$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5786/E57713805AE111EFBB5C572DC4F9AE02/slUrOLjFywk1yUD6YJgOpvUQz4Y.mft File: slUrOLjFywk1yUD6YJgOpvUQz4Y.mft (raw, json) Hash identifier: EybXS6tAEaSkxiG9fgKJgGMcWxUu8PjKK+JEo6BmCDE= Subject key identifier: 33:6D:CF:58:C1:81:CB:A6:04:49:0D:F1:03:B5:D0:55:55:CC:3A:D6 Authority key identifier: B2:55:2B:38:B8:C5:CB:09:35:C9:40:FA:60:98:0E:A6:F5:10:CF:86 Certificate issuer: /CN=A91F5786/serialNumber=B2552B38B8C5CB0935C940FA60980EA6F510CF86 Certificate serial: 9F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/slUrOLjFywk1yUD6YJgOpvUQz4Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F5786/E57713805AE111EFBB5C572DC4F9AE02/slUrOLjFywk1yUD6YJgOpvUQz4Y.mft Manifest number: 9D Signing time: Fri 13 Jun 2025 05:11:14 +0000 Manifest this update: Fri 13 Jun 2025 05:11:14 +0000 Manifest next update: Fri 20 Jun 2025 05:11:14 +0000 Files and hashes: 1: slUrOLjFywk1yUD6YJgOpvUQz4Y.crl (hash: YL2YkpvU1VyEqQpoRFFQyrHZqVi/mOaa6Co7H1FtDmc=) 2: 1F3782EE5AE211EF8E82D12DC4F9AE02.roa (hash: u07sFp3Yqjqw6LAiuoDt1givQlP2Rg/DNRW12Og3/70=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F5786/E57713805AE111EFBB5C572DC4F9AE02/slUrOLjFywk1yUD6YJgOpvUQz4Y.crl rsync://rpki.apnic.net/member_repository/A91F5786/E57713805AE111EFBB5C572DC4F9AE02/slUrOLjFywk1yUD6YJgOpvUQz4Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/slUrOLjFywk1yUD6YJgOpvUQz4Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 05:11:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 159 (0x9f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F5786, serialNumber=B2552B38B8C5CB0935C940FA60980EA6F510CF86 Validity Not Before: Jun 13 05:11:14 2025 GMT Not After : Jun 20 05:11:14 2025 GMT Subject: CN=684bb2f2-2547 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:1d:74:7d:84:e0:94:e1:82:73:42:01:bb:21: ff:6e:d8:ae:b6:2d:13:f0:14:65:aa:a7:6a:fb:e5: 4d:26:aa:1c:fc:5c:21:6b:91:16:e8:76:41:34:16: f2:f2:5e:f7:bd:45:7c:e2:b9:85:57:d7:18:3b:87: 28:33:a1:90:ae:89:7e:3c:f7:1b:d3:cd:86:a6:e5: da:9e:06:25:13:6a:49:71:8d:51:73:60:2b:6b:d1: e4:a3:b5:6d:f0:d0:c8:c7:d8:28:e1:69:51:5d:33: 25:68:60:7e:a3:d4:b5:57:6f:2d:7f:c6:66:2b:28: 21:5b:7d:f2:ba:5f:4b:78:e7:42:4c:89:9e:45:36: 61:3c:f3:70:e0:12:91:80:e1:29:35:fd:10:80:a5: fa:61:ac:c0:95:94:dd:6a:f1:7b:1b:ff:d4:0d:75: cf:ac:e5:7e:14:9e:47:31:9a:41:08:7b:c9:5d:9d: d1:c4:84:31:af:98:c2:56:c6:d3:31:5b:0f:1d:d6: 98:f0:98:91:ba:80:38:cb:a0:69:30:90:2c:ba:1e: 06:d7:01:c3:ae:d4:74:da:37:8f:98:e5:89:49:78: 1a:34:e6:58:2b:02:c9:4e:ae:4a:8c:c1:57:93:4d: 8b:c0:94:1a:41:1a:80:a7:0e:62:60:74:91:88:4c: 26:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:6D:CF:58:C1:81:CB:A6:04:49:0D:F1:03:B5:D0:55:55:CC:3A:D6 X509v3 Authority Key Identifier: