$ rpki-client -vvf rpki.apnic.net/member_repository/A91FCEB1/9C14B4063A2111E79AA0D51CC4F9AE02/0I2GgcK-TUfCopBV9m5olVhGF_c.mft File: 0I2GgcK-TUfCopBV9m5olVhGF_c.mft (raw, json) Hash identifier: HBniUhdgPFFYB0LhuWZRtN1iTDSqae+2IV52JyPlF5k= Subject key identifier: BB:E6:AB:A2:0F:64:EA:67:A1:28:D5:20:5D:DE:52:58:71:FD:B5:19 Authority key identifier: D0:8D:86:81:C2:BE:4D:47:C2:A2:90:55:F6:6E:68:95:58:46:17:F7 Certificate issuer: /CN=A91FCEB1/serialNumber=D08D8681C2BE4D47C2A29055F66E6895584617F7 Certificate serial: 1A7F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0I2GgcK-TUfCopBV9m5olVhGF_c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FCEB1/9C14B4063A2111E79AA0D51CC4F9AE02/0I2GgcK-TUfCopBV9m5olVhGF_c.mft Manifest number: 2186 Signing time: Wed 18 Jun 2025 15:58:17 +0000 Manifest this update: Wed 18 Jun 2025 15:58:16 +0000 Manifest next update: Wed 25 Jun 2025 15:58:16 +0000 Files and hashes: 1: 0I2GgcK-TUfCopBV9m5olVhGF_c.crl (hash: HB4GhX9JlR1ZnZ2aPrAx17UijGDPhC2XwRYdst4Dzhg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FCEB1/9C14B4063A2111E79AA0D51CC4F9AE02/0I2GgcK-TUfCopBV9m5olVhGF_c.crl rsync://rpki.apnic.net/member_repository/A91FCEB1/9C14B4063A2111E79AA0D51CC4F9AE02/0I2GgcK-TUfCopBV9m5olVhGF_c.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0I2GgcK-TUfCopBV9m5olVhGF_c.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Jun 2025 15:58:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6783 (0x1a7f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FCEB1, serialNumber=D08D8681C2BE4D47C2A29055F66E6895584617F7 Validity Not Before: Jun 18 15:58:16 2025 GMT Not After : Jun 25 15:58:16 2025 GMT Subject: CN=6852e219-c129 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:95:c1:7d:4a:a2:4e:c9:f0:81:88:7e:0f:03: 05:d3:52:45:a1:fd:b1:97:3b:73:73:8f:74:65:7b: 0b:9f:a7:7c:b7:20:ae:88:24:6c:03:c9:3f:a9:9e: a6:2e:37:4e:b0:74:52:7f:36:35:df:54:2d:02:e5: be:07:f0:77:1c:22:b8:c9:da:65:fe:ba:11:a4:d4: 1c:11:4f:8a:c4:71:ca:e5:09:0d:b1:b6:91:69:a8: 6e:60:05:6f:5d:4f:9f:f7:ff:42:0d:a9:84:ac:28: 47:fb:9c:cb:01:a1:d4:d2:83:45:af:4c:57:56:2b: d9:77:9d:4e:1b:79:da:50:3b:92:6d:94:c7:15:b8: 99:55:0f:98:af:42:84:5f:a5:f0:7d:cd:c0:ed:7d: 8c:d2:b4:ac:33:18:8d:91:5b:2e:10:d5:a6:ca:f3: e5:81:57:71:e7:5a:4a:dc:5f:39:19:1b:93:66:ce: 81:4d:1a:36:a2:8c:86:d6:5f:be:ed:d1:8e:50:ea: a8:8c:06:34:11:6a:60:94:47:b3:fe:6b:78:ab:ed: 6f:1d:20:0e:9f:ca:b5:eb:72:d4:a7:05:2e:e2:c4: 5f:3d:78:4d:71:9a:0a:b4:4e:2f:e9:86:5d:18:22: 6b:8e:e7:8a:0a:22:3c:95:03:57:df:85:40:cc:17: 5f:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:E6:AB:A2:0F:64:EA:67:A1:28:D5:20:5D:DE:52:58:71:FD:B5:19 X509v3 Authority Key Identifier: keyid:D0:8D:86:81:C2:BE:4D:47:C2:A2:90:55:F6:6E:68:95:58:46:17:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FCEB1/9C14B4063A2111E79AA0D51CC4F9AE02/0I2GgcK-TUfCopBV9m5olVhGF_c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0I2GgcK-TUfCopBV9m5olVhGF_c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCEB1/9C14B4063A2111E79AA0D51CC4F9AE02/0I2GgcK-TUfCopBV9m5olVhGF_c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:ae:88:52:26:d9:23:40:91:e5:d1:5a:1b:60:e5:50:06:a0: f8:d4:fc:c6:61:e5:f2:f8:eb:cc:1d:7e:fa:7b:41:0c:c2:7d: 8a:51:b0:2b:4f:36:76:25:f0:fe:89:d5:52:9e:be:c9:74:9d: 18:e2:b2:de:7e:aa:f7:3b:2e:0b:fe:23:fc:6d:1f:50:e9:fe: fb:8c:21:d0:00:bb:17:40:1e:c6:15:7e:a1:df:e7:34:14:e0: 33:ff:6c:80:ef:4c:a3:db:94:a6:d8:22:40:01:dd:34:36:5f: e3:9c:bc:5c:8f:1f:a5:9c:f3:cd:92:38:61:21:2e:09:bb:43: 37:c5:ca:0b:d7:37:60:ce:5f:f2:f7:ae:97:8d:16:73:2f:d9: 4d:58:f8:b3:4e:75:23:da:34:d8:80:18:c4:f5:7d:15:fa:00: d6:74:40:1d:84:61:b3:98:73:a3:a2:38:b4:c9:49:e0:a7:0c: eb:f7:db:62:77:a9:dd:3a:e0:3a:c5:98:15:83:ac:52:8b:fb: 47:3d:d5:a2:96:0b:8b:29:af:2e:68:49:19:c6:51:78:4d:8b: cf:4e:ac:c4:22:18:be:1d:5f:b7:c2:ae:77:9a:2a:0e:ab:4a: 71:53:ac:19:59:21:5a:1d:1c:57:a8:18:b8:e8:cf:ac:43:44: 57:bc:8a:fb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGn8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkNFQjExMTAvBgNVBAUTKEQwOEQ4NjgxQzJCRTRENDdDMkEyOTA1NUY2NkU2ODk1 NTg0NjE3RjcwHhcNMjUwNjE4MTU1ODE2WhcNMjUwNjI1MTU1ODE2WjAYMRYwFAYD VQQDEw02ODUyZTIxOS1jMTI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4JXBfUqiTsnwgYh+DwMF01JFof2xlztzc490ZXsLn6d8tyCuiCRsA8k/qZ6m LjdOsHRSfzY131QtAuW+B/B3HCK4ydpl/roRpNQcEU+KxHHK5QkNsbaRaahuYAVv XU+f9/9CDamErChH+5zLAaHU0oNFr0xXVivZd51OG3naUDuSbZTHFbiZVQ+Yr0KE X6Xwfc3A7X2M0rSsMxiNkVsuENWmyvPlgVdx51pK3F85GRuTZs6BTRo2ooyG1l++ 7dGOUOqojAY0EWpglEez/mt4q+1vHSAOn8q163LUpwUu4sRfPXhNcZoKtE4v6YZd GCJrjueKCiI8lQNX34VAzBdf3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLvmq6IP ZOpnoSjVIF3eUlhx/bUZMB8GA1UdIwQYMBaAFNCNhoHCvk1HwqKQVfZuaJVYRhf3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQ0VCMS85QzE0QjQwNjNB MjExMUU3OUFBMEQ1MUNDNEY5QUUwMi8wSTJHZ2NLLVRVZkNvcEJWOW01b2xWaEdG X2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzBJMkdnY0stVFVmQ29wQlY5bTVvbFZoR0ZfYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG Q0VCMS85QzE0QjQwNjNBMjExMUU3OUFBMEQ1MUNDNEY5QUUwMi8wSTJHZ2NLLVRV ZkNvcEJWOW01b2xWaEdGX2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAwrohSJtkjQJHl0VobYOVQBqD41PzGYeXy+OvMHX76e0EMwn2KUbAr TzZ2JfD+idVSnr7JdJ0Y4rLefqr3Oy4L/iP8bR9Q6f77jCHQALsXQB7GFX6h3+c0 FOAz/2yA70yj25Sm2CJAAd00Nl/jnLxcjx+lnPPNkjhhIS4Ju0M3xcoL1zdgzl/y 966XjRZzL9lNWPizTnUj2jTYgBjE9X0V+gDWdEAdhGGzmHOjoji0yUngpwzr99ti d6ndOuA6xZgVg6xSi/tHPdWilguLKa8uaEkZxlF4TYvPTqzEIhi+HV+3wq53mioO q0pxU6wZWSFaHRxXqBi46M+sQ0RXvIr7 -----END CERTIFICATE-----Generated at Thu Jun 19 02:31:39 2025 by rpki-client