$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7A06/48F4DCDAC6C311E88F71CC56C4F9AE02/reE11eBNSWNwmzymv8AQttD5fK8.mft File: reE11eBNSWNwmzymv8AQttD5fK8.mft (raw, json) Hash identifier: BjRi2yGcNF9diFBsRYNT0aPdY/csmi21kjiHqMFEhac= Subject key identifier: 85:D5:C9:D3:C9:EA:55:C1:29:F6:4E:9C:BD:0D:19:76:C6:29:0B:C3 Authority key identifier: AD:E1:35:D5:E0:4D:49:63:70:9B:3C:A6:BF:C0:10:B6:D0:F9:7C:AF Certificate issuer: /CN=A91B7A06/serialNumber=ADE135D5E04D4963709B3CA6BFC010B6D0F97CAF Certificate serial: 12B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/reE11eBNSWNwmzymv8AQttD5fK8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7A06/48F4DCDAC6C311E88F71CC56C4F9AE02/reE11eBNSWNwmzymv8AQttD5fK8.mft Manifest number: 12A6 Signing time: Sat 28 Jun 2025 16:55:22 +0000 Manifest this update: Sat 28 Jun 2025 16:55:21 +0000 Manifest next update: Sat 05 Jul 2025 16:55:21 +0000 Files and hashes: 1: reE11eBNSWNwmzymv8AQttD5fK8.crl (hash: YJmkJJDA86jDRaaVL6MhStfwZ8K3gEgwK+qHiVKyoHY=) 2: F8E415E2987F11ED9E1F4D0FC4F9AE02.roa (hash: tYzlvKoaH6Iw/czt01Ia6uEcjkV7kohl/OzIkYhWPeY=) 3: F7B1497E987F11ED9E1F4D0FC4F9AE02.roa (hash: Gl4gKDf4aT96XGuS7DGEepsfpPgK8tonViSlMSSTaDQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7A06/48F4DCDAC6C311E88F71CC56C4F9AE02/reE11eBNSWNwmzymv8AQttD5fK8.crl rsync://rpki.apnic.net/member_repository/A91B7A06/48F4DCDAC6C311E88F71CC56C4F9AE02/reE11eBNSWNwmzymv8AQttD5fK8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/reE11eBNSWNwmzymv8AQttD5fK8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 16:55:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4788 (0x12b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7A06, serialNumber=ADE135D5E04D4963709B3CA6BFC010B6D0F97CAF Validity Not Before: Jun 28 16:55:21 2025 GMT Not After : Jul 5 16:55:21 2025 GMT Subject: CN=68601e7a-7013 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:b7:fe:d3:ab:c3:da:73:b8:6c:1d:37:7b:ba: 7d:0d:3b:62:e4:9e:7c:03:c9:89:7f:08:9a:c9:5c: bb:85:c7:b2:7a:ac:29:ac:88:b3:36:04:a6:96:c0: 3a:a0:5d:6b:4f:61:fa:5e:8a:6f:93:03:ac:5d:7a: 1f:52:de:6a:29:48:94:dc:66:21:17:17:ae:ad:c1: 06:ca:1f:8c:d2:fe:3a:ea:fa:08:00:c2:d8:1c:26: c6:87:c2:c8:d3:12:66:50:48:c9:ed:58:b7:54:2c: 28:7f:f2:96:19:dc:1b:1e:9b:d1:43:c1:66:83:13: 8c:14:e8:3f:3f:5a:6b:31:96:86:80:d3:76:5e:fc: 53:41:87:40:36:34:a5:2a:6e:47:e9:b7:09:57:5e: 92:e1:36:b8:87:e3:e9:5f:fa:9c:36:3e:72:b9:88: 61:9b:91:a1:38:48:64:c6:16:4d:08:d5:e0:9e:6c: 80:88:f2:2d:a9:63:6e:39:8d:dd:76:7d:7d:92:35: 67:72:83:57:83:d4:1b:23:5d:36:d7:4b:c5:bb:34: 8f:13:8f:a5:27:cf:84:f8:58:73:f6:07:1e:2e:c8: 9f:d0:7f:90:a2:5a:a5:4d:97:e8:74:ed:f2:d5:1f: 1d:a3:16:53:8c:cb:50:db:55:97:dd:94:25:d2:c0: 51:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:D5:C9:D3:C9:EA:55:C1:29:F6:4E:9C:BD:0D:19:76:C6:29:0B:C3 X509v3 Authority Key Identifier: keyid:AD:E1:35:D5:E0:4D:49:63:70:9B:3C:A6:BF:C0:10:B6:D0:F9:7C:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7A06/48F4DCDAC6C311E88F71CC56C4F9AE02/reE11eBNSWNwmzymv8AQttD5fK8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/reE11eBNSWNwmzymv8AQttD5fK8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7A06/48F4DCDAC6C311E88F71CC56C4F9AE02/reE11eBNSWNwmzymv8AQttD5fK8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:48:67:9f:7a:fa:e2:12:bb:6d:fc:70:67:f0:4e:97:27:93: 00:23:48:6b:22:c1:88:6f:e7:76:01:70:f4:19:30:29:8e:0b: da:89:15:35:fc:fb:f6:2c:c6:eb:79:4a:cd:c1:eb:66:74:6d: c7:f5:59:c8:74:cf:48:0a:a0:62:f0:a4:f2:a9:34:a7:5b:70: 30:f0:5c:7b:2b:e3:cb:27:e5:16:52:b2:d8:ad:d7:6e:ed:05: 4e:18:2c:7c:92:6c:13:9a:08:8f:e3:62:0d:3c:22:5b:98:44: 2e:c2:51:a4:3c:e5:c0:e4:93:d2:9c:07:fd:da:8d:97:8b:9f: 23:b2:b2:fa:a5:5e:bd:c6:b6:49:53:29:d7:f7:db:cc:9f:6f: f6:74:fc:f7:15:fd:15:c4:98:c3:bd:78:f0:88:f4:d9:ad:ae: 24:1e:b4:05:1a:0e:ca:31:d7:58:cd:d6:b5:e4:d0:c1:d2:1a: d8:2b:3a:c2:bc:dc:ce:b7:94:6a:2e:5e:97:de:e9:4e:8d:09: 20:04:76:11:e4:76:36:cc:67:ac:23:fd:97:8c:5e:9e:89:d8: a4:65:cc:14:3d:8e:ed:8e:eb:f0:d5:2b:3c:63:f8:e9:89:20: 70:fe:78:88:d1:bf:e9:1c:a1:66:5d:09:4a:c2:79:a7:03:0e: 81:8c:e8:36 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICErQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjdBMDYxMTAvBgNVBAUTKEFERTEzNUQ1RTA0RDQ5NjM3MDlCM0NBNkJGQzAxMEI2 RDBGOTdDQUYwHhcNMjUwNjI4MTY1NTIxWhcNMjUwNzA1MTY1NTIxWjAYMRYwFAYD VQQDEw02ODYwMWU3YS03MDEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvrf+06vD2nO4bB03e7p9DTti5J58A8mJfwiayVy7hceyeqwprIizNgSmlsA6 oF1rT2H6XopvkwOsXXofUt5qKUiU3GYhFxeurcEGyh+M0v466voIAMLYHCbGh8LI 0xJmUEjJ7Vi3VCwof/KWGdwbHpvRQ8FmgxOMFOg/P1prMZaGgNN2XvxTQYdANjSl Km5H6bcJV16S4Ta4h+PpX/qcNj5yuYhhm5GhOEhkxhZNCNXgnmyAiPItqWNuOY3d dn19kjVncoNXg9QbI10210vFuzSPE4+lJ8+E+Fhz9gceLsif0H+QolqlTZfodO3y 1R8doxZTjMtQ21WX3ZQl0sBRkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIXVydPJ 6lXBKfZOnL0NGXbGKQvDMB8GA1UdIwQYMBaAFK3hNdXgTUljcJs8pr/AELbQ+Xyv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCN0EwNi80OEY0RENEQUM2 QzMxMUU4OEY3MUNDNTZDNEY5QUUwMi9yZUUxMWVCTlNXTndtenltdjhBUXR0RDVm SzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JlRTExZUJOU1dOd216eW12OEFRdHRENWZLOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC N0EwNi80OEY0RENEQUM2QzMxMUU4OEY3MUNDNTZDNEY5QUUwMi9yZUUxMWVCTlNX TndtenltdjhBUXR0RDVmSzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBFSGefevriErtt/HBn8E6XJ5MAI0hrIsGIb+d2AXD0GTApjgvaiRU1 /Pv2LMbreUrNwetmdG3H9VnIdM9ICqBi8KTyqTSnW3Aw8Fx7K+PLJ+UWUrLYrddu 7QVOGCx8kmwTmgiP42INPCJbmEQuwlGkPOXA5JPSnAf92o2Xi58jsrL6pV69xrZJ UynX99vMn2/2dPz3Ff0VxJjDvXjwiPTZra4kHrQFGg7KMddYzda15NDB0hrYKzrC vNzOt5RqLl6X3ulOjQkgBHYR5HY2zGesI/2XjF6eidikZcwUPY7tjuvw1Ss8Y/jp iSBw/niI0b/pHKFmXQlKwnmnAw6BjOg2 -----END CERTIFICATE-----Generated at Sun Jun 29 13:33:50 2025 by rpki-client