keyid:B2:55:2B:38:B8:C5:CB:09:35:C9:40:FA:60:98:0E:A6:F5:10:CF:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F5786/E57713805AE111EFBB5C572DC4F9AE02/slUrOLjFywk1yUD6YJgOpvUQz4Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/slUrOLjFywk1yUD6YJgOpvUQz4Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5786/E57713805AE111EFBB5C572DC4F9AE02/slUrOLjFywk1yUD6YJgOpvUQz4Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:f1:0c:a3:55:1c:e1:34:e8:e3:53:ec:0b:a8:14:45:a4:91: b4:c7:34:c7:0a:ac:49:cc:7c:86:33:02:2d:1f:4b:ad:89:dd: 3e:97:a7:51:8a:a2:e0:8c:5a:f7:ea:99:49:7a:69:31:ff:dd: 2e:a1:a5:ab:5b:75:3f:fc:1e:18:20:44:00:4a:16:e7:59:62: 21:ab:80:2c:e8:7a:08:14:e7:0b:78:68:c3:b5:2a:ab:78:d9: 7e:03:d5:4a:5e:4f:f7:58:7a:30:73:06:ce:8f:45:d1:4b:74: 2d:9b:1f:71:e0:b6:09:29:1b:81:7e:1d:29:cb:7b:ea:36:d1: 3e:89:25:4b:10:04:b2:78:9d:3b:6e:25:c3:63:3b:39:9a:d4: 30:b7:27:ed:4d:02:14:d6:d2:08:42:a8:e7:9d:75:be:b1:36: b7:5e:3a:a6:d0:1a:4c:f3:0f:76:81:db:22:10:25:15:fd:18: 13:20:4d:cb:03:9e:74:01:b2:76:33:e3:68:34:bf:a8:56:4c: 29:00:c4:37:3d:e8:0d:fd:a2:00:12:bf:91:61:14:c2:83:53: 32:dd:58:ab:36:a1:77:bf:b1:5d:00:7f:83:fa:5d:06:59:37: 85:76:a0:2a:0f:4e:9a:36:ff:57:19:0f:50:11:0a:aa:34:8a: a7:22:21:87 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjU3ODYxMTAvBgNVBAUTKEIyNTUyQjM4QjhDNUNCMDkzNUM5NDBGQTYwOTgwRUE2 RjUxMENGODYwHhcNMjUwNjEzMDUxMTE0WhcNMjUwNjIwMDUxMTE0WjAYMRYwFAYD VQQDEw02ODRiYjJmMi0yNTQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmh10fYTglOGCc0IBuyH/btiuti0T8BRlqqdq++VNJqoc/Fwha5EW6HZBNBby 8l73vUV84rmFV9cYO4coM6GQrol+PPcb082GpuXangYlE2pJcY1Rc2Ara9Hko7Vt 8NDIx9go4WlRXTMlaGB+o9S1V28tf8ZmKyghW33yul9LeOdCTImeRTZhPPNw4BKR gOEpNf0QgKX6YazAlZTdavF7G//UDXXPrOV+FJ5HMZpBCHvJXZ3RxIQxr5jCVsbT MVsPHdaY8JiRuoA4y6BpMJAsuh4G1wHDrtR02jePmOWJSXgaNOZYKwLJTq5KjMFX k02LwJQaQRqApw5iYHSRiEwmgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDNtz1jB gcumBEkN8QO10FVVzDrWMB8GA1UdIwQYMBaAFLJVKzi4xcsJNclA+mCYDqb1EM+G MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTc4Ni9FNTc3MTM4MDVB RTExMUVGQkI1QzU3MkRDNEY5QUUwMi9zbFVyT0xqRnl3azF5VUQ2WUpnT3B2VVF6 NFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NsVXJPTGpGeXdrMXlVRDZZSmdPcHZVUXo0WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NTc4Ni9FNTc3MTM4MDVBRTExMUVGQkI1QzU3MkRDNEY5QUUwMi9zbFVyT0xqRnl3 azF5VUQ2WUpnT3B2VVF6NFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBP8QyjVRzhNOjjU+wLqBRFpJG0xzTHCqxJzHyGMwItH0utid0+l6dR iqLgjFr36plJemkx/90uoaWrW3U//B4YIEQAShbnWWIhq4As6HoIFOcLeGjDtSqr eNl+A9VKXk/3WHowcwbOj0XRS3Qtmx9x4LYJKRuBfh0py3vqNtE+iSVLEASyeJ07 biXDYzs5mtQwtyftTQIU1tIIQqjnnXW+sTa3Xjqm0BpM8w92gdsiECUV/RgTIE3L A550AbJ2M+NoNL+oVkwpAMQ3PegN/aIAEr+RYRTCg1My3VirNqF3v7FdAH+D+l0G WTeFdqAqD06aNv9XGQ9QEQqqNIqnIiGH -----END CERTIFICATE-----Generated at Sat Jun 14 19:35:10 2025 by rpki-client