$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0E6A/4C281BBE11A611EEB3346926C4F9AE02/9UWcujH5M_kHO1FMnLvsNPbtLko.mft File: 9UWcujH5M_kHO1FMnLvsNPbtLko.mft (raw, json) Hash identifier: TZdKFmwsSFXr4OXllW2Xko3i7x7aAy1baHKTmBkAp/Q= Subject key identifier: 3D:B3:DF:41:52:B7:2A:68:03:EF:D5:7A:A6:DE:EC:20:D1:4F:AD:EC Authority key identifier: F5:45:9C:BA:31:F9:33:F9:07:3B:51:4C:9C:BB:EC:34:F6:ED:2E:4A Certificate issuer: /CN=A91C0E6A/serialNumber=F5459CBA31F933F9073B514C9CBBEC34F6ED2E4A Certificate serial: 019E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9UWcujH5M_kHO1FMnLvsNPbtLko.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C0E6A/4C281BBE11A611EEB3346926C4F9AE02/9UWcujH5M_kHO1FMnLvsNPbtLko.mft Manifest number: 018C Signing time: Tue 01 Jul 2025 04:08:23 +0000 Manifest this update: Tue 01 Jul 2025 04:08:23 +0000 Manifest next update: Tue 08 Jul 2025 04:08:23 +0000 Files and hashes: 1: 9UWcujH5M_kHO1FMnLvsNPbtLko.crl (hash: 8Rh4Yd3+c4WoLe4+MreN4nSjPlAS9ZP51lYJa8Z1uzU=) 2: 5509870E6B6911EFA634B086C4F9AE02.roa (hash: Ha7uuCzrs6q52L6yqD5G/7/RQyqW/lnT9pM0rZZ1mMg=) 3: 7641B9AE12CD11EFAC15BB64C4F9AE02.roa (hash: JS7S95pwMMq4VJCG+rsKP1S3MhXCo+P6oTggAIuVIcE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C0E6A/4C281BBE11A611EEB3346926C4F9AE02/9UWcujH5M_kHO1FMnLvsNPbtLko.crl rsync://rpki.apnic.net/member_repository/A91C0E6A/4C281BBE11A611EEB3346926C4F9AE02/9UWcujH5M_kHO1FMnLvsNPbtLko.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9UWcujH5M_kHO1FMnLvsNPbtLko.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 04:08:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 414 (0x19e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C0E6A, serialNumber=F5459CBA31F933F9073B514C9CBBEC34F6ED2E4A Validity Not Before: Jul 1 04:08:23 2025 GMT Not After : Jul 8 04:08:23 2025 GMT Subject: CN=68635f37-e6ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:ee:71:fc:8c:b0:23:fa:ae:ff:03:48:19:5e: 4d:ce:e2:7f:b4:8e:56:84:ec:c2:7a:9a:ac:df:d3: d4:b0:a4:4a:d9:44:19:62:9d:05:bb:4e:89:80:72: 57:7a:47:fc:2d:56:f7:03:38:5d:c2:c0:1f:d4:3e: d6:23:15:69:fc:93:28:66:55:60:65:95:9e:b0:a5: ed:9a:b5:3e:d8:fd:b9:63:57:75:c4:64:69:08:c7: f6:0a:50:d4:75:db:74:79:46:dd:5c:62:eb:23:32: 2c:4a:cf:53:e5:48:89:03:36:7a:b4:71:7c:32:f5: 36:24:9e:5b:86:8d:75:2a:53:e2:7a:d7:0d:e6:b4: 3d:d5:01:ac:99:99:6c:b4:be:67:78:71:df:30:c8: ab:03:77:00:cb:81:9e:38:87:ab:1f:7b:0e:6a:fb: 7b:fc:ef:b2:e2:a2:d8:e2:17:f3:3d:45:38:8f:a9: 08:83:62:7c:71:a3:88:0d:ec:7d:76:64:e9:ef:a6: 93:7e:ef:fe:7b:c8:f4:bf:64:bb:4c:1e:3f:16:96: 7c:c5:12:fd:b2:7e:5f:08:33:1c:01:a9:45:ef:8e: 95:06:2f:d8:86:74:6f:38:27:9b:d5:05:a0:f6:5e: 99:2a:85:65:03:76:41:58:01:6a:a8:d2:56:d6:c4: b3:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:B3:DF:41:52:B7:2A:68:03:EF:D5:7A:A6:DE:EC:20:D1:4F:AD:EC X509v3 Authority Key Identifier: keyid:F5:45:9C:BA:31:F9:33:F9:07:3B:51:4C:9C:BB:EC:34:F6:ED:2E:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C0E6A/4C281BBE11A611EEB3346926C4F9AE02/9UWcujH5M_kHO1FMnLvsNPbtLko.