$ rpki-client -vvf rpki.apnic.net/member_repository/A91ECC24/16C613166AFA11EDB706FF3CC4F9AE02/9JfRcWknbUPFhSFcGYMxwzwiWnU.mft File: 9JfRcWknbUPFhSFcGYMxwzwiWnU.mft (raw, json) Hash identifier: 0eSNCeGdY4ykhy4u87iFI3ydH1hT6yfD2f7Of0BPcd4= Subject key identifier: 3F:DD:9C:2B:8B:11:BF:7D:40:4B:FE:8E:28:03:69:5F:6A:8B:2A:42 Authority key identifier: F4:97:D1:71:69:27:6D:43:C5:85:21:5C:19:83:31:C3:3C:22:5A:75 Certificate issuer: /CN=A91ECC24/serialNumber=F497D17169276D43C585215C198331C33C225A75 Certificate serial: 01F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9JfRcWknbUPFhSFcGYMxwzwiWnU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ECC24/16C613166AFA11EDB706FF3CC4F9AE02/9JfRcWknbUPFhSFcGYMxwzwiWnU.mft Manifest number: 01ED Signing time: Fri 13 Jun 2025 01:45:48 +0000 Manifest this update: Fri 13 Jun 2025 01:45:48 +0000 Manifest next update: Fri 20 Jun 2025 01:45:48 +0000 Files and hashes: 1: 9JfRcWknbUPFhSFcGYMxwzwiWnU.crl (hash: KHuxDK9hiuPk4JIlFF64/kDp4G4x9n0cvoFqw0fyl/I=) 2: AC8A59D689D311EE81F03018C4F9AE02.roa (hash: CgMPU2zKmFQv28rwsx7lyUdY/WjeUcfrzEMiRjZzUr8=) 3: B9D8F9CE89D011EEB603FF75C4F9AE02.roa (hash: l/45mJzVlvrXkvMnYsTOqET7KEWpbH/MA+sFMBUmJ+A=) 4: C82A0778680811EE88B5527CC4F9AE02.roa (hash: FMfFksLuvdDh719tgVb78yQXrHhuawjPdGhDWuzq2VE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ECC24/16C613166AFA11EDB706FF3CC4F9AE02/9JfRcWknbUPFhSFcGYMxwzwiWnU.crl rsync://rpki.apnic.net/member_repository/A91ECC24/16C613166AFA11EDB706FF3CC4F9AE02/9JfRcWknbUPFhSFcGYMxwzwiWnU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9JfRcWknbUPFhSFcGYMxwzwiWnU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 01:45:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 505 (0x1f9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ECC24, serialNumber=F497D17169276D43C585215C198331C33C225A75 Validity Not Before: Jun 13 01:45:48 2025 GMT Not After : Jun 20 01:45:48 2025 GMT Subject: CN=684b82cc-5aac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:0a:43:99:21:f4:b4:e6:e0:52:80:54:de:b7: 65:f0:23:0a:15:d7:4f:5f:ae:00:c4:fc:4c:60:fc: 68:07:d9:0d:24:f1:02:49:86:96:a4:76:2c:0d:77: f1:1a:62:36:3e:36:4c:66:94:ef:3e:b9:f9:0a:d3: 2e:8f:8e:86:e9:5c:02:7b:36:6c:dd:05:e5:81:40: 01:62:00:66:67:46:d7:1c:be:d6:cf:dc:1d:6f:8a: 40:6e:fd:de:68:64:15:12:14:1c:27:81:2b:b1:be: a8:11:f0:05:e5:fd:7f:85:e4:34:b3:7a:72:f8:46: 99:db:91:8b:0c:ed:01:41:8b:bf:29:67:df:6a:f8: d8:f8:21:fd:b2:24:9a:0c:86:f3:7f:b9:a1:4f:c9: 26:90:ce:e9:ae:35:a7:fd:12:cc:fe:30:98:83:1c: 7e:98:3e:37:2e:49:db:e4:e6:46:cc:81:90:33:ad: 44:63:10:a7:f1:31:15:b4:8a:5f:65:64:a2:4d:58: 97:27:fd:0c:b7:1c:b2:42:55:9b:c7:2c:0d:9b:16: 8f:47:fd:cb:46:4c:80:41:2e:78:47:fa:a6:29:f0: ea:ff:b6:31:7c:2b:a1:8e:a2:92:e0:a9:da:46:14: 2d:25:91:45:e9:c0:0a:14:06:76:f7:4d:cd:c5:7d: 0a:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:DD:9C:2B:8B:11:BF:7D:40:4B:FE:8E:28:03:69:5F:6A:8B:2A:42 