$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/-cREz887ajdUceO1SHT8K0myxyY.mft File: -cREz887ajdUceO1SHT8K0myxyY.mft (raw, json) Hash identifier: CRB+FAhlYZt3gUAkKnocjwHgDVzaXaI5PrBk3JnoQgk= Subject key identifier: 20:0B:A7:59:A4:7A:23:84:F5:43:CC:03:0A:17:97:60:DB:D9:1A:94 Authority key identifier: F9:C4:44:CF:CF:3B:6A:37:54:71:E3:B5:48:74:FC:2B:49:B2:C7:26 Certificate issuer: /CN=A91E6B9A/serialNumber=F9C444CFCF3B6A375471E3B54874FC2B49B2C726 Certificate serial: 9D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-cREz887ajdUceO1SHT8K0myxyY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/-cREz887ajdUceO1SHT8K0myxyY.mft Manifest number: 9B Signing time: Tue 17 Jun 2025 05:16:01 +0000 Manifest this update: Tue 17 Jun 2025 05:16:01 +0000 Manifest next update: Tue 24 Jun 2025 05:16:01 +0000 Files and hashes: 1: -cREz887ajdUceO1SHT8K0myxyY.crl (hash: 9koi+jMu3j/M05OkcxQg2tUZWwv2uKmTT9pqfaLlArM=) 2: 58CA0E62615111EFACF30C14C4F9AE02.roa (hash: n/H7m4JyEx7dcVifKMlTV7vtmvQ/Ig1JHl4d6IW0aVA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/-cREz887ajdUceO1SHT8K0myxyY.crl rsync://rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/-cREz887ajdUceO1SHT8K0myxyY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-cREz887ajdUceO1SHT8K0myxyY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Jun 2025 05:16:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 157 (0x9d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6B9A, serialNumber=F9C444CFCF3B6A375471E3B54874FC2B49B2C726 Validity Not Before: Jun 17 05:16:01 2025 GMT Not After : Jun 24 05:16:01 2025 GMT Subject: CN=6850fa11-80f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:8f:0d:c8:26:cf:75:cd:09:df:f9:8d:55:27: 53:1b:b4:c2:98:b9:aa:c2:d4:4a:6c:91:87:86:0e: 8e:4a:24:e5:d8:2e:f6:3f:e5:8b:a8:f9:ae:f9:2b: 0c:61:e1:c8:bb:ad:fb:bf:0c:f3:36:57:81:b7:22: 99:69:3b:ae:6f:10:cb:96:63:35:fb:cd:b4:6f:5d: 31:cf:1e:d2:5c:d7:85:5b:0f:d3:26:67:30:df:01: cc:1a:4e:1c:7d:a2:f0:f3:6b:92:bd:d6:3b:cf:5c: e8:ec:20:17:23:04:7c:85:a7:0d:20:54:21:d6:18: ee:ee:c3:a1:97:6d:5d:ab:25:45:67:b1:98:58:08: f5:91:2e:da:aa:9f:5e:bd:32:e5:1c:84:92:92:a6: de:0c:97:5f:15:ae:99:f9:d3:55:6e:05:80:7a:79: 7a:be:35:70:74:40:04:82:e1:8e:a9:f0:aa:c8:23: 81:9f:75:2d:5a:42:a1:1d:7d:15:ab:ae:70:2c:58: e0:d5:c2:42:c3:52:e1:6e:a9:5d:30:4c:b2:7a:9a: a4:9b:2d:f6:05:07:46:c7:4e:a7:0a:bc:30:cc:e8: 83:86:2e:bf:fb:31:a3:0a:c6:b2:18:9c:e4:c3:c2: 9b:de:e2:ce:e1:a1:de:cc:87:f4:43:2e:fb:ee:3b: b7:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:0B:A7:59:A4:7A:23:84:F5:43:CC:03:0A:17:97:60:DB:D9:1A:94 X509v3 Authority Key Identifier: keyid:F9:C4:44:CF:CF:3B:6A:37:54:71:E3:B5:48:74:FC:2B:49:B2:C7:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/-cREz887ajdUceO1SHT8K0myxyY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-cREz887ajdUceO1SHT8K0myxyY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/-cREz887ajdUceO1SHT8K0myxyY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:08:c4:dc:3b:c4:e7:94:4c:0b:67:7b:11:8e:e4:27:cd:b7: 4a:f3:de:28:35:2d:09:01:dd:c6:de:3b:ba:b0:f5:8e:57:1a: 3d:9d:a9:34:6a:0e:f7:ad:41:c8:9b:69:fc:5d:63:4f:c7:e3: 9b:36:b4:a7:3c:d5:23:b1:48:f5:22:73:02:b3:6e:71:79:fe: c9:a7:de:90:91:c6:5b:41:af:86:f7:c3:c6:7e:cf:65:d8:fd: ec:5c:54:dc:f1:98:56:50:1f:7b:36:d7:fa:9c:82:cb:9d:10: 6a:4e:55:31:c3:00:7c:45:68:8d:f8:b0:56:51:ef:26:5b:11: c7:53:a7:9a:72:3e:de:78:41:b4:54:55:64:27:2e:6f:6e:86: 1b:ce:a3:98:9b:4c:97:19:6c:a1:b3:ad:11:cd:75:c3:2a:b0: 79:0c:0d:63:00:01:fb:d8:64:69:bf:46:6e:3a:c9:6f:7e:2f: 6b:a6:d0:15:88:92:29:fe:99:da:ac:4d:dd:e2:3a:1c:3e:b1: 96:56:3a:79:e9:3e:73:51:2b:f8:b3:9d:45:64:6c:d6:4c:7a: 08:5e:b3:84:63:c4:ca:a9:e1:25:76:3a:38:de:83:fa:ec:0a: a2:69:cc:e1:8c:29:16:73:de:49:01:1d:fe:e6:17:3f:8f:68: 09:29:8f:bc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTZCOUExMTAvBgNVBAUTKEY5QzQ0NENGQ0YzQjZBMzc1NDcxRTNCNTQ4NzRGQzJC NDlCMkM3MjYwHhcNMjUwNjE3MDUxNjAxWhcNMjUwNjI0MDUxNjAxWjAYMRYwFAYD VQQDEw02ODUwZmExMS04MGY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyY8NyCbPdc0J3/mNVSdTG7TCmLmqwtRKbJGHhg6OSiTl2C72P+WLqPmu+SsM YeHIu637vwzzNleBtyKZaTuubxDLlmM1+820b10xzx7SXNeFWw/TJmcw3wHMGk4c faLw82uSvdY7z1zo7CAXIwR8hacNIFQh1hju7sOhl21dqyVFZ7GYWAj1kS7aqp9e vTLlHISSkqbeDJdfFa6Z+dNVbgWAenl6vjVwdEAEguGOqfCqyCOBn3UtWkKhHX0V q65wLFjg1cJCw1LhbqldMEyyepqkmy32BQdGx06nCrwwzOiDhi6/+zGjCsayGJzk w8Kb3uLO4aHezIf0Qy777ju3zQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCALp1mk eiOE9UPMAwoXl2Db2RqUMB8GA1UdIwQYMBaAFPnERM/PO2o3VHHjtUh0/CtJsscm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNkI5QS8xMTYwMTI4RTYx NTAxMUVGQUU3QThDNzNDNEY5QUUwMi8tY1JFejg4N2FqZFVjZU8xU0hUOEswbXl4 eVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLy1jUkV6ODg3YWpkVWNlTzFTSFQ4SzBteXh5WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NkI5QS8xMTYwMTI4RTYxNTAxMUVGQUU3QThDNzNDNEY5QUUwMi8tY1JFejg4N2Fq ZFVjZU8xU0hUOEswbXl4eVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQADCMTcO8TnlEwLZ3sRjuQnzbdK894oNS0JAd3G3ju6sPWOVxo9nak0 ag73rUHIm2n8XWNPx+ObNrSnPNUjsUj1InMCs25xef7Jp96QkcZbQa+G98PGfs9l 2P3sXFTc8ZhWUB97Ntf6nILLnRBqTlUxwwB8RWiN+LBWUe8mWxHHU6eacj7eeEG0 VFVkJy5vboYbzqOYm0yXGWyhs60RzXXDKrB5DA1jAAH72GRpv0ZuOslvfi9rptAV iJIp/pnarE3d4jocPrGWVjp56T5zUSv4s51FZGzWTHoIXrOEY8TKqeEldjo43oP6 7AqiaczhjCkWc95JAR3+5hc/j2gJKY+8 -----END CERTIFICATE-----Generated at Thu Jun 19 01:52:14 2025 by rpki-client