$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9FA2/1C88B03A846411EAA9941540C4F9AE02/-gfo6rqEcKil_kuhPnXZ5f6jOyc.mft File: -gfo6rqEcKil_kuhPnXZ5f6jOyc.mft (raw, json) Hash identifier: BY7gDjdXlaNgAlTEqAFByhMEb/Wz9NqKudQU1645dmo= Subject key identifier: 24:F9:82:B9:29:65:3B:57:BE:00:95:74:79:17:03:88:9C:90:B7:12 Authority key identifier: FA:07:E8:EA:BA:84:70:A8:A5:FE:4B:A1:3E:75:D9:E5:FE:A3:3B:27 Certificate issuer: /CN=A91F9FA2/serialNumber=FA07E8EABA8470A8A5FE4BA13E75D9E5FEA33B27 Certificate serial: 09C3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-gfo6rqEcKil_kuhPnXZ5f6jOyc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F9FA2/1C88B03A846411EAA9941540C4F9AE02/-gfo6rqEcKil_kuhPnXZ5f6jOyc.mft Manifest number: 09BB Signing time: Thu 12 Jun 2025 19:47:24 +0000 Manifest this update: Thu 12 Jun 2025 19:47:24 +0000 Manifest next update: Thu 19 Jun 2025 19:47:24 +0000 Files and hashes: 1: -gfo6rqEcKil_kuhPnXZ5f6jOyc.crl (hash: xGisiAj+Ea+NJPUv745uKrQq8Jx8iqkUD4OsIHmoGuo=) 2: 0893031C846611EA9B99E043C4F9AE02.roa (hash: 3hay+KNg/2l74ymUeo3rJ7DbBbo6k73NfQvBnuqkfBY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F9FA2/1C88B03A846411EAA9941540C4F9AE02/-gfo6rqEcKil_kuhPnXZ5f6jOyc.crl rsync://rpki.apnic.net/member_repository/A91F9FA2/1C88B03A846411EAA9941540C4F9AE02/-gfo6rqEcKil_kuhPnXZ5f6jOyc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-gfo6rqEcKil_kuhPnXZ5f6jOyc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 19:47:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2499 (0x9c3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F9FA2, serialNumber=FA07E8EABA8470A8A5FE4BA13E75D9E5FEA33B27 Validity Not Before: Jun 12 19:47:24 2025 GMT Not After : Jun 19 19:47:24 2025 GMT Subject: CN=684b2ecc-4cd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:78:0f:d9:10:ce:7d:16:e2:1c:2c:6a:be:1f: e3:e3:58:4f:a1:ba:42:02:38:02:68:da:73:2a:9c: e7:87:2d:77:3c:e1:d6:94:13:ec:2c:4f:5c:d1:4a: ce:1f:72:77:9b:fd:ad:78:b1:25:8e:37:8f:57:b9: db:3c:4f:50:2d:73:ed:c5:7c:d4:4a:ac:cf:91:4e: 86:c5:ce:fa:d8:7f:fd:b4:94:c4:9e:22:a4:1d:90: 71:ae:6b:93:db:fa:0b:fd:ee:71:d2:a9:ea:6e:fe: ba:16:ff:71:70:0b:cc:21:55:2a:25:32:d1:80:57: 34:a1:ee:1a:11:f9:4c:65:99:3b:a2:87:80:48:23: fe:24:b2:2f:9a:46:93:65:d3:d6:c7:c2:74:57:61: 55:f6:38:56:86:e9:d1:34:92:e7:42:bb:a7:8f:53: 9e:ea:b2:7f:03:ef:e4:73:f6:ed:15:35:dc:47:9b: 0c:22:23:64:a6:e0:b1:d5:44:dd:1b:b7:dd:0c:56: b3:17:9d:b6:d2:df:74:24:92:09:db:f9:4d:70:19: 73:06:f5:f0:f7:93:04:7e:7d:4d:b7:0e:4b:b7:e3: d1:98:2a:60:96:99:cd:c0:a8:59:62:69:3e:8d:dc: 55:f2:b5:d8:2e:4b:35:f2:57:50:e5:52:6e:f9:68: e0:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:F9:82:B9:29:65:3B:57:BE:00:95:74:79:17:03:88:9C:90:B7:12 X509v3 Authority Key Identifier: keyid:FA:07:E8:EA:BA:84:70:A8:A5:FE:4B:A1:3E:75:D9:E5:FE:A3:3B:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F9FA2/1C88B03A846411EAA9941540C4F9AE02/-gfo6rqEcKil_kuhPnXZ5f6jOyc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-gfo6rqEcKil_kuhPnXZ5f6jOyc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9FA2/1C88B03A846411EAA9941540C4F9AE02/-gfo6rqEcKil_kuhPnXZ5f6jOyc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:e2:61:63:b7:74:23:29:ac:7f:f1:cf:58:89:1d:32:80:de: 3f:7d:24:ba:1c:27:d9:97:cb:81:4a:d6:2e:4c:26:cb:f4:66: 63:64:9d:8a:37:56:35:f2:55:6d:8a:8f:8e:a1:5d:df:87:b2: 83:40:19:78:08:bc:9b:4d:5e:a4:66:19:a6:d6:93:64:1f:5e: 1a:01:09:f0:71:98:2a:5c:b6:42:f2:95:c5:39:5e:1c:df:3c: 9d:77:99:5f:e6:5d:21:69:9e:8d:2b:04:98:58:e2:c4:c3:9b: 6a:6e:8c:19:1c:b5:ad:9e:87:52:9b:2b:aa:29:48:37:9d:18: 80:85:bd:6a:08:57:30:d6:bd:14:8b:04:a4:c6:fc:e5:95:8c: 95:a1:0a:7e:75:6c:fb:2e:40:e9:8e:15:76:53:b6:75:bd:12: 24:19:c8:39:a8:4e:9f:d8:a8:e2:89:e9:3c:04:d1:cb:98:e8: 00:8c:da:dc:9f:4b:65:96:35:dd:13:b9:51:5b:d6:3b:9e:15: 98:b7:59:41:3f:09:67:72:e0:18:dc:fe:4a:5a:ec:14:e0:e7: 21:fa:1c:19:77:99:f3:77:34:27:74:ae:43:03:9a:9a:e2:07: 26:0a:6b:19:d6:dd:c0:96:c8:0b:bb:a9:b4:60:f1:4a:4c:7e: c7:11:ab:e7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCcMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjlGQTIxMTAvBgNVBAUTKEZBMDdFOEVBQkE4NDcwQThBNUZFNEJBMTNFNzVEOUU1 RkVBMzNCMjcwHhcNMjUwNjEyMTk0NzI0WhcNMjUwNjE5MTk0NzI0WjAYMRYwFAYD VQQDEw02ODRiMmVjYy00Y2QxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtXgP2RDOfRbiHCxqvh/j41hPobpCAjgCaNpzKpznhy13POHWlBPsLE9c0UrO H3J3m/2teLEljjePV7nbPE9QLXPtxXzUSqzPkU6Gxc762H/9tJTEniKkHZBxrmuT 2/oL/e5x0qnqbv66Fv9xcAvMIVUqJTLRgFc0oe4aEflMZZk7ooeASCP+JLIvmkaT ZdPWx8J0V2FV9jhWhunRNJLnQrunj1Oe6rJ/A+/kc/btFTXcR5sMIiNkpuCx1UTd G7fdDFazF5220t90JJIJ2/lNcBlzBvXw95MEfn1Ntw5Lt+PRmCpglpnNwKhZYmk+ jdxV8rXYLks18ldQ5VJu+WjgTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCT5grkp ZTtXvgCVdHkXA4ickLcSMB8GA1UdIwQYMBaAFPoH6Oq6hHCopf5LoT512eX+ozsn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOUZBMi8xQzg4QjAzQTg0 NjQxMUVBQTk5NDE1NDBDNEY5QUUwMi8tZ2ZvNnJxRWNLaWxfa3VoUG5YWjVmNmpP eWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1nZm82cnFFY0tpbF9rdWhQblhaNWY2ak95Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OUZBMi8xQzg4QjAzQTg0NjQxMUVBQTk5NDE1NDBDNEY5QUUwMi8tZ2ZvNnJxRWNL aWxfa3VoUG5YWjVmNmpPeWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZ4mFjt3QjKax/8c9YiR0ygN4/fSS6HCfZl8uBStYuTCbL9GZjZJ2K N1Y18lVtio+OoV3fh7KDQBl4CLybTV6kZhmm1pNkH14aAQnwcZgqXLZC8pXFOV4c 3zydd5lf5l0haZ6NKwSYWOLEw5tqbowZHLWtnodSmyuqKUg3nRiAhb1qCFcw1r0U iwSkxvzllYyVoQp+dWz7LkDpjhV2U7Z1vRIkGcg5qE6f2Kjiiek8BNHLmOgAjNrc n0tlljXdE7lRW9Y7nhWYt1lBPwlncuAY3P5KWuwU4Och+hwZd5nzdzQndK5DA5qa 4gcmCmsZ1t3AlsgLu6m0YPFKTH7HEavn -----END CERTIFICATE-----Generated at Sat Jun 14 19:37:57 2025 by rpki-client