X509v3 Authority Key Identifier: keyid:F4:97:D1:71:69:27:6D:43:C5:85:21:5C:19:83:31:C3:3C:22:5A:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ECC24/16C613166AFA11EDB706FF3CC4F9AE02/9JfRcWknbUPFhSFcGYMxwzwiWnU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9JfRcWknbUPFhSFcGYMxwzwiWnU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ECC24/16C613166AFA11EDB706FF3CC4F9AE02/9JfRcWknbUPFhSFcGYMxwzwiWnU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:8f:49:a4:cb:fd:57:82:b2:c4:af:e3:b9:34:2d:0d:81:f0: a4:c8:ec:f2:b5:40:8c:44:cc:8c:d6:2a:d3:4e:5e:2a:3a:7f: 33:c4:b1:c8:fc:2a:d5:21:52:5c:3e:83:4f:9b:22:58:81:89: 05:b4:22:bf:20:e2:44:4f:35:b8:26:cd:19:ae:4e:b4:1e:d2: 72:35:7a:9f:0e:63:d9:3e:fd:60:f2:25:11:39:14:18:80:34: 01:2e:37:e7:80:47:3a:78:c8:35:ac:73:32:75:cd:a3:ea:c6: 3d:eb:9c:c8:38:70:49:2d:d9:10:91:13:63:6f:b2:15:d9:d1: f7:5a:f7:e2:4c:ab:21:10:57:0c:34:bd:4d:d4:ef:a7:fa:dc: fe:a6:04:82:a6:cc:78:70:2a:40:b5:0c:be:4c:a8:58:8f:c8: ca:14:14:fa:21:c4:55:7e:e1:b9:8e:a5:b1:33:59:ba:07:1a: 6e:30:4d:d7:54:6a:9c:30:5f:a0:e8:b1:04:c7:eb:b6:58:03: 93:d3:e1:e8:81:d3:4f:99:28:45:ae:a4:e3:40:77:b3:9b:c3: f1:2f:4e:02:e7:8f:71:28:b8:44:09:8c:3e:6e:e3:a8:a6:25: d6:4f:9f:2d:c3:84:a1:55:6e:75:04:93:7e:30:f9:09:f1:4b: 5d:c6:4a:a9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUNDMjQxMTAvBgNVBAUTKEY0OTdEMTcxNjkyNzZENDNDNTg1MjE1QzE5ODMzMUMz M0MyMjVBNzUwHhcNMjUwNjEzMDE0NTQ4WhcNMjUwNjIwMDE0NTQ4WjAYMRYwFAYD VQQDEw02ODRiODJjYy01YWFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3ApDmSH0tObgUoBU3rdl8CMKFddPX64AxPxMYPxoB9kNJPECSYaWpHYsDXfx GmI2PjZMZpTvPrn5CtMuj46G6VwCezZs3QXlgUABYgBmZ0bXHL7Wz9wdb4pAbv3e aGQVEhQcJ4Ersb6oEfAF5f1/heQ0s3py+EaZ25GLDO0BQYu/KWffavjY+CH9siSa DIbzf7mhT8kmkM7prjWn/RLM/jCYgxx+mD43Lknb5OZGzIGQM61EYxCn8TEVtIpf ZWSiTViXJ/0MtxyyQlWbxywNmxaPR/3LRkyAQS54R/qmKfDq/7YxfCuhjqKS4Kna RhQtJZFF6cAKFAZ2903NxX0KCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD/dnCuL Eb99QEv+jigDaV9qiypCMB8GA1UdIwQYMBaAFPSX0XFpJ21DxYUhXBmDMcM8Ilp1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQ0MyNC8xNkM2MTMxNjZB RkExMUVEQjcwNkZGM0NDNEY5QUUwMi85SmZSY1drbmJVUEZoU0ZjR1lNeHd6d2lX blUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlKZlJjV2tuYlVQRmhTRmNHWU14d3p3aVduVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF Q0MyNC8xNkM2MTMxNjZBRkExMUVEQjcwNkZGM0NDNEY5QUUwMi85SmZSY1drbmJV UEZoU0ZjR1lNeHd6d2lXblUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAAj0mky/1XgrLEr+O5NC0NgfCkyOzytUCMRMyM1irTTl4qOn8zxLHI /CrVIVJcPoNPmyJYgYkFtCK/IOJETzW4Js0Zrk60HtJyNXqfDmPZPv1g8iURORQY gDQBLjfngEc6eMg1rHMydc2j6sY965zIOHBJLdkQkRNjb7IV2dH3WvfiTKshEFcM NL1N1O+n+tz+pgSCpsx4cCpAtQy+TKhYj8jKFBT6IcRVfuG5jqWxM1m6BxpuME3X VGqcMF+g6LEEx+u2WAOT0+HogdNPmShFrqTjQHezm8PxL04C549xKLhECYw+buOo piXWT58tw4ShVW51BJN+MPkJ8Utdxkqp -----END CERTIFICATE-----Generated at Sat Jun 14 18:53:00 2025 by rpki-client