$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF8DB/6579378C993411E8A0373724C4F9AE02/l9KbDTJFW7XG8SV4X0D1vCcJ99Q.mft File: l9KbDTJFW7XG8SV4X0D1vCcJ99Q.mft (raw, json) Hash identifier: VDRw77nfwNfSTq9OxEJ0d1+XB7oKNskvX9gIQJp4SWE= Subject key identifier: 97:C3:C9:E4:28:DB:D7:D9:47:58:96:52:63:3F:9F:7B:0F:CD:73:82 Authority key identifier: 97:D2:9B:0D:32:45:5B:B5:C6:F1:25:78:5F:40:F5:BC:27:09:F7:D4 Certificate issuer: /CN=A91DF8DB/serialNumber=97D29B0D32455BB5C6F125785F40F5BC2709F7D4 Certificate serial: 1390 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9KbDTJFW7XG8SV4X0D1vCcJ99Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF8DB/6579378C993411E8A0373724C4F9AE02/l9KbDTJFW7XG8SV4X0D1vCcJ99Q.mft Manifest number: 1388 Signing time: Mon 16 Jun 2025 17:00:36 +0000 Manifest this update: Mon 16 Jun 2025 17:00:35 +0000 Manifest next update: Mon 23 Jun 2025 17:00:35 +0000 Files and hashes: 1: l9KbDTJFW7XG8SV4X0D1vCcJ99Q.crl (hash: K2/OyK5RR51KwiKOySjlcP5TIZSXr7fjGy+txfgybJc=) 2: A6C9934CA74111E88B3EAB2BC4F9AE02.roa (hash: YR3r/r5s57l7vc1QAVpusxxc4M0J/72ZS6UJiTG3pTc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF8DB/6579378C993411E8A0373724C4F9AE02/l9KbDTJFW7XG8SV4X0D1vCcJ99Q.crl rsync://rpki.apnic.net/member_repository/A91DF8DB/6579378C993411E8A0373724C4F9AE02/l9KbDTJFW7XG8SV4X0D1vCcJ99Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9KbDTJFW7XG8SV4X0D1vCcJ99Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Jun 2025 17:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5008 (0x1390) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF8DB, serialNumber=97D29B0D32455BB5C6F125785F40F5BC2709F7D4 Validity Not Before: Jun 16 17:00:35 2025 GMT Not After : Jun 23 17:00:35 2025 GMT Subject: CN=68504db4-d644 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:4d:f6:e8:78:23:83:16:b1:8a:ef:60:d8:5d: bb:c0:d0:7a:60:dc:d4:60:2b:74:b5:b2:69:3d:d0: 58:20:5d:a7:73:9c:f5:fc:44:23:9c:25:82:7a:3f: cb:96:1c:91:ff:ff:c5:93:62:21:7f:e4:4d:a8:8c: 22:d9:07:4c:a9:63:98:7d:46:a9:a4:76:9b:75:5f: 13:28:f0:a1:b7:87:ab:47:35:dc:48:41:77:b8:5f: e2:47:ea:65:2a:92:a4:71:0c:ad:4d:02:36:a2:bd: f6:c9:50:26:9f:61:e1:f1:64:53:7c:b0:8d:c2:57: 6f:8d:bd:01:3f:75:c3:ea:72:d9:9d:5f:7c:c3:60: b4:7b:5b:c5:13:39:4d:b9:6c:e8:cc:b1:11:b7:41: 58:8e:c9:80:9e:f2:b2:21:a7:ac:7e:27:68:56:84: fe:5a:4f:fb:32:71:9e:91:59:5e:5b:10:a6:35:bb: f6:9b:fb:79:00:ec:f2:4b:c2:63:67:84:41:59:75: db:64:67:d4:ab:31:ce:c8:5e:07:2f:fd:29:ed:42: 68:90:fb:79:fc:98:19:5d:67:93:73:26:dc:52:1c: cc:a6:fc:ef:fe:cd:eb:5b:1d:f5:79:aa:f0:32:1f: 9a:4e:9e:c0:77:90:c0:35:92:1e:9c:38:c5:1a:d6: 94:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:C3:C9:E4:28:DB:D7:D9:47:58:96:52:63:3F:9F:7B:0F:CD:73:82 X509v3 Authority Key Identifier: keyid:97:D2:9B:0D:32:45:5B:B5:C6:F1:25:78:5F:40:F5:BC:27:09:F7:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF8DB/6579378C993411E8A0373724C4F9AE02/l9KbDTJFW7XG8SV4X0D1vCcJ99Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9KbDTJFW7XG8SV4X0D1vCcJ99Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF8DB/6579378C993411E8A0373724C4F9AE02/l9KbDTJFW7XG8SV4X0D1vCcJ99Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:34:6a:1b:0b:de:07:04:c9:92:c6:73:d2:71:ea:68:cf:f8: bc:65:f2:4d:d6:cb:a9:41:3d:9c:37:d6:58:03:a7:6b:60:6a: 50:54:61:f2:98:30:bb:79:6c:96:e1:be:f5:95:79:7f:b6:3d: 14:6e:05:98:23:6b:be:47:e8:37:c3:cf:3b:16:68:3d:ec:ae: 6b:66:4d:5b:5c:c5:df:36:56:b0:d6:53:e7:24:8e:3e:77:63: 78:9f:e1:f9:3a:4a:59:3d:cc:fc:35:20:12:dc:c0:84:75:b6: 5b:7c:71:af:e4:93:94:cc:72:db:aa:15:26:f5:fb:bb:13:d4: 29:6e:19:3c:a3:25:80:1d:3d:32:df:f5:bd:97:3b:3d:04:32: 99:fd:22:13:3e:e5:a3:ba:3a:d6:99:f7:16:43:71:37:22:f3: a0:9b:a8:f0:38:19:5c:50:78:40:db:08:36:af:36:f7:c1:46: 58:97:81:39:46:4b:00:7b:65:49:bd:2c:1b:0d:81:aa:72:44: b3:9d:85:91:63:03:da:74:df:f6:02:8e:6f:f9:8c:43:16:21: 60:5f:f4:91:04:dc:22:2c:dd:89:75:d2:7b:54:66:e5:ce:49: d5:cc:6d:c5:de:aa:45:c6:45:a3:00:51:b8:64:67:35:c5:54: f9:eb:67:38 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICE5AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REY4REIxMTAvBgNVBAUTKDk3RDI5QjBEMzI0NTVCQjVDNkYxMjU3ODVGNDBGNUJD MjcwOUY3RDQwHhcNMjUwNjE2MTcwMDM1WhcNMjUwNjIzMTcwMDM1WjAYMRYwFAYD VQQDEw02ODUwNGRiNC1kNjQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtU326Hgjgxaxiu9g2F27wNB6YNzUYCt0tbJpPdBYIF2nc5z1/EQjnCWCej/L lhyR///Fk2Ihf+RNqIwi2QdMqWOYfUappHabdV8TKPCht4erRzXcSEF3uF/iR+pl KpKkcQytTQI2or32yVAmn2Hh8WRTfLCNwldvjb0BP3XD6nLZnV98w2C0e1vFEzlN uWzozLERt0FYjsmAnvKyIaesfidoVoT+Wk/7MnGekVleWxCmNbv2m/t5AOzyS8Jj Z4RBWXXbZGfUqzHOyF4HL/0p7UJokPt5/JgZXWeTcybcUhzMpvzv/s3rWx31earw Mh+aTp7Ad5DANZIenDjFGtaUHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJfDyeQo 29fZR1iWUmM/n3sPzXOCMB8GA1UdIwQYMBaAFJfSmw0yRVu1xvEleF9A9bwnCffU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjhEQi82NTc5Mzc4Qzk5 MzQxMUU4QTAzNzM3MjRDNEY5QUUwMi9sOUtiRFRKRlc3WEc4U1Y0WDBEMXZDY0o5 OVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2w5S2JEVEpGVzdYRzhTVjRYMEQxdkNjSjk5US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RjhEQi82NTc5Mzc4Qzk5MzQxMUU4QTAzNzM3MjRDNEY5QUUwMi9sOUtiRFRKRlc3 WEc4U1Y0WDBEMXZDY0o5OVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAzNGobC94HBMmSxnPScepoz/i8ZfJN1supQT2cN9ZYA6drYGpQVGHy mDC7eWyW4b71lXl/tj0UbgWYI2u+R+g3w887Fmg97K5rZk1bXMXfNlaw1lPnJI4+ d2N4n+H5OkpZPcz8NSAS3MCEdbZbfHGv5JOUzHLbqhUm9fu7E9Qpbhk8oyWAHT0y 3/W9lzs9BDKZ/SITPuWjujrWmfcWQ3E3IvOgm6jwOBlcUHhA2wg2rzb3wUZYl4E5 RksAe2VJvSwbDYGqckSznYWRYwPadN/2Ao5v+YxDFiFgX/SRBNwiLN2JddJ7VGbl zknVzG3F3qpFxkWjAFG4ZGc1xVT562c4 -----END CERTIFICATE-----Generated at Tue Jun 17 07:57:18 2025 by rpki-client