$ rpki-client -vvf rpki.apnic.net/member_repository/A91BAFCE/2D34C392B29C11ED98A8314AC4F9AE02/-9GoSKH4mo0k2wtoF6CH-y313wg.mft File: -9GoSKH4mo0k2wtoF6CH-y313wg.mft (raw, json) Hash identifier: wVPwB/ItbM/m34HWhIWg4U+i77v6nvWOrJVjdOHOiPw= Subject key identifier: 2F:0A:81:14:9E:8E:17:33:28:D8:87:92:20:6D:B0:AF:AF:EF:84:87 Authority key identifier: FB:D1:A8:48:A1:F8:9A:8D:24:DB:0B:68:17:A0:87:FB:2D:F5:DF:08 Certificate issuer: /CN=A91BAFCE/serialNumber=FBD1A848A1F89A8D24DB0B6817A087FB2DF5DF08 Certificate serial: 01BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-9GoSKH4mo0k2wtoF6CH-y313wg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BAFCE/2D34C392B29C11ED98A8314AC4F9AE02/-9GoSKH4mo0k2wtoF6CH-y313wg.mft Manifest number: 01B9 Signing time: Tue 01 Jul 2025 03:27:56 +0000 Manifest this update: Tue 01 Jul 2025 03:27:55 +0000 Manifest next update: Tue 08 Jul 2025 03:27:55 +0000 Files and hashes: 1: -9GoSKH4mo0k2wtoF6CH-y313wg.crl (hash: Afv/ddsBKE1qSWgGv1p8DP+TLytAkQUcJU1eVCBoGyc=) 2: 37C8FE80B2A211ED9A5C4B53C4F9AE02.roa (hash: RFveBx12nYjQL7C6dI7Z0G+EUk4Kgzyh1OTU3yziD98=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BAFCE/2D34C392B29C11ED98A8314AC4F9AE02/-9GoSKH4mo0k2wtoF6CH-y313wg.crl rsync://rpki.apnic.net/member_repository/A91BAFCE/2D34C392B29C11ED98A8314AC4F9AE02/-9GoSKH4mo0k2wtoF6CH-y313wg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-9GoSKH4mo0k2wtoF6CH-y313wg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 03:27:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 444 (0x1bc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BAFCE, serialNumber=FBD1A848A1F89A8D24DB0B6817A087FB2DF5DF08 Validity Not Before: Jul 1 03:27:55 2025 GMT Not After : Jul 8 03:27:55 2025 GMT Subject: CN=686355bb-eed9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:56:80:6f:18:c0:68:57:d2:bb:cc:d2:b8:f7: c5:05:b1:a3:e4:20:f8:88:cf:85:d3:20:8d:99:e2: 03:1a:16:04:fe:64:09:27:be:5e:a8:fc:65:e7:00: a8:01:61:25:f2:16:ca:81:09:e8:3c:d3:7d:87:3b: 29:60:48:e4:d8:20:a7:3d:fa:37:9c:52:2a:ac:41: 7e:0f:f7:44:a1:a0:cc:62:a6:01:e4:b6:22:b1:8c: 15:93:0c:86:61:f4:b1:48:96:f7:7b:85:0c:71:d1: d6:91:2e:90:c5:5a:ae:c1:8f:68:f5:09:11:9e:19: b8:94:fe:f3:d2:d6:b2:6c:bd:0b:26:1e:b6:58:d0: 19:2b:9c:b5:98:68:a9:b9:15:5a:64:b1:5c:b1:a4: 48:36:49:bd:b1:f1:07:fe:59:63:6f:5f:78:79:1d: 22:9b:42:8e:18:cb:f3:12:4c:7c:08:5c:19:9f:1e: 4b:2d:7f:5a:9f:cc:d3:a2:d5:77:d4:9b:36:bc:23: 41:41:2b:d3:8b:55:6e:e7:ec:ca:8d:e1:b4:16:5b: 95:a3:09:09:c7:26:e3:c4:5c:85:e8:1e:fc:e2:39: 84:38:7c:3a:00:a4:35:76:dc:70:37:ab:1b:5a:0d: bb:4e:39:bc:b1:e9:9c:8c:b5:e9:ca:3c:47:dd:5a: 90:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:0A:81:14:9E:8E:17:33:28:D8:87:92:20:6D:B0:AF:AF:EF:84:87 X509v3 Authority Key Identifier: