$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2364/040566A884CC11EF84EE3E50C4F9AE02/Rwzf1J9d_yEleN7F2iHyHaCz-tI.mft File: Rwzf1J9d_yEleN7F2iHyHaCz-tI.mft (raw, json) Hash identifier: 4gdyHjNsxn0JPa6xMloon/mjR6ajL0CU0Z4dnocc5A8= Subject key identifier: 06:4A:A2:BA:97:61:3A:09:7F:BA:19:C2:D8:B5:B4:2B:19:B5:D6:87 Authority key identifier: 47:0C:DF:D4:9F:5D:FF:21:25:78:DE:C5:DA:21:F2:1D:A0:B3:FA:D2 Certificate issuer: /CN=A91F2364/serialNumber=470CDFD49F5DFF212578DEC5DA21F21DA0B3FAD2 Certificate serial: 8D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rwzf1J9d_yEleN7F2iHyHaCz-tI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F2364/040566A884CC11EF84EE3E50C4F9AE02/Rwzf1J9d_yEleN7F2iHyHaCz-tI.mft Manifest number: 87 Signing time: Fri 13 Jun 2025 05:32:52 +0000 Manifest this update: Fri 13 Jun 2025 05:32:52 +0000 Manifest next update: Fri 20 Jun 2025 05:32:52 +0000 Files and hashes: 1: Rwzf1J9d_yEleN7F2iHyHaCz-tI.crl (hash: Lk/E1RaouD617g1KHZYT8f3ZBzTWNBsZaurZdr1v+fs=) 2: F696F52C8C7311EF995EA751C4F9AE02.roa (hash: IVAag2n39OgPxLOhqGGK4t8maSAxh28CoPmeH83pRE4=) 3: A227F4CC84CC11EFB2C53051C4F9AE02.roa (hash: xCL7VbACEpLGPMzJlAr4A4F4pPeHjMya8awCZyLgvNQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F2364/040566A884CC11EF84EE3E50C4F9AE02/Rwzf1J9d_yEleN7F2iHyHaCz-tI.crl rsync://rpki.apnic.net/member_repository/A91F2364/040566A884CC11EF84EE3E50C4F9AE02/Rwzf1J9d_yEleN7F2iHyHaCz-tI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rwzf1J9d_yEleN7F2iHyHaCz-tI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 05:32:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 141 (0x8d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F2364, serialNumber=470CDFD49F5DFF212578DEC5DA21F21DA0B3FAD2 Validity Not Before: Jun 13 05:32:52 2025 GMT Not After : Jun 20 05:32:52 2025 GMT Subject: CN=684bb804-e1b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:97:2f:ae:d6:5c:a0:a1:62:31:9f:56:1b:95: 29:7d:53:87:b4:14:81:25:24:6f:be:ff:85:5e:d6: fa:d9:51:69:94:4f:c3:26:95:79:04:30:c8:a5:d0: 5f:26:1f:80:30:4f:21:d8:bb:6c:bc:5e:26:9a:ce: 9e:40:01:ef:62:8d:21:d7:ce:7a:79:f5:41:49:06: 2e:19:e6:be:76:df:47:00:6f:53:15:b0:af:d3:b2: 07:cc:5d:ff:a3:31:9f:0b:14:ef:33:12:f8:00:8a: 46:1d:f9:3a:6d:89:fd:15:f5:a5:f5:c6:81:a7:df: 34:48:8e:32:6b:c9:00:69:4f:f3:70:c9:24:fe:62: 33:29:c7:1f:18:9c:10:6c:c3:79:e1:b5:47:eb:2f: 4e:f4:97:fb:ae:71:0f:83:01:c6:c1:23:d7:c1:71: 0b:4d:72:37:64:4d:68:d0:16:6f:f1:89:8d:14:6b: 9a:8e:09:29:27:32:8c:eb:c9:e9:99:86:60:1b:3c: d1:4b:c9:74:b6:24:5b:e4:8a:ba:30:48:ed:22:6c: 59:f0:d0:c4:ee:70:3a:ac:78:3c:a9:46:2e:59:5d: a9:d1:08:04:37:a4:fb:de:13:fc:d7:3b:c8:41:43: a4:48:b2:97:07:e2:68:74:81:15:2d:97:d3:df:5e: 25:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:4A:A2:BA:97:61:3A:09:7F:BA:19:C2:D8:B5:B4:2B:19:B5:D6:87 X509v3 Authority Key Identifier: