$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB03A/DFC68D643A1611ED9152BF0EC4F9AE02/i0b6Eepu4jUJnkhDPIJJehl7nXw.mft File: i0b6Eepu4jUJnkhDPIJJehl7nXw.mft (raw, json) Hash identifier: da23VlrKexTNruu3YFqMHUPztTt57kGawSnhgHhj7j8= Subject key identifier: 98:82:1D:1A:DA:19:7F:55:5D:DB:D3:F7:59:80:59:86:F4:39:91:C5 Authority key identifier: 8B:46:FA:11:EA:6E:E2:35:09:9E:48:43:3C:82:49:7A:19:7B:9D:7C Certificate issuer: /CN=A91FB03A/serialNumber=8B46FA11EA6EE235099E48433C82497A197B9D7C Certificate serial: 021B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i0b6Eepu4jUJnkhDPIJJehl7nXw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FB03A/DFC68D643A1611ED9152BF0EC4F9AE02/i0b6Eepu4jUJnkhDPIJJehl7nXw.mft Manifest number: 0211 Signing time: Sun 15 Jun 2025 01:40:48 +0000 Manifest this update: Sun 15 Jun 2025 01:40:47 +0000 Manifest next update: Sun 22 Jun 2025 01:40:47 +0000 Files and hashes: 1: i0b6Eepu4jUJnkhDPIJJehl7nXw.crl (hash: CUD806/glyWPUUotnORptbdyJs4M5pcVrPYvoK1n6QY=) 2: 0B3B85D63A1B11EDAE662B14C4F9AE02.roa (hash: NR8OS1L1YDEOVGgB6cb2fttAqoXgsKVRMpQfg5GvzjQ=) 3: 0BF33B7C3A1B11EDAE662B14C4F9AE02.roa (hash: U57sQE5yclVx7OH+nAtAbjTBaki6Yvzg4fauYYq6XuI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FB03A/DFC68D643A1611ED9152BF0EC4F9AE02/i0b6Eepu4jUJnkhDPIJJehl7nXw.crl rsync://rpki.apnic.net/member_repository/A91FB03A/DFC68D643A1611ED9152BF0EC4F9AE02/i0b6Eepu4jUJnkhDPIJJehl7nXw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i0b6Eepu4jUJnkhDPIJJehl7nXw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 01:40:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 539 (0x21b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FB03A, serialNumber=8B46FA11EA6EE235099E48433C82497A197B9D7C Validity Not Before: Jun 15 01:40:47 2025 GMT Not After : Jun 22 01:40:47 2025 GMT Subject: CN=684e24a0-4dd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:b9:fc:c5:6a:fc:41:24:b5:55:1f:40:7e:e3: 7c:5a:20:ff:26:29:7e:4b:5c:9e:3c:7d:99:40:4d: 0c:25:ed:a4:e8:16:c7:67:32:2c:98:dc:6d:88:5f: 3f:6a:05:0c:58:e2:24:49:95:ce:8f:dc:ab:b6:52: 06:84:c9:79:e8:53:5a:a5:a7:05:8d:d1:fb:9b:4f: ca:b5:95:e1:cd:46:ac:1a:44:fb:d0:86:8d:82:8e: 21:3e:4e:d9:55:3d:5e:bd:e2:a5:05:1f:ed:89:da: 37:c2:01:ab:2d:11:b2:af:fb:29:ab:0d:d3:47:87: 70:fa:00:f0:37:73:35:44:f5:95:e7:46:c3:a3:3e: 00:db:51:f5:89:81:df:02:aa:9e:63:09:b5:36:87: f6:7d:ea:95:3d:70:c0:ce:74:f2:fd:37:36:5e:01: 47:48:90:95:03:77:42:7d:e1:a8:b6:39:a4:a4:4f: e8:c3:a3:80:d5:7f:f7:8a:b4:e5:a6:60:57:42:cc: 12:9e:94:55:cd:05:06:77:4f:90:0b:a8:6c:ea:34: 64:17:7c:f8:4e:de:bf:22:e2:89:51:6d:b1:a2:c1: 6e:b6:0c:60:85:0e:b0:ec:47:bb:50:a6:62:c7:a4: 23:eb:08:e2:44:5e:26:a8:7a:0b:17:7a:f2:5d:1f: ce:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:82:1D:1A:DA:19:7F:55:5D:DB:D3:F7:59:80:59:86:F4:39:91:C5 X509v3 Authority Key