$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC7F2/48EFD17CF1A711E8AA614F51C4F9AE02/g71HreMCJZx1jHTIMLKebzpXc9s.mft File: g71HreMCJZx1jHTIMLKebzpXc9s.mft (raw, json) Hash identifier: kQflsuKuyn+Te2c7sE3AtVnvRzlK+r9CbD9DitBsoYc= Subject key identifier: 2A:E2:D2:3C:76:E9:31:BE:3A:22:BF:CF:F2:DB:77:E5:01:AE:9D:B2 Authority key identifier: 83:BD:47:AD:E3:02:25:9C:75:8C:74:C8:30:B2:9E:6F:3A:57:73:DB Certificate issuer: /CN=A91EC7F2/serialNumber=83BD47ADE302259C758C74C830B29E6F3A5773DB Certificate serial: 11E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g71HreMCJZx1jHTIMLKebzpXc9s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EC7F2/48EFD17CF1A711E8AA614F51C4F9AE02/g71HreMCJZx1jHTIMLKebzpXc9s.mft Manifest number: 11C9 Signing time: Sat 14 Jun 2025 17:07:47 +0000 Manifest this update: Sat 14 Jun 2025 17:07:46 +0000 Manifest next update: Sat 21 Jun 2025 17:07:46 +0000 Files and hashes: 1: g71HreMCJZx1jHTIMLKebzpXc9s.crl (hash: C7mA7COoHQ2f7mXs9q/PK8i+Liqwx8Nw+akIaAhiHww=) 2: 9D003F28621711E9B8C69E15C4F9AE02.roa (hash: Cinni1CQdvw9QZ/TfXqeTRH7AM3KM0M/pfCrSaEHDYM=) 3: 09F041C675FB11EAB470A130C4F9AE02.roa (hash: TVhSAgEvsJfuZaOVoxgSaRmJu5V64CD24chcx4Ly8ag=) 4: 9C7048DC621711E9B8C69E15C4F9AE02.roa (hash: ScKShaSanQZL0Fzy7Q3PEdRjE3XVz96AGuDEeuPLE9c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EC7F2/48EFD17CF1A711E8AA614F51C4F9AE02/g71HreMCJZx1jHTIMLKebzpXc9s.crl rsync://rpki.apnic.net/member_repository/A91EC7F2/48EFD17CF1A711E8AA614F51C4F9AE02/g71HreMCJZx1jHTIMLKebzpXc9s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g71HreMCJZx1jHTIMLKebzpXc9s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 17:07:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4577 (0x11e1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EC7F2, serialNumber=83BD47ADE302259C758C74C830B29E6F3A5773DB Validity Not Before: Jun 14 17:07:46 2025 GMT Not After : Jun 21 17:07:46 2025 GMT Subject: CN=684dac62-ad9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:b8:a3:a4:28:90:1d:15:db:52:c0:39:0d:9f: 61:41:16:45:d4:16:08:72:7a:80:24:cd:e0:52:51: 1c:ca:4c:5d:3a:d5:23:4a:43:f6:08:15:9c:14:4c: 6b:dd:64:5b:d6:dc:d6:c8:a6:78:42:5f:9b:dd:fb: 7d:9f:f6:3e:43:ee:6d:a6:0d:e5:69:37:b4:76:89: f4:f7:94:ea:b4:d1:cb:7a:1b:13:bf:46:ae:2e:ce: 36:43:8e:d4:78:27:d9:e1:63:76:c2:53:3a:9a:99: 28:f1:dc:4a:b1:ba:03:d1:ec:d0:de:36:fe:66:99: 53:fa:e7:82:79:44:6d:53:26:47:2c:19:35:71:f5: 66:7f:9c:a9:45:29:af:20:53:e5:c1:5a:9a:6a:dc: 16:04:96:04:5b:39:44:a2:ca:dc:ba:cd:fe:9b:cf: 52:c4:8c:0f:78:7b:2a:51:cc:ce:c8:d3:f4:42:c7: 80:76:83:bb:06:9b:01:03:28:63:22:50:98:49:22: bf:7a:fa:1d:c4:d2:dd:d4:33:63:06:55:f3:7e:0b: 3c:95:d5:5d:05:18:e6:3f:3f:d0:4b:28:f1:3f:a7: 4e:68:36:79:c3:cd:35:42:04:3a:21:b3:ba:6f:69: 8b:6c:3c:e8:1a:a9:b9:b9:1c:58:57:66:cb:5f:60: 35:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:E2:D2:3C:76:E9:31:BE:3A:22:BF:CF:F2:DB:77:E5:01:AE:9D:B2 