keyid:47:0C:DF:D4:9F:5D:FF:21:25:78:DE:C5:DA:21:F2:1D:A0:B3:FA:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F2364/040566A884CC11EF84EE3E50C4F9AE02/Rwzf1J9d_yEleN7F2iHyHaCz-tI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rwzf1J9d_yEleN7F2iHyHaCz-tI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2364/040566A884CC11EF84EE3E50C4F9AE02/Rwzf1J9d_yEleN7F2iHyHaCz-tI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:c8:34:49:7d:e0:8b:dc:b0:40:43:0f:38:1f:27:3d:bf:90: 80:d5:29:6c:88:97:8e:54:dd:41:52:ed:ff:8e:19:de:1d:b5: c8:d1:3a:dd:ac:cc:7f:fa:03:11:a5:06:25:af:77:b9:f6:6b: e2:69:4c:39:ee:e0:ef:ca:15:fa:7b:13:20:6f:52:64:17:3f: 6c:e1:99:3b:ec:95:61:45:7d:36:07:d7:45:79:e3:0a:97:a1: 0d:07:6b:eb:09:f8:cb:c3:b0:ce:4c:89:83:6a:8e:b7:c5:67: 25:09:a8:2f:a5:00:6a:af:db:93:0d:4e:9a:f1:e4:0e:7e:fd: de:12:07:54:50:55:10:53:53:a6:e3:a0:43:51:81:53:bc:07: 7d:5a:e4:e9:35:a6:5c:ca:3f:aa:bd:29:10:0a:df:89:7e:a3: 27:3d:6d:71:42:44:1e:9c:07:d4:84:87:60:6c:a8:71:9a:25: 95:42:cc:d8:0e:09:c9:f7:81:fd:10:b0:7c:0d:6d:59:1a:fe: 1b:71:70:ec:11:d6:6e:d0:c3:a8:86:04:b6:44:69:e7:5d:cf: ff:f2:49:c5:23:f7:0a:0a:4d:f0:45:5f:60:8d:4b:b1:e4:d8: 31:0d:16:db:eb:bc:61:38:04:86:3b:98:84:97:fd:82:14:4f: 44:90:e7:23 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAI0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjIzNjQxMTAvBgNVBAUTKDQ3MENERkQ0OUY1REZGMjEyNTc4REVDNURBMjFGMjFE QTBCM0ZBRDIwHhcNMjUwNjEzMDUzMjUyWhcNMjUwNjIwMDUzMjUyWjAYMRYwFAYD VQQDEw02ODRiYjgwNC1lMWI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsZcvrtZcoKFiMZ9WG5UpfVOHtBSBJSRvvv+FXtb62VFplE/DJpV5BDDIpdBf Jh+AME8h2LtsvF4mms6eQAHvYo0h1856efVBSQYuGea+dt9HAG9TFbCv07IHzF3/ ozGfCxTvMxL4AIpGHfk6bYn9FfWl9caBp980SI4ya8kAaU/zcMkk/mIzKccfGJwQ bMN54bVH6y9O9Jf7rnEPgwHGwSPXwXELTXI3ZE1o0BZv8YmNFGuajgkpJzKM68np mYZgGzzRS8l0tiRb5Iq6MEjtImxZ8NDE7nA6rHg8qUYuWV2p0QgEN6T73hP81zvI QUOkSLKXB+JodIEVLZfT314liQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAZKorqX YToJf7oZwti1tCsZtdaHMB8GA1UdIwQYMBaAFEcM39SfXf8hJXjexdoh8h2gs/rS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMjM2NC8wNDA1NjZBODg0 Q0MxMUVGODRFRTNFNTBDNEY5QUUwMi9Sd3pmMUo5ZF95RWxlTjdGMmlIeUhhQ3ot dEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1J3emYxSjlkX3lFbGVON0YyaUh5SGFDei10SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MjM2NC8wNDA1NjZBODg0Q0MxMUVGODRFRTNFNTBDNEY5QUUwMi9Sd3pmMUo5ZF95 RWxlTjdGMmlIeUhhQ3otdEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCyyDRJfeCL3LBAQw84Hyc9v5CA1SlsiJeOVN1BUu3/jhneHbXI0Trd rMx/+gMRpQYlr3e59mviaUw57uDvyhX6exMgb1JkFz9s4Zk77JVhRX02B9dFeeMK l6ENB2vrCfjLw7DOTImDao63xWclCagvpQBqr9uTDU6a8eQOfv3eEgdUUFUQU1Om 46BDUYFTvAd9WuTpNaZcyj+qvSkQCt+JfqMnPW1xQkQenAfUhIdgbKhxmiWVQszY DgnJ94H9ELB8DW1ZGv4bcXDsEdZu0MOohgS2RGnnXc//8knFI/cKCk3wRV9gjUux 5NgxDRbb67xhOASGO5iEl/2CFE9EkOcj -----END CERTIFICATE-----Generated at Sat Jun 14 18:55:10 2025 by rpki-client