$ rpki-client -vvf rpki.apnic.net/member_repository/A91FBC89/9E7262BEEFCE11EF893FF70EC4F9AE02/sXSj1LqbR24rMeR8cqKY0ETZh4U.mft File: sXSj1LqbR24rMeR8cqKY0ETZh4U.mft (raw, json) Hash identifier: Y9J3YqhjhGEA/qdm5LB5qGO90Vym9XiaZL6ciZoQoi4= Subject key identifier: F0:AE:AD:30:97:E4:58:0F:35:9C:28:A5:CF:57:97:26:B4:0A:E2:44 Authority key identifier: B1:74:A3:D4:BA:9B:47:6E:2B:31:E4:7C:72:A2:98:D0:44:D9:87:85 Certificate issuer: /CN=A91FBC89/serialNumber=B174A3D4BA9B476E2B31E47C72A298D044D98785 Certificate serial: 47 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sXSj1LqbR24rMeR8cqKY0ETZh4U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FBC89/9E7262BEEFCE11EF893FF70EC4F9AE02/sXSj1LqbR24rMeR8cqKY0ETZh4U.mft Manifest number: 43 Signing time: Fri 13 Jun 2025 06:27:01 +0000 Manifest this update: Fri 13 Jun 2025 06:27:00 +0000 Manifest next update: Fri 20 Jun 2025 06:27:00 +0000 Files and hashes: 1: sXSj1LqbR24rMeR8cqKY0ETZh4U.crl (hash: PQLSoglye5OIVrs3bH5u3cXfVin/pWiOPZAoQy4dWP0=) 2: BCC26F6EF07F11EFB25D2369C4F9AE02.roa (hash: AqnZuSs/50ixsQ8+UDuWtRAVxmvXUcEXRK8qwpmaDLs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FBC89/9E7262BEEFCE11EF893FF70EC4F9AE02/sXSj1LqbR24rMeR8cqKY0ETZh4U.crl rsync://rpki.apnic.net/member_repository/A91FBC89/9E7262BEEFCE11EF893FF70EC4F9AE02/sXSj1LqbR24rMeR8cqKY0ETZh4U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sXSj1LqbR24rMeR8cqKY0ETZh4U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 06:27:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71 (0x47) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FBC89, serialNumber=B174A3D4BA9B476E2B31E47C72A298D044D98785 Validity Not Before: Jun 13 06:27:00 2025 GMT Not After : Jun 20 06:27:00 2025 GMT Subject: CN=684bc4b5-e28c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:36:8d:a7:28:a2:e3:9d:7c:bc:ee:6c:7e:c2: 14:57:69:4d:a1:37:c9:1c:17:d9:8f:9e:92:ef:fa: 77:d4:28:44:09:4c:b4:77:09:ca:05:f2:40:8a:ee: 75:bd:11:da:a7:d7:5f:3a:be:e8:bb:4e:44:f8:75: 7f:0b:58:cf:cc:cf:25:63:e4:96:ca:88:04:86:e6: f0:fd:18:03:d3:93:c8:a0:4c:9d:d3:1c:42:e3:da: 1e:17:dc:95:e7:08:f0:4e:6d:bc:d5:5d:d5:d3:8f: 53:77:49:ed:79:68:c5:47:92:30:74:83:d9:32:7a: 58:d1:2b:ff:3c:d4:6e:e8:67:d9:f0:27:04:74:94: fe:ae:01:00:30:2e:cb:70:a8:c1:aa:d9:6d:83:a1: 29:48:c2:11:d4:c4:fd:75:ed:58:20:77:6d:90:88: 4f:7c:10:af:34:86:2a:3e:73:8e:0a:79:fa:cc:e5: 72:66:4d:d8:bf:71:2e:53:f4:ed:ce:96:98:90:16: 4d:0e:62:6a:41:f3:ef:d8:87:1a:f1:ff:a7:80:78: 1c:87:c4:bf:94:29:59:20:a0:9a:ff:cb:b7:83:3d: 7f:94:b8:13:87:ee:be:b0:f8:05:76:cf:de:1d:51: 8f:ef:e1:25:df:d7:27:5f:d3:02:8a:c5:bc:f0:36: 72:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:AE:AD:30:97:E4:58:0F:35:9C:28:A5:CF:57:97:26:B4:0A:E2:44 X509v3 Authority Key Identifier: keyid:B1:74:A3:D4:BA:9B:47:6E:2B:31:E4:7C:72:A2:98:D0:44:D9:87:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FBC89/9E7262BEEFCE11EF893FF70EC4F9AE02/sXSj1LqbR24rMeR8cqKY0ETZh4U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sXSj1LqbR24rMeR8cqKY0ETZh4U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FBC89/9E7262BEEFCE11EF893FF70EC4F9AE02/sXSj1LqbR24rMeR8cqKY0ETZh4U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:49:aa:c2:0c:4b:02:b9:f4:08:69:d0:49:d3:17:9d:32:3d: 21:3f:88:5c:4a:95:78:99:e8:2a:b9:ad:70:b1:1a:c6:56:c8: 24:5c:4b:64:11:62:44:9b:aa:e8:01:29:f2:7c:b3:c9:cf:e9: 2f:14:2d:b1:08:e0:af:63:3b:c4:7c:ed:db:e8:fa:91:9e:e3: be:9f:a4:d3:26:c5:c1:40:85:72:19:1d:30:2c:a3:cd:ea:c2: fb:ee:57:a5:92:9d:58:88:04:b9:d7:d1:f0:3b:56:32:73:2e: 26:15:09:d3:d0:30:88:c2:7c:33:50:85:97:b8:62:cc:47:1e: 68:fd:af:c5:1c:36:e9:f3:6e:06:d4:ac:c0:c5:7f:d2:02:ee: bc:5d:72:5d:72:39:bb:8f:39:e9:d5:57:73:12:36:b2:9c:74: 7e:f9:dd:f3:34:70:dc:9c:74:f7:44:51:68:26:3c:44:35:b0: 70:17:a2:fb:3f:92:c0:3e:e1:87:9a:1b:ba:ef:be:cd:26:11: 7d:28:6a:45:1e:95:b1:04:2f:93:49:6f:b4:12:a3:0e:07:f4: dc:36:a2:e6:bf:96:89:17:12:f8:3d:95:05:83:fe:e5:cc:74: ad:e9:16:ab:71:66:3d:26:e4:2d:28:75:f8:f7:d7:69:c5:e5: 25:ad:ac:6f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBRzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG QkM4OTExMC8GA1UEBRMoQjE3NEEzRDRCQTlCNDc2RTJCMzFFNDdDNzJBMjk4RDA0 NEQ5ODc4NTAeFw0yNTA2MTMwNjI3MDBaFw0yNTA2MjAwNjI3MDBaMBgxFjAUBgNV BAMTDTY4NGJjNGI1LWUyOGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCzNo2nKKLjnXy87mx+whRXaU2hN8kcF9mPnpLv+nfUKEQJTLR3CcoF8kCK7nW9 Edqn1186vui7TkT4dX8LWM/MzyVj5JbKiASG5vD9GAPTk8igTJ3THELj2h4X3JXn CPBObbzVXdXTj1N3Se15aMVHkjB0g9kyeljRK/881G7oZ9nwJwR0lP6uAQAwLstw qMGq2W2DoSlIwhHUxP117Vggd22QiE98EK80hio+c44KefrM5XJmTdi/cS5T9O3O lpiQFk0OYmpB8+/Yhxrx/6eAeByHxL+UKVkgoJr/y7eDPX+UuBOH7r6w+AV2z94d UY/v4SXf1ydf0wKKxbzwNnK7AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU8K6tMJfk WA81nCilz1eXJrQK4kQwHwYDVR0jBBgwFoAUsXSj1LqbR24rMeR8cqKY0ETZh4Uw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZCQzg5LzlFNzI2MkJFRUZD RTExRUY4OTNGRjcwRUM0RjlBRTAyL3NYU2oxTHFiUjI0ck1lUjhjcUtZMEVUWmg0 VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvc1hTajFMcWJSMjRyTWVSOGNxS1kwRVRaaDRVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZC Qzg5LzlFNzI2MkJFRUZDRTExRUY4OTNGRjcwRUM0RjlBRTAyL3NYU2oxTHFiUjI0 ck1lUjhjcUtZMEVUWmg0VS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAF5JqsIMSwK59Ahp0EnTF50yPSE/iFxKlXiZ6Cq5rXCxGsZWyCRcS2QR YkSbqugBKfJ8s8nP6S8ULbEI4K9jO8R87dvo+pGe476fpNMmxcFAhXIZHTAso83q wvvuV6WSnViIBLnX0fA7VjJzLiYVCdPQMIjCfDNQhZe4YsxHHmj9r8UcNunzbgbU rMDFf9IC7rxdcl1yObuPOenVV3MSNrKcdH753fM0cNycdPdEUWgmPEQ1sHAXovs/ ksA+4YeaG7rvvs0mEX0oakUelbEEL5NJb7QSow4H9Nw2oua/lokXEvg9lQWD/uXM dK3pFqtxZj0m5C0odfj312nF5SWtrG8= -----END CERTIFICATE-----Generated at Sat Jun 14 19:03:34 2025 by rpki-client