$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAD63/DD364118344711EDB10DA43AC4F9AE02/d4O93Owt-bn8-48Qm3PU95Shc4Y.mft File: d4O93Owt-bn8-48Qm3PU95Shc4Y.mft (raw, json) Hash identifier: Qgi8zzFMiG/q5hGoPy8MKpewZ2zGRODVCT+gQc5Vf5Q= Subject key identifier: 42:2C:FA:34:6B:21:56:2E:EE:EF:EA:C1:40:59:93:DD:27:18:B3:12 Authority key identifier: 77:83:BD:DC:EC:2D:F9:B9:FC:FB:8F:10:9B:73:D4:F7:94:A1:73:86 Certificate issuer: /CN=A91EAD63/serialNumber=7783BDDCEC2DF9B9FCFB8F109B73D4F794A17386 Certificate serial: 0221 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d4O93Owt-bn8-48Qm3PU95Shc4Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EAD63/DD364118344711EDB10DA43AC4F9AE02/d4O93Owt-bn8-48Qm3PU95Shc4Y.mft Manifest number: 021D Signing time: Tue 17 Jun 2025 01:30:45 +0000 Manifest this update: Tue 17 Jun 2025 01:30:44 +0000 Manifest next update: Tue 24 Jun 2025 01:30:44 +0000 Files and hashes: 1: d4O93Owt-bn8-48Qm3PU95Shc4Y.crl (hash: HJ9CWFYJ9XOwrMKpJoPRf+yud1pRVhiMOKrXL0Z4Bqo=) 2: 9BA13212344C11ED8F22CB70C4F9AE02.roa (hash: dSvt8WCJ5sX7UlCP0MxYFfwdeu8sA3Ot5FCk8B7masI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EAD63/DD364118344711EDB10DA43AC4F9AE02/d4O93Owt-bn8-48Qm3PU95Shc4Y.crl rsync://rpki.apnic.net/member_repository/A91EAD63/DD364118344711EDB10DA43AC4F9AE02/d4O93Owt-bn8-48Qm3PU95Shc4Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d4O93Owt-bn8-48Qm3PU95Shc4Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Jun 2025 01:30:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 545 (0x221) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EAD63, serialNumber=7783BDDCEC2DF9B9FCFB8F109B73D4F794A17386 Validity Not Before: Jun 17 01:30:44 2025 GMT Not After : Jun 24 01:30:44 2025 GMT Subject: CN=6850c545-cca8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:78:53:55:1b:37:bd:05:18:40:3e:65:3e:7c: 25:42:0d:0a:b2:b3:f3:f3:a0:b0:84:ce:e0:ad:71: b4:e0:bc:91:f0:e0:9f:1d:8f:f5:06:52:7c:bb:99: 89:51:78:b3:a7:ff:c9:8d:6f:b6:b6:45:a5:ae:da: 57:19:17:48:82:c0:2a:50:bc:41:99:8a:70:65:17: 62:2a:b8:c4:af:87:7d:95:14:5b:ad:05:0f:3f:61: 42:db:36:f2:80:96:23:66:8a:20:60:5f:4c:93:22: 99:2f:f0:0b:6f:1e:c0:13:31:69:bd:d9:c0:f1:80: cf:a8:47:d0:f6:12:d7:68:fb:71:d7:01:49:95:c6: f2:d4:0b:f3:96:a8:1d:75:c6:24:27:85:bd:45:3c: 26:0e:bc:2d:06:05:c5:45:8f:a8:19:0c:1e:56:4b: c0:c6:b8:7a:28:fd:8d:6f:99:d4:cd:30:cd:71:08: 80:65:48:25:fb:7a:f0:43:66:8e:a1:b2:9f:43:f2: ff:fa:b9:06:b9:23:e4:af:26:ef:35:3b:75:62:8d: 4e:64:c5:a7:78:e1:b2:70:ee:83:06:18:81:5e:f3: d1:f4:1a:8a:0c:26:43:d9:6c:94:99:64:23:88:f1: 98:61:25:e2:53:43:09:4a:24:6b:6e:08:2c:f4:de: 62:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:2C:FA:34:6B:21:56:2E:EE:EF:EA:C1:40:59:93:DD:27:18:B3:12 X509v3 Authority Key Identifier: keyid:77:83:BD:DC:EC:2D:F9:B9:FC:FB:8F:10:9B:73:D4:F7:94:A1:73:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EAD63/DD364118344711EDB10DA43AC4F9AE02/d4O93Owt-bn8-48Qm3PU95Shc4Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d4O93Owt-bn8-48Qm3PU95Shc4Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAD63/DD364118344711EDB10DA43AC4F9AE02/d4O93Owt-bn8-48Qm3PU95Shc4Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:34:8c:a1:8d:dd:84:b9:c9:e0:9b:fa:22:d5:24:70:ee:6f: 34:5c:3a:f5:ea:c4:64:6e:57:dc:4b:7a:84:fa:75:0a:85:b3: 68:ed:d6:61:66:99:d2:a5:af:a8:70:77:4a:05:b4:a7:4e:44: f2:20:50:0f:9c:88:a6:fa:ea:f4:54:a4:d8:0e:cb:f6:74:f2: e0:1a:67:ab:a4:8d:fe:8a:4a:07:da:0a:df:49:00:46:83:51: 00:0b:d8:e2:c8:34:b1:aa:66:4d:d6:a2:ab:ec:1d:56:ca:38: 08:ca:c3:5e:d1:c5:77:4e:10:fb:8d:1a:f2:fa:6a:f7:fb:89: bd:c1:00:bc:00:85:63:9f:5f:b1:2d:7b:77:27:c4:69:46:46: 60:7e:54:c0:dc:7d:17:ac:99:c8:41:76:6b:4e:29:a6:2b:da: c9:74:02:28:bd:de:68:52:3e:c7:11:33:e7:98:f7:ad:d2:e7: f1:7f:4e:ee:66:9e:70:b5:f5:3d:72:3f:a3:f6:ba:e9:85:f1: 0d:91:7e:81:0a:a9:e2:12:a2:ca:7a:86:56:8c:07:58:6d:d9: 40:54:de:51:30:20:33:e9:a3:6b:4f:0c:1d:99:b3:63:9b:a2: 53:a5:ac:96:4c:00:24:39:e1:cb:b4:0d:69:a0:89:e8:2c:c4: dc:a1:4f:fe -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAiEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUFENjMxMTAvBgNVBAUTKDc3ODNCRERDRUMyREY5QjlGQ0ZCOEYxMDlCNzNENEY3 OTRBMTczODYwHhcNMjUwNjE3MDEzMDQ0WhcNMjUwNjI0MDEzMDQ0WjAYMRYwFAYD VQQDEw02ODUwYzU0NS1jY2E4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq3hTVRs3vQUYQD5lPnwlQg0KsrPz86CwhM7grXG04LyR8OCfHY/1BlJ8u5mJ UXizp//JjW+2tkWlrtpXGRdIgsAqULxBmYpwZRdiKrjEr4d9lRRbrQUPP2FC2zby gJYjZoogYF9MkyKZL/ALbx7AEzFpvdnA8YDPqEfQ9hLXaPtx1wFJlcby1Avzlqgd dcYkJ4W9RTwmDrwtBgXFRY+oGQweVkvAxrh6KP2Nb5nUzTDNcQiAZUgl+3rwQ2aO obKfQ/L/+rkGuSPkrybvNTt1Yo1OZMWneOGycO6DBhiBXvPR9BqKDCZD2WyUmWQj iPGYYSXiU0MJSiRrbggs9N5icwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEIs+jRr IVYu7u/qwUBZk90nGLMSMB8GA1UdIwQYMBaAFHeDvdzsLfm5/PuPEJtz1PeUoXOG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQUQ2My9ERDM2NDExODM0 NDcxMUVEQjEwREE0M0FDNEY5QUUwMi9kNE85M093dC1ibjgtNDhRbTNQVTk1U2hj NFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Q0TzkzT3d0LWJuOC00OFFtM1BVOTVTaGM0WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QUQ2My9ERDM2NDExODM0NDcxMUVEQjEwREE0M0FDNEY5QUUwMi9kNE85M093dC1i bjgtNDhRbTNQVTk1U2hjNFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAFNIyhjd2Eucngm/oi1SRw7m80XDr16sRkblfcS3qE+nUKhbNo7dZh ZpnSpa+ocHdKBbSnTkTyIFAPnIim+ur0VKTYDsv2dPLgGmerpI3+ikoH2grfSQBG g1EAC9jiyDSxqmZN1qKr7B1WyjgIysNe0cV3ThD7jRry+mr3+4m9wQC8AIVjn1+x LXt3J8RpRkZgflTA3H0XrJnIQXZrTimmK9rJdAIovd5oUj7HETPnmPet0ufxf07u Zp5wtfU9cj+j9rrphfENkX6BCqniEqLKeoZWjAdYbdlAVN5RMCAz6aNrTwwdmbNj m6JTpayWTAAkOeHLtA1poInoLMTcoU/+ -----END CERTIFICATE-----Generated at Wed Jun 18 02:33:57 2025 by rpki-client