$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1498/B3C8A97CDFB511EEB7AD8F2EC4F9AE02/rc1aTbWZxxrtk9CWqxTK-ggV5hc.mft File: rc1aTbWZxxrtk9CWqxTK-ggV5hc.mft (raw, json) Hash identifier: 7dPJ4KePrSDeqMz5a0sMBvoe7FN7LlEtWPpAQ6OUMpg= Subject key identifier: 5A:07:0F:41:64:22:E4:A3:E0:A8:B6:FB:46:3D:16:FB:D9:4B:04:A9 Authority key identifier: AD:CD:5A:4D:B5:99:C7:1A:ED:93:D0:96:AB:14:CA:FA:08:15:E6:17 Certificate issuer: /CN=A91E1498/serialNumber=ADCD5A4DB599C71AED93D096AB14CAFA0815E617 Certificate serial: F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rc1aTbWZxxrtk9CWqxTK-ggV5hc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E1498/B3C8A97CDFB511EEB7AD8F2EC4F9AE02/rc1aTbWZxxrtk9CWqxTK-ggV5hc.mft Manifest number: F4 Signing time: Fri 13 Jun 2025 04:16:53 +0000 Manifest this update: Fri 13 Jun 2025 04:16:53 +0000 Manifest next update: Fri 20 Jun 2025 04:16:53 +0000 Files and hashes: 1: rc1aTbWZxxrtk9CWqxTK-ggV5hc.crl (hash: XpxwYon2QRRWSUzlVgRrzFXH24bj6HQqLtbLNXCj0dQ=) 2: 6C523164E03F11EE87838439C4F9AE02.roa (hash: SK6ZvVianDlVw+18irRafax8Eg6g34dqTzqJORJNKeQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E1498/B3C8A97CDFB511EEB7AD8F2EC4F9AE02/rc1aTbWZxxrtk9CWqxTK-ggV5hc.crl rsync://rpki.apnic.net/member_repository/A91E1498/B3C8A97CDFB511EEB7AD8F2EC4F9AE02/rc1aTbWZxxrtk9CWqxTK-ggV5hc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rc1aTbWZxxrtk9CWqxTK-ggV5hc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 04:16:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 249 (0xf9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E1498, serialNumber=ADCD5A4DB599C71AED93D096AB14CAFA0815E617 Validity Not Before: Jun 13 04:16:53 2025 GMT Not After : Jun 20 04:16:53 2025 GMT Subject: CN=684ba635-6386 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:6a:59:70:9e:3f:21:32:78:fd:46:b9:e7:c6: bb:08:ed:6e:06:41:51:07:b5:03:e0:d7:a1:a8:d9: 16:bb:86:b6:3c:ba:89:3d:76:2a:4d:1e:ce:d4:b4: d8:47:0e:4a:9e:29:3d:58:e5:b1:3b:b7:1e:ac:01: 15:42:41:91:a8:0c:1b:6c:6a:12:7b:74:53:af:ba: b2:f9:fc:09:34:af:be:b1:65:79:a5:5d:c5:12:b0: 27:5f:39:7c:0c:2b:77:61:1f:7c:90:7c:fc:11:8a: 7e:8d:92:89:c2:39:8c:70:c7:58:92:d3:bc:95:25: c8:91:27:cb:d0:76:0c:a4:04:02:07:f6:65:a6:5c: 1f:ba:b9:06:c6:19:e3:e7:1f:65:0b:07:15:c7:32: ee:6f:a8:9c:40:4d:d3:5c:e8:e0:8f:21:ae:24:00: fc:cd:08:24:65:bd:45:09:95:1b:32:00:05:44:e2: ab:81:04:35:74:fa:70:20:3c:3a:de:ca:a5:1b:4c: dd:88:ab:e0:8c:f4:65:03:ca:8c:6f:c5:24:28:13: e2:a2:9b:3e:83:c6:0d:8d:eb:78:2e:fb:b8:20:d3: 7d:8b:63:54:72:26:0a:33:3c:78:01:c7:2d:54:af: 36:e2:2b:14:5d:4b:d5:07:00:1f:20:d8:c4:76:a6: e0:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:07:0F:41:64:22:E4:A3:E0:A8:B6:FB:46:3D:16:FB:D9:4B:04:A9 X509v3 Authority Key Identifier: