$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE92F/12085D18740B11EF9E9C0336C4F9AE02/RX23ZuGw1qTcx_muzSh9TcPnDJ4.mft File: RX23ZuGw1qTcx_muzSh9TcPnDJ4.mft (raw, json) Hash identifier: TNw/dai7yHSp2IfQpHWBe1Y66rySw7v4sP43H/Lv6ss= Subject key identifier: 6C:4C:DA:2E:D3:4A:A1:2E:D2:0E:04:AA:AB:A0:E8:76:86:AE:A2:10 Authority key identifier: 45:7D:B7:66:E1:B0:D6:A4:DC:C7:F9:AE:CD:28:7D:4D:C3:E7:0C:9E Certificate issuer: /CN=A91EE92F/serialNumber=457DB766E1B0D6A4DCC7F9AECD287D4DC3E70C9E Certificate serial: 8E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RX23ZuGw1qTcx_muzSh9TcPnDJ4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EE92F/12085D18740B11EF9E9C0336C4F9AE02/RX23ZuGw1qTcx_muzSh9TcPnDJ4.mft Manifest number: 8D Signing time: Tue 17 Jun 2025 05:24:10 +0000 Manifest this update: Tue 17 Jun 2025 05:24:10 +0000 Manifest next update: Tue 24 Jun 2025 05:24:10 +0000 Files and hashes: 1: RX23ZuGw1qTcx_muzSh9TcPnDJ4.crl (hash: IuGByYG3JzXo00XLB5o7/9oDYj/cPDPPJosW73Cy+XM=) 2: 2DFD4A1E740C11EFB881CE37C4F9AE02.roa (hash: T+wmuYYMTFF61NV8D+auleLzw90NK0dFwG6cz8qIwGw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EE92F/12085D18740B11EF9E9C0336C4F9AE02/RX23ZuGw1qTcx_muzSh9TcPnDJ4.crl rsync://rpki.apnic.net/member_repository/A91EE92F/12085D18740B11EF9E9C0336C4F9AE02/RX23ZuGw1qTcx_muzSh9TcPnDJ4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RX23ZuGw1qTcx_muzSh9TcPnDJ4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Jun 2025 05:24:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 142 (0x8e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EE92F, serialNumber=457DB766E1B0D6A4DCC7F9AECD287D4DC3E70C9E Validity Not Before: Jun 17 05:24:10 2025 GMT Not After : Jun 24 05:24:10 2025 GMT Subject: CN=6850fbfa-16f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:9c:b4:66:12:6f:07:37:f2:fa:74:af:0d:eb: ae:c6:88:ec:e5:a8:72:4d:ce:f7:96:24:6e:31:8d: 91:f7:3f:3b:13:42:d6:1b:f2:80:88:9b:a8:a6:d7: 36:80:41:6e:84:69:a9:50:82:3c:98:fd:67:28:a0: b0:27:a5:58:f2:36:32:b8:18:4a:a3:00:35:27:63: 92:ef:a8:25:74:6c:dc:1d:49:64:0d:83:87:a5:e9: 62:97:e8:71:4a:d7:06:c5:bf:72:76:26:eb:8b:dd: 72:d0:20:5f:9e:ee:55:2a:32:a4:b4:ba:1c:a1:57: 77:81:7c:5b:8f:e1:27:24:71:a5:5d:6b:04:f3:02: 48:1e:ea:2f:e7:13:c3:cb:a4:df:12:dd:f9:f8:3e: a5:d4:1a:6a:aa:98:97:7f:34:fa:4a:4c:a5:1d:b6: 7b:00:59:d8:01:54:fd:9a:1e:b9:81:f7:e1:fd:e5: 03:8c:cd:94:f9:da:a1:63:99:5e:70:c6:38:3d:73: 3f:ba:72:ab:a2:29:3d:d6:b9:4f:3f:d8:03:7e:9d: 5b:aa:8d:9d:1a:59:46:81:33:49:2d:5f:24:5a:94: 90:23:fa:3f:26:a6:12:b7:f2:9c:bb:73:cc:db:ab: b5:24:2b:e6:ae:19:83:b0:45:3a:ef:c0:8b:8b:a2: 34:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:4C:DA:2E:D3:4A:A1:2E:D2:0E:04:AA:AB:A0:E8:76:86:AE:A2:10 X509v3 Authority Key Identifier: keyid:45:7D:B7:66:E1:B0:D6:A4:DC:C7:F9:AE:CD:28:7D:4D:C3:E7:0C:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EE92F/12085D18740B11EF9E9C0336C4F9AE02/RX23ZuGw1qTcx_muzSh9TcPnDJ4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RX23ZuGw1qTcx_muzSh9TcPnDJ4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE92F/12085D18740B11EF9E9C0336C4F9AE02/RX23ZuGw1qTcx_muzSh9TcPnDJ4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:11:22:94:9e:e8:2c:e3:90:d5:31:d8:2a:ce:8b:64:a4:a4: ff:06:09:fa:3a:7c:9d:47:ce:67:8c:20:c9:a8:65:6a:48:6c: e5:14:0f:30:cc:e8:f8:20:78:ac:f8:ea:08:26:5c:2a:0a:71: e5:53:93:f5:d7:a0:ec:84:ae:cc:0e:68:cb:d0:4e:a4:79:5a: 0e:30:1c:9e:40:2a:b5:65:1c:fa:10:d5:fa:cf:b2:af:fb:35: b9:6d:ea:d5:4b:2e:92:94:45:5d:a7:85:ea:70:8e:92:ac:c8: c2:7e:65:3e:25:14:61:78:2c:28:4d:dd:b2:de:f6:13:c9:08: a4:74:ee:11:27:57:42:69:36:98:61:1a:8d:72:3b:78:7b:12: 9d:47:76:fe:9d:3e:d3:b1:f7:d4:8a:e8:58:46:4e:3f:33:e0: d9:36:95:2b:35:a5:fd:36:3c:5e:01:26:90:15:73:f6:49:0e: 7a:0d:2c:66:eb:20:52:8e:2c:68:de:f5:5e:93:05:5e:ce:69: 5f:24:60:dd:e3:2b:2e:9e:bd:0b:cf:b1:7f:fb:44:b9:fb:35: 66:2c:4e:00:f3:c3:50:80:34:90:fd:88:79:46:63:37:b6:b6: 2d:53:58:a2:8e:af:94:76:64:4e:c9:a2:67:96:d2:77:bf:ab: 48:d2:52:98 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAI4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUU5MkYxMTAvBgNVBAUTKDQ1N0RCNzY2RTFCMEQ2QTREQ0M3RjlBRUNEMjg3RDRE QzNFNzBDOUUwHhcNMjUwNjE3MDUyNDEwWhcNMjUwNjI0MDUyNDEwWjAYMRYwFAYD VQQDEw02ODUwZmJmYS0xNmY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArpy0ZhJvBzfy+nSvDeuuxojs5ahyTc73liRuMY2R9z87E0LWG/KAiJuoptc2 gEFuhGmpUII8mP1nKKCwJ6VY8jYyuBhKowA1J2OS76gldGzcHUlkDYOHpelil+hx StcGxb9ydibri91y0CBfnu5VKjKktLocoVd3gXxbj+EnJHGlXWsE8wJIHuov5xPD y6TfEt35+D6l1BpqqpiXfzT6SkylHbZ7AFnYAVT9mh65gffh/eUDjM2U+dqhY5le cMY4PXM/unKroik91rlPP9gDfp1bqo2dGllGgTNJLV8kWpSQI/o/JqYSt/Kcu3PM 26u1JCvmrhmDsEU678CLi6I0PwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGxM2i7T SqEu0g4Eqqug6HaGrqIQMB8GA1UdIwQYMBaAFEV9t2bhsNak3Mf5rs0ofU3D5wye MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRTkyRi8xMjA4NUQxODc0 MEIxMUVGOUU5QzAzMzZDNEY5QUUwMi9SWDIzWnVHdzFxVGN4X211elNoOVRjUG5E SjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1JYMjNadUd3MXFUY3hfbXV6U2g5VGNQbkRKNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RTkyRi8xMjA4NUQxODc0MEIxMUVGOUU5QzAzMzZDNEY5QUUwMi9SWDIzWnVHdzFx VGN4X211elNoOVRjUG5ESjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/ESKUnugs45DVMdgqzotkpKT/Bgn6OnydR85njCDJqGVqSGzlFA8w zOj4IHis+OoIJlwqCnHlU5P116DshK7MDmjL0E6keVoOMByeQCq1ZRz6ENX6z7Kv +zW5berVSy6SlEVdp4XqcI6SrMjCfmU+JRRheCwoTd2y3vYTyQikdO4RJ1dCaTaY YRqNcjt4exKdR3b+nT7TsffUiuhYRk4/M+DZNpUrNaX9NjxeASaQFXP2SQ56DSxm 6yBSjixo3vVekwVezmlfJGDd4ysunr0Lz7F/+0S5+zVmLE4A88NQgDSQ/Yh5RmM3 trYtU1iijq+UdmROyaJnltJ3v6tI0lKY -----END CERTIFICATE-----Generated at Wed Jun 18 06:40:41 2025 by rpki-client