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9UWcujH5M_kHO1FMnLvsNPbtLko.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0E6A/4C281BBE11A611EEB3346926C4F9AE02/9UWcujH5M_kHO1FMnLvsNPbtLko.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:5e:37:c7:d3:1f:ae:46:c8:57:69:bd:78:e9:f6:3d:18:69: 8e:30:bb:5f:67:9c:32:da:5c:25:0b:2e:88:a0:c5:0d:72:1e: f1:7d:47:8c:1e:c9:1d:e9:ca:f5:9b:b2:2c:8b:68:59:ef:26: 1b:5c:83:26:35:9c:41:64:a7:45:3d:5a:28:7d:84:f3:1f:b3: 2b:e7:2e:57:0f:04:90:ef:fd:eb:41:e5:eb:ad:64:ff:e7:17: 6e:54:4e:25:74:d9:b0:c7:f6:8a:f3:7d:51:93:00:e8:ce:af: b5:2f:ea:3c:0a:0a:81:1e:ec:9f:98:e8:0c:94:82:c4:a5:0c: d5:f7:ec:4c:14:3a:26:ad:3a:b9:dc:c4:45:3b:f4:37:7d:ad: 7f:19:37:03:6a:f1:f2:32:33:74:80:2e:5f:57:50:57:a2:a2: 00:aa:c6:d7:c8:89:fe:9f:8f:4e:8e:2d:ce:c1:1d:c0:7d:dc: 3d:15:cb:5e:b9:d5:b3:55:18:00:5f:c8:2a:c6:91:28:a0:53: e4:43:8f:e6:48:46:f3:96:44:15:cb:fc:ac:25:81:5e:78:48: 15:78:8f:bb:b9:43:6e:79:48:59:e1:88:7e:0d:ae:74:78:a1: cd:7b:dd:6c:be:b4:4b:db:87:3b:b1:5f:c4:48:ce:ff:bc:94: 04:7b:bf:8e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzBFNkExMTAvBgNVBAUTKEY1NDU5Q0JBMzFGOTMzRjkwNzNCNTE0QzlDQkJFQzM0 RjZFRDJFNEEwHhcNMjUwNzAxMDQwODIzWhcNMjUwNzA4MDQwODIzWjAYMRYwFAYD VQQDEw02ODYzNWYzNy1lNmFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2+5x/IywI/qu/wNIGV5NzuJ/tI5WhOzCepqs39PUsKRK2UQZYp0Fu06JgHJX ekf8LVb3AzhdwsAf1D7WIxVp/JMoZlVgZZWesKXtmrU+2P25Y1d1xGRpCMf2ClDU ddt0eUbdXGLrIzIsSs9T5UiJAzZ6tHF8MvU2JJ5bho11KlPietcN5rQ91QGsmZls tL5neHHfMMirA3cAy4GeOIerH3sOavt7/O+y4qLY4hfzPUU4j6kIg2J8caOIDex9 dmTp76aTfu/+e8j0v2S7TB4/FpZ8xRL9sn5fCDMcAalF746VBi/YhnRvOCeb1QWg 9l6ZKoVlA3ZBWAFqqNJW1sSziQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD2z30FS typoA+/Veqbe7CDRT63sMB8GA1UdIwQYMBaAFPVFnLox+TP5BztRTJy77DT27S5K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMEU2QS80QzI4MUJCRTEx QTYxMUVFQjMzNDY5MjZDNEY5QUUwMi85VVdjdWpINU1fa0hPMUZNbkx2c05QYnRM a28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlVV2N1akg1TV9rSE8xRk1uTHZzTlBidExrby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MEU2QS80QzI4MUJCRTExQTYxMUVFQjMzNDY5MjZDNEY5QUUwMi85VVdjdWpINU1f a0hPMUZNbkx2c05QYnRMa28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA2XjfH0x+uRshXab146fY9GGmOMLtfZ5wy2lwlCy6IoMUNch7xfUeM Hskd6cr1m7Isi2hZ7yYbXIMmNZxBZKdFPVoofYTzH7Mr5y5XDwSQ7/3rQeXrrWT/ 5xduVE4ldNmwx/aK831RkwDozq+1L+o8CgqBHuyfmOgMlILEpQzV9+xMFDomrTq5 3MRFO/Q3fa1/GTcDavHyMjN0gC5fV1BXoqIAqsbXyIn+n49Oji3OwR3Afdw9Fcte udWzVRgAX8gqxpEooFPkQ4/mSEbzlkQVy/ysJYFeeEgVeI+7uUNueUhZ4Yh+Da50 eKHNe91svrRL24c7sV/ESM7/vJQEe7+O -----END CERTIFICATE-----Generated at Tue Jul 1 21:00:42 2025 by rpki-client