$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD096/E5042C2ACA3211E9A739B753C4F9AE02/Ci5d8bLD15feoVNn-qncOITNGzM.mft File: Ci5d8bLD15feoVNn-qncOITNGzM.mft (raw, json) Hash identifier: xNymWvlCKoGjXlSfTC70Q8+hipex60wCsvXakKGESgk= Subject key identifier: F2:D5:59:CF:0F:0B:30:79:0E:FF:2A:CF:6A:C0:EE:6D:A5:F5:48:2C Authority key identifier: 0A:2E:5D:F1:B2:C3:D7:97:DE:A1:53:67:FA:A9:DC:38:84:CD:1B:33 Certificate issuer: /CN=A91CD096/serialNumber=0A2E5DF1B2C3D797DEA15367FAA9DC3884CD1B33 Certificate serial: 0D91 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ci5d8bLD15feoVNn-qncOITNGzM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CD096/E5042C2ACA3211E9A739B753C4F9AE02/Ci5d8bLD15feoVNn-qncOITNGzM.mft Manifest number: 0D85 Signing time: Mon 30 Jun 2025 18:09:30 +0000 Manifest this update: Mon 30 Jun 2025 18:09:30 +0000 Manifest next update: Mon 07 Jul 2025 18:09:30 +0000 Files and hashes: 1: Ci5d8bLD15feoVNn-qncOITNGzM.crl (hash: rl1DX/t2Twh/1QMM3r36g390kJWb4M5PlfwV6ZCPSZk=) 2: 4EEE01FCE15611EF9560323EC4F9AE02.roa (hash: 9Nz/F+iPTsdfTjIzxhDauJBST5Z1hrA/MujlPAQ3LmU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CD096/E5042C2ACA3211E9A739B753C4F9AE02/Ci5d8bLD15feoVNn-qncOITNGzM.crl rsync://rpki.apnic.net/member_repository/A91CD096/E5042C2ACA3211E9A739B753C4F9AE02/Ci5d8bLD15feoVNn-qncOITNGzM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ci5d8bLD15feoVNn-qncOITNGzM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 18:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3473 (0xd91) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD096, serialNumber=0A2E5DF1B2C3D797DEA15367FAA9DC3884CD1B33 Validity Not Before: Jun 30 18:09:30 2025 GMT Not After : Jul 7 18:09:30 2025 GMT Subject: CN=6862d2da-d555 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:06:f7:b0:8b:20:28:85:a2:f7:84:ab:6c:d6: 92:8f:22:83:f4:d1:92:ba:4e:26:44:60:d1:41:af: a4:2d:31:64:25:db:e9:5b:df:6f:79:54:5d:66:5a: 55:62:19:3b:c0:d6:78:3a:71:81:4d:97:26:1b:ce: 46:15:56:c9:0e:89:44:c5:19:eb:2a:85:99:e0:fa: 63:7a:38:74:4f:07:a5:48:4f:2f:21:93:53:e4:8e: 23:46:53:93:e1:c4:54:c2:ee:1d:0d:5a:39:81:cf: 4f:f8:48:3a:f2:77:e4:03:f7:96:be:75:ad:82:45: a7:2a:d5:c9:01:f8:ef:a9:56:5d:18:63:a6:6b:ed: 0b:73:11:a8:74:5a:94:68:0a:f9:44:76:5e:48:36: b1:f8:34:59:df:a6:a3:4b:c2:9b:a3:53:ea:9a:a6: f1:c8:bc:09:ea:0a:64:07:5f:8f:22:42:19:c8:b7: 35:d5:92:e3:3f:00:05:20:4a:1f:bb:be:f5:8f:67: 6f:c0:83:83:a7:78:56:95:bf:70:da:e2:77:8a:26: cb:2a:bb:ea:ba:a7:9f:fc:8a:69:99:80:cf:b1:41: 7b:b5:d1:ef:59:bf:b9:69:f0:54:8b:14:ad:0f:98: 9e:04:40:61:62:e3:53:29:dd:36:83:87:fc:6e:3c: 47:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:D5:59:CF:0F:0B:30:79:0E:FF:2A:CF:6A:C0:EE:6D:A5:F5:48:2C X509v3 Authority Key Identifier: keyid:0A:2E:5D:F1:B2:C3:D7:97:DE:A1:53:67:FA:A9:DC:38:84:CD:1B:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CD096/E5042C2ACA3211E9A739B753C4F9AE02/Ci5d8bLD15feoVNn-qncOITNGzM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ci5d8bLD15feoVNn-qncOITNGzM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD096/E5042C2ACA3211E9A739B753C4F9AE02/Ci5d8bLD15feoVNn-qncOITNGzM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:27:c4:4c:bd:c8:6e:78:96:97:c3:c7:d7:8a:4e:42:98:dc: 95:ea:d9:34:41:c7:19:e9:1b:65:c8:92:6d:72:b9:2a:e2:3a: 63:82:b0:b7:86:a2:6f:94:96:f8:28:0c:c3:cc:66:01:08:1f: fb:ce:1f:a5:5e:d5:21:cc:7b:93:a7:32:4f:77:d4:22:9e:ed: 39:a2:f3:84:a4:b5:6f:eb:62:cf:df:4e:44:05:8f:73:fa:54: 25:3d:c0:5d:71:9c:63:a1:d6:20:68:31:5b:78:9a:77:2a:c6: 24:09:cb:e2:a3:f0:dd:03:97:b9:cf:74:b9:9d:2a:5b:77:f2: 21:d4:10:19:99:df:83:30:c5:48:63:df:e1:9e:5b:a5:65:b9: 1c:dd:5e:ad:43:2a:7a:30:54:e7:b3:19:74:97:8e:16:59:29: 7a:06:c3:f2:12:81:4f:43:11:79:15:03:27:1c:3e:93:87:54: 20:97:dc:be:4e:b6:72:2d:c4:94:34:ba:c6:8b:62:09:76:ca: c3:ff:f3:97:2c:2f:0d:8a:9f:15:c5:51:08:48:79:8f:3b:c6: c9:0b:f4:b5:45:ab:2a:c9:ac:5e:81:2e:83:dd:a9:1b:64:a3: bb:d6:a4:37:1a:d0:73:63:84:98:b8:e0:29:03:17:08:2b:f3: 00:5e:1e:5a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDZEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0QwOTYxMTAvBgNVBAUTKDBBMkU1REYxQjJDM0Q3OTdERUExNTM2N0ZBQTlEQzM4 ODRDRDFCMzMwHhcNMjUwNjMwMTgwOTMwWhcNMjUwNzA3MTgwOTMwWjAYMRYwFAYD VQQDEw02ODYyZDJkYS1kNTU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtgb3sIsgKIWi94SrbNaSjyKD9NGSuk4mRGDRQa+kLTFkJdvpW99veVRdZlpV Yhk7wNZ4OnGBTZcmG85GFVbJDolExRnrKoWZ4Ppjejh0TwelSE8vIZNT5I4jRlOT 4cRUwu4dDVo5gc9P+Eg68nfkA/eWvnWtgkWnKtXJAfjvqVZdGGOma+0LcxGodFqU aAr5RHZeSDax+DRZ36ajS8Kbo1PqmqbxyLwJ6gpkB1+PIkIZyLc11ZLjPwAFIEof u771j2dvwIODp3hWlb9w2uJ3iibLKrvquqef/IppmYDPsUF7tdHvWb+5afBUixSt D5ieBEBhYuNTKd02g4f8bjxHyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPLVWc8P CzB5Dv8qz2rA7m2l9UgsMB8GA1UdIwQYMBaAFAouXfGyw9eX3qFTZ/qp3DiEzRsz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRDA5Ni9FNTA0MkMyQUNB MzIxMUU5QTczOUI3NTNDNEY5QUUwMi9DaTVkOGJMRDE1ZmVvVk5uLXFuY09JVE5H ek0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NpNWQ4YkxEMTVmZW9WTm4tcW5jT0lUTkd6TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RDA5Ni9FNTA0MkMyQUNBMzIxMUU5QTczOUI3NTNDNEY5QUUwMi9DaTVkOGJMRDE1 ZmVvVk5uLXFuY09JVE5Hek0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAzJ8RMvchueJaXw8fXik5CmNyV6tk0QccZ6RtlyJJtcrkq4jpjgrC3 hqJvlJb4KAzDzGYBCB/7zh+lXtUhzHuTpzJPd9Qinu05ovOEpLVv62LP305EBY9z +lQlPcBdcZxjodYgaDFbeJp3KsYkCcvio/DdA5e5z3S5nSpbd/Ih1BAZmd+DMMVI Y9/hnlulZbkc3V6tQyp6MFTnsxl0l44WWSl6BsPyEoFPQxF5FQMnHD6Th1Qgl9y+ TrZyLcSUNLrGi2IJdsrD//OXLC8Nip8VxVEISHmPO8bJC/S1RasqyaxegS6D3akb ZKO71qQ3GtBzY4SYuOApAxcIK/MAXh5a -----END CERTIFICATE-----Generated at Wed Jul 2 15:59:58 2025 by rpki-client