$ rpki-client -vvf rpki.apnic.net/member_repository/A91F05B5/475012062AB311EE8FAE7214C4F9AE02/CV9sa7OHxpMv2gHAv6Ym9qrHuwA.mft File: CV9sa7OHxpMv2gHAv6Ym9qrHuwA.mft (raw, json) Hash identifier: hL2mYO4WvYZyT86C/QQ/16dGEFYEkRgQpgUq3gxq9GE= Subject key identifier: 2A:61:3C:72:6C:59:08:0A:6B:69:48:7A:3A:61:B2:64:1A:A7:C9:D2 Authority key identifier: 09:5F:6C:6B:B3:87:C6:93:2F:DA:01:C0:BF:A6:26:F6:AA:C7:BB:00 Certificate issuer: /CN=A91F05B5/serialNumber=095F6C6BB387C6932FDA01C0BFA626F6AAC7BB00 Certificate serial: 0169 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CV9sa7OHxpMv2gHAv6Ym9qrHuwA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F05B5/475012062AB311EE8FAE7214C4F9AE02/CV9sa7OHxpMv2gHAv6Ym9qrHuwA.mft Manifest number: 0165 Signing time: Sun 15 Jun 2025 03:08:26 +0000 Manifest this update: Sun 15 Jun 2025 03:08:26 +0000 Manifest next update: Sun 22 Jun 2025 03:08:26 +0000 Files and hashes: 1: CV9sa7OHxpMv2gHAv6Ym9qrHuwA.crl (hash: BNF29m2LWO31sSAf7mQjFWojr3Gcix+NfCnTYYPSAus=) 2: E0A69DBC2AB311EE9CA5E515C4F9AE02.roa (hash: ZqsBefU5j7GUz5qH7o82aafqjpUX9O/Biz1HkkL6OG4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F05B5/475012062AB311EE8FAE7214C4F9AE02/CV9sa7OHxpMv2gHAv6Ym9qrHuwA.crl rsync://rpki.apnic.net/member_repository/A91F05B5/475012062AB311EE8FAE7214C4F9AE02/CV9sa7OHxpMv2gHAv6Ym9qrHuwA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CV9sa7OHxpMv2gHAv6Ym9qrHuwA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 361 (0x169) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F05B5, serialNumber=095F6C6BB387C6932FDA01C0BFA626F6AAC7BB00 Validity Not Before: Jun 15 03:08:26 2025 GMT Not After : Jun 22 03:08:26 2025 GMT Subject: CN=684e392a-45d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:21:0c:81:5b:e4:46:3c:92:73:99:91:f8:c0: 67:40:0b:5f:c0:6d:2e:ee:02:80:1d:26:5e:a9:cd: c1:db:bd:22:6e:a5:50:20:eb:dc:19:c1:43:b2:32: 55:20:dd:87:66:32:25:5b:64:4e:66:cf:22:07:ed: b9:23:3f:86:f6:60:39:3e:57:0f:2a:bb:c6:c5:3e: 20:60:94:c1:fb:39:c1:91:be:49:6f:d7:09:2d:b3: ca:45:4c:2d:fb:16:8b:ba:a2:d7:9f:a7:01:82:d2: 4d:25:06:ed:3d:4b:06:36:87:20:d1:87:eb:23:a4: 23:85:db:60:1d:7f:9a:3c:0e:2d:ed:e8:6a:f6:56: 36:f6:33:9d:b4:63:e1:04:ed:8e:ec:bc:19:51:e4: b0:8a:dd:54:01:c8:3a:cf:1b:bc:ec:9d:ce:70:29: 78:55:ae:a7:fd:ef:11:3c:1e:94:30:fe:5c:c4:72: 08:84:c0:9f:a8:1d:5a:52:cc:ff:df:17:0f:d3:ce: 46:87:5f:1a:3b:6f:7d:0c:a3:9c:9f:76:59:15:58: bc:7d:17:d7:b5:fc:af:b8:35:fa:49:58:1b:31:65: 34:27:a3:2c:67:6c:cb:6a:26:ff:32:e3:56:38:6d: a2:4c:53:a0:ac:6f:85:cd:eb:dc:99:44:89:8b:02: 05:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:61:3C:72:6C:59:08:0A:6B:69:48:7A:3A:61:B2:64:1A:A7:C9:D2 X509v3 Authority Key Identifier: keyid:09:5F:6C:6B:B3:87:C6:93:2F:DA:01:C0:BF:A6:26:F6:AA:C7:BB:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F05B5/475012062AB311EE8FAE7214C4F9AE02/CV9sa7OHxpMv2gHAv6Ym9qrHuwA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CV9sa7OHxpMv2gHAv6Ym9qrHuwA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F05B5/475012062AB311EE8FAE7214C4F9AE02/CV9sa7OHxpMv2gHAv6Ym9qrHuwA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:8b:c1:0e:af:4b:66:87:8d:ec:85:6c:f1:d7:60:b9:91:0b: 5a:2b:28:14:50:3c:0f:29:79:d6:ed:3d:ce:d6:17:ac:2d:f1: fa:f4:87:59:db:ce:4f:1c:ae:27:5e:90:6e:cb:21:4b:2b:53: 89:37:d6:66:d9:6e:98:b5:48:4d:62:c4:03:7e:c2:93:ca:68: 56:67:17:a4:18:6a:98:e0:dd:ed:3f:3c:3e:e9:f0:bc:99:41: 13:e7:79:e9:4c:ab:42:6b:19:0e:72:b2:01:ab:3c:ca:cd:8f: 70:6b:9a:3f:15:46:73:8a:6b:0a:c4:a1:77:3a:1c:bc:81:af: 27:c7:cc:27:5e:03:ec:0b:c9:60:c5:34:74:2a:5c:e8:45:72: 95:44:a2:5d:17:c4:9e:f5:87:2b:98:3d:ed:ae:d0:8f:9f:1e: 81:59:21:f5:4e:a7:fd:47:d6:81:89:47:b7:0e:87:3c:2f:36: b4:3f:3f:75:22:30:f8:66:d0:7f:ef:07:05:ac:9d:1a:69:2e: f5:23:4e:52:1f:56:d0:0c:59:86:97:6e:50:b5:c6:ac:e2:58: 10:eb:90:d7:ae:2c:8c:4b:89:57:28:6c:3e:23:1d:cb:0e:a7: 5a:3d:a4:e9:ec:82:a0:a8:ab:87:20:c1:20:00:26:69:ee:36: 5a:f9:ba:ee -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjA1QjUxMTAvBgNVBAUTKDA5NUY2QzZCQjM4N0M2OTMyRkRBMDFDMEJGQTYyNkY2 QUFDN0JCMDAwHhcNMjUwNjE1MDMwODI2WhcNMjUwNjIyMDMwODI2WjAYMRYwFAYD VQQDEw02ODRlMzkyYS00NWQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvyEMgVvkRjySc5mR+MBnQAtfwG0u7gKAHSZeqc3B270ibqVQIOvcGcFDsjJV IN2HZjIlW2ROZs8iB+25Iz+G9mA5PlcPKrvGxT4gYJTB+znBkb5Jb9cJLbPKRUwt +xaLuqLXn6cBgtJNJQbtPUsGNocg0YfrI6QjhdtgHX+aPA4t7ehq9lY29jOdtGPh BO2O7LwZUeSwit1UAcg6zxu87J3OcCl4Va6n/e8RPB6UMP5cxHIIhMCfqB1aUsz/ 3xcP085Gh18aO299DKOcn3ZZFVi8fRfXtfyvuDX6SVgbMWU0J6MsZ2zLaib/MuNW OG2iTFOgrG+FzevcmUSJiwIF2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCphPHJs WQgKa2lIejphsmQap8nSMB8GA1UdIwQYMBaAFAlfbGuzh8aTL9oBwL+mJvaqx7sA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMDVCNS80NzUwMTIwNjJB QjMxMUVFOEZBRTcyMTRDNEY5QUUwMi9DVjlzYTdPSHhwTXYyZ0hBdjZZbTlxckh1 d0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NWOXNhN09IeHBNdjJnSEF2NlltOXFySHV3QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MDVCNS80NzUwMTIwNjJBQjMxMUVFOEZBRTcyMTRDNEY5QUUwMi9DVjlzYTdPSHhw TXYyZ0hBdjZZbTlxckh1d0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB7i8EOr0tmh43shWzx12C5kQtaKygUUDwPKXnW7T3O1hesLfH69IdZ 285PHK4nXpBuyyFLK1OJN9Zm2W6YtUhNYsQDfsKTymhWZxekGGqY4N3tPzw+6fC8 mUET53npTKtCaxkOcrIBqzzKzY9wa5o/FUZzimsKxKF3Ohy8ga8nx8wnXgPsC8lg xTR0KlzoRXKVRKJdF8Se9YcrmD3trtCPnx6BWSH1Tqf9R9aBiUe3Doc8Lza0Pz91 IjD4ZtB/7wcFrJ0aaS71I05SH1bQDFmGl25Qtcas4lgQ65DXriyMS4lXKGw+Ix3L DqdaPaTp7IKgqKuHIMEgACZp7jZa+bru -----END CERTIFICATE-----Generated at Sun Jun 15 09:47:25 2025 by rpki-client