$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6D91/E517F2B69AE511EB837F135EC4F9AE02/9nGKXl5C0I4lOi-zAP8Jw_U1HTI.mft File: 9nGKXl5C0I4lOi-zAP8Jw_U1HTI.mft (raw, json) Hash identifier: FS5gqcXwszKQT34rAbvpH+XbS79ZCMr97hB/baNsXmA= Subject key identifier: 76:4D:77:B6:BD:DE:BA:D8:02:B9:66:B4:12:C2:8D:28:15:2A:33:D2 Authority key identifier: F6:71:8A:5E:5E:42:D0:8E:25:3A:2F:B3:00:FF:09:C3:F5:35:1D:32 Certificate issuer: /CN=A91F6D91/serialNumber=F6718A5E5E42D08E253A2FB300FF09C3F5351D32 Certificate serial: 0651 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9nGKXl5C0I4lOi-zAP8Jw_U1HTI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F6D91/E517F2B69AE511EB837F135EC4F9AE02/9nGKXl5C0I4lOi-zAP8Jw_U1HTI.mft Manifest number: 0639 Signing time: Thu 12 Jun 2025 22:22:08 +0000 Manifest this update: Thu 12 Jun 2025 22:22:08 +0000 Manifest next update: Thu 19 Jun 2025 22:22:08 +0000 Files and hashes: 1: 9nGKXl5C0I4lOi-zAP8Jw_U1HTI.crl (hash: e5t5sOYECN40raTjHg2nrA1Vu881M0q0ph7CS6QRr80=) 2: 105CB01A830711ECB472CA0AC4F9AE02.roa (hash: P0BhZPNBq4fF0iWoLAGwiGCR4fuUazibBS/DViNXhlI=) 3: 0E2711E6830711ECB472CA0AC4F9AE02.roa (hash: 6bWPYL9HlnXbgKm1pf8hjZDzf0KdOhZ+kEEuV8xvMnc=) 4: 0F6980C0830711ECB472CA0AC4F9AE02.roa (hash: GSq2aTh4Ighs8Kd5WfNm9bR33IhLvfkn/9rz4nvZ37o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F6D91/E517F2B69AE511EB837F135EC4F9AE02/9nGKXl5C0I4lOi-zAP8Jw_U1HTI.crl rsync://rpki.apnic.net/member_repository/A91F6D91/E517F2B69AE511EB837F135EC4F9AE02/9nGKXl5C0I4lOi-zAP8Jw_U1HTI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9nGKXl5C0I4lOi-zAP8Jw_U1HTI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 22:22:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1617 (0x651) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F6D91, serialNumber=F6718A5E5E42D08E253A2FB300FF09C3F5351D32 Validity Not Before: Jun 12 22:22:08 2025 GMT Not After : Jun 19 22:22:08 2025 GMT Subject: CN=684b5310-69fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:fb:a7:87:bb:fe:be:58:9b:d4:d4:94:e9:f0: d4:09:0e:ff:82:c7:be:40:bb:cf:6e:43:65:30:0e: 18:91:46:8c:a5:64:27:0b:da:df:21:9b:c6:d1:33: d4:50:0f:4c:3b:ed:65:58:61:da:c3:f4:1b:cb:27: 6c:b4:39:46:9e:c6:36:13:7d:d1:b3:06:0f:20:70: ea:c1:e4:3c:76:8a:61:f3:1f:39:0c:e9:4c:49:3e: 0b:b9:8d:4b:e1:3d:54:67:38:c2:f2:1a:91:94:3a: f9:0a:69:11:6b:0c:ae:94:01:ee:72:ec:fb:32:e6: a6:b1:56:06:94:8e:25:da:62:5e:4d:ce:3d:73:26: 15:ee:7d:a2:09:6a:9d:01:0d:76:33:39:86:6c:f9: 8f:99:bc:79:55:f9:9f:0c:ce:11:fa:96:6d:7e:77: 81:c3:94:9e:d0:2f:cd:e1:44:91:ad:4c:01:ad:dd: 36:01:b5:f5:cc:c4:bd:65:fd:16:cc:22:b5:e0:d1: f4:16:20:ff:11:47:1f:c5:df:03:cd:1a:82:3d:fe: e7:fd:63:09:9c:f4:59:19:47:12:c6:12:95:9f:66: 26:1d:99:92:1b:76:8b:9c:c6:45:a3:75:fa:17:e1: a1:27:de:5b:c0:e5:f2:5b:ed:79:11:28:45:eb:c6: fd:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:4D:77:B6:BD:DE:BA:D8:02:B9:66:B4:12:C2:8D:28:15:2A:33:D2 