$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4023/613E3E9E011411EAAADAB253C4F9AE02/Zye49DPvL-CAhCxu6KbMPcJEYm8.mft File: Zye49DPvL-CAhCxu6KbMPcJEYm8.mft (raw, json) Hash identifier: iY75ywrLNTI8xQaNukyvVzLy6HW3g9Aj9U8f1Q+2NKI= Subject key identifier: 10:C0:AB:76:35:28:F1:2F:9E:79:A1:1E:8B:A8:67:DE:9B:01:42:F3 Authority key identifier: 67:27:B8:F4:33:EF:2F:E0:80:84:2C:6E:E8:A6:CC:3D:C2:44:62:6F Certificate issuer: /CN=A91E4023/serialNumber=6727B8F433EF2FE080842C6EE8A6CC3DC244626F Certificate serial: 0C6C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zye49DPvL-CAhCxu6KbMPcJEYm8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4023/613E3E9E011411EAAADAB253C4F9AE02/Zye49DPvL-CAhCxu6KbMPcJEYm8.mft Manifest number: 0C5E Signing time: Sat 14 Jun 2025 18:12:44 +0000 Manifest this update: Sat 14 Jun 2025 18:12:44 +0000 Manifest next update: Sat 21 Jun 2025 18:12:44 +0000 Files and hashes: 1: Zye49DPvL-CAhCxu6KbMPcJEYm8.crl (hash: hwhIFt1gfTN1N2b7ryEOrEoU6RfIVk66lB7xz6WMAJo=) 2: E14507F8011411EAAB0EF153C4F9AE02.roa (hash: ZJYTa6/4Mo2ZhGCzzSDSUlHgf//iLKJXvM086ZIoSG4=) 3: E0BC0B4C011411EAAB0EF153C4F9AE02.roa (hash: y1Ah/sCRnzTCZTtDJj4VAK1Ak4axz54qZlJpOkCDzUE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4023/613E3E9E011411EAAADAB253C4F9AE02/Zye49DPvL-CAhCxu6KbMPcJEYm8.crl rsync://rpki.apnic.net/member_repository/A91E4023/613E3E9E011411EAAADAB253C4F9AE02/Zye49DPvL-CAhCxu6KbMPcJEYm8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zye49DPvL-CAhCxu6KbMPcJEYm8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 18:12:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3180 (0xc6c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4023, serialNumber=6727B8F433EF2FE080842C6EE8A6CC3DC244626F Validity Not Before: Jun 14 18:12:44 2025 GMT Not After : Jun 21 18:12:44 2025 GMT Subject: CN=684dbb9c-a890 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:5a:90:b7:8e:bc:cb:ae:12:4b:6e:13:e6:d9: d0:92:70:b2:ef:ee:63:5f:75:25:b1:59:2b:fa:aa: 92:9a:ac:87:a0:0f:6f:0b:fe:c4:25:1f:5f:95:0d: ef:21:14:aa:93:6b:0a:bc:64:da:ce:34:2a:e1:a7: 5d:91:bf:68:31:49:2c:3f:aa:b5:65:eb:f9:74:d6: 07:3e:0d:ef:7c:d6:c5:53:58:9b:63:1d:7c:b0:99: 9d:3a:7d:ce:43:4f:f8:7f:3f:06:a1:5d:cc:06:42: ff:70:64:90:f4:bd:3e:0b:59:5d:a0:7a:7c:ce:e2: 85:56:02:c9:38:06:98:bf:db:71:83:38:33:86:c4: f8:08:08:f6:8a:d8:62:1f:85:ba:cc:69:88:02:e4: 56:a2:9b:12:08:64:e5:bf:83:d2:fd:37:62:09:3c: 78:2d:e0:ed:1d:8f:2d:82:64:49:f8:6d:8d:90:d0: 2f:9b:0a:15:c5:e3:dd:e7:29:55:59:e3:82:16:97: 7e:38:a9:d2:50:3f:50:14:9c:d9:69:a2:e2:a3:7e: c4:cb:ae:99:09:5b:86:29:33:0c:24:5b:19:c2:c7: b9:82:d9:a4:0b:a5:6f:85:60:8d:03:83:82:cd:4e: 5b:14:06:1b:da:cd:c3:30:ba:5f:49:00:70:45:32: d8:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:C0:AB:76:35:28:F1:2F:9E:79:A1:1E:8B:A8:67:DE:9B:01:42:F3 X509v3 Authority Key Identifier: keyid:67:27:B8:F4:33:EF:2F:E0:80:84:2C:6E:E8:A6:CC:3D:C2:44:62:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4023/613E3E9E011411EAAADAB253C4F9AE02/Zye49DPvL-CAhCxu6KbMPcJEYm8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zye49DPvL-CAhCxu6KbMPcJEYm8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4023/613E3E9E011411EAAADAB253C4F9AE02/Zye49DPvL-CAhCxu6KbMPcJEYm8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:55:82:65:b7:a4:0c:ee:d5:42:53:2f:a2:a0:69:23:a1:cc: 56:83:77:32:ee:ff:93:d1:d7:a9:7c:f9:eb:fe:1d:24:a4:19: 94:ec:f1:d3:ae:40:1e:ab:22:86:a9:0d:90:d8:e1:9d:66:69: bb:e0:80:19:42:30:c4:f4:97:30:e9:db:af:c0:34:67:61:ed: c8:69:38:be:c9:28:50:7a:a8:1e:02:d9:dc:39:e9:9d:49:44: fb:bf:01:ac:52:d2:79:ae:38:18:b4:47:aa:c0:51:38:1c:1b: b0:d1:5e:b4:90:3a:98:04:02:f6:bd:8f:18:a7:46:f3:c2:b1: 32:86:b2:1b:7d:c9:24:5b:ad:0e:b7:dd:61:4e:99:96:80:eb: 5f:5a:48:1e:99:81:f3:f3:aa:2d:35:e1:cf:2c:6a:33:9b:b0: 5a:0f:77:72:bd:63:69:9d:61:67:8d:cd:dd:61:12:8f:39:aa: 38:ee:db:25:d4:99:02:5f:c9:07:7e:38:d0:0c:37:bd:7a:06: 22:e3:56:60:8a:67:bb:b3:d8:20:f4:cf:69:14:5f:2c:5d:86: 6d:2a:14:e6:32:0f:94:3a:3e:df:77:60:9c:96:d1:f1:6a:eb: 84:8e:8b:a7:74:bf:53:61:92:d2:97:52:14:53:fc:c3:10:c8: d0:8d:05:11 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDGwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTQwMjMxMTAvBgNVBAUTKDY3MjdCOEY0MzNFRjJGRTA4MDg0MkM2RUU4QTZDQzNE QzI0NDYyNkYwHhcNMjUwNjE0MTgxMjQ0WhcNMjUwNjIxMTgxMjQ0WjAYMRYwFAYD VQQDEw02ODRkYmI5Yy1hODkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu1qQt468y64SS24T5tnQknCy7+5jX3UlsVkr+qqSmqyHoA9vC/7EJR9flQ3v IRSqk2sKvGTazjQq4addkb9oMUksP6q1Zev5dNYHPg3vfNbFU1ibYx18sJmdOn3O Q0/4fz8GoV3MBkL/cGSQ9L0+C1ldoHp8zuKFVgLJOAaYv9txgzgzhsT4CAj2ithi H4W6zGmIAuRWopsSCGTlv4PS/TdiCTx4LeDtHY8tgmRJ+G2NkNAvmwoVxePd5ylV WeOCFpd+OKnSUD9QFJzZaaLio37Ey66ZCVuGKTMMJFsZwse5gtmkC6VvhWCNA4OC zU5bFAYb2s3DMLpfSQBwRTLYgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBDAq3Y1 KPEvnnmhHouoZ96bAULzMB8GA1UdIwQYMBaAFGcnuPQz7y/ggIQsbuimzD3CRGJv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNDAyMy82MTNFM0U5RTAx MTQxMUVBQUFEQUIyNTNDNEY5QUUwMi9aeWU0OURQdkwtQ0FoQ3h1NktiTVBjSkVZ bTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1p5ZTQ5RFB2TC1DQWhDeHU2S2JNUGNKRVltOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NDAyMy82MTNFM0U5RTAxMTQxMUVBQUFEQUIyNTNDNEY5QUUwMi9aeWU0OURQdkwt Q0FoQ3h1NktiTVBjSkVZbTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAiVYJlt6QM7tVCUy+ioGkjocxWg3cy7v+T0depfPnr/h0kpBmU7PHT rkAeqyKGqQ2Q2OGdZmm74IAZQjDE9Jcw6duvwDRnYe3IaTi+yShQeqgeAtncOemd SUT7vwGsUtJ5rjgYtEeqwFE4HBuw0V60kDqYBAL2vY8Yp0bzwrEyhrIbfckkW60O t91hTpmWgOtfWkgemYHz86otNeHPLGozm7BaD3dyvWNpnWFnjc3dYRKPOao47tsl 1JkCX8kHfjjQDDe9egYi41Zgime7s9gg9M9pFF8sXYZtKhTmMg+UOj7fd2CcltHx auuEjoundL9TYZLSl1IUU/zDEMjQjQUR -----END CERTIFICATE-----Generated at Sun Jun 15 08:46:13 2025 by rpki-client