$ rpki-client -vvf rpki.apnic.net/member_repository/A91E473F/D6E540389DB311EBB032B04CC4F9AE02/k0H5tw9xTxMcUuH-S-Xlq4wm6-o.mft File: k0H5tw9xTxMcUuH-S-Xlq4wm6-o.mft (raw, json) Hash identifier: EjaaTisAj7psGNB/aGQbcj7CvBw9NwP5DX9OJmhE8ls= Subject key identifier: 8A:F5:FD:9A:73:0E:D1:CE:5E:5C:DE:E9:51:8E:F1:D9:88:94:FE:5F Authority key identifier: 93:41:F9:B7:0F:71:4F:13:1C:52:E1:FE:4B:E5:E5:AB:8C:26:EB:EA Certificate issuer: /CN=A91E473F/serialNumber=9341F9B70F714F131C52E1FE4BE5E5AB8C26EBEA Certificate serial: 0625 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k0H5tw9xTxMcUuH-S-Xlq4wm6-o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E473F/D6E540389DB311EBB032B04CC4F9AE02/k0H5tw9xTxMcUuH-S-Xlq4wm6-o.mft Manifest number: 0621 Signing time: Thu 12 Jun 2025 22:23:52 +0000 Manifest this update: Thu 12 Jun 2025 22:23:52 +0000 Manifest next update: Thu 19 Jun 2025 22:23:52 +0000 Files and hashes: 1: k0H5tw9xTxMcUuH-S-Xlq4wm6-o.crl (hash: HtYI+L+BE194DoK0uur4h9dZS5CFTeeMN+NweDpLWsI=) 2: 4816D7F0327A11EEA132B74CC4F9AE02.roa (hash: vwAWNkOECPjjWatP7CXVkY05vRy7dP/taTedzApQJgw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E473F/D6E540389DB311EBB032B04CC4F9AE02/k0H5tw9xTxMcUuH-S-Xlq4wm6-o.crl rsync://rpki.apnic.net/member_repository/A91E473F/D6E540389DB311EBB032B04CC4F9AE02/k0H5tw9xTxMcUuH-S-Xlq4wm6-o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k0H5tw9xTxMcUuH-S-Xlq4wm6-o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 22:23:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1573 (0x625) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E473F, serialNumber=9341F9B70F714F131C52E1FE4BE5E5AB8C26EBEA Validity Not Before: Jun 12 22:23:52 2025 GMT Not After : Jun 19 22:23:52 2025 GMT Subject: CN=684b5378-1847 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:6a:bb:1c:5c:5a:84:33:87:ac:18:8a:51:7a: 96:67:fc:96:86:b3:c0:bb:89:ba:08:07:1e:17:6b: 62:e2:f6:ea:86:a5:ca:ab:b9:01:63:da:6d:5e:42: ed:3f:8c:4c:a9:af:11:bc:8d:92:7f:72:19:04:6c: f3:e2:0d:c0:17:6d:aa:f0:8b:1d:53:9b:80:7e:67: d9:1b:0b:de:4c:6a:d0:12:61:9f:3a:d3:e0:09:d7: 6a:8c:cd:9c:ee:3d:9c:5c:87:0b:00:18:6c:2a:93: 99:ab:54:eb:a7:c6:9d:b9:14:27:f6:a4:99:6a:75: 01:76:f3:14:90:29:ba:f6:d4:45:49:f2:48:ff:16: a6:bc:04:ee:07:f9:0f:91:78:1e:45:8c:99:e8:7e: 8f:12:6e:7e:85:c7:fc:f1:fb:71:b7:19:e8:91:e6: da:90:c8:97:f7:9c:98:2b:26:bf:ea:a2:b7:0a:df: 39:0a:26:bf:ed:2b:5c:82:63:ba:9d:ed:cb:96:36: f5:06:6e:7f:2f:57:d1:9a:bd:2d:bc:6b:34:1f:04: 5a:0b:79:c3:db:a4:66:cd:02:07:0c:64:f8:77:25: ee:aa:f6:9d:ab:83:40:d4:7b:fb:8e:8e:c7:3f:94: 1e:c8:22:9c:06:d6:ce:4c:ed:b6:27:9f:92:56:14: 17:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:F5:FD:9A:73:0E:D1:CE:5E:5C:DE:E9:51:8E:F1:D9:88:94:FE:5F X509v3 Authority Key Identifier: keyid:93:41:F9:B7:0F:71:4F:13:1C:52:E1:FE:4B:E5:E5:AB:8C:26:EB:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E473F/D6E540389DB311EBB032B04CC4F9AE02/k0H5tw9xTxMcUuH-S-Xlq4wm6-o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k0H5tw9xTxMcUuH-S-Xlq4wm6-o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E473F/D6E540389DB311EBB032B04CC4F9AE02/k0H5tw9xTxMcUuH-S-Xlq4wm6-o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:3b:31:f0:be:3a:64:98:b7:13:71:73:a7:bc:ad:2d:1a:88: b3:d1:65:08:b0:34:b1:c7:66:89:6e:5a:b1:8f:a4:8b:cc:db: 23:ec:6e:24:0c:2b:56:9e:95:fc:cb:1c:91:1f:83:67:5d:b7: 4b:26:53:ec:12:b7:6b:ec:14:b7:37:21:38:a9:54:f3:83:be: 7c:47:fd:8a:16:9a:42:e4:5b:67:e9:f0:e8:b7:80:97:f8:e2: e7:00:4d:e7:be:e9:02:a5:d9:bc:6f:c9:94:9e:66:77:41:91: 12:4e:17:14:92:cc:57:58:9d:c7:09:a8:9b:7d:fe:a5:ec:79: 4d:3b:77:42:79:1b:76:5e:f1:b0:57:00:6b:99:53:fc:72:45: 5c:30:50:96:89:a6:ca:48:f1:7d:9d:25:05:41:6f:e6:61:63: 9d:0e:26:e9:a5:20:1d:d7:8c:24:d0:3f:b4:5c:a6:2b:4c:2a: e2:06:45:91:20:16:13:38:4b:66:d0:37:f1:59:2d:e0:9f:6e: b7:7b:e6:31:30:68:64:42:1d:4c:3c:1d:af:e6:21:23:2a:6a: a5:68:c9:dd:eb:2e:25:ae:d7:c5:3b:1e:62:be:ed:9d:96:de: e5:fa:c1:62:58:1c:a9:7e:07:47:08:f2:6b:c6:8e:04:0b:01: 92:04:1d:4a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBiUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTQ3M0YxMTAvBgNVBAUTKDkzNDFGOUI3MEY3MTRGMTMxQzUyRTFGRTRCRTVFNUFC OEMyNkVCRUEwHhcNMjUwNjEyMjIyMzUyWhcNMjUwNjE5MjIyMzUyWjAYMRYwFAYD VQQDEw02ODRiNTM3OC0xODQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAomq7HFxahDOHrBiKUXqWZ/yWhrPAu4m6CAceF2ti4vbqhqXKq7kBY9ptXkLt P4xMqa8RvI2Sf3IZBGzz4g3AF22q8IsdU5uAfmfZGwveTGrQEmGfOtPgCddqjM2c 7j2cXIcLABhsKpOZq1Trp8aduRQn9qSZanUBdvMUkCm69tRFSfJI/xamvATuB/kP kXgeRYyZ6H6PEm5+hcf88ftxtxnokebakMiX95yYKya/6qK3Ct85Cia/7StcgmO6 ne3Lljb1Bm5/L1fRmr0tvGs0HwRaC3nD26RmzQIHDGT4dyXuqvadq4NA1Hv7jo7H P5QeyCKcBtbOTO22J5+SVhQX7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIr1/Zpz DtHOXlze6VGO8dmIlP5fMB8GA1UdIwQYMBaAFJNB+bcPcU8THFLh/kvl5auMJuvq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNDczRi9ENkU1NDAzODlE QjMxMUVCQjAzMkIwNENDNEY5QUUwMi9rMEg1dHc5eFR4TWNVdUgtUy1YbHE0d202 LW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2swSDV0dzl4VHhNY1V1SC1TLVhscTR3bTYtby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NDczRi9ENkU1NDAzODlEQjMxMUVCQjAzMkIwNENDNEY5QUUwMi9rMEg1dHc5eFR4 TWNVdUgtUy1YbHE0d202LW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQClOzHwvjpkmLcTcXOnvK0tGoiz0WUIsDSxx2aJblqxj6SLzNsj7G4k DCtWnpX8yxyRH4NnXbdLJlPsErdr7BS3NyE4qVTzg758R/2KFppC5Ftn6fDot4CX +OLnAE3nvukCpdm8b8mUnmZ3QZESThcUksxXWJ3HCaibff6l7HlNO3dCeRt2XvGw VwBrmVP8ckVcMFCWiabKSPF9nSUFQW/mYWOdDibppSAd14wk0D+0XKYrTCriBkWR IBYTOEtm0DfxWS3gn263e+YxMGhkQh1MPB2v5iEjKmqlaMnd6y4lrtfFOx5ivu2d lt7l+sFiWBypfgdHCPJrxo4ECwGSBB1K -----END CERTIFICATE-----Generated at Sat Jun 14 19:34:35 2025 by rpki-client