keyid:AD:CD:5A:4D:B5:99:C7:1A:ED:93:D0:96:AB:14:CA:FA:08:15:E6:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E1498/B3C8A97CDFB511EEB7AD8F2EC4F9AE02/rc1aTbWZxxrtk9CWqxTK-ggV5hc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rc1aTbWZxxrtk9CWqxTK-ggV5hc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1498/B3C8A97CDFB511EEB7AD8F2EC4F9AE02/rc1aTbWZxxrtk9CWqxTK-ggV5hc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c1:cb:94:1c:d8:4c:50:b6:d9:15:9f:55:25:60:83:93:3a:89: d4:df:b8:eb:b6:40:dc:d4:03:ba:01:ad:24:7c:0e:98:0e:fa: 07:b9:26:71:38:94:e2:c8:df:40:31:e1:c3:f6:05:06:a9:56: df:31:40:08:c5:a8:62:76:73:f7:0c:c8:7b:b0:fe:e4:64:a3: 42:db:31:2f:29:65:5e:d4:f2:f7:34:fa:67:62:d6:ec:76:31: 4b:d1:15:94:32:7d:48:57:f5:63:63:96:7c:cf:60:e1:2c:bc: 69:de:d5:54:6a:6f:2e:1d:4f:85:41:2d:33:5d:ae:6b:ef:91: ed:0a:e9:fa:ce:c4:65:16:ea:5d:4c:8d:e8:06:c2:77:da:a9: db:7e:33:48:8b:f2:95:76:3f:7d:56:86:c2:96:0d:0e:f4:25: 5e:57:83:c0:2f:20:4a:59:87:4e:90:e7:bd:a9:47:6d:1b:58: 72:7c:d6:5f:a4:26:d3:18:37:7d:3c:f5:4b:37:c7:d9:dd:bd: bc:b7:0d:4a:62:7a:46:88:c7:60:23:79:f0:ed:7d:28:d9:3d: f4:e6:fd:e5:51:97:d7:0f:30:7e:e2:5e:72:69:fb:d8:a1:3f: 2d:97:a3:b0:16:3c:e2:3f:1e:52:6c:ba:b2:6a:39:e9:a7:9e: 09:fb:89:25 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTE0OTgxMTAvBgNVBAUTKEFEQ0Q1QTREQjU5OUM3MUFFRDkzRDA5NkFCMTRDQUZB MDgxNUU2MTcwHhcNMjUwNjEzMDQxNjUzWhcNMjUwNjIwMDQxNjUzWjAYMRYwFAYD VQQDEw02ODRiYTYzNS02Mzg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1mpZcJ4/ITJ4/Ua558a7CO1uBkFRB7UD4NehqNkWu4a2PLqJPXYqTR7O1LTY Rw5Knik9WOWxO7cerAEVQkGRqAwbbGoSe3RTr7qy+fwJNK++sWV5pV3FErAnXzl8 DCt3YR98kHz8EYp+jZKJwjmMcMdYktO8lSXIkSfL0HYMpAQCB/ZlplwfurkGxhnj 5x9lCwcVxzLub6icQE3TXOjgjyGuJAD8zQgkZb1FCZUbMgAFROKrgQQ1dPpwIDw6 3sqlG0zdiKvgjPRlA8qMb8UkKBPiops+g8YNjet4Lvu4INN9i2NUciYKMzx4Acct VK824isUXUvVBwAfINjEdqbgLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFoHD0Fk IuSj4Ki2+0Y9FvvZSwSpMB8GA1UdIwQYMBaAFK3NWk21mcca7ZPQlqsUyvoIFeYX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTQ5OC9CM0M4QTk3Q0RG QjUxMUVFQjdBRDhGMkVDNEY5QUUwMi9yYzFhVGJXWnh4cnRrOUNXcXhUSy1nZ1Y1 aGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JjMWFUYldaeHhydGs5Q1dxeFRLLWdnVjVoYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MTQ5OC9CM0M4QTk3Q0RGQjUxMUVFQjdBRDhGMkVDNEY5QUUwMi9yYzFhVGJXWnh4 cnRrOUNXcXhUSy1nZ1Y1aGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDBy5Qc2ExQttkVn1UlYIOTOonU37jrtkDc1AO6Aa0kfA6YDvoHuSZx OJTiyN9AMeHD9gUGqVbfMUAIxahidnP3DMh7sP7kZKNC2zEvKWVe1PL3NPpnYtbs djFL0RWUMn1IV/VjY5Z8z2DhLLxp3tVUam8uHU+FQS0zXa5r75HtCun6zsRlFupd TI3oBsJ32qnbfjNIi/KVdj99VobClg0O9CVeV4PALyBKWYdOkOe9qUdtG1hyfNZf pCbTGDd9PPVLN8fZ3b28tw1KYnpGiMdgI3nw7X0o2T305v3lUZfXDzB+4l5yafvY oT8tl6OwFjziPx5SbLqyajnpp54J+4kl -----END CERTIFICATE-----Generated at Sat Jun 14 17:09:01 2025 by rpki-client