keyid:FB:D1:A8:48:A1:F8:9A:8D:24:DB:0B:68:17:A0:87:FB:2D:F5:DF:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BAFCE/2D34C392B29C11ED98A8314AC4F9AE02/-9GoSKH4mo0k2wtoF6CH-y313wg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-9GoSKH4mo0k2wtoF6CH-y313wg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BAFCE/2D34C392B29C11ED98A8314AC4F9AE02/-9GoSKH4mo0k2wtoF6CH-y313wg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:af:45:d1:4a:d9:04:ba:fa:98:63:dc:0b:c5:0d:d4:22:18: 65:df:ff:7c:ec:c8:91:0a:44:eb:5e:3a:cb:e3:78:b6:5d:7b: ca:51:a9:2e:fb:b5:9e:58:25:d2:0e:56:93:eb:87:47:ff:14: 60:28:e7:fc:66:88:8f:c8:49:94:0f:eb:65:e8:8a:91:39:d8: e1:bc:de:0f:b1:d9:ee:37:23:0e:8c:8e:b5:25:c9:28:cc:a4: 22:8a:48:a6:13:5e:df:f7:e1:3f:f2:9c:d3:3c:f7:f9:1e:70: f4:42:00:e9:7c:fa:08:80:86:ef:87:55:bb:e0:8e:e7:20:7b: 81:36:45:16:80:8f:6e:90:6d:b5:18:b7:a7:f1:95:60:52:35: 05:68:f2:c3:0c:14:bb:db:d3:fa:ee:0e:26:06:6e:81:45:01: 7d:d7:0f:b2:c4:fc:a0:e3:92:a7:41:c9:0d:6f:85:9d:54:3d: 47:92:1a:a0:18:c2:bd:ab:c0:a8:27:06:80:9c:86:b9:f7:13: 81:30:07:76:2a:1c:c1:9b:bc:e9:c8:ef:fa:36:ef:52:03:c2: d5:20:2f:a6:06:ce:10:8d:b6:6e:d8:6b:23:75:08:07:30:5a: 1b:c9:b0:20:8b:de:51:74:91:2c:22:b3:9f:77:ba:28:50:6f: 6b:f8:9f:18 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkFGQ0UxMTAvBgNVBAUTKEZCRDFBODQ4QTFGODlBOEQyNERCMEI2ODE3QTA4N0ZC MkRGNURGMDgwHhcNMjUwNzAxMDMyNzU1WhcNMjUwNzA4MDMyNzU1WjAYMRYwFAYD VQQDEw02ODYzNTViYi1lZWQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvFaAbxjAaFfSu8zSuPfFBbGj5CD4iM+F0yCNmeIDGhYE/mQJJ75eqPxl5wCo AWEl8hbKgQnoPNN9hzspYEjk2CCnPfo3nFIqrEF+D/dEoaDMYqYB5LYisYwVkwyG YfSxSJb3e4UMcdHWkS6QxVquwY9o9QkRnhm4lP7z0taybL0LJh62WNAZK5y1mGip uRVaZLFcsaRINkm9sfEH/lljb194eR0im0KOGMvzEkx8CFwZnx5LLX9an8zTotV3 1Js2vCNBQSvTi1Vu5+zKjeG0FluVowkJxybjxFyF6B784jmEOHw6AKQ1dtxwN6sb Wg27Tjm8semcjLXpyjxH3VqQBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC8KgRSe jhczKNiHkiBtsK+v74SHMB8GA1UdIwQYMBaAFPvRqEih+JqNJNsLaBegh/st9d8I MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQUZDRS8yRDM0QzM5MkIy OUMxMUVEOThBODMxNEFDNEY5QUUwMi8tOUdvU0tING1vMGsyd3RvRjZDSC15MzEz d2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy05R29TS0g0bW8wazJ3dG9GNkNILXkzMTN3Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QUZDRS8yRDM0QzM5MkIyOUMxMUVEOThBODMxNEFDNEY5QUUwMi8tOUdvU0tING1v MGsyd3RvRjZDSC15MzEzd2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBzr0XRStkEuvqYY9wLxQ3UIhhl3/987MiRCkTrXjrL43i2XXvKUaku +7WeWCXSDlaT64dH/xRgKOf8ZoiPyEmUD+tl6IqROdjhvN4PsdnuNyMOjI61Jcko zKQiikimE17f9+E/8pzTPPf5HnD0QgDpfPoIgIbvh1W74I7nIHuBNkUWgI9ukG21 GLen8ZVgUjUFaPLDDBS729P67g4mBm6BRQF91w+yxPyg45KnQckNb4WdVD1Hkhqg GMK9q8CoJwaAnIa59xOBMAd2KhzBm7zpyO/6Nu9SA8LVIC+mBs4QjbZu2GsjdQgH MFobybAgi95RdJEsIrOfd7ooUG9r+J8Y -----END CERTIFICATE-----Generated at Thu Jul 3 00:43:22 2025 by rpki-client