$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4E89/C533D7242AF411EAA48F1541C4F9AE02/Df2AHulmIu0X31XXqqZMce_5t70.mft File: Df2AHulmIu0X31XXqqZMce_5t70.mft (raw, json) Hash identifier: pFenE58V6v+JrKHY7D5qgnncHl0BTVGZKUsKjX9ARcU= Subject key identifier: 19:5D:5B:5F:1C:BB:9F:03:E9:44:3F:9D:E4:12:3D:CB:75:E1:19:59 Authority key identifier: 0D:FD:80:1E:E9:66:22:ED:17:DF:55:D7:AA:A6:4C:71:EF:F9:B7:BD Certificate issuer: /CN=A91F4E89/serialNumber=0DFD801EE96622ED17DF55D7AAA64C71EFF9B7BD Certificate serial: 0B8A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Df2AHulmIu0X31XXqqZMce_5t70.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4E89/C533D7242AF411EAA48F1541C4F9AE02/Df2AHulmIu0X31XXqqZMce_5t70.mft Manifest number: 0B84 Signing time: Thu 12 Jun 2025 18:50:21 +0000 Manifest this update: Thu 12 Jun 2025 18:50:21 +0000 Manifest next update: Thu 19 Jun 2025 18:50:21 +0000 Files and hashes: 1: Df2AHulmIu0X31XXqqZMce_5t70.crl (hash: PcF92dq+y4UJhtKxFc8CvJBYy/lWkaJ4Ep+1aD5di1o=) 2: 72F52C962AF511EA8C989441C4F9AE02.roa (hash: VUxxRKza4YtkY3CW36/yWhqdjkRvkusFphcVpxC9+Yc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4E89/C533D7242AF411EAA48F1541C4F9AE02/Df2AHulmIu0X31XXqqZMce_5t70.crl rsync://rpki.apnic.net/member_repository/A91F4E89/C533D7242AF411EAA48F1541C4F9AE02/Df2AHulmIu0X31XXqqZMce_5t70.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Df2AHulmIu0X31XXqqZMce_5t70.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 18:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2954 (0xb8a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4E89, serialNumber=0DFD801EE96622ED17DF55D7AAA64C71EFF9B7BD Validity Not Before: Jun 12 18:50:21 2025 GMT Not After : Jun 19 18:50:21 2025 GMT Subject: CN=684b216d-52b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:3e:15:33:b8:6f:98:20:52:49:10:a7:20:63: 15:cd:6b:e8:d4:48:a5:3c:5c:c1:55:fd:02:65:0a: 8a:b2:d2:63:fb:9d:7b:34:0d:9a:ee:b6:4c:d3:e9: 42:a3:96:ab:e5:fc:2a:a4:d6:d2:95:6d:a2:09:54: 60:8f:09:1c:73:4f:dc:ac:e8:f9:5a:39:4f:6b:4f: 45:8b:4c:a3:df:17:d3:c5:ea:63:e3:73:62:90:b0: 3b:8a:44:56:52:a7:c2:a1:8e:b5:08:63:3e:f0:9d: 7d:d5:e6:6f:02:05:e4:04:2d:70:01:62:89:20:21: 3a:99:f7:2b:f0:76:39:1e:b4:cc:62:5b:ed:b8:97: 53:c5:9e:2b:5b:69:d0:e2:6c:e2:3a:a2:32:bd:ee: b4:0e:13:36:28:32:41:81:af:0d:87:c3:6f:e5:0d: 63:8d:b5:68:77:2a:02:4d:51:29:e3:39:25:b8:69: 94:81:3e:c7:f1:81:6d:af:83:03:19:37:6c:44:3d: c2:6d:43:62:bc:f6:b4:16:fb:4e:e2:ad:ed:4c:77: 31:ac:4b:85:45:15:6b:5a:43:65:50:76:d1:52:46: dc:61:e4:1b:96:44:39:9c:ff:ae:b5:6d:0d:63:d2: 7e:8d:10:2d:b7:64:30:47:9c:9d:07:c2:d4:17:21: 6e:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:5D:5B:5F:1C:BB:9F:03:E9:44:3F:9D:E4:12:3D:CB:75:E1:19:59 X509v3 Authority Key Identifier: keyid:0D:FD:80:1E:E9:66:22:ED:17:DF:55:D7:AA:A6:4C:71:EF:F9:B7:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4E89/C533D7242AF411EAA48F1541C4F9AE02/Df2AHulmIu0X31XXqqZMce_5t70.