$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA5A2/4670EAAC98F611EEBBF1F417C4F9AE02/9bEXBUr1CcLDM2nalh9Ebdyrg0I.mft File: 9bEXBUr1CcLDM2nalh9Ebdyrg0I.mft (raw, json) Hash identifier: zJ3fdEEJP1U09Ss8kiQd1bw0Rm7MzQsXvse6pY7Fsp8= Subject key identifier: B3:C8:41:07:13:F8:3C:F6:DA:37:4F:BC:F7:AD:6B:6E:E3:9F:ED:8F Authority key identifier: F5:B1:17:05:4A:F5:09:C2:C3:33:69:DA:96:1F:44:6D:DC:AB:83:42 Certificate issuer: /CN=A91FA5A2/serialNumber=F5B117054AF509C2C33369DA961F446DDCAB8342 Certificate serial: 0134 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9bEXBUr1CcLDM2nalh9Ebdyrg0I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FA5A2/4670EAAC98F611EEBBF1F417C4F9AE02/9bEXBUr1CcLDM2nalh9Ebdyrg0I.mft Manifest number: 012B Signing time: Fri 13 Jun 2025 03:48:19 +0000 Manifest this update: Fri 13 Jun 2025 03:48:18 +0000 Manifest next update: Fri 20 Jun 2025 03:48:18 +0000 Files and hashes: 1: 9bEXBUr1CcLDM2nalh9Ebdyrg0I.crl (hash: HdyG9798Z4JyhgwUOheYEVrl5dmGoKKUiI4b86F+4sM=) 2: 9FE80B2898F711EE87DF6E1FC4F9AE02.roa (hash: D3GA9GI+1ZpOYK34vPRNum86peu3I5thgqu5liFntgU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FA5A2/4670EAAC98F611EEBBF1F417C4F9AE02/9bEXBUr1CcLDM2nalh9Ebdyrg0I.crl rsync://rpki.apnic.net/member_repository/A91FA5A2/4670EAAC98F611EEBBF1F417C4F9AE02/9bEXBUr1CcLDM2nalh9Ebdyrg0I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9bEXBUr1CcLDM2nalh9Ebdyrg0I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 03:48:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 308 (0x134) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA5A2, serialNumber=F5B117054AF509C2C33369DA961F446DDCAB8342 Validity Not Before: Jun 13 03:48:18 2025 GMT Not After : Jun 20 03:48:18 2025 GMT Subject: CN=684b9f83-aa79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:09:c0:40:17:38:2d:4b:d3:83:7b:29:14:3a: 98:48:da:ea:aa:33:fd:8a:fb:c2:27:d8:85:b6:6d: 80:4d:bd:bf:0a:85:9c:59:1e:9f:31:54:cb:1e:0b: df:83:60:bd:6d:4b:6f:21:cf:16:12:1b:aa:cd:56: 7d:1b:c2:06:00:a1:9d:a8:79:70:5c:f2:ac:2b:7a: 2e:12:87:2c:4f:b2:fa:ce:2e:87:25:b4:99:6a:f9: 16:ec:02:65:10:dc:00:03:3c:f2:d6:f1:43:91:18: c2:c0:c2:4f:5d:e8:a2:f8:48:b1:d3:1b:5a:d2:e1: 0d:98:3b:8c:d1:43:7d:42:e8:df:9e:2e:6c:5e:45: 6a:c4:1d:7d:dd:32:68:1a:7c:2b:6e:62:24:63:8f: ff:f4:a9:ca:6c:ed:42:fe:6d:bd:b3:da:b5:6a:f5: ce:33:7b:d6:28:d3:bb:a1:aa:81:0f:c8:39:cf:a5: b2:a4:9c:de:60:83:af:95:00:84:df:59:e9:2e:e6: 5b:11:0c:a8:36:b0:0f:cf:47:6b:96:ca:74:ec:3d: 33:cd:37:04:22:d6:d1:db:ad:8f:22:f2:b7:75:1b: c8:43:7a:df:a6:8b:bf:86:c4:e6:20:49:2b:74:b1: 68:79:48:70:60:27:e4:e5:7d:d9:35:d3:0e:fa:e3: c0:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:C8:41:07:13:F8:3C:F6:DA:37:4F:BC:F7:AD:6B:6E:E3:9F:ED:8F X509v3 Authority Key Identifier: keyid:F5:B1:17:05:4A:F5:09:C2:C3:33:69:DA:96:1F:44:6D:DC:AB:83:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FA5A2/4670EAAC98F611EEBBF1F417C4F9AE02/9bEXBUr1CcLDM2nalh9Ebdyrg0I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9bEXBUr1CcLDM2nalh9Ebdyrg0I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA5A2/4670EAAC98F611EEBBF1F417C4F9AE02/9bEXBUr1CcLDM2nalh9Ebdyrg0I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:01:a9:85:01:fc:4f:5a:4d:01:22:ae:2d:87:ca:5d:d9:cd: 8f:bd:a1:a7:b7:b4:17:c3:9e:92:ed:54:9c:7d:3b:eb:6e:97: d4:79:3e:2a:cc:2e:68:e9:f6:0a:f1:34:06:c2:e1:fe:2e:b4: 4d:c6:42:14:ef:e3:52:98:ae:8e:c7:7a:f8:59:72:5d:6f:b2: 8e:3f:59:d7:33:8b:86:aa:e1:4c:e1:b2:8a:e4:b0:46:87:9f: 17:63:d7:cf:c6:97:c7:ea:6e:ee:92:83:fe:7c:05:cf:6d:ad: 69:64:ba:7b:fe:42:e9:c4:8f:9a:4a:ec:69:41:a0:5c:a3:09: 6a:1e:22:6d:6d:62:8a:41:77:71:cf:0e:ef:b5:d9:5b:32:26: 72:2e:8b:ef:4e:d2:22:f6:8f:15:bc:b5:24:b4:a8:d9:60:5e: 59:1a:49:d9:aa:70:14:43:c7:bf:68:03:3f:4f:cf:23:a4:2b: 03:fc:4d:5d:47:29:79:8f:a1:f6:d5:be:12:a5:37:7f:51:dd: 40:48:eb:4a:f3:7b:0e:cd:01:31:1f:69:73:ee:88:49:c1:d5: 23:1f:c1:99:64:8e:19:bf:5f:4c:5b:eb:1a:81:05:43:6a:18: a3:a7:c9:46:54:42:df:9d:2a:5f:04:38:d0:97:fa:14:90:e8: c5:3e:19:ee -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkE1QTIxMTAvBgNVBAUTKEY1QjExNzA1NEFGNTA5QzJDMzMzNjlEQTk2MUY0NDZE RENBQjgzNDIwHhcNMjUwNjEzMDM0ODE4WhcNMjUwNjIwMDM0ODE4WjAYMRYwFAYD VQQDEw02ODRiOWY4My1hYTc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsAnAQBc4LUvTg3spFDqYSNrqqjP9ivvCJ9iFtm2ATb2/CoWcWR6fMVTLHgvf g2C9bUtvIc8WEhuqzVZ9G8IGAKGdqHlwXPKsK3ouEocsT7L6zi6HJbSZavkW7AJl ENwAAzzy1vFDkRjCwMJPXeii+Eix0xta0uENmDuM0UN9Qujfni5sXkVqxB193TJo GnwrbmIkY4//9KnKbO1C/m29s9q1avXOM3vWKNO7oaqBD8g5z6WypJzeYIOvlQCE 31npLuZbEQyoNrAPz0drlsp07D0zzTcEItbR262PIvK3dRvIQ3rfpou/hsTmIEkr dLFoeUhwYCfk5X3ZNdMO+uPAuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLPIQQcT +Dz22jdPvPeta27jn+2PMB8GA1UdIwQYMBaAFPWxFwVK9QnCwzNp2pYfRG3cq4NC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQTVBMi80NjcwRUFBQzk4 RjYxMUVFQkJGMUY0MTdDNEY5QUUwMi85YkVYQlVyMUNjTERNMm5hbGg5RWJkeXJn MEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzliRVhCVXIxQ2NMRE0ybmFsaDlFYmR5cmcwSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QTVBMi80NjcwRUFBQzk4RjYxMUVFQkJGMUY0MTdDNEY5QUUwMi85YkVYQlVyMUNj TERNMm5hbGg5RWJkeXJnMEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAkAamFAfxPWk0BIq4th8pd2c2PvaGnt7QXw56S7VScfTvrbpfUeT4q zC5o6fYK8TQGwuH+LrRNxkIU7+NSmK6Ox3r4WXJdb7KOP1nXM4uGquFM4bKK5LBG h58XY9fPxpfH6m7ukoP+fAXPba1pZLp7/kLpxI+aSuxpQaBcowlqHiJtbWKKQXdx zw7vtdlbMiZyLovvTtIi9o8VvLUktKjZYF5ZGknZqnAUQ8e/aAM/T88jpCsD/E1d Ryl5j6H21b4SpTd/Ud1ASOtK83sOzQExH2lz7ohJwdUjH8GZZI4Zv19MW+sagQVD ahijp8lGVELfnSpfBDjQl/oUkOjFPhnu -----END CERTIFICATE-----Generated at Sat Jun 14 17:42:54 2025 by rpki-client