$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED596/0572DD8A5AE311EF932C232FC4F9AE02/v3H1vxFop4QFduAAbzu8ZfxINAs.mft File: v3H1vxFop4QFduAAbzu8ZfxINAs.mft (raw, json) Hash identifier: UXUXcdzwGnQeIE7LbK9GlcfjRd4naAq32nIyJqGNyGE= Subject key identifier: 0A:BD:EB:C2:26:A5:D0:3E:58:64:7B:AE:C9:44:8B:F2:66:58:B8:3A Authority key identifier: BF:71:F5:BF:11:68:A7:84:05:76:E0:00:6F:3B:BC:65:FC:48:34:0B Certificate issuer: /CN=A91ED596/serialNumber=BF71F5BF1168A7840576E0006F3BBC65FC48340B Certificate serial: 9F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/v3H1vxFop4QFduAAbzu8ZfxINAs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ED596/0572DD8A5AE311EF932C232FC4F9AE02/v3H1vxFop4QFduAAbzu8ZfxINAs.mft Manifest number: 9E Signing time: Thu 19 Jun 2025 05:34:18 +0000 Manifest this update: Thu 19 Jun 2025 05:34:18 +0000 Manifest next update: Thu 26 Jun 2025 05:34:18 +0000 Files and hashes: 1: v3H1vxFop4QFduAAbzu8ZfxINAs.crl (hash: Wx2Sw2rghUKYAjydaQS1JGcQppzZurB+Kz/nGsndK5U=) 2: 8580DC705AE311EF86351430C4F9AE02.roa (hash: tNd1A1Pa4JpDSAJTUxSzKVvWvdR5TDXaWTiFNabeiYY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ED596/0572DD8A5AE311EF932C232FC4F9AE02/v3H1vxFop4QFduAAbzu8ZfxINAs.crl rsync://rpki.apnic.net/member_repository/A91ED596/0572DD8A5AE311EF932C232FC4F9AE02/v3H1vxFop4QFduAAbzu8ZfxINAs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/v3H1vxFop4QFduAAbzu8ZfxINAs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 05:34:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 159 (0x9f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ED596, serialNumber=BF71F5BF1168A7840576E0006F3BBC65FC48340B Validity Not Before: Jun 19 05:34:18 2025 GMT Not After : Jun 26 05:34:18 2025 GMT Subject: CN=6853a15a-ce53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:b4:39:66:18:1f:a1:07:4f:44:ef:16:b9:ff: 9a:4d:9f:b3:17:ab:0e:da:7b:f6:23:c0:49:8b:8d: 4a:72:1b:a4:d4:1f:be:5c:b9:62:70:bb:33:a0:35: 19:68:7b:fe:1a:c5:4b:ee:ea:90:78:79:ba:cd:65: 0a:d5:04:85:90:03:ea:03:52:3a:54:a7:84:54:95: ea:79:31:4a:a3:ec:34:fd:26:e0:cd:48:e0:64:7c: 22:91:66:ce:6d:6f:2e:06:e3:9c:90:04:33:d7:5e: 41:e8:cf:ae:03:50:9d:b6:94:04:c1:cc:55:54:71: ff:85:c0:a8:2b:86:22:2d:d7:71:4c:ad:bc:d8:4f: 49:6e:99:71:11:3b:f4:ba:e5:e2:44:ef:ec:dc:63: b8:49:9b:9b:31:f5:e3:b8:99:81:28:c4:46:c7:8c: c0:0f:0c:b1:bf:e7:5c:3c:f6:74:e4:3a:18:8f:ce: be:c6:8f:69:0f:1f:b8:17:f7:2f:6a:b9:e0:98:aa: c2:3a:90:fa:ca:33:41:54:a1:c1:b2:df:46:32:60: 87:de:83:b5:02:5b:81:c9:a2:61:c4:9f:be:31:d5: 30:e2:b8:77:2b:bd:84:0a:6a:ac:0e:a9:29:a0:e2: 8e:f2:f5:0e:63:68:a8:5c:1d:9f:28:2b:8b:91:45: ad:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:BD:EB:C2:26:A5:D0:3E:58:64:7B:AE:C9:44:8B:F2:66:58:B8:3A X509v3 Authority Key Identifier: keyid:BF:71:F5:BF:11:68:A7:84:05:76:E0:00:6F:3B:BC:65:FC:48:34:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ED596/0572DD8A5AE311EF932C232FC4F9AE02/v3H1vxFop4QFduAAbzu8ZfxINAs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/v3H1vxFop4QFduAAbzu8ZfxINAs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED596/0572DD8A5AE311EF932C232FC4F9AE02/v3H1vxFop4QFduAAbzu8ZfxINAs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:2b:f1:4c:27:97:6a:e5:04:c7:49:26:dd:81:6b:58:28:e4: 52:8d:0f:c8:e2:ae:9e:f4:50:33:17:0d:0e:12:d2:44:4c:ae: 63:82:71:9e:48:56:1b:04:6c:0d:dd:0e:87:f3:19:57:09:f7: 46:46:53:23:45:d9:43:95:2d:60:e3:c3:31:99:d0:0a:2a:e7: de:aa:91:93:de:2f:d6:32:10:d8:3f:e3:98:bc:3f:e5:6f:17: 11:5b:bc:e2:3d:f9:ef:93:5a:9a:33:a2:76:c9:ee:d5:4f:9c: 0b:d3:b9:36:6d:05:3a:15:3d:90:8f:0f:ad:43:56:88:e9:13: 8c:c6:57:21:f8:53:f3:fa:54:ee:11:62:9a:14:81:47:5d:94: 5d:49:48:00:38:8a:46:67:fa:3d:3f:c0:7d:42:a7:4e:81:4c: 20:9e:23:ef:5c:4d:9c:fc:5d:34:41:79:d8:af:53:ca:83:ea: 03:e9:d8:54:6c:96:b9:ce:56:10:cd:29:cb:5b:bc:9c:94:cf: 5a:6a:16:25:a9:e2:91:bc:61:70:01:ac:eb:16:b7:31:68:02: 92:ad:a7:6f:35:ff:bb:70:17:59:e5:e4:7b:af:1f:1c:a8:60: a2:a0:d1:18:d0:fe:b7:84:20:c7:23:39:41:e5:c8:7a:2f:36: ac:9f:2f:75 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUQ1OTYxMTAvBgNVBAUTKEJGNzFGNUJGMTE2OEE3ODQwNTc2RTAwMDZGM0JCQzY1 RkM0ODM0MEIwHhcNMjUwNjE5MDUzNDE4WhcNMjUwNjI2MDUzNDE4WjAYMRYwFAYD VQQDEw02ODUzYTE1YS1jZTUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA97Q5ZhgfoQdPRO8Wuf+aTZ+zF6sO2nv2I8BJi41Kchuk1B++XLlicLszoDUZ aHv+GsVL7uqQeHm6zWUK1QSFkAPqA1I6VKeEVJXqeTFKo+w0/SbgzUjgZHwikWbO bW8uBuOckAQz115B6M+uA1CdtpQEwcxVVHH/hcCoK4YiLddxTK282E9JbplxETv0 uuXiRO/s3GO4SZubMfXjuJmBKMRGx4zADwyxv+dcPPZ05DoYj86+xo9pDx+4F/cv arngmKrCOpD6yjNBVKHBst9GMmCH3oO1AluByaJhxJ++MdUw4rh3K72ECmqsDqkp oOKO8vUOY2ioXB2fKCuLkUWtfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAq968Im pdA+WGR7rslEi/JmWLg6MB8GA1UdIwQYMBaAFL9x9b8RaKeEBXbgAG87vGX8SDQL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRDU5Ni8wNTcyREQ4QTVB RTMxMUVGOTMyQzIzMkZDNEY5QUUwMi92M0gxdnhGb3A0UUZkdUFBYnp1OFpmeElO QXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3YzSDF2eEZvcDRRRmR1QUFienU4WmZ4SU5Bcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RDU5Ni8wNTcyREQ4QTVBRTMxMUVGOTMyQzIzMkZDNEY5QUUwMi92M0gxdnhGb3A0 UUZkdUFBYnp1OFpmeElOQXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAsK/FMJ5dq5QTHSSbdgWtYKORSjQ/I4q6e9FAzFw0OEtJETK5jgnGe SFYbBGwN3Q6H8xlXCfdGRlMjRdlDlS1g48MxmdAKKufeqpGT3i/WMhDYP+OYvD/l bxcRW7ziPfnvk1qaM6J2ye7VT5wL07k2bQU6FT2Qjw+tQ1aI6ROMxlch+FPz+lTu EWKaFIFHXZRdSUgAOIpGZ/o9P8B9QqdOgUwgniPvXE2c/F00QXnYr1PKg+oD6dhU bJa5zlYQzSnLW7yclM9aahYlqeKRvGFwAazrFrcxaAKSradvNf+7cBdZ5eR7rx8c qGCioNEY0P63hCDHIzlB5ch6Lzasny91 -----END CERTIFICATE-----Generated at Fri Jun 20 20:06:49 2025 by rpki-client