$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBF27/F1D3E326ABE711EBB85D5147C4F9AE02/0DacIB93rzjycCn7IkbEOF0njKI.mft File: 0DacIB93rzjycCn7IkbEOF0njKI.mft (raw, json) Hash identifier: ES2xUK6ukDTPDM6F6WYvmmWDW7lWtQhFH/P6Bd79srQ= Subject key identifier: 80:5C:23:47:4D:E5:4A:6B:83:A2:9E:46:6F:78:73:2B:72:A8:65:50 Authority key identifier: D0:36:9C:20:1F:77:AF:38:F2:70:29:FB:22:46:C4:38:5D:27:8C:A2 Certificate issuer: /CN=A91EBF27/serialNumber=D0369C201F77AF38F27029FB2246C4385D278CA2 Certificate serial: 05F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0DacIB93rzjycCn7IkbEOF0njKI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EBF27/F1D3E326ABE711EBB85D5147C4F9AE02/0DacIB93rzjycCn7IkbEOF0njKI.mft Manifest number: 05F9 Signing time: Thu 12 Jun 2025 22:30:20 +0000 Manifest this update: Thu 12 Jun 2025 22:30:20 +0000 Manifest next update: Thu 19 Jun 2025 22:30:20 +0000 Files and hashes: 1: 0DacIB93rzjycCn7IkbEOF0njKI.crl (hash: Zbw7GElb+AHu2k4n07X7PasWnqCo0+IQJDNwSrHlihY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EBF27/F1D3E326ABE711EBB85D5147C4F9AE02/0DacIB93rzjycCn7IkbEOF0njKI.crl rsync://rpki.apnic.net/member_repository/A91EBF27/F1D3E326ABE711EBB85D5147C4F9AE02/0DacIB93rzjycCn7IkbEOF0njKI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0DacIB93rzjycCn7IkbEOF0njKI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 22:30:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1529 (0x5f9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EBF27, serialNumber=D0369C201F77AF38F27029FB2246C4385D278CA2 Validity Not Before: Jun 12 22:30:20 2025 GMT Not After : Jun 19 22:30:20 2025 GMT Subject: CN=684b54fc-1fc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:c5:6c:96:97:40:c7:e5:8c:9c:86:cf:f1:f4: c4:7b:e0:db:c6:f9:95:09:9c:f1:f7:e7:e4:52:a1: 47:11:87:8b:9c:59:0b:0b:23:b8:bb:58:23:b8:00: 05:68:61:83:7d:7f:6c:81:ae:08:28:cc:3f:76:5c: e4:03:2d:f8:6c:d2:71:8e:4f:3c:09:94:10:b3:ca: 19:50:36:e9:f4:03:3c:11:6b:bb:dd:1c:4b:c5:56: 82:49:5a:2a:a5:65:ac:0e:a0:bd:a4:f8:cd:28:75: fd:8a:bd:03:ac:a9:34:92:10:76:9a:7d:f9:a6:a8: cc:40:15:85:43:9d:0b:aa:b6:1b:14:0c:03:c6:a2: 6c:54:73:a5:2e:59:69:f3:4c:37:b4:02:9d:12:fd: ba:2d:62:89:e8:cd:29:c8:5a:2e:12:27:9a:3d:e0: 23:a6:93:e9:47:01:9a:09:5d:e4:10:7b:53:e5:d1: ed:a8:0c:4d:3d:ae:fb:65:5f:68:47:0e:47:f6:67: 2d:45:57:26:31:fe:d0:35:e0:1a:3b:9f:c2:72:dd: 9c:fc:2e:55:e1:ca:51:14:10:99:51:6b:7d:b6:7c: 0f:b8:e1:88:fa:e5:ec:71:35:d0:0d:dc:a1:fc:99: 9f:49:d5:d6:db:4d:5a:df:43:1b:cd:78:bf:36:c2: 5b:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:5C:23:47:4D:E5:4A:6B:83:A2:9E:46:6F:78:73:2B:72:A8:65:50 X509v3 Authority Key Identifier: keyid:D0:36:9C:20:1F:77:AF:38:F2:70:29:FB:22:46:C4:38:5D:27:8C:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EBF27/F1D3E326ABE711EBB85D5147C4F9AE02/0DacIB93rzjycCn7IkbEOF0njKI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0DacIB93rzjycCn7IkbEOF0njKI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBF27/F1D3E326ABE711EBB85D5147C4F9AE02/0DacIB93rzjycCn7IkbEOF0njKI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:d8:18:5b:ff:07:c6:9f:89:d6:45:68:61:ab:04:62:92:e6: 34:da:d8:1c:8a:64:7e:80:82:24:b8:1c:91:e7:05:c2:d4:e6: 9f:6a:9c:b9:83:48:50:a2:ca:0e:cd:92:a4:40:44:0c:c6:3a: ab:e5:df:a1:49:9b:40:70:e9:01:75:87:9b:90:4f:3e:e1:7e: e2:68:84:93:ed:96:85:24:24:d9:c8:fe:c1:a8:b9:cb:5e:d4: 3d:73:89:05:a4:86:f2:2c:7d:e7:bd:cf:24:92:f6:c6:e4:56: 1e:2c:d6:44:9b:55:d1:9c:ff:d4:2f:a4:2c:86:93:d2:18:9d: 91:fd:67:7e:74:e9:83:d1:31:37:df:52:a6:c8:12:00:e0:8a: e4:5a:38:ea:14:b0:79:34:8a:6c:ab:12:7b:75:63:c2:05:94: d9:ee:49:e7:1c:f7:e9:63:17:16:3e:3c:be:64:b9:b9:90:4e: 0b:64:95:7e:6e:b9:b5:e5:d5:3e:5e:de:ce:d1:55:39:6b:a6: 37:d7:d5:f7:b2:a0:c0:8d:70:3d:f9:2d:80:e0:4d:aa:d2:1f: 35:10:59:1d:ab:8c:de:69:e1:9f:44:a2:36:d1:49:e0:e0:84: eb:af:e4:da:3f:78:ef:9a:fd:3f:56:c0:bf:1d:94:c2:88:1b: 00:12:b9:fd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBfkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUJGMjcxMTAvBgNVBAUTKEQwMzY5QzIwMUY3N0FGMzhGMjcwMjlGQjIyNDZDNDM4 NUQyNzhDQTIwHhcNMjUwNjEyMjIzMDIwWhcNMjUwNjE5MjIzMDIwWjAYMRYwFAYD VQQDEw02ODRiNTRmYy0xZmMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxcVslpdAx+WMnIbP8fTEe+DbxvmVCZzx9+fkUqFHEYeLnFkLCyO4u1gjuAAF aGGDfX9sga4IKMw/dlzkAy34bNJxjk88CZQQs8oZUDbp9AM8EWu73RxLxVaCSVoq pWWsDqC9pPjNKHX9ir0DrKk0khB2mn35pqjMQBWFQ50LqrYbFAwDxqJsVHOlLllp 80w3tAKdEv26LWKJ6M0pyFouEieaPeAjppPpRwGaCV3kEHtT5dHtqAxNPa77ZV9o Rw5H9mctRVcmMf7QNeAaO5/Cct2c/C5V4cpRFBCZUWt9tnwPuOGI+uXscTXQDdyh /JmfSdXW201a30MbzXi/NsJbLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIBcI0dN 5Uprg6KeRm94cytyqGVQMB8GA1UdIwQYMBaAFNA2nCAfd6848nAp+yJGxDhdJ4yi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQkYyNy9GMUQzRTMyNkFC RTcxMUVCQjg1RDUxNDdDNEY5QUUwMi8wRGFjSUI5M3J6anljQ243SWtiRU9GMG5q S0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBEYWNJQjkzcnpqeWNDbjdJa2JFT0YwbmpLSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QkYyNy9GMUQzRTMyNkFCRTcxMUVCQjg1RDUxNDdDNEY5QUUwMi8wRGFjSUI5M3J6 anljQ243SWtiRU9GMG5qS0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBF2Bhb/wfGn4nWRWhhqwRikuY02tgcimR+gIIkuByR5wXC1Oafapy5 g0hQosoOzZKkQEQMxjqr5d+hSZtAcOkBdYebkE8+4X7iaIST7ZaFJCTZyP7BqLnL XtQ9c4kFpIbyLH3nvc8kkvbG5FYeLNZEm1XRnP/UL6QshpPSGJ2R/Wd+dOmD0TE3 31KmyBIA4IrkWjjqFLB5NIpsqxJ7dWPCBZTZ7knnHPfpYxcWPjy+ZLm5kE4LZJV+ brm15dU+Xt7O0VU5a6Y319X3sqDAjXA9+S2A4E2q0h81EFkdq4zeaeGfRKI20Ung 4ITrr+TaP3jvmv0/VsC/HZTCiBsAErn9 -----END CERTIFICATE-----Generated at Sat Jun 14 19:30:09 2025 by rpki-client