Identifier: keyid:8B:46:FA:11:EA:6E:E2:35:09:9E:48:43:3C:82:49:7A:19:7B:9D:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FB03A/DFC68D643A1611ED9152BF0EC4F9AE02/i0b6Eepu4jUJnkhDPIJJehl7nXw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i0b6Eepu4jUJnkhDPIJJehl7nXw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB03A/DFC68D643A1611ED9152BF0EC4F9AE02/i0b6Eepu4jUJnkhDPIJJehl7nXw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:3d:10:bf:b6:8c:29:8e:7c:11:95:9c:9f:57:61:f5:c4:c2: 9f:db:38:c7:14:5d:41:57:b1:46:8a:6f:66:69:46:29:5a:78: 95:57:11:ee:96:9b:14:93:e2:05:b0:70:c0:6f:d8:c5:ac:63: b8:20:34:4d:a7:4d:96:8e:47:95:85:41:d2:51:b8:3d:eb:10: 36:3b:bd:aa:9f:83:5b:45:0f:b0:d9:dd:f1:b2:4f:bb:9c:28: 83:37:f8:98:23:bf:83:98:aa:b7:aa:1a:05:63:28:7c:36:56: 3a:0b:8f:46:7a:ec:44:27:cb:e3:8d:40:64:12:b0:57:32:df: c6:23:d8:0c:09:fe:86:02:fb:3b:18:e7:c2:a8:d7:ae:75:e8: 0e:5b:fe:a0:e0:bb:4d:47:5d:d3:04:0e:a1:11:10:39:ba:c4: 02:00:2a:69:e6:b8:7f:25:5d:91:8a:e8:12:e1:1f:0d:62:cc: a2:0f:f3:fd:76:3b:27:eb:67:ad:f4:66:59:8b:26:4a:eb:eb: 78:52:d9:64:0d:fe:72:e2:dd:19:d2:5d:f6:db:e8:bd:7c:49: 67:b7:48:7d:ed:63:d9:bb:13:1c:1a:41:ef:95:69:32:14:08: 96:b3:2c:27:ca:74:67:84:a2:94:8f:3b:3c:c8:9b:aa:64:05: 16:a6:59:22 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkIwM0ExMTAvBgNVBAUTKDhCNDZGQTExRUE2RUUyMzUwOTlFNDg0MzNDODI0OTdB MTk3QjlEN0MwHhcNMjUwNjE1MDE0MDQ3WhcNMjUwNjIyMDE0MDQ3WjAYMRYwFAYD VQQDEw02ODRlMjRhMC00ZGQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1rn8xWr8QSS1VR9AfuN8WiD/Jil+S1yePH2ZQE0MJe2k6BbHZzIsmNxtiF8/ agUMWOIkSZXOj9yrtlIGhMl56FNapacFjdH7m0/KtZXhzUasGkT70IaNgo4hPk7Z VT1eveKlBR/tido3wgGrLRGyr/spqw3TR4dw+gDwN3M1RPWV50bDoz4A21H1iYHf AqqeYwm1Nof2feqVPXDAznTy/Tc2XgFHSJCVA3dCfeGotjmkpE/ow6OA1X/3irTl pmBXQswSnpRVzQUGd0+QC6hs6jRkF3z4Tt6/IuKJUW2xosFutgxghQ6w7Ee7UKZi x6Qj6wjiRF4mqHoLF3ryXR/OAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJiCHRra GX9VXdvT91mAWYb0OZHFMB8GA1UdIwQYMBaAFItG+hHqbuI1CZ5IQzyCSXoZe518 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQjAzQS9ERkM2OEQ2NDNB MTYxMUVEOTE1MkJGMEVDNEY5QUUwMi9pMGI2RWVwdTRqVUpua2hEUElKSmVobDdu WHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2kwYjZFZXB1NGpVSm5raERQSUpKZWhsN25Ydy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QjAzQS9ERkM2OEQ2NDNBMTYxMUVEOTE1MkJGMEVDNEY5QUUwMi9pMGI2RWVwdTRq VUpua2hEUElKSmVobDduWHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBdPRC/towpjnwRlZyfV2H1xMKf2zjHFF1BV7FGim9maUYpWniVVxHu lpsUk+IFsHDAb9jFrGO4IDRNp02WjkeVhUHSUbg96xA2O72qn4NbRQ+w2d3xsk+7 nCiDN/iYI7+DmKq3qhoFYyh8NlY6C49GeuxEJ8vjjUBkErBXMt/GI9gMCf6GAvs7 GOfCqNeudegOW/6g4LtNR13TBA6hERA5usQCACpp5rh/JV2RiugS4R8NYsyiD/P9 djsn62et9GZZiyZK6+t4UtlkDf5y4t0Z0l322+i9fElnt0h97WPZuxMcGkHvlWky FAiWsywnynRnhKKUjzs8yJuqZAUWplki -----END CERTIFICATE-----Generated at Sun Jun 15 22:05:41 2025 by rpki-client