$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7FEA/1EE3AEEC604811EA8C690B38C4F9AE02/_g28w89QoeDrA9MSluOfuogMGQU.mft File: _g28w89QoeDrA9MSluOfuogMGQU.mft (raw, json) Hash identifier: MJZClssBNjiBeajA7bBzU5WFzWeFEPCBiiS1c2JNUc4= Subject key identifier: E0:0C:D6:19:90:B1:84:E3:5D:F7:6D:44:5E:BC:74:BD:20:93:2D:32 Authority key identifier: FE:0D:BC:C3:CF:50:A1:E0:EB:03:D3:12:96:E3:9F:BA:88:0C:19:05 Certificate issuer: /CN=A91F7FEA/serialNumber=FE0DBCC3CF50A1E0EB03D31296E39FBA880C1905 Certificate serial: 0A94 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_g28w89QoeDrA9MSluOfuogMGQU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F7FEA/1EE3AEEC604811EA8C690B38C4F9AE02/_g28w89QoeDrA9MSluOfuogMGQU.mft Manifest number: 0A86 Signing time: Thu 12 Jun 2025 19:25:08 +0000 Manifest this update: Thu 12 Jun 2025 19:25:08 +0000 Manifest next update: Thu 19 Jun 2025 19:25:08 +0000 Files and hashes: 1: _g28w89QoeDrA9MSluOfuogMGQU.crl (hash: /ghnlQ/gXFGGyyZWxLU2vZUEGIzJP05evfI+mWVTaoY=) 2: AF5AC6B69E3F11EEA6B6CB0DC4F9AE02.roa (hash: aO7ZzsxjyqFcAzfGikfamjQffULd11X020Rl4PUmMgc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F7FEA/1EE3AEEC604811EA8C690B38C4F9AE02/_g28w89QoeDrA9MSluOfuogMGQU.crl rsync://rpki.apnic.net/member_repository/A91F7FEA/1EE3AEEC604811EA8C690B38C4F9AE02/_g28w89QoeDrA9MSluOfuogMGQU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_g28w89QoeDrA9MSluOfuogMGQU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 19:25:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2708 (0xa94) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F7FEA, serialNumber=FE0DBCC3CF50A1E0EB03D31296E39FBA880C1905 Validity Not Before: Jun 12 19:25:08 2025 GMT Not After : Jun 19 19:25:08 2025 GMT Subject: CN=684b2994-4177 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:2f:14:55:59:c3:3d:d4:b6:d0:0b:1e:ee:ce: 84:1f:b3:74:35:54:30:5f:e6:a6:cb:13:36:47:80: f9:97:8a:bd:88:cb:98:ac:bf:4d:35:d0:0b:f7:e5: 4e:d4:f2:96:e4:93:bc:9b:49:02:94:0b:f0:4f:59: 09:8e:61:95:1c:ca:6a:08:2a:f0:43:46:a8:af:61: ff:cb:79:7f:fc:e1:b0:e3:54:4a:75:5c:25:ff:5f: 59:63:77:01:72:4b:6b:49:1c:58:49:1d:11:22:b0: b5:d9:5d:ed:79:86:18:57:54:69:ff:54:f7:77:52: 60:9b:bf:d6:c9:da:04:5b:47:d3:e7:a6:48:72:d0: e0:40:ec:14:72:30:41:e8:56:ad:fc:b9:72:70:2d: 64:4a:b3:b7:22:4a:da:6e:b9:d2:ac:d3:0d:25:a7: 5b:1c:06:f2:df:2a:72:03:ac:4e:dd:39:a2:2a:92: de:17:cb:c9:ab:3f:84:b9:88:3c:3a:57:08:a5:2e: 13:67:2a:57:ee:d7:b9:98:72:60:d2:21:62:e1:5b: ed:5e:a9:c8:83:0d:11:88:e5:77:4a:3d:7e:30:53: ea:25:2c:b3:eb:de:d9:d9:5e:0c:b2:a2:5a:79:fc: 7a:9b:07:af:5b:33:3d:9d:77:c5:f1:81:06:46:5f: 7c:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:0C:D6:19:90:B1:84:E3:5D:F7:6D:44:5E:BC:74:BD:20:93:2D:32 X509v3 Authority Key Identifier: keyid:FE:0D:BC:C3:CF:50:A1:E0:EB:03:D3:12:96:E3:9F:BA:88:0C:19:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F7FEA/1EE3AEEC604811EA8C690B38C4F9AE02/_g28w89QoeDrA9MSluOfuogMGQU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_g28w89QoeDrA9MSluOfuogMGQU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7FEA/1EE3AEEC604811EA8C690B38C4F9AE02/_g28w89QoeDrA9MSluOfuogMGQU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:2b:c1:e2:a9:56:90:e0:76:ef:15:11:b0:90:17:50:99:ba: 88:d6:6f:ae:15:f0:56:03:61:54:46:e4:2a:55:12:3a:fa:9c: 60:9d:ab:1d:4c:59:ea:ed:1a:4c:3a:6f:64:c7:b1:6e:db:aa: 19:71:8f:2e:b4:a9:4b:2b:ae:e7:0d:8d:35:fa:63:4e:fe:9b: e5:fd:8a:2b:c0:ab:75:e1:6a:40:b7:7f:ee:2e:91:24:65:a8: c0:bd:8f:d2:80:de:b1:07:cb:aa:91:a2:ee:35:7d:fd:33:f1: c8:97:6d:74:4a:33:5f:e0:8c:6d:5e:31:57:9f:5d:0d:c6:ec: bf:3c:ca:4a:15:61:e4:eb:e8:72:07:5e:87:c5:6d:cb:5f:0e: f5:d0:a5:8c:3f:51:e6:e1:97:92:46:80:b5:70:20:60:f9:5a: f1:73:74:5f:08:24:82:ab:b8:a3:c0:f6:05:41:b3:ba:4f:10: c6:29:cf:83:86:e4:f2:65:fd:86:f6:67:ee:9e:ba:fd:b2:29: 18:7c:cb:ff:3a:e0:26:5c:29:0a:90:40:55:90:59:eb:d3:5d: 89:1e:73:bd:79:26:9f:e6:03:27:3b:2e:77:79:37:c1:d6:83: bb:20:12:1f:17:ee:46:f0:fb:3d:96:45:e7:fd:73:41:6d:ac: 90:b6:c2:50 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCpQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjdGRUExMTAvBgNVBAUTKEZFMERCQ0MzQ0Y1MEExRTBFQjAzRDMxMjk2RTM5RkJB ODgwQzE5MDUwHhcNMjUwNjEyMTkyNTA4WhcNMjUwNjE5MTkyNTA4WjAYMRYwFAYD VQQDEw02ODRiMjk5NC00MTc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApy8UVVnDPdS20Ase7s6EH7N0NVQwX+amyxM2R4D5l4q9iMuYrL9NNdAL9+VO 1PKW5JO8m0kClAvwT1kJjmGVHMpqCCrwQ0aor2H/y3l//OGw41RKdVwl/19ZY3cB cktrSRxYSR0RIrC12V3teYYYV1Rp/1T3d1Jgm7/WydoEW0fT56ZIctDgQOwUcjBB 6Fat/LlycC1kSrO3IkrabrnSrNMNJadbHAby3ypyA6xO3TmiKpLeF8vJqz+EuYg8 OlcIpS4TZypX7te5mHJg0iFi4VvtXqnIgw0RiOV3Sj1+MFPqJSyz697Z2V4MsqJa efx6mwevWzM9nXfF8YEGRl98awIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOAM1hmQ sYTjXfdtRF68dL0gky0yMB8GA1UdIwQYMBaAFP4NvMPPUKHg6wPTEpbjn7qIDBkF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGN0ZFQS8xRUUzQUVFQzYw NDgxMUVBOEM2OTBCMzhDNEY5QUUwMi9fZzI4dzg5UW9lRHJBOU1TbHVPZnVvZ01H UVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19nMjh3ODlRb2VEckE5TVNsdU9mdW9nTUdRVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG N0ZFQS8xRUUzQUVFQzYwNDgxMUVBOEM2OTBCMzhDNEY5QUUwMi9fZzI4dzg5UW9l RHJBOU1TbHVPZnVvZ01HUVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCLK8HiqVaQ4HbvFRGwkBdQmbqI1m+uFfBWA2FURuQqVRI6+pxgnasd TFnq7RpMOm9kx7Fu26oZcY8utKlLK67nDY01+mNO/pvl/YorwKt14WpAt3/uLpEk ZajAvY/SgN6xB8uqkaLuNX39M/HIl210SjNf4IxtXjFXn10Nxuy/PMpKFWHk6+hy B16HxW3LXw710KWMP1Hm4ZeSRoC1cCBg+Vrxc3RfCCSCq7ijwPYFQbO6TxDGKc+D huTyZf2G9mfunrr9sikYfMv/OuAmXCkKkEBVkFnr012JHnO9eSaf5gMnOy53eTfB 1oO7IBIfF+5G8Ps9lkXn/XNBbayQtsJQ -----END CERTIFICATE-----Generated at Sat Jun 14 19:24:59 2025 by rpki-client