$ rpki-client -vvf rpki.apnic.net/member_repository/A91F71E8/62B787A0EEE411E89E665D4DC4F9AE02/s9eTeQ4RSsj43IK64zwdkr29tes.mft File: s9eTeQ4RSsj43IK64zwdkr29tes.mft (raw, json) Hash identifier: eME0yHnLKSOPqHWx4XFOHEbuEatEa04jCfiO4utXckw= Subject key identifier: 90:1D:59:E5:3B:52:6F:B0:F5:76:C6:E0:3A:97:EB:E0:CC:10:9C:2A Authority key identifier: B3:D7:93:79:0E:11:4A:C8:F8:DC:82:BA:E3:3C:1D:92:BD:BD:B5:EB Certificate issuer: /CN=A91F71E8/serialNumber=B3D793790E114AC8F8DC82BAE33C1D92BDBDB5EB Certificate serial: 085B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s9eTeQ4RSsj43IK64zwdkr29tes.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F71E8/62B787A0EEE411E89E665D4DC4F9AE02/s9eTeQ4RSsj43IK64zwdkr29tes.mft Manifest number: 1A21 Signing time: Wed 18 Jun 2025 17:09:05 +0000 Manifest this update: Wed 18 Jun 2025 17:09:05 +0000 Manifest next update: Wed 25 Jun 2025 17:09:05 +0000 Files and hashes: 1: s9eTeQ4RSsj43IK64zwdkr29tes.crl (hash: 0RgMNEewklF02/RjMRJ+drq1Z0kGccU45yw1o0MrEIE=) 2: F87AC94C35BB11EDB0314E29C4F9AE02.roa (hash: QQ2kSpkziq7c/OfdUjW7k6le4ABn54sNBVAUYS+VxSE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F71E8/62B787A0EEE411E89E665D4DC4F9AE02/s9eTeQ4RSsj43IK64zwdkr29tes.crl rsync://rpki.apnic.net/member_repository/A91F71E8/62B787A0EEE411E89E665D4DC4F9AE02/s9eTeQ4RSsj43IK64zwdkr29tes.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s9eTeQ4RSsj43IK64zwdkr29tes.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Jun 2025 17:09:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2139 (0x85b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F71E8, serialNumber=B3D793790E114AC8F8DC82BAE33C1D92BDBDB5EB Validity Not Before: Jun 18 17:09:05 2025 GMT Not After : Jun 25 17:09:05 2025 GMT Subject: CN=6852f2b1-8146 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:db:a7:e1:e0:2e:32:ce:16:94:63:a2:ef:9a: 48:c3:a8:1a:0e:14:d9:13:c5:b5:3d:d3:6b:b9:69: a2:48:9f:ff:e9:2e:fe:ed:1a:e3:2a:5b:2a:09:26: 07:6e:a4:f9:ab:8c:4f:f1:55:71:7f:0a:73:c6:21: dd:a5:3a:f3:4c:30:ef:ff:e6:18:6d:7b:02:19:51: a4:23:32:5e:85:c2:25:75:30:4b:c6:8e:99:bf:f9: e1:f8:d1:30:9a:6b:a0:71:c2:54:29:20:d4:c5:bc: 60:cf:07:0f:4f:db:1a:ba:31:d0:ec:18:1c:16:ad: 22:96:bb:40:e6:e9:e6:48:fd:92:62:6d:50:7c:47: db:01:19:f6:58:e4:fd:0f:65:fe:03:06:58:61:ef: 92:c0:b6:8f:fa:11:51:e7:92:db:e8:1f:2d:c7:f5: a2:b1:5c:e4:ce:8e:fe:df:62:a3:35:b2:0f:0e:08: 79:2d:20:de:2c:be:1d:89:61:20:7a:bc:e2:a5:59: 1e:10:c1:df:88:68:ca:62:84:28:f6:87:d8:e0:55: c4:39:0f:7a:ab:a7:a3:0e:55:a1:e9:68:90:d5:7e: ce:e4:5d:3d:19:41:bb:32:cf:6b:5d:d0:48:39:66: 1a:4a:2a:a7:73:28:9b:47:7f:1c:46:5f:da:a4:58: ec:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:1D:59:E5:3B:52:6F:B0:F5:76:C6:E0:3A:97:EB:E0:CC:10:9C:2A X509v3 Authority Key Identifier: keyid:B3:D7:93:79:0E:11:4A:C8:F8:DC:82:BA:E3:3C:1D:92:BD:BD:B5:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F71E8/62B787A0EEE411E89E665D4DC4F9AE02/s9eTeQ4RSsj43IK64zwdkr29tes.