X509v3 Authority Key Identifier: keyid:F6:71:8A:5E:5E:42:D0:8E:25:3A:2F:B3:00:FF:09:C3:F5:35:1D:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F6D91/E517F2B69AE511EB837F135EC4F9AE02/9nGKXl5C0I4lOi-zAP8Jw_U1HTI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9nGKXl5C0I4lOi-zAP8Jw_U1HTI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6D91/E517F2B69AE511EB837F135EC4F9AE02/9nGKXl5C0I4lOi-zAP8Jw_U1HTI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:c5:39:ac:ac:4a:91:ab:36:39:63:5f:7a:90:5d:23:8e:ee: 42:38:24:7d:40:d1:e9:50:69:13:be:b7:6e:08:45:1a:0a:bd: ba:1e:10:b0:c0:02:e4:e4:59:b3:96:20:16:55:c1:de:9f:08: 85:2d:e7:23:7e:1b:ab:6b:d9:33:66:07:44:81:b9:15:cd:19: d8:aa:f0:f8:e1:8c:d4:d2:e9:f6:fe:f5:1a:2e:a7:d8:4f:ac: e9:ae:f8:38:81:66:43:05:bb:7a:eb:fe:01:cf:03:0b:a2:6a: 7d:13:cb:1f:70:24:c8:41:db:f1:2c:9e:73:0a:33:52:4b:8f: 99:62:fc:da:c3:8a:b5:ae:4b:d3:24:a0:9d:a1:05:58:c9:95: 2f:15:83:a5:2a:91:3b:cd:2d:fd:c4:f5:4f:8b:b8:a7:ca:36: 6e:24:d2:2a:f8:72:a6:17:0d:9b:31:d1:b5:ed:de:0c:eb:ea: c1:fe:ae:51:6e:95:65:1a:15:09:c3:d2:f7:ef:72:27:4f:69: 32:1b:1d:93:bb:b8:ca:40:99:13:d0:eb:87:9a:c8:78:09:c6: 35:b6:84:02:a6:f4:fc:9e:b5:bd:ec:e6:32:1d:20:a3:8f:8e: c6:ed:a9:e6:13:67:35:a4:f0:31:0c:e7:37:0d:6b:b4:5a:e8: e1:cd:55:20 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBlEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjZEOTExMTAvBgNVBAUTKEY2NzE4QTVFNUU0MkQwOEUyNTNBMkZCMzAwRkYwOUMz RjUzNTFEMzIwHhcNMjUwNjEyMjIyMjA4WhcNMjUwNjE5MjIyMjA4WjAYMRYwFAYD VQQDEw02ODRiNTMxMC02OWZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1Punh7v+vlib1NSU6fDUCQ7/gse+QLvPbkNlMA4YkUaMpWQnC9rfIZvG0TPU UA9MO+1lWGHaw/QbyydstDlGnsY2E33RswYPIHDqweQ8doph8x85DOlMST4LuY1L 4T1UZzjC8hqRlDr5CmkRawyulAHucuz7MuamsVYGlI4l2mJeTc49cyYV7n2iCWqd AQ12MzmGbPmPmbx5VfmfDM4R+pZtfneBw5Se0C/N4USRrUwBrd02AbX1zMS9Zf0W zCK14NH0FiD/EUcfxd8DzRqCPf7n/WMJnPRZGUcSxhKVn2YmHZmSG3aLnMZFo3X6 F+GhJ95bwOXyW+15EShF68b9TQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHZNd7a9 3rrYArlmtBLCjSgVKjPSMB8GA1UdIwQYMBaAFPZxil5eQtCOJTovswD/CcP1NR0y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNkQ5MS9FNTE3RjJCNjlB RTUxMUVCODM3RjEzNUVDNEY5QUUwMi85bkdLWGw1QzBJNGxPaS16QVA4SndfVTFI VEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzluR0tYbDVDMEk0bE9pLXpBUDhKd19VMUhUSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NkQ5MS9FNTE3RjJCNjlBRTUxMUVCODM3RjEzNUVDNEY5QUUwMi85bkdLWGw1QzBJ NGxPaS16QVA4SndfVTFIVEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCxxTmsrEqRqzY5Y196kF0jju5COCR9QNHpUGkTvrduCEUaCr26HhCw wALk5FmzliAWVcHenwiFLecjfhura9kzZgdEgbkVzRnYqvD44YzU0un2/vUaLqfY T6zprvg4gWZDBbt66/4BzwMLomp9E8sfcCTIQdvxLJ5zCjNSS4+ZYvzaw4q1rkvT JKCdoQVYyZUvFYOlKpE7zS39xPVPi7inyjZuJNIq+HKmFw2bMdG17d4M6+rB/q5R bpVlGhUJw9L373InT2kyGx2Tu7jKQJkT0OuHmsh4CcY1toQCpvT8nrW97OYyHSCj j47G7anmE2c1pPAxDOc3DWu0WujhzVUg -----END CERTIFICATE-----Generated at Sat Jun 14 20:22:15 2025 by rpki-client