$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2695/BB87AC4A47F811E880E4F410C4F9AE02/9M_KHWYL8WGz9AmtywwTwPqCJGQ.mft File: 9M_KHWYL8WGz9AmtywwTwPqCJGQ.mft (raw, json) Hash identifier: J9pUVbyDeOId4/N+cG17Cu+5rkpJFHQmguKjhcdAaAk= Subject key identifier: B9:B5:92:06:4F:46:17:B4:78:76:50:08:4B:C3:AF:9B:9C:DD:1D:74 Authority key identifier: F4:CF:CA:1D:66:0B:F1:61:B3:F4:09:AD:CB:0C:13:C0:FA:82:24:64 Certificate issuer: /CN=A91E2695/serialNumber=F4CFCA1D660BF161B3F409ADCB0C13C0FA822464 Certificate serial: 1536 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9M_KHWYL8WGz9AmtywwTwPqCJGQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2695/BB87AC4A47F811E880E4F410C4F9AE02/9M_KHWYL8WGz9AmtywwTwPqCJGQ.mft Manifest number: 152C Signing time: Sat 14 Jun 2025 16:45:41 +0000 Manifest this update: Sat 14 Jun 2025 16:45:40 +0000 Manifest next update: Sat 21 Jun 2025 16:45:40 +0000 Files and hashes: 1: 9M_KHWYL8WGz9AmtywwTwPqCJGQ.crl (hash: j+g+tpIeaHCPJ4h5WQp7DR7Otnpm5DRrhSZYa2y9X2k=) 2: 6208BAD4499611E8B421BE5CC4F9AE02.roa (hash: S5mRurG916ui1hjUc9swark9ywmNDAZ5nDRIJrKsR2I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2695/BB87AC4A47F811E880E4F410C4F9AE02/9M_KHWYL8WGz9AmtywwTwPqCJGQ.crl rsync://rpki.apnic.net/member_repository/A91E2695/BB87AC4A47F811E880E4F410C4F9AE02/9M_KHWYL8WGz9AmtywwTwPqCJGQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9M_KHWYL8WGz9AmtywwTwPqCJGQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 16:45:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5430 (0x1536) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2695, serialNumber=F4CFCA1D660BF161B3F409ADCB0C13C0FA822464 Validity Not Before: Jun 14 16:45:40 2025 GMT Not After : Jun 21 16:45:40 2025 GMT Subject: CN=684da735-5ce9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:e8:41:e5:f1:6c:78:05:b2:f0:a5:82:65:e9: 16:a5:66:83:39:07:90:5c:d6:16:38:2e:03:c6:ea: 4d:f2:6f:ee:66:81:7f:b3:d1:32:7f:6a:8b:29:dc: 3f:6c:18:ce:9b:a0:ea:a8:30:8a:34:b2:72:b3:61: 1e:b1:de:25:11:21:f9:99:cc:0c:7a:37:a9:64:8a: b2:06:1b:26:36:d9:44:7c:47:3e:12:4c:00:df:a7: 12:5f:1d:eb:51:1d:51:a4:02:f0:3f:ed:89:14:da: 58:82:6e:49:08:71:b7:31:e4:2c:cd:e0:2c:0a:a6: b3:80:83:f9:06:fe:b8:d0:b1:3e:e2:23:31:a3:6f: e4:92:1c:a9:54:7b:9d:bf:bc:df:49:7e:dc:8b:3c: d8:f0:8f:0c:b2:d1:a4:18:cf:6b:3b:ff:01:d3:95: d5:d8:b4:59:1b:aa:7d:cd:54:7e:2c:e5:fb:a4:1d: 6e:af:92:4b:62:66:e8:8a:d5:48:5f:97:09:69:1d: 61:3b:25:ea:22:f9:fc:f3:be:4d:52:24:8b:79:56: 8d:ab:71:ad:36:03:91:35:ce:a7:30:fe:bb:99:16: 22:f9:54:4a:6d:27:c9:b8:cd:bb:aa:41:c3:f9:26: de:da:6d:14:a9:c0:4c:3f:c2:57:a6:e8:27:ab:90: f9:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:B5:92:06:4F:46:17:B4:78:76:50:08:4B:C3:AF:9B:9C:DD:1D:74 X509v3 Authority Key Identifier: keyid:F4:CF:CA:1D:66:0B:F1:61:B3:F4:09:AD:CB:0C:13:C0:FA:82:24:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2695/BB87AC4A47F811E880E4F410C4F9AE02/9M_KHWYL8WGz9AmtywwTwPqCJGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9M_KHWYL8WGz9AmtywwTwPqCJGQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2695/BB87AC4A47F811E880E4F410C4F9AE02/9M_KHWYL8WGz9AmtywwTwPqCJGQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:24:e0:65:24:92:a0:95:df:84:85:a4:ba:79:d2:05:08:eb: 59:1a:a0:e8:95:c3:06:42:94:a5:75:ad:e8:21:e0:7b:2d:6c: 01:9e:6f:7d:d2:f4:9f:49:38:7f:b3:9c:45:fb:5f:4b:ef:26: ae:89:a2:61:80:2b:50:6c:ce:e9:12:30:23:ea:63:f2:91:02: da:8d:c8:a3:a5:d4:c1:1e:90:20:4c:59:e2:d2:1e:d3:3c:73: cf:ab:ff:e4:da:c8:4b:d1:f5:63:c0:f9:47:e7:a1:b9:3c:c5: ea:f4:97:89:9b:12:7e:d7:d0:c0:60:5a:cf:9e:3e:1b:35:a1: a2:1f:18:bd:48:58:1b:a6:b0:de:5a:17:b4:38:85:03:32:9c: a1:c9:56:a2:e8:1f:59:e5:bd:da:73:35:70:b8:ca:d5:ca:3a: c2:2c:d9:83:e7:7c:fe:52:92:5c:48:89:be:fc:47:e4:a8:cc: 9a:8f:ae:6d:e8:44:2c:ed:fd:fc:f3:7d:d8:74:f3:de:b4:ea: 31:2d:1b:7c:97:92:af:07:3e:53:91:66:c8:a6:52:1b:2c:27: be:19:b3:4a:df:e9:c9:d2:c5:68:fc:6d:43:63:2c:f1:dc:2c: b6:a4:22:32:19:6c:40:2e:e8:e1:f7:b0:31:55:de:0e:20:81: c2:ec:b1:13 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFTYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTI2OTUxMTAvBgNVBAUTKEY0Q0ZDQTFENjYwQkYxNjFCM0Y0MDlBRENCMEMxM0Mw RkE4MjI0NjQwHhcNMjUwNjE0MTY0NTQwWhcNMjUwNjIxMTY0NTQwWjAYMRYwFAYD VQQDEw02ODRkYTczNS01Y2U5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs+hB5fFseAWy8KWCZekWpWaDOQeQXNYWOC4DxupN8m/uZoF/s9Eyf2qLKdw/ bBjOm6DqqDCKNLJys2Eesd4lESH5mcwMejepZIqyBhsmNtlEfEc+EkwA36cSXx3r UR1RpALwP+2JFNpYgm5JCHG3MeQszeAsCqazgIP5Bv640LE+4iMxo2/kkhypVHud v7zfSX7cizzY8I8MstGkGM9rO/8B05XV2LRZG6p9zVR+LOX7pB1ur5JLYmboitVI X5cJaR1hOyXqIvn8875NUiSLeVaNq3GtNgORNc6nMP67mRYi+VRKbSfJuM27qkHD +Sbe2m0UqcBMP8JXpugnq5D54wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLm1kgZP Rhe0eHZQCEvDr5uc3R10MB8GA1UdIwQYMBaAFPTPyh1mC/Fhs/QJrcsME8D6giRk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjY5NS9CQjg3QUM0QTQ3 RjgxMUU4ODBFNEY0MTBDNEY5QUUwMi85TV9LSFdZTDhXR3o5QW10eXd3VHdQcUNK R1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlNX0tIV1lMOFdHejlBbXR5d3dUd1BxQ0pHUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MjY5NS9CQjg3QUM0QTQ3RjgxMUU4ODBFNEY0MTBDNEY5QUUwMi85TV9LSFdZTDhX R3o5QW10eXd3VHdQcUNKR1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBMJOBlJJKgld+EhaS6edIFCOtZGqDolcMGQpSlda3oIeB7LWwBnm99 0vSfSTh/s5xF+19L7yauiaJhgCtQbM7pEjAj6mPykQLajcijpdTBHpAgTFni0h7T PHPPq//k2shL0fVjwPlH56G5PMXq9JeJmxJ+19DAYFrPnj4bNaGiHxi9SFgbprDe Whe0OIUDMpyhyVai6B9Z5b3aczVwuMrVyjrCLNmD53z+UpJcSIm+/EfkqMyaj65t 6EQs7f38833YdPPetOoxLRt8l5KvBz5TkWbIplIbLCe+GbNK3+nJ0sVo/G1DYyzx 3Cy2pCIyGWxALujh97AxVd4OIIHC7LET -----END CERTIFICATE-----Generated at Sat Jun 14 19:24:11 2025 by rpki-client