$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2F80/94C54B80039511EF85B69F4EC4F9AE02/9BDEg6TIyRb_1M9CDEwRCIl5iJE.mft File: 9BDEg6TIyRb_1M9CDEwRCIl5iJE.mft (raw, json) Hash identifier: HbMarHAagB8z/yBQv3QczjsBY9e81DofvXJ/DCmNdp8= Subject key identifier: 9E:1A:57:70:8E:78:20:36:88:DE:C7:39:18:BB:C6:B1:88:9E:CE:C4 Authority key identifier: F4:10:C4:83:A4:C8:C9:16:FF:D4:CF:42:0C:4C:11:08:89:79:88:91 Certificate issuer: /CN=A91E2F80/serialNumber=F410C483A4C8C916FFD4CF420C4C110889798891 Certificate serial: F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9BDEg6TIyRb_1M9CDEwRCIl5iJE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2F80/94C54B80039511EF85B69F4EC4F9AE02/9BDEg6TIyRb_1M9CDEwRCIl5iJE.mft Manifest number: E4 Signing time: Fri 13 Jun 2025 04:35:05 +0000 Manifest this update: Fri 13 Jun 2025 04:35:04 +0000 Manifest next update: Fri 20 Jun 2025 04:35:04 +0000 Files and hashes: 1: 9BDEg6TIyRb_1M9CDEwRCIl5iJE.crl (hash: /uq4Wm01EUbDT0z/B8yR16tKn1jgkv0bMhlAxIf8VaI=) 2: DAC9D5960C7E11EF9A189E18C4F9AE02.roa (hash: cLX/WlgP7K24ucXGUUtpNzmDrPk9vKJrsn64OyHEFQQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2F80/94C54B80039511EF85B69F4EC4F9AE02/9BDEg6TIyRb_1M9CDEwRCIl5iJE.crl rsync://rpki.apnic.net/member_repository/A91E2F80/94C54B80039511EF85B69F4EC4F9AE02/9BDEg6TIyRb_1M9CDEwRCIl5iJE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9BDEg6TIyRb_1M9CDEwRCIl5iJE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 04:35:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 242 (0xf2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2F80, serialNumber=F410C483A4C8C916FFD4CF420C4C110889798891 Validity Not Before: Jun 13 04:35:04 2025 GMT Not After : Jun 20 04:35:04 2025 GMT Subject: CN=684baa79-f561 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:d1:8b:af:01:41:39:ac:f4:48:c0:d6:b6:68: 4b:67:31:68:c4:8f:fe:63:c9:e0:6f:c7:ec:b9:c7: 9e:b7:55:2d:24:c6:56:21:84:44:59:60:02:4e:b3: ce:33:40:d1:1c:9d:ff:1c:00:89:6c:a6:c0:74:d7: b9:08:af:21:7e:d3:a3:dc:20:22:1b:26:2c:b2:9d: a3:ba:2a:f8:90:7d:cb:11:cb:a5:58:25:b1:80:12: 11:82:81:0a:d1:8d:38:6f:99:46:9f:6a:2c:66:76: ce:fd:97:4a:da:bc:11:63:71:ca:f2:4e:d3:6a:71: 3c:d1:ce:ac:8d:62:d6:8a:f6:6e:ac:c5:cf:20:60: ac:2c:d7:4d:30:9c:09:a0:28:26:21:22:f8:fe:24: 95:64:66:6b:81:5d:0d:20:1d:9f:52:6b:70:fb:b2: 8c:59:31:0a:4f:4d:c7:23:63:5c:43:08:f3:d8:e8: eb:d0:c4:8f:92:1a:81:35:5b:2a:c6:44:23:a7:7d: 99:16:0d:63:e3:aa:3b:8f:bf:5e:14:e0:9b:c0:35: 3e:cc:a6:a4:f6:d0:0a:b3:1b:f7:4a:8c:f4:d7:df: 7a:bf:56:ef:dc:0d:3d:d4:f9:a0:fa:51:57:bb:46: 98:a2:8d:90:f7:00:5d:ee:5b:0a:0d:cd:c2:24:7c: a7:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:1A:57:70:8E:78:20:36:88:DE:C7:39:18:BB:C6:B1:88:9E:CE:C4 X509v3 Authority Key Identifier: keyid:F4:10:C4:83:A4:C8:C9:16:FF:D4:CF:42:0C:4C:11:08:89:79:88:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2F80/94C54B80039511EF85B69F4EC4F9AE02/9BDEg6TIyRb_1M9CDEwRCIl5iJE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9BDEg6TIyRb_1M9CDEwRCIl5iJE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2F80/94C54B80039511EF85B69F4EC4F9AE02/9BDEg6TIyRb_1M9CDEwRCIl5iJE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:0d:f4:b3:ee:b5:ff:7b:36:42:81:5b:c0:7e:00:43:c8:67: e0:16:4e:67:27:00:74:d8:f9:8e:2c:f6:fe:ff:0b:a1:4a:b9: 60:3c:b0:f1:82:cd:3e:82:3b:9e:9d:fd:84:5a:3e:ad:37:ed: 35:2c:39:9b:50:37:7c:78:3d:00:b4:f8:5f:7e:16:e2:a9:2c: c8:07:ab:d0:65:25:ac:d5:e2:c4:33:df:d5:b7:3e:fe:d4:54: 56:0a:8a:18:84:0c:2e:75:64:11:5e:54:02:a6:e2:bb:cd:46: 87:6c:dc:38:a8:71:f0:8b:fb:ee:3b:02:dc:5b:89:8d:f2:89: e7:0b:3b:e5:f7:b4:42:71:74:47:1f:f8:b8:a9:0a:5b:10:e8: 0e:d0:2e:c1:59:ce:9e:9e:02:d0:23:b8:7c:cf:05:38:cf:35: d9:95:e5:23:62:c7:8b:15:a5:c8:7b:82:75:d9:5a:72:e2:0e: 67:e6:99:86:3e:53:35:47:78:46:dd:fe:60:cc:e0:0b:1f:2b: ed:d3:36:36:d1:b1:64:ea:2d:37:b2:d3:7c:c0:90:a4:89:d1: 5f:8c:41:55:88:7f:ae:ce:44:84:32:64:86:7a:8b:c9:75:9f: 45:a7:fd:cd:e5:27:29:47:19:29:0a:f6:08:9d:3e:99:0a:a7: fa:14:db:27 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTJGODAxMTAvBgNVBAUTKEY0MTBDNDgzQTRDOEM5MTZGRkQ0Q0Y0MjBDNEMxMTA4 ODk3OTg4OTEwHhcNMjUwNjEzMDQzNTA0WhcNMjUwNjIwMDQzNTA0WjAYMRYwFAYD VQQDEw02ODRiYWE3OS1mNTYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAltGLrwFBOaz0SMDWtmhLZzFoxI/+Y8ngb8fsuceet1UtJMZWIYREWWACTrPO M0DRHJ3/HACJbKbAdNe5CK8hftOj3CAiGyYssp2juir4kH3LEculWCWxgBIRgoEK 0Y04b5lGn2osZnbO/ZdK2rwRY3HK8k7TanE80c6sjWLWivZurMXPIGCsLNdNMJwJ oCgmISL4/iSVZGZrgV0NIB2fUmtw+7KMWTEKT03HI2NcQwjz2Ojr0MSPkhqBNVsq xkQjp32ZFg1j46o7j79eFOCbwDU+zKak9tAKsxv3Soz01996v1bv3A091Pmg+lFX u0aYoo2Q9wBd7lsKDc3CJHyn8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ4aV3CO eCA2iN7HORi7xrGIns7EMB8GA1UdIwQYMBaAFPQQxIOkyMkW/9TPQgxMEQiJeYiR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMkY4MC85NEM1NEI4MDAz OTUxMUVGODVCNjlGNEVDNEY5QUUwMi85QkRFZzZUSXlSYl8xTTlDREV3UkNJbDVp SkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlCREVnNlRJeVJiXzFNOUNERXdSQ0lsNWlKRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MkY4MC85NEM1NEI4MDAzOTUxMUVGODVCNjlGNEVDNEY5QUUwMi85QkRFZzZUSXlS Yl8xTTlDREV3UkNJbDVpSkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCRDfSz7rX/ezZCgVvAfgBDyGfgFk5nJwB02PmOLPb+/wuhSrlgPLDx gs0+gjuenf2EWj6tN+01LDmbUDd8eD0AtPhffhbiqSzIB6vQZSWs1eLEM9/Vtz7+ 1FRWCooYhAwudWQRXlQCpuK7zUaHbNw4qHHwi/vuOwLcW4mN8onnCzvl97RCcXRH H/i4qQpbEOgO0C7BWc6engLQI7h8zwU4zzXZleUjYseLFaXIe4J12Vpy4g5n5pmG PlM1R3hG3f5gzOALHyvt0zY20bFk6i03stN8wJCkidFfjEFViH+uzkSEMmSGeovJ dZ9Fp/3N5ScpRxkpCvYInT6ZCqf6FNsn -----END CERTIFICATE-----Generated at Sat Jun 14 19:34:39 2025 by rpki-client