$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA5F9/6920C74A048211F08F5A5280C4F9AE02/9buuhcb_s2DO1AgNETaiv9Opf9E.mft File: 9buuhcb_s2DO1AgNETaiv9Opf9E.mft (raw, json) Hash identifier: Hc1wI1bErvAr7cUB1fOcJKEk0UrC2JX21SgX8noMRiI= Subject key identifier: 2C:42:9A:80:0A:7A:20:77:47:FF:21:8C:3A:D1:83:4F:33:03:2C:F5 Authority key identifier: F5:BB:AE:85:C6:FF:B3:60:CE:D4:08:0D:11:36:A2:BF:D3:A9:7F:D1 Certificate issuer: /CN=A91CA5F9/serialNumber=F5BBAE85C6FFB360CED4080D1136A2BFD3A97FD1 Certificate serial: 36 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9buuhcb_s2DO1AgNETaiv9Opf9E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CA5F9/6920C74A048211F08F5A5280C4F9AE02/9buuhcb_s2DO1AgNETaiv9Opf9E.mft Manifest number: 35 Signing time: Sun 29 Jun 2025 06:38:34 +0000 Manifest this update: Sun 29 Jun 2025 06:38:34 +0000 Manifest next update: Sun 06 Jul 2025 06:38:34 +0000 Files and hashes: 1: 9buuhcb_s2DO1AgNETaiv9Opf9E.crl (hash: ppx1jxSC45QQU0g5suLZfnSJLrCvtqDmkvvGyyL4NEM=) 2: 16B651C6048411F094895C27C4F9AE02.roa (hash: pwAo4LzFE8ykOXOE/sO5tKhbyP75rksTaUDUQRDRnG0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CA5F9/6920C74A048211F08F5A5280C4F9AE02/9buuhcb_s2DO1AgNETaiv9Opf9E.crl rsync://rpki.apnic.net/member_repository/A91CA5F9/6920C74A048211F08F5A5280C4F9AE02/9buuhcb_s2DO1AgNETaiv9Opf9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9buuhcb_s2DO1AgNETaiv9Opf9E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 06:38:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54 (0x36) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CA5F9, serialNumber=F5BBAE85C6FFB360CED4080D1136A2BFD3A97FD1 Validity Not Before: Jun 29 06:38:34 2025 GMT Not After : Jul 6 06:38:34 2025 GMT Subject: CN=6860df6a-1b7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:da:a7:a0:1c:bb:9d:c4:e7:e5:9f:74:f4:cb: da:20:cb:f2:0d:0e:be:24:4f:fb:4f:11:cc:ce:d5: 94:52:75:be:15:4e:5d:9d:da:75:ff:e6:1b:2f:ae: 18:77:96:9c:08:4c:67:08:0c:6c:72:e8:92:65:f0: 78:16:1e:fc:db:a6:38:06:33:a0:47:31:1b:c1:94: 09:06:56:d0:41:80:a9:e7:8a:4e:72:92:b8:b3:37: 53:cb:e8:b7:24:05:37:06:43:ca:0c:3f:55:8e:79: d4:e9:b1:72:36:3c:ac:d6:82:31:dc:e2:5c:36:b4: 51:15:7d:84:df:1c:97:61:a0:2f:ee:0b:63:96:d5: 2e:9f:7e:8e:87:dd:cd:e2:56:9f:36:fd:bb:0a:d3: f8:23:13:80:46:0f:73:e4:45:8f:0f:ab:76:77:a1: 01:06:7c:c1:3a:10:bf:db:87:ab:53:56:27:a8:0e: 51:86:92:52:f5:90:10:fc:57:2b:8a:47:42:a1:1f: 61:11:8f:ed:86:17:42:34:39:8c:8a:4a:e9:7d:c8: bd:cc:c3:b2:00:97:44:56:47:26:09:4f:3c:24:3b: 9b:84:95:b9:88:c3:61:ba:47:fc:4f:db:c0:4c:59: de:f9:27:b8:dd:10:d6:b4:7e:c6:73:47:6e:6e:54: ef:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:42:9A:80:0A:7A:20:77:47:FF:21:8C:3A:D1:83:4F:33:03:2C:F5 X509v3 Authority Key Identifier: keyid:F5:BB:AE:85:C6:FF:B3:60:CE:D4:08:0D:11:36:A2:BF:D3:A9:7F:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CA5F9/6920C74A048211F08F5A5280C4F9AE02/9buuhcb_s2DO1AgNETaiv9Opf9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9buuhcb_s2DO1AgNETaiv9Opf9E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA5F9/6920C74A048211F08F5A5280C4F9AE02/9buuhcb_s2DO1AgNETaiv9Opf9E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:61:ad:19:90:ba:a2:f3:e4:2e:df:aa:e9:49:69:d0:83:bb: fc:b9:eb:b6:74:6b:bc:98:5f:ba:e4:5d:94:e2:ab:4a:7a:51: 2f:16:51:9a:6c:4f:61:da:f6:eb:c4:30:24:32:46:40:6c:bb: 2d:6c:da:1d:20:7d:b6:70:35:a4:d0:50:a7:8d:21:a4:6c:fd: cd:2d:7c:3f:86:78:d0:fb:e3:2a:40:e6:09:4d:21:5c:a3:1e: 7b:ff:86:cf:35:1b:70:ce:09:77:57:35:0b:fa:45:b5:03:df: 55:9e:76:9d:30:c5:8e:57:cb:a9:a3:18:15:94:ea:83:bd:e9: da:e8:32:bc:ca:4f:40:2c:b3:92:27:b9:16:7e:bb:32:09:2c: cd:e4:47:a2:26:a9:1f:e6:bc:5d:65:c2:3d:d4:90:4e:57:be: 1f:b3:6a:c8:00:a4:4e:d5:42:86:21:61:b9:5e:95:84:43:48: 86:64:0b:72:06:b0:eb:ce:a4:79:ab:90:bf:aa:0f:ee:23:e1: e8:e0:e5:17:ac:70:4a:9c:31:d3:d0:e9:fb:94:c5:fa:ce:4e: 8c:6d:53:8f:42:71:c6:b5:df:a9:c2:45:0a:53:7e:2a:89:11: e4:20:17:db:36:6a:84:05:53:6a:92:b7:81:19:8b:79:a7:bf: 3e:45:fa:02 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD QTVGOTExMC8GA1UEBRMoRjVCQkFFODVDNkZGQjM2MENFRDQwODBEMTEzNkEyQkZE M0E5N0ZEMTAeFw0yNTA2MjkwNjM4MzRaFw0yNTA3MDYwNjM4MzRaMBgxFjAUBgNV BAMTDTY4NjBkZjZhLTFiN2YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDB2qegHLudxOfln3T0y9ogy/INDr4kT/tPEczO1ZRSdb4VTl2d2nX/5hsvrhh3 lpwITGcIDGxy6JJl8HgWHvzbpjgGM6BHMRvBlAkGVtBBgKnnik5ykrizN1PL6Lck BTcGQ8oMP1WOedTpsXI2PKzWgjHc4lw2tFEVfYTfHJdhoC/uC2OW1S6ffo6H3c3i Vp82/bsK0/gjE4BGD3PkRY8Pq3Z3oQEGfME6EL/bh6tTVieoDlGGklL1kBD8VyuK R0KhH2ERj+2GF0I0OYyKSul9yL3Mw7IAl0RWRyYJTzwkO5uElbmIw2G6R/xP28BM Wd75J7jdENa0fsZzR25uVO87AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQULEKagAp6 IHdH/yGMOtGDTzMDLPUwHwYDVR0jBBgwFoAU9buuhcb/s2DO1AgNETaiv9Opf9Ew DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNBNUY5LzY5MjBDNzRBMDQ4 MjExRjA4RjVBNTI4MEM0RjlBRTAyLzlidXVoY2JfczJETzFBZ05FVGFpdjlPcGY5 RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOWJ1dWhjYl9zMkRPMUFnTkVUYWl2OU9wZjlFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNB NUY5LzY5MjBDNzRBMDQ4MjExRjA4RjVBNTI4MEM0RjlBRTAyLzlidXVoY2JfczJE TzFBZ05FVGFpdjlPcGY5RS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFFhrRmQuqLz5C7fqulJadCDu/y567Z0a7yYX7rkXZTiq0p6US8WUZps T2Ha9uvEMCQyRkBsuy1s2h0gfbZwNaTQUKeNIaRs/c0tfD+GeND74ypA5glNIVyj Hnv/hs81G3DOCXdXNQv6RbUD31Wedp0wxY5Xy6mjGBWU6oO96droMrzKT0Ass5In uRZ+uzIJLM3kR6ImqR/mvF1lwj3UkE5Xvh+zasgApE7VQoYhYblelYRDSIZkC3IG sOvOpHmrkL+qD+4j4ejg5RescEqcMdPQ6fuUxfrOToxtU49Ccca136nCRQpTfiqJ EeQgF9s2aoQFU2qSt4EZi3mnvz5F+gI= -----END CERTIFICATE-----Generated at Sun Jun 29 19:30:36 2025 by rpki-client