:cc:2e:89:3f:a0:14:94:6d:31:6e:1d: 85:29:7e:c9:62:67:63:ff:b8:01:cf:b5:99:9a:63:37:7e:97: 32:74:44:60:2e:09:6c:f5:d0:ef:d6:70:8f:de:b3:4d:ad:dc: 8e:67:6d:10:7c:64:a1:d2:91:4e:07:76:09:f8:02:25:d4:e5: 17:ce:d2:7a:9b:3f:ce:aa:8a:6d:c7:2c:26:28:b4:b5:80:ca: cd:4a:dc:2b:33:8e:ba:d7:3a:59:7d:11:fe:2d:ae:7d:71:99: d4:b1:d9:62:59:00:6a:b1:b1:2f:c0:29:76:64:80:e0:e5:e6: 51:c8:83:8e:a7:0e:38:43:48:31:c9:cf:83:57:99:2b:e1:ca: 25:75:b4:c1:41:e7:22:70:91:35:5c:18:2a:8c:2d:71:db:8e: 34:4c:95:0c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RERERUQxMTAvBgNVBAUTKEY3NDlGNzZGOTJBMTZEMkE4NzE0MzdGNzJDODZEMEQw NURFMjlBRDUwHhcNMjUwNjE1MDIxODM0WhcNMjUwNjIyMDIxODM0WjAYMRYwFAYD VQQDEw02ODRlMmQ3YS0yNzJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7U9Y6qyCZ84ouF2ryKk4qP7QPugR+z0u7thvBBnHvJfn7GkglIBLu0odSaYg i7HICLCr8sJbplh+ZyHLOfi8Fd1o9JXMKq1Ef6raozki3XWgEslHBL96MtQcIX/J 7Ee23uDEQeqcKb+r4x9bt0msfG3s22K2WEGcRAf2+BVoyQKynl0ktvMEnUj61QXD 8cAdoZtTXvHGzyfuhBkbkNDUaBs82rCA+Yqol7D8LE5ahQktX3NKyvylWMAXQsuD u5jtzVcwJCD4bC2o5jDFvMKtaG0O5qY+AgTNPgSCvpsQWtqwt+6lwBoF6r/nNyAt bUtq8wnU9dAQcwkWT87khSZW5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAjWGOy4 URHlDO3QQWvGbp49xW2WMB8GA1UdIwQYMBaAFPdJ92+SoW0qhxQ39yyG0NBd4prV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERERFRC83OUNDMDE2NjlE RjIxMUVEOTU5NDlGNTdDNEY5QUUwMi85MG4zYjVLaGJTcUhGRGYzTEliUTBGM2lt dFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzkwbjNiNUtoYlNxSEZEZjNMSWJRMEYzaW10VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RERFRC83OUNDMDE2NjlERjIxMUVEOTU5NDlGNTdDNEY5QUUwMi85MG4zYjVLaGJT cUhGRGYzTEliUTBGM2ltdFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQARfhoeYYXRIBsb8bdUrIWcM98xpTCOWOWjpDIfaApe5mrdmE9/JE9D DAWsrI0nnG/8dtFwgdQ7arY4uspxIpjyLhXAv4L1EyrF5Dv+jPfbvxFUwDoVp10h RnvyqKxsN3YbzC6JP6AUlG0xbh2FKX7JYmdj/7gBz7WZmmM3fpcydERgLgls9dDv 1nCP3rNNrdyOZ20QfGSh0pFOB3YJ+AIl1OUXztJ6mz/OqoptxywmKLS1gMrNStwr M4661zpZfRH+La59cZnUsdliWQBqsbEvwCl2ZIDg5eZRyIOOpw44Q0gxyc+DV5kr 4coldbTBQecicJE1XBgqjC1x2440TJUM -----END CERTIFICATE-----Generated at Tue Jun 17 00:59:23 2025 by rpki-client