$ rpki-client -vvf rpki.apnic.net/member_repository/A91F609C/0AA57C6C046511ED9C85F15EC4F9AE02/_dVXSqazoje0NmmVfYUzlZPcHpo.mft File: _dVXSqazoje0NmmVfYUzlZPcHpo.mft (raw, json) Hash identifier: /GYehwajCB++C8Hg5qb3fOq94nKqaDGjKPStwt45qAA= Subject key identifier: 4C:2B:36:D4:F4:F6:AD:8E:9C:9D:F7:1F:A9:95:EF:36:F3:4A:C7:69 Authority key identifier: FD:D5:57:4A:A6:B3:A2:37:B4:36:69:95:7D:85:33:95:93:DC:1E:9A Certificate issuer: /CN=A91F609C/serialNumber=FDD5574AA6B3A237B43669957D85339593DC1E9A Certificate serial: 029E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_dVXSqazoje0NmmVfYUzlZPcHpo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F609C/0AA57C6C046511ED9C85F15EC4F9AE02/_dVXSqazoje0NmmVfYUzlZPcHpo.mft Manifest number: 0299 Signing time: Sun 15 Jun 2025 01:15:43 +0000 Manifest this update: Sun 15 Jun 2025 01:15:42 +0000 Manifest next update: Sun 22 Jun 2025 01:15:42 +0000 Files and hashes: 1: _dVXSqazoje0NmmVfYUzlZPcHpo.crl (hash: gSwy2PeFLeXbr9/Seu6EmsTbNmc3Xw9hYedy51f7uC4=) 2: 06E87B54046711ED95A3495FC4F9AE02.roa (hash: 5x89WekcpnY5fvShaZ35VDRztPc3dfKuIiSt+uKfQig=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F609C/0AA57C6C046511ED9C85F15EC4F9AE02/_dVXSqazoje0NmmVfYUzlZPcHpo.crl rsync://rpki.apnic.net/member_repository/A91F609C/0AA57C6C046511ED9C85F15EC4F9AE02/_dVXSqazoje0NmmVfYUzlZPcHpo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_dVXSqazoje0NmmVfYUzlZPcHpo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 01:15:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 670 (0x29e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F609C, serialNumber=FDD5574AA6B3A237B43669957D85339593DC1E9A Validity Not Before: Jun 15 01:15:42 2025 GMT Not After : Jun 22 01:15:42 2025 GMT Subject: CN=684e1ebe-24e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:42:68:ae:26:0f:8a:fd:51:bf:d9:9d:97:ce: 7a:1d:8c:87:4a:af:69:22:f0:c9:48:d9:cd:fd:87: f7:8c:c7:21:44:57:f7:41:56:b1:72:ae:c9:0d:55: 1e:ba:a6:c4:c7:5c:25:29:02:d9:83:3c:09:d0:7e: d5:a2:85:7b:bc:cb:79:3e:3c:a3:6d:3e:a3:c4:c9: e1:62:a1:0b:dc:c3:d1:f6:7b:ee:17:54:98:e5:1a: 80:f2:ed:af:91:d1:33:77:8a:63:6f:a3:a2:de:e4: 73:2f:2d:56:80:6c:5f:b9:78:7d:ae:1d:07:7b:61: 7e:60:35:3f:69:18:d2:78:3f:90:21:a4:4a:d6:b1: d4:1a:75:86:e1:5f:b2:3e:14:24:9d:5d:c0:fc:fd: c9:b6:57:f1:94:77:d1:87:fa:05:ae:5c:34:51:e5: 1d:74:a9:05:18:db:36:15:c5:88:07:e2:47:0e:f5: 81:95:d7:50:ac:ae:3a:57:a0:44:a3:76:07:43:87: 72:dd:da:f3:7d:ea:40:7f:05:49:40:e8:cb:c7:d9: 5b:cd:c8:24:f5:6a:f3:b4:7d:68:d6:4e:a6:51:86: fb:28:06:f5:b8:96:91:87:df:f4:2e:b6:bb:23:98: 64:ab:33:a2:48:7c:a5:64:01:64:73:b5:07:2f:c2: e8:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:2B:36:D4:F4:F6:AD:8E:9C:9D:F7:1F:A9:95:EF:36:F3:4A:C7:69 X509v3 Authority Key Identifier: keyid:FD:D5:57:4A:A6:B3:A2:37:B4:36:69:95:7D:85:33:95:93:DC:1E:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F609C/0AA57C6C046511ED9C85F15EC4F9AE02/_dVXSqazoje0NmmVfYUzlZPcHpo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_dVXSqazoje0NmmVfYUzlZPcHpo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F609C/0AA57C6C046511ED9C85F15EC4F9AE02/_dVXSqazoje0NmmVfYUzlZPcHpo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:10:f1:fb:ee:19:fc:6d:2d:9f:ff:b5:4d:23:0c:3a:b4:e7: dc:1d:1e:ed:09:27:df:12:44:27:9a:64:ae:43:dd:73:4a:ac: d8:44:7a:81:6c:37:25:7a:25:21:09:2c:3b:69:c3:12:02:2d: b9:ae:81:17:32:b8:02:61:a2:df:16:93:f7:6d:bc:c5:60:b3: 29:67:c0:be:9a:1b:ac:ae:7e:05:d7:60:d1:3f:c6:71:86:0a: 0b:4a:32:59:c3:15:74:5b:45:5d:de:97:37:0b:76:07:c5:4c: d6:cc:e2:42:f4:a1:74:9c:15:40:61:c6:65:de:e9:fd:96:c1: 61:bf:71:94:0e:ce:f1:84:93:3b:79:ce:61:55:7e:ca:d3:d6: 06:0c:d3:51:5b:af:a7:04:77:ff:e3:d2:27:8f:d4:d7:75:31: 33:3a:53:1b:5b:70:02:1b:12:55:e3:f3:74:dc:28:5b:53:35: 78:3e:24:ca:b9:67:ee:ab:31:57:3f:60:84:c2:9d:55:aa:b2: b2:7e:24:52:1b:9a:c5:3d:e1:e1:1e:ca:9e:ed:33:7d:6f:66: 52:54:86:cc:b8:20:56:1c:4b:98:58:4c:98:a0:f6:85:34:7f: b7:1a:d5:33:7c:1f:c9:8a:4a:7a:61:bb:71:69:83:2a:fb:d5: 81:09:bb:60 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAp4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjYwOUMxMTAvBgNVBAUTKEZERDU1NzRBQTZCM0EyMzdCNDM2Njk5NTdEODUzMzk1 OTNEQzFFOUEwHhcNMjUwNjE1MDExNTQyWhcNMjUwNjIyMDExNTQyWjAYMRYwFAYD VQQDEw02ODRlMWViZS0yNGU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzEJoriYPiv1Rv9mdl856HYyHSq9pIvDJSNnN/Yf3jMchRFf3QVaxcq7JDVUe uqbEx1wlKQLZgzwJ0H7VooV7vMt5PjyjbT6jxMnhYqEL3MPR9nvuF1SY5RqA8u2v kdEzd4pjb6Oi3uRzLy1WgGxfuXh9rh0He2F+YDU/aRjSeD+QIaRK1rHUGnWG4V+y PhQknV3A/P3JtlfxlHfRh/oFrlw0UeUddKkFGNs2FcWIB+JHDvWBlddQrK46V6BE o3YHQ4dy3drzfepAfwVJQOjLx9lbzcgk9WrztH1o1k6mUYb7KAb1uJaRh9/0Lra7 I5hkqzOiSHylZAFkc7UHL8LoNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEwrNtT0 9q2OnJ33H6mV7zbzSsdpMB8GA1UdIwQYMBaAFP3VV0qms6I3tDZplX2FM5WT3B6a MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNjA5Qy8wQUE1N0M2QzA0 NjUxMUVEOUM4NUYxNUVDNEY5QUUwMi9fZFZYU3Fhem9qZTBObW1WZllVemxaUGNI cG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19kVlhTcWF6b2plME5tbVZmWVV6bFpQY0hwby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NjA5Qy8wQUE1N0M2QzA0NjUxMUVEOUM4NUYxNUVDNEY5QUUwMi9fZFZYU3Fhem9q ZTBObW1WZllVemxaUGNIcG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBVEPH77hn8bS2f/7VNIww6tOfcHR7tCSffEkQnmmSuQ91zSqzYRHqB bDcleiUhCSw7acMSAi25roEXMrgCYaLfFpP3bbzFYLMpZ8C+mhusrn4F12DRP8Zx hgoLSjJZwxV0W0Vd3pc3C3YHxUzWzOJC9KF0nBVAYcZl3un9lsFhv3GUDs7xhJM7 ec5hVX7K09YGDNNRW6+nBHf/49Inj9TXdTEzOlMbW3ACGxJV4/N03ChbUzV4PiTK uWfuqzFXP2CEwp1VqrKyfiRSG5rFPeHhHsqe7TN9b2ZSVIbMuCBWHEuYWEyYoPaF NH+3GtUzfB/Jikp6YbtxaYMq+9WBCbtg -----END CERTIFICATE-----Generated at Sun Jun 15 08:50:05 2025 by rpki-client