$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.mft File: 9FMh2HhbiJfVqDS5DquRDFWQnYU.mft (raw, json) Hash identifier: ///ycY0Mr9bBRlaTB7HIBlthKqvCT6Kp585WjuIM8L8= Subject key identifier: 9B:9B:FC:3F:41:51:0A:93:51:8F:E6:DF:54:38:94:13:BD:89:9A:3E Authority key identifier: F4:53:21:D8:78:5B:88:97:D5:A8:34:B9:0E:AB:91:0C:55:90:9D:85 Certificate issuer: /CN=A91DEDFD/serialNumber=F45321D8785B8897D5A834B90EAB910C55909D85 Certificate serial: 08D7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FMh2HhbiJfVqDS5DquRDFWQnYU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.mft Manifest number: 08AC Signing time: Wed 18 Jun 2025 20:24:22 +0000 Manifest this update: Wed 18 Jun 2025 20:24:21 +0000 Manifest next update: Wed 25 Jun 2025 20:24:21 +0000 Files and hashes: 1: 9FMh2HhbiJfVqDS5DquRDFWQnYU.crl (hash: qM87PBI/nf5XcaXlMAtw6ScDDuxR5cMIsm+eCwhsTjY=) 2: 7E4270063AF011EC9E421056C4F9AE02.roa (hash: FNdfZCcbxe3V2OAQFLZGqdKXBJ6o0UkfGqCv1XFBIe4=) 3: 8F6A0892437611EC9E067020C4F9AE02.roa (hash: xykraSV8kLGomChcl9m8aUsM7WTxk2kDX+8/BfVDf4g=) 4: 1A7632424DA111ECA1180F87C4F9AE02.roa (hash: emHp7Xzsh3MvD05QY3vvsc/JIauIxxqNW7MxPaZ5E+I=) 5: 7AE3D13C62A111ED80F96E47C4F9AE02.roa (hash: Dx71OVIwLra0qJzFPwaosr95WYYv+7Bg/7InXVNYyaM=) 6: 7DE1B508BC8A11EABAFA684CC4F9AE02.roa (hash: xSH87kbILGHWEWNfAJ7BQelcc3h9X/JlnMHEz3L2hKI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.crl rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FMh2HhbiJfVqDS5DquRDFWQnYU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Jun 2025 20:24:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2263 (0x8d7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DEDFD, serialNumber=F45321D8785B8897D5A834B90EAB910C55909D85 Validity Not Before: Jun 18 20:24:21 2025 GMT Not After : Jun 25 20:24:21 2025 GMT Subject: CN=68532075-e3dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ce:a6:19:2d:73:e8:32:24:5f:0e:de:7f:f0: 2f:b0:3f:a9:8d:f1:76:b3:9e:55:35:8c:fe:86:e7: 4a:a8:5a:a4:d0:4b:29:4e:44:36:35:f1:16:8c:32: e0:2d:a8:95:1a:04:76:f2:4a:7b:49:1f:9b:d3:0a: b8:f2:f1:fe:c9:19:5f:bc:13:b5:9a:ee:2b:87:1e: 66:74:5e:75:2a:9e:ff:dc:2a:bc:1f:d8:3c:47:40: 62:91:69:53:75:74:a7:02:26:44:4f:41:ef:cb:48: 23:d0:fe:95:db:67:ac:8f:c3:a8:8d:9f:a0:05:88: 5c:39:33:91:c8:a0:1e:19:ad:ff:cf:9e:7f:f2:e4: 3e:a3:20:2e:75:ab:d9:8d:b6:cb:7a:6d:f6:67:02: a5:a6:09:5d:6a:8a:1d:1a:dd:b2:82:ef:fd:17:0a: 43:07:d9:6b:5c:d2:bf:dc:7b:a4:3e:4c:d0:35:20: 6b:a2:8f:77:c0:ee:fd:ba:65:07:c7:af:28:4a:e1: 94:93:26:07:9f:08:46:ca:b5:6d:a7:a0:9d:f3:69: 3c:c1:32:d3:b8:57:25:3d:b4:fa:66:06:78:5f:f0: f5:1d:59:fc:b5:f8:7e:13:5c:be:0e:ac:ad:0c:31: aa:9c:98:de:bb:2c:33:18:27:df:5a:09:52:2f:56: f8:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:9B:FC:3F:41:51:0A:93:51:8F:E6:DF:54:38:94:13:BD:89:9A:3E X509v3 Authority Key Identifier: keyid:F4:53:21:D8:78:5B:88:97:D5:A8:34:B9:0E:AB:91:0C:55:90:9D:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FMh2HhbiJfVqDS5DquRDFWQnYU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:f6:e5:58:9b:98:c2:f9:bd:33:78:83:d4:7b:a0:bc:eb:9d: 2e:f1:fb:50:ab:db:d8:f9:53:c5:ed:6b:ed:9f:0b:4d:83:8b: 96:8e:31:aa:fd:9e:6c:f9:4f:7d:87:00:0f:5d:60:97:2c:c3: fd:0c:5e:ed:93:f9:9c:37:8e:47:ef:2c:fc:cd:f7:d2:db:c3: 76:55:b5:9d:30:4b:23:23:a1:ae:92:e0:00:de:0d:8d:e3:6b: 21:8a:98:9d:a2:6a:51:eb:14:9e:f5:ca:3e:5f:8c:b7:98:e8: 71:ed:11:54:f7:49:96:3b:ef:bf:6a:01:15:a8:3c:a6:4a:00: 8b:39:19:06:f0:79:66:3b:92:4d:b8:f2:ff:ba:c1:8e:8d:40: b9:1c:0c:6a:83:e7:f6:3a:1a:7d:fe:85:4b:bc:62:0d:4c:c4: e1:7f:e9:0b:dc:9e:8a:db:01:96:45:76:62:74:4b:33:f9:31: 45:04:57:34:5e:55:57:75:2b:0b:01:e5:76:eb:26:f0:ff:82: 64:a8:ad:b7:cb:f7:c1:7a:06:b0:f8:af:ef:ed:6f:aa:df:9d: d7:28:65:23:3c:bb:46:bd:d8:d8:9d:87:8e:7d:69:c0:51:55: b8:c5:cc:27:a6:b1:31:10:e2:b4:3d:7b:e7:51:11:d1:37:c9: 68:da:35:ce -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCNcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REVERkQxMTAvBgNVBAUTKEY0NTMyMUQ4Nzg1Qjg4OTdENUE4MzRCOTBFQUI5MTBD NTU5MDlEODUwHhcNMjUwNjE4MjAyNDIxWhcNMjUwNjI1MjAyNDIxWjAYMRYwFAYD VQQDEw02ODUzMjA3NS1lM2RkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvs6mGS1z6DIkXw7ef/AvsD+pjfF2s55VNYz+hudKqFqk0EspTkQ2NfEWjDLg LaiVGgR28kp7SR+b0wq48vH+yRlfvBO1mu4rhx5mdF51Kp7/3Cq8H9g8R0BikWlT dXSnAiZET0Hvy0gj0P6V22esj8OojZ+gBYhcOTORyKAeGa3/z55/8uQ+oyAudavZ jbbLem32ZwKlpgldaoodGt2ygu/9FwpDB9lrXNK/3HukPkzQNSBroo93wO79umUH x68oSuGUkyYHnwhGyrVtp6Cd82k8wTLTuFclPbT6ZgZ4X/D1HVn8tfh+E1y+Dqyt DDGqnJjeuywzGCffWglSL1b4+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJub/D9B UQqTUY/m31Q4lBO9iZo+MB8GA1UdIwQYMBaAFPRTIdh4W4iX1ag0uQ6rkQxVkJ2F MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERURGRC81NDUzNkIzRUJD ODgxMUVBODhFRjNENDlDNEY5QUUwMi85Rk1oMkhoYmlKZlZxRFM1RHF1UkRGV1Fu WVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlGTWgySGhiaUpmVnFEUzVEcXVSREZXUW5ZVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RURGRC81NDUzNkIzRUJDODgxMUVBODhFRjNENDlDNEY5QUUwMi85Rk1oMkhoYmlK ZlZxRFM1RHF1UkRGV1FuWVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAO9uVYm5jC+b0zeIPUe6C8650u8ftQq9vY+VPF7WvtnwtNg4uWjjGq /Z5s+U99hwAPXWCXLMP9DF7tk/mcN45H7yz8zffS28N2VbWdMEsjI6GukuAA3g2N 42shipidompR6xSe9co+X4y3mOhx7RFU90mWO++/agEVqDymSgCLORkG8HlmO5JN uPL/usGOjUC5HAxqg+f2Ohp9/oVLvGINTMThf+kL3J6K2wGWRXZidEsz+TFFBFc0 XlVXdSsLAeV26ybw/4JkqK23y/fBegaw+K/v7W+q353XKGUjPLtGvdjYnYeOfWnA UVW4xcwnprExEOK0PXvnURHRN8lo2jXO -----END CERTIFICATE-----Generated at Thu Jun 19 11:43:16 2025 by rpki-client