$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9EA9/E646BF1E968011EBAA64FA56C4F9AE02/mU2bLZfLzLXVJE3gp-U5dB-IiiM.mft File: mU2bLZfLzLXVJE3gp-U5dB-IiiM.mft (raw, json) Hash identifier: Jd60pmyQzyFqKZP/d7bnaqbx6DKThzEw7o1FQY0j/o0= Subject key identifier: DB:4F:36:40:B9:A2:E8:15:A6:C3:6F:BD:57:CA:4F:04:5C:D5:25:0B Authority key identifier: 99:4D:9B:2D:97:CB:CC:B5:D5:24:4D:E0:A7:E5:39:74:1F:88:8A:23 Certificate issuer: /CN=A91E9EA9/serialNumber=994D9B2D97CBCCB5D5244DE0A7E539741F888A23 Certificate serial: 063E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mU2bLZfLzLXVJE3gp-U5dB-IiiM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9EA9/E646BF1E968011EBAA64FA56C4F9AE02/mU2bLZfLzLXVJE3gp-U5dB-IiiM.mft Manifest number: 0637 Signing time: Thu 12 Jun 2025 22:19:08 +0000 Manifest this update: Thu 12 Jun 2025 22:19:07 +0000 Manifest next update: Thu 19 Jun 2025 22:19:07 +0000 Files and hashes: 1: mU2bLZfLzLXVJE3gp-U5dB-IiiM.crl (hash: D7bUkPfGgNpy+iE40nWYBfDwUrvbl3RFjyopdW24cN4=) 2: 1B4DA20CD46711ECA1A27035C4F9AE02.roa (hash: ztzKFXpjSxYM8wd4nThJ1BsK2ipsW271bSfHzk4YREM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9EA9/E646BF1E968011EBAA64FA56C4F9AE02/mU2bLZfLzLXVJE3gp-U5dB-IiiM.crl rsync://rpki.apnic.net/member_repository/A91E9EA9/E646BF1E968011EBAA64FA56C4F9AE02/mU2bLZfLzLXVJE3gp-U5dB-IiiM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mU2bLZfLzLXVJE3gp-U5dB-IiiM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 22:19:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1598 (0x63e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9EA9, serialNumber=994D9B2D97CBCCB5D5244DE0A7E539741F888A23 Validity Not Before: Jun 12 22:19:07 2025 GMT Not After : Jun 19 22:19:07 2025 GMT Subject: CN=684b525c-b951 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:6c:e7:64:07:85:44:4f:de:84:49:31:7c:63: 64:a4:fb:31:67:b0:d6:97:bc:0a:9b:00:81:21:0c: 23:a6:3b:31:13:6b:75:47:6f:e4:38:dd:dc:f2:49: e0:e4:44:6d:4e:2c:40:3e:c6:46:30:40:4f:1b:3a: 7d:4f:ea:05:65:80:1c:dc:66:c3:7e:f7:c5:9c:fc: 81:fb:bf:a0:16:79:a8:18:87:c4:ec:25:43:ff:69: dc:a4:5c:4d:0c:bb:19:f0:ef:a9:07:62:ac:91:d3: 36:47:b6:37:a1:7e:3f:6e:d5:2e:72:7b:87:e9:8f: 70:fc:8a:70:c0:a1:bb:6c:e6:ef:67:a0:c4:a6:d3: 31:fd:da:99:d6:a2:12:88:04:fa:c5:2c:90:68:4d: d3:b6:d0:5b:cc:01:c4:c2:b5:ee:b9:75:62:d4:5c: 3c:1d:b6:cc:04:31:5f:2a:85:f0:ee:8b:90:19:7c: 24:5d:a3:7a:49:ff:53:87:26:f3:d8:af:18:fe:89: 1f:de:f1:7d:e4:69:6e:59:3d:d8:66:60:ec:2a:c4: a2:55:e6:dd:a6:f5:ba:54:fc:18:09:ca:6c:a1:d0: 0a:9b:6f:97:c5:97:bd:d9:7a:7c:85:11:28:88:82: 3d:d0:fd:44:33:8b:09:4f:1a:0a:e7:3f:27:b1:9e: 12:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:4F:36:40:B9:A2:E8:15:A6:C3:6F:BD:57:CA:4F:04:5C:D5:25:0B X509v3 Authority Key Identifier: keyid:99:4D:9B:2D:97:CB:CC:B5:D5:24:4D:E0:A7:E5:39:74:1F:88:8A:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9EA9/E646BF1E968011EBAA64FA56C4F9AE02/mU2bLZfLzLXVJE3gp-U5dB-IiiM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mU2bLZfLzLXVJE3gp-U5dB-IiiM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9EA9/E646BF1E968011EBAA64FA56C4F9AE02/mU2bLZfLzLXVJE3gp-U5dB-IiiM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:e9:6c:43:13:8c:1d:9a:28:76:09:13:b5:cf:e6:1a:34:e4: 2d:ce:3e:cc:bf:2f:0f:99:92:ca:01:4e:6d:b3:58:12:34:9c: c9:d5:e4:cd:e7:87:cb:c8:aa:45:72:ac:a1:81:36:9a:e6:f0: 1c:e9:b5:e9:01:07:1a:49:46:a5:7a:ec:06:9d:a9:2d:69:3f: 2e:48:8d:fa:6b:33:a6:e5:3c:2d:31:6e:94:0d:4f:ad:51:5b: 61:d0:0f:66:1b:78:b4:9b:c9:ac:fb:2f:9c:99:20:be:cb:c0: 6d:34:f6:fe:52:dc:da:ad:4f:8a:ae:9e:6b:d1:26:35:14:5d: 90:c5:56:1f:64:a8:27:c6:cf:41:15:01:ee:7d:03:38:b7:aa: ed:9b:88:ba:98:cc:eb:e0:87:80:4b:02:cd:16:e2:14:9f:9a: f3:53:47:5a:fe:e4:73:f7:a5:ca:cc:05:3a:6c:17:5b:50:f9: 3c:64:76:a1:72:72:58:fa:29:1b:27:8b:c0:ac:57:5f:a6:9b: 3d:87:89:b5:5e:3f:04:78:b3:2a:71:6a:22:b0:10:24:1d:7f: b6:d3:02:72:9f:7d:86:30:7c:57:61:cb:01:78:69:da:bd:7f: 99:78:bb:50:42:a4:f2:7e:8b:5e:dc:24:51:c7:17:18:a8:1f: 58:d0:0f:93 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBj4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTlFQTkxMTAvBgNVBAUTKDk5NEQ5QjJEOTdDQkNDQjVENTI0NERFMEE3RTUzOTc0 MUY4ODhBMjMwHhcNMjUwNjEyMjIxOTA3WhcNMjUwNjE5MjIxOTA3WjAYMRYwFAYD VQQDEw02ODRiNTI1Yy1iOTUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyWznZAeFRE/ehEkxfGNkpPsxZ7DWl7wKmwCBIQwjpjsxE2t1R2/kON3c8kng 5ERtTixAPsZGMEBPGzp9T+oFZYAc3GbDfvfFnPyB+7+gFnmoGIfE7CVD/2ncpFxN DLsZ8O+pB2KskdM2R7Y3oX4/btUucnuH6Y9w/IpwwKG7bObvZ6DEptMx/dqZ1qIS iAT6xSyQaE3TttBbzAHEwrXuuXVi1Fw8HbbMBDFfKoXw7ouQGXwkXaN6Sf9Thybz 2K8Y/okf3vF95GluWT3YZmDsKsSiVebdpvW6VPwYCcpsodAKm2+XxZe92Xp8hREo iII90P1EM4sJTxoK5z8nsZ4SFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNtPNkC5 ougVpsNvvVfKTwRc1SULMB8GA1UdIwQYMBaAFJlNmy2Xy8y11SRN4KflOXQfiIoj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOUVBOS9FNjQ2QkYxRTk2 ODAxMUVCQUE2NEZBNTZDNEY5QUUwMi9tVTJiTFpmTHpMWFZKRTNncC1VNWRCLUlp aU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21VMmJMWmZMekxYVkpFM2dwLVU1ZEItSWlpTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OUVBOS9FNjQ2QkYxRTk2ODAxMUVCQUE2NEZBNTZDNEY5QUUwMi9tVTJiTFpmTHpM WFZKRTNncC1VNWRCLUlpaU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBk6WxDE4wdmih2CRO1z+YaNOQtzj7Mvy8PmZLKAU5ts1gSNJzJ1eTN 54fLyKpFcqyhgTaa5vAc6bXpAQcaSUaleuwGnaktaT8uSI36azOm5TwtMW6UDU+t UVth0A9mG3i0m8ms+y+cmSC+y8BtNPb+UtzarU+Krp5r0SY1FF2QxVYfZKgnxs9B FQHufQM4t6rtm4i6mMzr4IeASwLNFuIUn5rzU0da/uRz96XKzAU6bBdbUPk8ZHah cnJY+ikbJ4vArFdfpps9h4m1Xj8EeLMqcWoisBAkHX+20wJyn32GMHxXYcsBeGna vX+ZeLtQQqTyfote3CRRxxcYqB9Y0A+T -----END CERTIFICATE-----Generated at Sat Jun 14 18:52:51 2025 by rpki-client