$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD609/0C609B9CEC1911EA925DFC6FC4F9AE02/B82dMe1hhir1A-UglCjHyyfqiB8.mft File: B82dMe1hhir1A-UglCjHyyfqiB8.mft (raw, json) Hash identifier: wbZmt/onFSu8u0nNVcpj0VIWsL8ipsvtWHVVvfAZVPg= Subject key identifier: A0:A9:A3:4A:39:39:B9:6B:81:CD:A5:ED:9C:67:54:07:DE:C7:C6:F8 Authority key identifier: 07:CD:9D:31:ED:61:86:2A:F5:03:E5:20:94:28:C7:CB:27:EA:88:1F Certificate issuer: /CN=A91FD609/serialNumber=07CD9D31ED61862AF503E5209428C7CB27EA881F Certificate serial: 07F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B82dMe1hhir1A-UglCjHyyfqiB8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FD609/0C609B9CEC1911EA925DFC6FC4F9AE02/B82dMe1hhir1A-UglCjHyyfqiB8.mft Manifest number: 07EE Signing time: Mon 16 Jun 2025 20:45:00 +0000 Manifest this update: Mon 16 Jun 2025 20:44:59 +0000 Manifest next update: Mon 23 Jun 2025 20:44:59 +0000 Files and hashes: 1: B82dMe1hhir1A-UglCjHyyfqiB8.crl (hash: fu2GCg5N4X2tdIOfHmWLjtWQY9lqXcKhCl9La8t1+Hw=) 2: 765DBCFEEC1A11EAA8520072C4F9AE02.roa (hash: LwXV2swiHkwzhmRJHgtxVwl/mp8FDjhnbQvKS2GLsds=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FD609/0C609B9CEC1911EA925DFC6FC4F9AE02/B82dMe1hhir1A-UglCjHyyfqiB8.crl rsync://rpki.apnic.net/member_repository/A91FD609/0C609B9CEC1911EA925DFC6FC4F9AE02/B82dMe1hhir1A-UglCjHyyfqiB8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B82dMe1hhir1A-UglCjHyyfqiB8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Jun 2025 20:44:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2040 (0x7f8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FD609, serialNumber=07CD9D31ED61862AF503E5209428C7CB27EA881F Validity Not Before: Jun 16 20:44:59 2025 GMT Not After : Jun 23 20:44:59 2025 GMT Subject: CN=6850824b-f3e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:95:f2:de:a5:39:d5:b6:98:94:eb:16:19:af: 3c:e4:ad:17:eb:b6:5b:b3:68:92:18:3f:ca:29:0c: 52:82:49:e5:02:d7:5d:01:cf:38:59:d1:1d:11:f8: 78:e2:3e:78:77:77:f6:76:d1:d6:6b:da:c8:41:c9: 6e:31:87:7e:20:cb:4c:45:bb:b5:78:43:ea:b3:68: b0:d3:54:db:fd:65:d3:91:58:80:05:f5:2b:38:9d: 8e:ac:58:94:19:34:30:51:53:8e:c2:ec:de:e9:5f: 3d:93:b0:66:eb:b8:90:42:b6:46:38:2f:ce:95:58: a2:48:7c:ee:9a:71:71:8d:50:2f:76:46:27:3e:77: c2:ba:97:61:42:a2:6e:6f:20:d6:cf:a5:53:13:df: f8:e4:69:5d:65:c0:dd:a4:49:2f:69:b1:02:b0:ec: 8c:d9:04:d9:e2:ab:27:d5:12:87:50:34:d8:df:32: 3c:3b:6e:7d:39:a9:69:6f:3f:ef:81:fa:20:86:0e: 03:4f:39:7c:ba:80:28:ab:1b:73:f1:3c:cc:5c:09: c5:5c:f8:5f:99:12:93:16:60:49:7d:56:52:57:79: d9:05:2d:16:45:af:63:e2:86:c8:51:91:eb:7d:b2: a4:8d:d9:67:28:56:2d:74:10:89:42:18:2e:60:42: 0f:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:A9:A3:4A:39:39:B9:6B:81:CD:A5:ED:9C:67:54:07:DE:C7:C6:F8 X509v3 Authority Key Identifier: keyid:07:CD:9D:31:ED:61:86:2A:F5:03:E5:20:94:28:C7:CB:27:EA:88:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FD609/0C609B9CEC1911EA925DFC6FC4F9AE02/B82dMe1hhir1A-UglCjHyyfqiB8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B82dMe1hhir1A-UglCjHyyfqiB8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD609/0C609B9CEC1911EA925DFC6FC4F9AE02/B82dMe1hhir1A-UglCjHyyfqiB8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:41:a7:03:d4:77:d1:72:24:fc:58:e3:d3:54:a8:a5:52:2b: 5e:f4:55:f7:63:94:e7:4d:49:52:1a:d8:38:f6:a2:37:c8:ec: 5c:94:5b:5c:b0:22:10:66:88:ee:a5:f8:9b:a8:87:af:6f:1a: 4e:56:bf:a5:c4:eb:73:a2:5c:1c:3c:4d:39:2e:e8:39:45:06: c6:df:74:b4:df:23:91:8a:e1:7e:00:b3:28:2d:ad:d0:fa:43: 2a:e8:db:fd:16:ed:b4:f6:21:f1:e9:47:e8:d1:11:a4:8a:71: 9a:24:50:f1:5d:c6:16:fb:70:85:dd:c2:d5:a2:21:0b:a0:51: bb:fe:3f:25:19:b5:a4:df:6f:b5:14:dc:ee:79:a2:d4:38:22: 73:08:8e:00:09:a8:ef:d0:29:a9:72:10:29:da:72:f7:62:c0: 38:63:a2:95:99:0d:3c:32:da:a0:94:80:95:4c:7a:69:7f:03: d6:c8:92:5b:f1:0e:36:9a:f9:d7:9f:d4:8a:c9:7a:f2:68:4e: c7:a2:51:15:39:00:9c:72:92:b2:02:54:22:f0:5e:fa:0d:c6: 84:43:7e:6c:a3:bb:c9:b7:fb:1d:fe:8c:99:4d:29:10:d8:f0: 08:26:2d:e5:3d:5b:8e:78:03:b1:b4:6a:3d:0f:99:05:74:25: af:08:a2:56 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB/gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkQ2MDkxMTAvBgNVBAUTKDA3Q0Q5RDMxRUQ2MTg2MkFGNTAzRTUyMDk0MjhDN0NC MjdFQTg4MUYwHhcNMjUwNjE2MjA0NDU5WhcNMjUwNjIzMjA0NDU5WjAYMRYwFAYD VQQDEw02ODUwODI0Yi1mM2U0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnpXy3qU51baYlOsWGa885K0X67Zbs2iSGD/KKQxSgknlAtddAc84WdEdEfh4 4j54d3f2dtHWa9rIQcluMYd+IMtMRbu1eEPqs2iw01Tb/WXTkViABfUrOJ2OrFiU GTQwUVOOwuze6V89k7Bm67iQQrZGOC/OlViiSHzumnFxjVAvdkYnPnfCupdhQqJu byDWz6VTE9/45GldZcDdpEkvabECsOyM2QTZ4qsn1RKHUDTY3zI8O259Oalpbz/v gfoghg4DTzl8uoAoqxtz8TzMXAnFXPhfmRKTFmBJfVZSV3nZBS0WRa9j4obIUZHr fbKkjdlnKFYtdBCJQhguYEIPmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKCpo0o5 Oblrgc2l7ZxnVAfex8b4MB8GA1UdIwQYMBaAFAfNnTHtYYYq9QPlIJQox8sn6ogf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRDYwOS8wQzYwOUI5Q0VD MTkxMUVBOTI1REZDNkZDNEY5QUUwMi9CODJkTWUxaGhpcjFBLVVnbENqSHl5ZnFp QjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0I4MmRNZTFoaGlyMUEtVWdsQ2pIeXlmcWlCOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RDYwOS8wQzYwOUI5Q0VDMTkxMUVBOTI1REZDNkZDNEY5QUUwMi9CODJkTWUxaGhp cjFBLVVnbENqSHl5ZnFpQjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCnQacD1HfRciT8WOPTVKilUite9FX3Y5TnTUlSGtg49qI3yOxclFtc sCIQZojupfibqIevbxpOVr+lxOtzolwcPE05Lug5RQbG33S03yORiuF+ALMoLa3Q +kMq6Nv9Fu209iHx6Ufo0RGkinGaJFDxXcYW+3CF3cLVoiELoFG7/j8lGbWk32+1 FNzueaLUOCJzCI4ACajv0CmpchAp2nL3YsA4Y6KVmQ08MtqglICVTHppfwPWyJJb 8Q42mvnXn9SKyXryaE7HolEVOQCccpKyAlQi8F76DcaEQ35so7vJt/sd/oyZTSkQ 2PAIJi3lPVuOeAOxtGo9D5kFdCWvCKJW -----END CERTIFICATE-----Generated at Wed Jun 18 01:16:32 2025 by rpki-client