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Df2AHulmIu0X31XXqqZMce_5t70.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4E89/C533D7242AF411EAA48F1541C4F9AE02/Df2AHulmIu0X31XXqqZMce_5t70.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:67:91:61:fa:65:45:63:e7:b5:d8:a1:e9:7f:c0:fb:b2:42: ef:7f:04:41:13:69:e8:51:1c:ad:02:c4:b9:1e:01:ab:8b:23: ef:95:0b:3c:f6:1b:12:2d:7e:b5:e3:cf:cc:21:d9:bf:d4:d3: 7b:7c:24:8f:6d:a7:a2:5b:80:79:f7:f2:62:13:f7:de:f4:2b: ad:2d:63:3c:2e:e6:1f:70:a3:3f:c4:b8:cf:97:7a:b2:54:8f: 64:fc:24:63:94:84:91:97:c9:f1:ec:0d:44:8c:2a:65:07:5f: 4f:4b:b6:15:25:5d:ca:3d:00:e1:a2:03:93:fb:0c:30:a4:97: e9:a2:59:3a:2d:7d:50:0a:09:55:8e:4f:f6:4c:9d:a4:b8:36: 6d:d9:23:6c:41:58:8a:d9:fd:6b:2e:f4:39:e5:1c:ac:af:24: 80:c0:a0:27:10:ae:07:3a:a3:d4:c8:26:01:ee:15:ed:03:4e: 29:cd:31:d5:03:63:45:54:52:3c:fa:e6:29:23:fa:5b:f3:21: 0f:2a:ec:7e:29:ee:53:ee:39:cc:90:6f:2e:7c:5c:69:a4:79: e3:18:39:9b:4f:38:b8:ff:0a:c0:40:58:3c:34:48:e6:09:4d: 90:8a:56:e3:91:94:ea:2e:a3:dc:91:87:36:9d:c0:73:56:7b: bb:8d:8f:5f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC4owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjRFODkxMTAvBgNVBAUTKDBERkQ4MDFFRTk2NjIyRUQxN0RGNTVEN0FBQTY0Qzcx RUZGOUI3QkQwHhcNMjUwNjEyMTg1MDIxWhcNMjUwNjE5MTg1MDIxWjAYMRYwFAYD VQQDEw02ODRiMjE2ZC01MmI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0D4VM7hvmCBSSRCnIGMVzWvo1EilPFzBVf0CZQqKstJj+517NA2a7rZM0+lC o5ar5fwqpNbSlW2iCVRgjwkcc0/crOj5WjlPa09Fi0yj3xfTxepj43NikLA7ikRW UqfCoY61CGM+8J191eZvAgXkBC1wAWKJICE6mfcr8HY5HrTMYlvtuJdTxZ4rW2nQ 4mziOqIyve60DhM2KDJBga8Nh8Nv5Q1jjbVodyoCTVEp4zkluGmUgT7H8YFtr4MD GTdsRD3CbUNivPa0FvtO4q3tTHcxrEuFRRVrWkNlUHbRUkbcYeQblkQ5nP+utW0N Y9J+jRAtt2QwR5ydB8LUFyFu9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBldW18c u58D6UQ/neQSPct14RlZMB8GA1UdIwQYMBaAFA39gB7pZiLtF99V16qmTHHv+be9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNEU4OS9DNTMzRDcyNDJB RjQxMUVBQTQ4RjE1NDFDNEY5QUUwMi9EZjJBSHVsbUl1MFgzMVhYcXFaTWNlXzV0 NzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RmMkFIdWxtSXUwWDMxWFhxcVpNY2VfNXQ3MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NEU4OS9DNTMzRDcyNDJBRjQxMUVBQTQ4RjE1NDFDNEY5QUUwMi9EZjJBSHVsbUl1 MFgzMVhYcXFaTWNlXzV0NzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/Z5Fh+mVFY+e12KHpf8D7skLvfwRBE2noURytAsS5HgGriyPvlQs8 9hsSLX6148/MIdm/1NN7fCSPbaeiW4B59/JiE/fe9CutLWM8LuYfcKM/xLjPl3qy VI9k/CRjlISRl8nx7A1EjCplB19PS7YVJV3KPQDhogOT+wwwpJfpolk6LX1QCglV jk/2TJ2kuDZt2SNsQViK2f1rLvQ55RysrySAwKAnEK4HOqPUyCYB7hXtA04pzTHV A2NFVFI8+uYpI/pb8yEPKux+Ke5T7jnMkG8ufFxppHnjGDmbTzi4/wrAQFg8NEjm CU2QilbjkZTqLqPckYc2ncBzVnu7jY9f -----END CERTIFICATE-----Generated at Sat Jun 14 19:28:55 2025 by rpki-client