X509v3 Authority Key Identifier: keyid:83:BD:47:AD:E3:02:25:9C:75:8C:74:C8:30:B2:9E:6F:3A:57:73:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EC7F2/48EFD17CF1A711E8AA614F51C4F9AE02/g71HreMCJZx1jHTIMLKebzpXc9s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g71HreMCJZx1jHTIMLKebzpXc9s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC7F2/48EFD17CF1A711E8AA614F51C4F9AE02/g71HreMCJZx1jHTIMLKebzpXc9s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:a6:9b:ad:aa:34:ea:1f:02:fe:a2:12:0c:b5:7a:ab:82:a7: d6:34:53:f1:c9:e6:42:97:55:45:41:99:3c:8b:e8:c6:a1:56: cf:2b:bd:71:d9:2c:0d:42:8f:11:00:f4:13:8b:08:95:d5:f1: 71:44:b6:85:d3:67:52:7c:98:96:20:60:61:8d:8b:3c:2e:62: 93:16:68:a8:4e:c8:46:c1:aa:d9:05:ff:ad:40:bc:e6:3f:d9: 8b:04:b4:2f:66:3d:ea:7f:2f:f7:32:60:72:55:ff:d0:03:43: 81:30:0a:f8:1b:1d:a0:ee:01:53:12:d4:1f:21:4d:82:90:90: a2:8b:8c:63:7e:30:48:61:52:38:81:1a:16:73:8a:e8:9a:01: d7:9a:84:95:6a:2b:20:5b:71:6f:ca:8e:3a:b0:ab:22:3e:b9: c3:73:34:d3:f3:69:5b:d2:fd:2c:e5:90:1a:a6:f8:6b:bc:5d: 76:bc:98:2c:26:67:20:19:c6:f8:3f:64:5a:c0:f4:9f:85:aa: 0f:3f:46:82:8b:88:54:84:99:d9:2e:5c:ac:f1:eb:2a:ed:29: 61:2b:d7:6d:55:07:37:e2:7e:9a:81:5e:1a:7f:74:10:bc:7c: e5:f1:b1:aa:bd:77:5a:57:14:49:e9:de:45:da:52:54:fc:05: 96:ff:d1:ec -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEeEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUM3RjIxMTAvBgNVBAUTKDgzQkQ0N0FERTMwMjI1OUM3NThDNzRDODMwQjI5RTZG M0E1NzczREIwHhcNMjUwNjE0MTcwNzQ2WhcNMjUwNjIxMTcwNzQ2WjAYMRYwFAYD VQQDEw02ODRkYWM2Mi1hZDllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwrijpCiQHRXbUsA5DZ9hQRZF1BYIcnqAJM3gUlEcykxdOtUjSkP2CBWcFExr 3WRb1tzWyKZ4Ql+b3ft9n/Y+Q+5tpg3laTe0don095TqtNHLehsTv0auLs42Q47U eCfZ4WN2wlM6mpko8dxKsboD0ezQ3jb+ZplT+ueCeURtUyZHLBk1cfVmf5ypRSmv IFPlwVqaatwWBJYEWzlEosrcus3+m89SxIwPeHsqUczOyNP0QseAdoO7BpsBAyhj IlCYSSK/evodxNLd1DNjBlXzfgs8ldVdBRjmPz/QSyjxP6dOaDZ5w801QgQ6IbO6 b2mLbDzoGqm5uRxYV2bLX2A1IQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCri0jx2 6TG+OiK/z/Lbd+UBrp2yMB8GA1UdIwQYMBaAFIO9R63jAiWcdYx0yDCynm86V3Pb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQzdGMi80OEVGRDE3Q0Yx QTcxMUU4QUE2MTRGNTFDNEY5QUUwMi9nNzFIcmVNQ0paeDFqSFRJTUxLZWJ6cFhj OXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2c3MUhyZU1DSlp4MWpIVElNTEtlYnpwWGM5cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QzdGMi80OEVGRDE3Q0YxQTcxMUU4QUE2MTRGNTFDNEY5QUUwMi9nNzFIcmVNQ0pa eDFqSFRJTUxLZWJ6cFhjOXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBUpputqjTqHwL+ohIMtXqrgqfWNFPxyeZCl1VFQZk8i+jGoVbPK71x 2SwNQo8RAPQTiwiV1fFxRLaF02dSfJiWIGBhjYs8LmKTFmioTshGwarZBf+tQLzm P9mLBLQvZj3qfy/3MmByVf/QA0OBMAr4Gx2g7gFTEtQfIU2CkJCii4xjfjBIYVI4 gRoWc4romgHXmoSVaisgW3Fvyo46sKsiPrnDczTT82lb0v0s5ZAapvhrvF12vJgs JmcgGcb4P2RawPSfhaoPP0aCi4hUhJnZLlys8esq7SlhK9dtVQc34n6agV4af3QQ vHzl8bGqvXdaVxRJ6d5F2lJU/AWW/9Hs -----END CERTIFICATE-----Generated at Sun Jun 15 08:40:40 2025 by rpki-client