$ rpki-client -vvf rpki.apnic.net/member_repository/A91A85A8/A53081462CDE11ECAA6FE678C4F9AE02/rgoPmKCQPgFeX8VMuM4IHUJNtNI.mft File: rgoPmKCQPgFeX8VMuM4IHUJNtNI.mft (raw, json) Hash identifier: bKyq33TkS1JGsdYId1ubwQz/2JOMy2T57Yb1sSn8HFU= Subject key identifier: 75:43:6D:90:72:95:CE:60:D7:2B:66:6F:A7:A3:B3:49:0E:C9:8A:4E Authority key identifier: AE:0A:0F:98:A0:90:3E:01:5E:5F:C5:4C:B8:CE:08:1D:42:4D:B4:D2 Certificate issuer: /CN=A91A85A8/serialNumber=AE0A0F98A0903E015E5FC54CB8CE081D424DB4D2 Certificate serial: 04DD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rgoPmKCQPgFeX8VMuM4IHUJNtNI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A85A8/A53081462CDE11ECAA6FE678C4F9AE02/rgoPmKCQPgFeX8VMuM4IHUJNtNI.mft Manifest number: 04C9 Signing time: Tue 01 Jul 2025 00:20:46 +0000 Manifest this update: Tue 01 Jul 2025 00:20:45 +0000 Manifest next update: Tue 08 Jul 2025 00:20:45 +0000 Files and hashes: 1: rgoPmKCQPgFeX8VMuM4IHUJNtNI.crl (hash: hXzsFUKOpuOrl3GsnhUZANW8chn3LW9MHC5TpOb9ml8=) 2: B016290E2CE211EC8664D47EC4F9AE02.roa (hash: N+v5XDTe3qGrc3Im5miqpHu358OzdQqGsyKCPQ1e/9E=) 3: 14172F4C264311EEB0342B45C4F9AE02.roa (hash: Ugkrxpmo+RhmzNNOs4CXnhFZe2ur3HMxWdH+GOY5OTg=) 4: 8C2F1C96367F11EEB689C243C4F9AE02.roa (hash: NMuBSgtK/HkuND8tStUDe+Ag9eP8OhZhvhWqets1kM8=) 5: AF91ADB42CE211EC8664D47EC4F9AE02.roa (hash: vVCpAMW7qiQGHNF6JhfNX4AfCfOmlSNmnkvMLMOZ1EI=) 6: AEFA3DD02CE211EC8664D47EC4F9AE02.roa (hash: sOUIWYOFE2CSPs3Drpz/bEhxmM04l8k3SIDOG1UW16M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A85A8/A53081462CDE11ECAA6FE678C4F9AE02/rgoPmKCQPgFeX8VMuM4IHUJNtNI.crl rsync://rpki.apnic.net/member_repository/A91A85A8/A53081462CDE11ECAA6FE678C4F9AE02/rgoPmKCQPgFeX8VMuM4IHUJNtNI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rgoPmKCQPgFeX8VMuM4IHUJNtNI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 00:20:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1245 (0x4dd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A85A8, serialNumber=AE0A0F98A0903E015E5FC54CB8CE081D424DB4D2 Validity Not Before: Jul 1 00:20:45 2025 GMT Not After : Jul 8 00:20:45 2025 GMT Subject: CN=686329de-c6ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:4c:f9:b5:ef:0f:0a:71:08:13:86:6f:6e:51: 0b:aa:23:2a:c8:23:e8:61:17:34:00:8a:e0:0f:45: bf:e3:8a:5c:e1:66:eb:40:7d:32:01:a0:2b:db:98: aa:64:ce:01:3a:7e:b1:cc:e5:6e:df:60:e1:a2:5f: 68:ac:cd:5c:60:f0:3d:0f:c7:17:68:d5:76:30:b3: 27:a1:2f:1d:f6:48:5b:c6:44:aa:e7:fe:bc:bb:09: bb:6c:b0:1a:f5:71:6a:06:e3:b2:73:aa:6f:4d:79: 8b:a2:44:7e:0a:81:47:84:1f:be:4f:1c:b2:6d:30: 3c:24:31:61:e0:80:78:78:7d:75:3e:64:fb:f1:63: da:98:03:e2:34:08:2b:7e:98:eb:24:9e:6b:a0:ce: 99:e1:af:59:d4:55:e7:2c:f9:56:1f:26:47:ab:b1: 3e:76:79:c7:14:3d:d1:64:70:a2:2e:9a:b8:6c:45: e3:be:71:d0:34:6e:a2:a2:0b:90:35:85:7d:12:e5: 5d:af:9e:e1:62:b4:9c:8b:e5:77:1b:a5:db:df:7d: b0:1f:7f:09:0b:60:bc:6f:60:42:42:62:c3:bb:da: 5a:d4:f8:da:16:65:4f:a7:ff:e2:06:e2:2c:01:c8: b5:b0:ad:a2:08:4e:72:47:57:35:f1:24:d9:ca:0c: c5:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:43:6D:90:72:95:CE:60:D7:2B:66:6F:A7:A3:B3:49:0E:C9:8A:4E X509v3 Authority Key Identifier: keyid:AE:0A:0F:98:A0:90:3E:01:5E:5F:C5:4C:B8:CE:08:1D:42:4D:B4:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A85A8/A53081462CDE11ECAA6FE678C4F9AE02/rgoPmKCQPgFeX8VMuM4IHUJNtNI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rgoPmKCQPgFeX8VMuM4IHUJNtNI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A85A8/A53081462CDE11ECAA6FE678C4F9AE02/rgoPmKCQPgFeX8VMuM4IHUJNtNI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:17:47:5c:d3:7f:82:81:58:40:39:a1:90:8f:f7:ad:ce:b1: e9:58:be:6e:ba:df:d6:17:b6:46:0f:f7:02:60:44:53:f4:84: 46:4f:1e:75:23:b8:f6:4f:8b:34:ae:6f:1e:ba:68:f9:59:3f: 1f:fa:de:55:6e:5b:3f:5b:e7:09:aa:da:da:4b:b7:34:9a:e8: 10:e8:76:53:36:73:2e:ac:95:30:92:10:ce:7c:1f:17:c6:17: bd:c6:4e:58:20:31:54:c8:8d:27:70:54:75:ab:e4:bb:16:8a: a3:97:18:60:a8:35:4c:4c:65:60:90:18:5e:bd:a6:e1:6d:20: e8:b5:95:15:52:09:fe:c7:7f:84:e8:c6:8e:0a:7e:43:11:57: 06:35:a9:82:ef:83:de:48:54:ec:4d:10:58:0f:b2:94:60:43: 98:57:e4:e3:84:82:2c:b5:af:ff:c7:fd:5f:c4:a6:1b:34:2b: e9:5a:96:a1:9e:bf:d3:2e:57:7a:3c:98:99:af:fb:e5:8b:ef: 17:7c:0b:bb:3b:09:2b:91:9d:f7:ed:6f:06:e6:07:1e:de:5f: 04:cb:60:d1:b9:30:24:fe:75:97:4e:ae:66:66:d5:97:f9:d3: f2:d8:c4:05:0a:da:a4:fe:c9:a0:91:58:f0:51:09:93:02:19: b5:1a:0f:c3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBN0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTg1QTgxMTAvBgNVBAUTKEFFMEEwRjk4QTA5MDNFMDE1RTVGQzU0Q0I4Q0UwODFE NDI0REI0RDIwHhcNMjUwNzAxMDAyMDQ1WhcNMjUwNzA4MDAyMDQ1WjAYMRYwFAYD VQQDEw02ODYzMjlkZS1jNmFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn0z5te8PCnEIE4ZvblELqiMqyCPoYRc0AIrgD0W/44pc4WbrQH0yAaAr25iq ZM4BOn6xzOVu32Dhol9orM1cYPA9D8cXaNV2MLMnoS8d9khbxkSq5/68uwm7bLAa 9XFqBuOyc6pvTXmLokR+CoFHhB++TxyybTA8JDFh4IB4eH11PmT78WPamAPiNAgr fpjrJJ5roM6Z4a9Z1FXnLPlWHyZHq7E+dnnHFD3RZHCiLpq4bEXjvnHQNG6ioguQ NYV9EuVdr57hYrSci+V3G6Xb332wH38JC2C8b2BCQmLDu9pa1PjaFmVPp//iBuIs Aci1sK2iCE5yR1c18STZygzF0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHVDbZBy lc5g1ytmb6ejs0kOyYpOMB8GA1UdIwQYMBaAFK4KD5igkD4BXl/FTLjOCB1CTbTS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODVBOC9BNTMwODE0NjJD REUxMUVDQUE2RkU2NzhDNEY5QUUwMi9yZ29QbUtDUVBnRmVYOFZNdU00SUhVSk50 TkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Jnb1BtS0NRUGdGZVg4Vk11TTRJSFVKTnROSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB ODVBOC9BNTMwODE0NjJDREUxMUVDQUE2RkU2NzhDNEY5QUUwMi9yZ29QbUtDUVBn RmVYOFZNdU00SUhVSk50TkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCGF0dc03+CgVhAOaGQj/etzrHpWL5uut/WF7ZGD/cCYERT9IRGTx51 I7j2T4s0rm8eumj5WT8f+t5Vbls/W+cJqtraS7c0mugQ6HZTNnMurJUwkhDOfB8X xhe9xk5YIDFUyI0ncFR1q+S7FoqjlxhgqDVMTGVgkBhevabhbSDotZUVUgn+x3+E 6MaOCn5DEVcGNamC74PeSFTsTRBYD7KUYEOYV+TjhIIsta//x/1fxKYbNCvpWpah nr/TLld6PJiZr/vli+8XfAu7OwkrkZ337W8G5gce3l8Ey2DRuTAk/nWXTq5mZtWX +dPy2MQFCtqk/smgkVjwUQmTAhm1Gg/D -----END CERTIFICATE-----Generated at Tue Jul 1 03:58:21 2025 by rpki-client