$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE735/E8E667CA94BE11EA984FAD58C4F9AE02/rXOtuRQhOGLtjhTXcGn0dNg8yPU.mft File: rXOtuRQhOGLtjhTXcGn0dNg8yPU.mft (raw, json) Hash identifier: a1g+cPcGtq5RHPjGQYGXAHqSBNQMSSbnjQ6OVhNnFQs= Subject key identifier: EA:10:76:00:62:22:AE:C3:F9:A0:2F:8A:85:C7:22:D6:1C:12:07:1D Authority key identifier: AD:73:AD:B9:14:21:38:62:ED:8E:14:D7:70:69:F4:74:D8:3C:C8:F5 Certificate issuer: /CN=A91EE735/serialNumber=AD73ADB914213862ED8E14D77069F474D83CC8F5 Certificate serial: 097D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rXOtuRQhOGLtjhTXcGn0dNg8yPU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EE735/E8E667CA94BE11EA984FAD58C4F9AE02/rXOtuRQhOGLtjhTXcGn0dNg8yPU.mft Manifest number: 096E Signing time: Thu 12 Jun 2025 19:56:47 +0000 Manifest this update: Thu 12 Jun 2025 19:56:46 +0000 Manifest next update: Thu 19 Jun 2025 19:56:46 +0000 Files and hashes: 1: rXOtuRQhOGLtjhTXcGn0dNg8yPU.crl (hash: J4cY4y3VYd7B4rZZ5QV1GipcTAj9syRgfgrXVfN16GY=) 2: 34E183809E5F11EB97709628C4F9AE02.roa (hash: 6TUVFO2Ivu/tY1JvgLaKV+3n0wexlzOCwMKMpOyQlPA=) 3: E7F141609E9911EBB4117632C4F9AE02.roa (hash: nwk0Qb0D2pWgRwQM08AvCns/X8x+3fZwLOgEyevfH8w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EE735/E8E667CA94BE11EA984FAD58C4F9AE02/rXOtuRQhOGLtjhTXcGn0dNg8yPU.crl rsync://rpki.apnic.net/member_repository/A91EE735/E8E667CA94BE11EA984FAD58C4F9AE02/rXOtuRQhOGLtjhTXcGn0dNg8yPU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rXOtuRQhOGLtjhTXcGn0dNg8yPU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 19:56:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2429 (0x97d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EE735, serialNumber=AD73ADB914213862ED8E14D77069F474D83CC8F5 Validity Not Before: Jun 12 19:56:46 2025 GMT Not After : Jun 19 19:56:46 2025 GMT Subject: CN=684b30fe-58e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:3d:75:e2:05:ea:1c:d7:e2:44:eb:c1:fb:6a: 1d:dc:85:f2:84:37:8a:7a:df:00:88:ea:e2:16:23: c7:08:65:55:26:14:2f:d4:1a:51:a8:53:a2:5c:9d: 12:7f:7d:ed:45:e1:ae:25:26:b3:41:ae:d6:b5:5a: 2c:93:09:d2:7e:f5:80:57:85:11:fb:a9:d7:57:5b: 63:de:6f:20:42:ff:d1:a0:b1:43:87:40:4d:5d:b7: e3:d7:d0:18:c8:67:de:6d:27:ae:5a:ef:11:74:b0: 25:6d:89:4a:b6:59:7d:79:7e:b3:23:d4:9b:ca:97: 76:dd:65:35:67:5e:2b:49:77:c8:24:c0:b5:1c:a0: 39:18:ee:a6:2e:36:a9:07:b8:6e:43:43:2f:d3:a9: 06:01:5b:0c:62:a5:c5:a2:f9:59:b9:31:5c:26:be: b0:05:1f:f6:5c:30:0c:4a:a2:92:48:fc:1c:11:38: d4:80:2e:6e:eb:ad:cd:af:ad:53:b7:80:05:e5:c2: da:e7:21:f1:59:b2:12:a9:d3:b7:21:fe:74:7d:f1: 27:ec:2f:6a:d9:8d:dd:d7:ed:5e:aa:ab:b4:c5:c6: c2:5b:98:2b:6f:c0:9e:49:ed:c0:4a:81:6a:99:dc: e1:5f:f5:6d:63:7f:7e:66:5f:78:cc:84:bb:b0:79: d5:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:10:76:00:62:22:AE:C3:F9:A0:2F:8A:85:C7:22:D6:1C:12:07:1D X509v3 Authority Key Identifier: keyid:AD:73:AD:B9:14:21:38:62:ED:8E:14:D7:70:69:F4:74:D8:3C:C8:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EE735/E8E667CA94BE11EA984FAD58C4F9AE02/rXOtuRQhOGLtjhTXcGn0dNg8yPU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rXOtuRQhOGLtjhTXcGn0dNg8yPU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE735/E8E667CA94BE11EA984FAD58C4F9AE02/rXOtuRQhOGLtjhTXcGn0dNg8yPU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:6d:34:65:32:a4:ba:63:69:0a:45:52:77:a7:31:66:dc:71: 5b:6f:39:b0:e1:8d:a7:e0:ab:e2:21:1b:6e:6d:b3:4c:75:82: 80:bd:bb:45:bd:37:b0:c1:bf:67:c9:c7:9d:ca:9c:70:82:b3: 73:8a:5a:b4:81:c2:21:df:78:8c:5f:77:31:fe:37:c0:f9:4d: 4d:50:31:6b:13:26:c5:6c:a7:73:9e:74:f1:46:1e:d5:b3:50: c6:c8:32:fe:ea:a4:6b:ee:7b:d1:c0:32:25:c4:94:16:79:f6: 1c:e3:80:78:37:17:6b:35:62:21:79:ba:e8:aa:92:03:15:34: 2c:ce:73:d0:64:67:e2:69:47:3b:fa:9b:cf:bb:8a:a7:83:79: a3:02:68:95:6b:fc:dd:0c:38:28:ce:68:19:77:cc:91:1e:ca: cb:a4:7a:70:9c:15:2e:bc:87:b2:db:bd:fc:b7:e3:78:ec:74: 03:8b:17:db:42:c6:cf:dc:33:11:49:66:c7:7b:4a:8c:81:dc: 92:82:7e:e8:a4:65:3e:3e:08:30:7d:6b:7b:ef:e5:5b:70:ee: ee:5e:1c:a1:27:31:fa:c4:53:8b:9c:7e:fb:ff:2e:ce:c2:09: 47:fa:c2:7a:f6:a2:c0:5c:5d:4e:3c:6a:7e:3b:c4:7c:c7:91: 8d:ed:79:e0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCX0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUU3MzUxMTAvBgNVBAUTKEFENzNBREI5MTQyMTM4NjJFRDhFMTRENzcwNjlGNDc0 RDgzQ0M4RjUwHhcNMjUwNjEyMTk1NjQ2WhcNMjUwNjE5MTk1NjQ2WjAYMRYwFAYD VQQDEw02ODRiMzBmZS01OGU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5D114gXqHNfiROvB+2od3IXyhDeKet8AiOriFiPHCGVVJhQv1BpRqFOiXJ0S f33tReGuJSazQa7WtVoskwnSfvWAV4UR+6nXV1tj3m8gQv/RoLFDh0BNXbfj19AY yGfebSeuWu8RdLAlbYlKtll9eX6zI9Sbypd23WU1Z14rSXfIJMC1HKA5GO6mLjap B7huQ0Mv06kGAVsMYqXFovlZuTFcJr6wBR/2XDAMSqKSSPwcETjUgC5u663Nr61T t4AF5cLa5yHxWbISqdO3If50ffEn7C9q2Y3d1+1eqqu0xcbCW5grb8CeSe3ASoFq mdzhX/VtY39+Zl94zIS7sHnVpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOoQdgBi Iq7D+aAvioXHItYcEgcdMB8GA1UdIwQYMBaAFK1zrbkUIThi7Y4U13Bp9HTYPMj1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRTczNS9FOEU2NjdDQTk0 QkUxMUVBOTg0RkFENThDNEY5QUUwMi9yWE90dVJRaE9HTHRqaFRYY0duMGROZzh5 UFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JYT3R1UlFoT0dMdGpoVFhjR24wZE5nOHlQVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RTczNS9FOEU2NjdDQTk0QkUxMUVBOTg0RkFENThDNEY5QUUwMi9yWE90dVJRaE9H THRqaFRYY0duMGROZzh5UFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBEbTRlMqS6Y2kKRVJ3pzFm3HFbbzmw4Y2n4KviIRtubbNMdYKAvbtF vTewwb9nycedypxwgrNzilq0gcIh33iMX3cx/jfA+U1NUDFrEybFbKdznnTxRh7V s1DGyDL+6qRr7nvRwDIlxJQWefYc44B4NxdrNWIhebroqpIDFTQsznPQZGfiaUc7 +pvPu4qng3mjAmiVa/zdDDgozmgZd8yRHsrLpHpwnBUuvIey2738t+N47HQDixfb QsbP3DMRSWbHe0qMgdySgn7opGU+PggwfWt77+VbcO7uXhyhJzH6xFOLnH77/y7O wglH+sJ69qLAXF1OPGp+O8R8x5GN7Xng -----END CERTIFICATE-----Generated at Sat Jun 14 19:38:40 2025 by rpki-client