$ rpki-client -vvf rpki.apnic.net/member_repository/A91606AF/A0958F305ECD11EB90876372C4F9AE02/0efCSnRBTL3c_NiORsXVzTs-rtc.mft File: 0efCSnRBTL3c_NiORsXVzTs-rtc.mft (raw, json) Hash identifier: wpfanYE6gQSwPlfJsttPKyI6i8bfDmMSp2sjzzzdSsM= Subject key identifier: 2A:FB:8D:4D:8B:6C:3A:F7:80:59:DC:55:8D:03:23:53:CE:5D:12:03 Authority key identifier: D1:E7:C2:4A:74:41:4C:BD:DC:FC:D8:8E:46:C5:D5:CD:3B:3E:AE:D7 Certificate issuer: /CN=A91606AF/serialNumber=D1E7C24A74414CBDDCFCD88E46C5D5CD3B3EAED7 Certificate serial: 0704 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0efCSnRBTL3c_NiORsXVzTs-rtc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91606AF/A0958F305ECD11EB90876372C4F9AE02/0efCSnRBTL3c_NiORsXVzTs-rtc.mft Manifest number: 06EB Signing time: Sat 28 Jun 2025 21:41:41 +0000 Manifest this update: Sat 28 Jun 2025 21:41:40 +0000 Manifest next update: Sat 05 Jul 2025 21:41:40 +0000 Files and hashes: 1: 0efCSnRBTL3c_NiORsXVzTs-rtc.crl (hash: q/dakWhsZN89+ooWWIAs06NQ8b6YyaI4ZzlJRMalz68=) 2: 8C2D64121CB011EDA4740D7EC4F9AE02.roa (hash: +fRxqOXyB3e8V6DJsPZloFZurNNVr8ZfU/q63aOPSF0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91606AF/A0958F305ECD11EB90876372C4F9AE02/0efCSnRBTL3c_NiORsXVzTs-rtc.crl rsync://rpki.apnic.net/member_repository/A91606AF/A0958F305ECD11EB90876372C4F9AE02/0efCSnRBTL3c_NiORsXVzTs-rtc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0efCSnRBTL3c_NiORsXVzTs-rtc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 21:41:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1796 (0x704) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91606AF, serialNumber=D1E7C24A74414CBDDCFCD88E46C5D5CD3B3EAED7 Validity Not Before: Jun 28 21:41:40 2025 GMT Not After : Jul 5 21:41:40 2025 GMT Subject: CN=68606195-683a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:99:78:7a:e7:90:62:fe:48:a5:7a:d4:83:69: 90:89:49:a6:1e:b2:c1:96:85:31:f9:98:30:de:d0: 31:93:28:cb:f6:d5:8a:21:03:35:a4:31:e0:c8:71: fe:dd:24:86:0e:37:75:21:a6:62:c5:08:ca:ed:c6: 99:e0:9a:69:b3:35:a6:4e:03:eb:50:a1:f4:81:7c: 13:99:8a:42:59:c7:55:c8:39:24:8d:fe:d0:42:32: bf:a7:d4:66:41:8d:da:e5:5b:16:ec:53:bc:e2:d1: e4:74:e3:e6:5b:4b:d9:da:41:96:da:ed:ad:04:69: ed:70:95:af:be:27:d6:04:92:4d:9e:6e:42:5b:1f: 7f:03:1b:c3:8e:fa:04:42:b8:8b:51:42:32:0f:cf: 4c:23:db:0c:c9:56:57:4f:36:a2:e0:6b:ab:88:68: e5:c2:ef:42:5a:d5:85:53:35:e7:05:9b:96:4e:3c: c3:e9:ce:1d:c8:61:eb:92:df:eb:18:9d:2a:39:93: 7c:91:a0:89:f5:8b:0f:79:92:2c:ba:9e:d2:f7:1d: 80:8a:4f:48:16:b8:9d:ca:c5:8b:60:1c:af:da:8c: e3:3a:47:46:75:cd:fa:1a:65:79:f5:ed:39:2c:4e: ad:7b:b7:80:a8:c5:51:cc:15:58:32:28:0a:f0:78: b7:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:FB:8D:4D:8B:6C:3A:F7:80:59:DC:55:8D:03:23:53:CE:5D:12:03 X509v3 Authority Key Identifier: keyid:D1:E7:C2:4A:74:41:4C:BD:DC:FC:D8:8E:46:C5:D5:CD:3B:3E:AE:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91606AF/A0958F305ECD11EB90876372C4F9AE02/0efCSnRBTL3c_NiORsXVzTs-rtc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0efCSnRBTL3c_NiORsXVzTs-rtc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91606AF/A0958F305ECD11EB90876372C4F9AE02/0efCSnRBTL3c_NiORsXVzTs-rtc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:fb:78:52:89:3e:92:14:05:50:1f:cb:be:9e:2c:1e:c4:75: 36:19:9f:4a:45:fa:5e:aa:74:57:ce:83:ad:56:b0:e4:52:1c: f4:5d:a6:73:60:ca:aa:b1:de:4b:54:16:9a:b9:b1:f5:b8:79: cc:e0:3c:36:65:8e:17:d7:fb:fd:21:82:5a:21:2a:12:1b:99: 94:13:2e:a1:de:ba:32:51:dd:9d:06:55:d9:58:ca:0f:3f:d1: 4f:63:12:d1:a9:16:70:38:07:d8:6e:ee:12:31:0d:e9:8a:d6: 51:33:39:1c:30:2d:83:43:33:b1:90:34:db:70:7f:84:de:e1: 27:e2:c6:39:cc:4b:fb:c7:2d:f7:fb:79:c6:00:60:a5:8c:ad: f5:d5:40:c6:85:ab:7a:81:d4:11:6d:9a:59:4e:5a:db:16:35: 8b:07:bf:bf:c6:9e:49:76:0c:ac:81:50:6f:49:2c:08:dc:2c: 9c:a7:de:e1:bf:9c:80:3b:8b:1c:2c:ea:dc:3e:1e:65:65:66: 4e:7d:e2:e2:f8:3b:32:8b:8d:8a:8d:71:07:f6:a8:19:bd:89: c2:bf:f6:61:69:1b:37:97:ef:95:22:78:56:5e:ce:ab:fe:94: 7d:5b:78:45:b4:8b:0e:7a:2a:22:75:a7:a7:ad:fc:af:9b:98: a0:d9:da:11 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBwQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjA2QUYxMTAvBgNVBAUTKEQxRTdDMjRBNzQ0MTRDQkREQ0ZDRDg4RTQ2QzVENUNE M0IzRUFFRDcwHhcNMjUwNjI4MjE0MTQwWhcNMjUwNzA1MjE0MTQwWjAYMRYwFAYD VQQDEw02ODYwNjE5NS02ODNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2Zl4eueQYv5IpXrUg2mQiUmmHrLBloUx+Zgw3tAxkyjL9tWKIQM1pDHgyHH+ 3SSGDjd1IaZixQjK7caZ4JppszWmTgPrUKH0gXwTmYpCWcdVyDkkjf7QQjK/p9Rm QY3a5VsW7FO84tHkdOPmW0vZ2kGW2u2tBGntcJWvvifWBJJNnm5CWx9/AxvDjvoE QriLUUIyD89MI9sMyVZXTzai4GuriGjlwu9CWtWFUzXnBZuWTjzD6c4dyGHrkt/r GJ0qOZN8kaCJ9YsPeZIsup7S9x2Aik9IFridysWLYByv2ozjOkdGdc36GmV59e05 LE6te7eAqMVRzBVYMigK8Hi3TQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCr7jU2L bDr3gFncVY0DI1POXRIDMB8GA1UdIwQYMBaAFNHnwkp0QUy93PzYjkbF1c07Pq7X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MDZBRi9BMDk1OEYzMDVF Q0QxMUVCOTA4NzYzNzJDNEY5QUUwMi8wZWZDU25SQlRMM2NfTmlPUnNYVnpUcy1y dGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBlZkNTblJCVEwzY19OaU9Sc1hWelRzLXJ0Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MDZBRi9BMDk1OEYzMDVFQ0QxMUVCOTA4NzYzNzJDNEY5QUUwMi8wZWZDU25SQlRM M2NfTmlPUnNYVnpUcy1ydGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCi+3hSiT6SFAVQH8u+niwexHU2GZ9KRfpeqnRXzoOtVrDkUhz0XaZz YMqqsd5LVBaaubH1uHnM4Dw2ZY4X1/v9IYJaISoSG5mUEy6h3royUd2dBlXZWMoP P9FPYxLRqRZwOAfYbu4SMQ3pitZRMzkcMC2DQzOxkDTbcH+E3uEn4sY5zEv7xy33 +3nGAGCljK311UDGhat6gdQRbZpZTlrbFjWLB7+/xp5JdgysgVBvSSwI3Cycp97h v5yAO4scLOrcPh5lZWZOfeLi+Dsyi42KjXEH9qgZvYnCv/ZhaRs3l++VInhWXs6r /pR9W3hFtIsOeioidaenrfyvm5ig2doR -----END CERTIFICATE-----Generated at Sun Jun 29 10:29:34 2025 by rpki-client