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s9eTeQ4RSsj43IK64zwdkr29tes.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F71E8/62B787A0EEE411E89E665D4DC4F9AE02/s9eTeQ4RSsj43IK64zwdkr29tes.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:4b:27:0f:c5:67:ba:ab:0b:1e:8a:51:c8:c1:3c:2a:d2:58: d6:4c:c7:f6:6a:90:e6:6d:29:35:d6:25:0c:fe:9d:97:99:3b: 87:33:2f:01:db:0d:50:66:9e:b5:9e:1a:c0:75:99:30:0f:c5: 06:8e:98:1c:86:78:8f:a9:a4:8b:e0:ff:43:c6:04:2c:9d:d4: 77:18:b3:f1:5f:e8:6c:26:21:18:ce:45:48:e7:fb:7f:bd:63: cb:34:5c:c5:47:f0:3e:8c:f9:da:26:b7:b9:ec:ba:41:d6:b4: c6:f3:f0:07:82:9e:5e:24:19:a5:7c:2e:42:16:06:30:bd:23: fa:d5:92:7e:01:d8:e0:30:ca:58:c9:f2:b5:65:e0:63:d5:82: 26:c7:51:48:77:9d:3f:10:48:27:0d:b9:f2:fd:45:eb:7f:a9: 1d:e2:dc:c7:32:1d:b8:fc:76:22:87:98:61:60:6e:a8:31:9c: 5b:4a:75:aa:eb:4f:d1:5f:0e:48:f4:a6:a1:0a:23:7b:46:1e: 14:3b:9a:88:17:8f:57:d6:3d:9a:0e:ef:c9:71:b7:28:a4:09: 14:67:75:9c:4b:42:cc:df:e3:31:78:84:40:ae:52:1d:c1:99: 1d:f6:56:74:58:c3:1e:dc:2e:d7:3a:ab:13:45:79:ba:bb:e6: 03:5b:20:67 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCFswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjcxRTgxMTAvBgNVBAUTKEIzRDc5Mzc5MEUxMTRBQzhGOERDODJCQUUzM0MxRDky QkRCREI1RUIwHhcNMjUwNjE4MTcwOTA1WhcNMjUwNjI1MTcwOTA1WjAYMRYwFAYD VQQDEw02ODUyZjJiMS04MTQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAytun4eAuMs4WlGOi75pIw6gaDhTZE8W1PdNruWmiSJ//6S7+7RrjKlsqCSYH bqT5q4xP8VVxfwpzxiHdpTrzTDDv/+YYbXsCGVGkIzJehcIldTBLxo6Zv/nh+NEw mmugccJUKSDUxbxgzwcPT9saujHQ7BgcFq0ilrtA5unmSP2SYm1QfEfbARn2WOT9 D2X+AwZYYe+SwLaP+hFR55Lb6B8tx/WisVzkzo7+32KjNbIPDgh5LSDeLL4diWEg erzipVkeEMHfiGjKYoQo9ofY4FXEOQ96q6ejDlWh6WiQ1X7O5F09GUG7Ms9rXdBI OWYaSiqncyibR38cRl/apFjsRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJAdWeU7 Um+w9XbG4DqX6+DMEJwqMB8GA1UdIwQYMBaAFLPXk3kOEUrI+NyCuuM8HZK9vbXr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzFFOC82MkI3ODdBMEVF RTQxMUU4OUU2NjVENERDNEY5QUUwMi9zOWVUZVE0UlNzajQzSUs2NHp3ZGtyMjl0 ZXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3M5ZVRlUTRSU3NqNDNJSzY0endka3IyOXRlcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NzFFOC82MkI3ODdBMEVFRTQxMUU4OUU2NjVENERDNEY5QUUwMi9zOWVUZVE0UlNz ajQzSUs2NHp3ZGtyMjl0ZXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCMSycPxWe6qwseilHIwTwq0ljWTMf2apDmbSk11iUM/p2XmTuHMy8B 2w1QZp61nhrAdZkwD8UGjpgchniPqaSL4P9DxgQsndR3GLPxX+hsJiEYzkVI5/t/ vWPLNFzFR/A+jPnaJre57LpB1rTG8/AHgp5eJBmlfC5CFgYwvSP61ZJ+AdjgMMpY yfK1ZeBj1YImx1FId50/EEgnDbny/UXrf6kd4tzHMh24/HYih5hhYG6oMZxbSnWq 60/RXw5I9KahCiN7Rh4UO5qIF49X1j2aDu/JcbcopAkUZ3WcS0LM3+MxeIRArlId wZkd9lZ0WMMe3C7XOqsTRXm6u+YDWyBn -----END CERTIFICATE-----Generated at Thu Jun 19 05:17:52 2025 by rpki-client