$ rpki-client -vvf rpki.apnic.net/member_repository/A9112956/EFBFBBF0261E11EA9C881C28C4F9AE02/091LwNHr_QIHqqZvYIuOBdPNRuM.mft File: 091LwNHr_QIHqqZvYIuOBdPNRuM.mft (raw, json) Hash identifier: tqjVKw2w3SQ8/qrgR2Lv+m9Cw/JHY/LTIXfqPte97f4= Subject key identifier: B3:10:D0:A3:A9:32:E9:17:74:1F:25:B0:F8:6B:19:DF:DD:92:92:D7 Authority key identifier: D3:DD:4B:C0:D1:EB:FD:02:07:AA:A6:6F:60:8B:8E:05:D3:CD:46:E3 Certificate issuer: /CN=A9112956/serialNumber=D3DD4BC0D1EBFD0207AAA66F608B8E05D3CD46E3 Certificate serial: 0BAC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/091LwNHr_QIHqqZvYIuOBdPNRuM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9112956/EFBFBBF0261E11EA9C881C28C4F9AE02/091LwNHr_QIHqqZvYIuOBdPNRuM.mft Manifest number: 0BA6 Signing time: Mon 30 Jun 2025 19:07:18 +0000 Manifest this update: Mon 30 Jun 2025 19:07:18 +0000 Manifest next update: Mon 07 Jul 2025 19:07:18 +0000 Files and hashes: 1: 091LwNHr_QIHqqZvYIuOBdPNRuM.crl (hash: l7wrcT8H4h5PyPDvbGNjmr5new+9dgGhogIwnPARUO0=) 2: 04346EDA262111EAB705442FC4F9AE02.roa (hash: ukt0pxqY8ok4zBKJR2dRuTwyGN5+UeLkjnvL96GEj4U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9112956/EFBFBBF0261E11EA9C881C28C4F9AE02/091LwNHr_QIHqqZvYIuOBdPNRuM.crl rsync://rpki.apnic.net/member_repository/A9112956/EFBFBBF0261E11EA9C881C28C4F9AE02/091LwNHr_QIHqqZvYIuOBdPNRuM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/091LwNHr_QIHqqZvYIuOBdPNRuM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 19:07:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2988 (0xbac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9112956, serialNumber=D3DD4BC0D1EBFD0207AAA66F608B8E05D3CD46E3 Validity Not Before: Jun 30 19:07:18 2025 GMT Not After : Jul 7 19:07:18 2025 GMT Subject: CN=6862e066-4a02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:73:9a:a1:23:6a:65:54:21:ca:87:4f:05:b6: 17:82:1c:cb:48:2f:56:2f:c2:72:d4:a4:fb:de:20: 70:b2:6b:f6:d3:34:c9:f0:73:62:a1:6e:80:19:d0: 15:a3:19:2d:ee:5b:02:52:04:7c:bc:e5:43:82:4b: 79:ab:ad:d1:f5:3b:fe:e1:20:1e:95:17:50:fc:ff: 93:5e:34:0c:ce:1e:c3:0a:39:f4:1c:df:e0:8e:83: fe:7c:bb:5b:2f:63:91:1c:30:26:33:b7:4d:64:be: ed:82:88:bd:fa:f6:f0:8e:87:6e:9c:29:96:a4:ff: 38:aa:97:d9:5c:c3:90:d1:24:6c:2f:a2:f6:bd:74: 6e:bc:82:06:3e:66:1a:de:d1:91:35:03:6b:b4:a2: 98:b0:53:df:67:6b:11:2d:73:37:ff:70:5d:0f:86: 5a:e1:08:f1:cd:49:99:36:db:82:ea:f4:34:97:82: a6:0e:61:ff:30:a7:f7:a8:36:b5:ca:fd:b5:7d:2c: da:fc:a6:82:1d:66:b7:71:08:cf:21:35:7b:51:fa: bd:f6:bd:8c:aa:0c:0d:b1:3d:6b:43:83:f5:2d:76: e3:00:f8:1f:57:a0:6e:13:93:3b:9a:d6:cc:58:8c: 06:69:49:fc:b9:f9:d3:c5:bc:c5:b7:ef:2d:e2:d6: c6:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:10:D0:A3:A9:32:E9:17:74:1F:25:B0:F8:6B:19:DF:DD:92:92:D7 X509v3 Authority Key Identifier: keyid:D3:DD:4B:C0:D1:EB:FD:02:07:AA:A6:6F:60:8B:8E:05:D3:CD:46:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9112956/EFBFBBF0261E11EA9C881C28C4F9AE02/091LwNHr_QIHqqZvYIuOBdPNRuM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/091LwNHr_QIHqqZvYIuOBdPNRuM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112956/EFBFBBF0261E11EA9C881C28C4F9AE02/091LwNHr_QIHqqZvYIuOBdPNRuM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:c5:31:0e:15:9e:e6:4d:66:d2:41:56:f1:9a:36:0b:3a:b0: b9:13:2c:1f:79:82:7a:45:94:78:3b:8d:f5:b6:d8:5b:80:1e: 7d:b3:27:9d:4a:bc:fd:20:33:d4:ef:1e:95:f9:a8:af:67:e9: 34:1f:c3:ec:aa:35:8e:be:eb:be:14:b7:79:60:49:f6:92:eb: 0e:32:3e:e0:b9:00:8b:ac:6e:b0:a7:92:c7:b4:9d:e4:6c:8e: a6:33:e1:48:1f:d6:5a:51:20:13:c5:2a:62:fc:f1:6c:26:0c: 39:b9:1c:d9:be:2d:11:99:9c:7e:19:b7:a4:7d:40:85:dc:ee: a4:eb:4e:ea:61:7a:4d:7e:c4:07:5e:44:37:93:fd:88:b8:ff: 54:7d:b0:b1:89:47:d1:7e:3a:2d:0d:8a:67:30:e0:e2:67:b3: 16:c0:d4:1e:c5:14:01:6c:b5:4e:9e:10:1d:95:91:03:be:d6: e6:4a:e9:ad:40:7a:5c:a4:97:2b:66:91:0f:9f:2b:97:5e:ce: 71:0a:93:0a:f7:ff:41:64:64:04:b9:63:21:94:62:f4:47:58: 77:49:aa:a1:ec:9a:44:40:a5:6e:2c:e1:29:48:6b:17:dc:a2: 53:b1:75:30:7f:05:59:38:b6:a4:46:46:37:d9:ac:1e:f5:26: ce:b0:71:50 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC6wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTI5NTYxMTAvBgNVBAUTKEQzREQ0QkMwRDFFQkZEMDIwN0FBQTY2RjYwOEI4RTA1 RDNDRDQ2RTMwHhcNMjUwNjMwMTkwNzE4WhcNMjUwNzA3MTkwNzE4WjAYMRYwFAYD VQQDEw02ODYyZTA2Ni00YTAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxnOaoSNqZVQhyodPBbYXghzLSC9WL8Jy1KT73iBwsmv20zTJ8HNioW6AGdAV oxkt7lsCUgR8vOVDgkt5q63R9Tv+4SAelRdQ/P+TXjQMzh7DCjn0HN/gjoP+fLtb L2ORHDAmM7dNZL7tgoi9+vbwjodunCmWpP84qpfZXMOQ0SRsL6L2vXRuvIIGPmYa 3tGRNQNrtKKYsFPfZ2sRLXM3/3BdD4Za4QjxzUmZNtuC6vQ0l4KmDmH/MKf3qDa1 yv21fSza/KaCHWa3cQjPITV7Ufq99r2MqgwNsT1rQ4P1LXbjAPgfV6BuE5M7mtbM WIwGaUn8ufnTxbzFt+8t4tbGHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLMQ0KOp MukXdB8lsPhrGd/dkpLXMB8GA1UdIwQYMBaAFNPdS8DR6/0CB6qmb2CLjgXTzUbj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjk1Ni9FRkJGQkJGMDI2 MUUxMUVBOUM4ODFDMjhDNEY5QUUwMi8wOTFMd05Icl9RSUhxcVp2WUl1T0JkUE5S dU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzA5MUx3TkhyX1FJSHFxWnZZSXVPQmRQTlJ1TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx Mjk1Ni9FRkJGQkJGMDI2MUUxMUVBOUM4ODFDMjhDNEY5QUUwMi8wOTFMd05Icl9R SUhxcVp2WUl1T0JkUE5SdU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBHxTEOFZ7mTWbSQVbxmjYLOrC5EywfeYJ6RZR4O431tthbgB59syed Srz9IDPU7x6V+aivZ+k0H8PsqjWOvuu+FLd5YEn2kusOMj7guQCLrG6wp5LHtJ3k bI6mM+FIH9ZaUSATxSpi/PFsJgw5uRzZvi0RmZx+GbekfUCF3O6k607qYXpNfsQH XkQ3k/2IuP9UfbCxiUfRfjotDYpnMODiZ7MWwNQexRQBbLVOnhAdlZEDvtbmSumt QHpcpJcrZpEPnyuXXs5xCpMK9/9BZGQEuWMhlGL0R1h3Saqh7JpEQKVuLOEpSGsX 3KJTsXUwfwVZOLakRkY32awe9SbOsHFQ -----END CERTIFICATE-----Generated at Tue Jul 1 18:47:08 2025 by rpki-client