$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2F80/94C54B80039511EF85B69F4EC4F9AE02/9BDEg6TIyRb_1M9CDEwRCIl5iJE.mft File: 9BDEg6TIyRb_1M9CDEwRCIl5iJE.mft (raw, json) Hash identifier: O/Gc2mxJt8pda7HgiQM1Iz6STydGmgiFpxE6RhASu/I= Subject key identifier: D5:64:02:62:47:40:2A:00:05:F4:C4:24:9A:C4:00:3A:44:73:40:72 Authority key identifier: F4:10:C4:83:A4:C8:C9:16:FF:D4:CF:42:0C:4C:11:08:89:79:88:91 Certificate issuer: /CN=A91E2F80/serialNumber=F410C483A4C8C916FFD4CF420C4C110889798891 Certificate serial: FC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9BDEg6TIyRb_1M9CDEwRCIl5iJE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2F80/94C54B80039511EF85B69F4EC4F9AE02/9BDEg6TIyRb_1M9CDEwRCIl5iJE.mft Manifest number: EE Signing time: Thu 03 Jul 2025 05:40:54 +0000 Manifest this update: Thu 03 Jul 2025 05:40:54 +0000 Manifest next update: Thu 10 Jul 2025 05:40:54 +0000 Files and hashes: 1: 9BDEg6TIyRb_1M9CDEwRCIl5iJE.crl (hash: VfAp2eVm9QwVbKYuyXZg2KmgIS6QX18eI0hNm95DtL8=) 2: DAC9D5960C7E11EF9A189E18C4F9AE02.roa (hash: cLX/WlgP7K24ucXGUUtpNzmDrPk9vKJrsn64OyHEFQQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2F80/94C54B80039511EF85B69F4EC4F9AE02/9BDEg6TIyRb_1M9CDEwRCIl5iJE.crl rsync://rpki.apnic.net/member_repository/A91E2F80/94C54B80039511EF85B69F4EC4F9AE02/9BDEg6TIyRb_1M9CDEwRCIl5iJE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9BDEg6TIyRb_1M9CDEwRCIl5iJE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 252 (0xfc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2F80, serialNumber=F410C483A4C8C916FFD4CF420C4C110889798891 Validity Not Before: Jul 3 05:40:54 2025 GMT Not After : Jul 10 05:40:54 2025 GMT Subject: CN=686617e6-ffce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:f9:50:23:63:c8:2d:ad:93:69:fe:72:49:9c: 3f:37:34:3e:9b:6b:bb:c8:57:a2:55:f4:6e:44:f7: b9:5d:b0:8a:f4:0f:4a:8d:d5:fa:20:3b:a1:49:81: 5a:bf:d9:89:54:1d:cd:89:89:37:b8:6a:7e:20:03: d7:fd:f8:6c:43:b3:b2:37:4d:64:7e:35:5f:d6:bb: 69:1e:21:d8:2f:58:c4:f3:04:34:50:37:fb:7c:b5: 8b:3d:ae:8d:ee:c4:b4:66:e0:75:e2:75:f2:06:18: f7:72:00:36:c4:5e:94:f6:65:9e:20:4f:d6:99:d4: cb:87:73:2d:ee:2b:7d:8f:b8:eb:78:57:c4:61:c8: fe:97:12:41:c1:29:f3:ab:15:2a:29:17:35:6d:bf: a1:74:5b:9a:7a:e4:f2:d9:1b:c0:76:3e:0f:61:66: 5f:2f:1f:e1:e0:92:42:98:72:51:0b:e0:84:28:be: b9:e3:dc:d4:73:b5:23:95:d6:78:8f:11:d5:d7:15: 90:05:a3:37:ca:9b:43:32:d2:7f:8c:08:b3:d7:5b: 18:65:de:6f:2a:53:c5:06:08:02:b5:b3:d9:18:8d: 78:32:b4:dd:8c:06:28:d7:bd:a2:f9:6a:5d:9c:c4: 16:73:80:d4:72:9b:ce:48:c1:55:71:a5:75:4d:55: 2b:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:64:02:62:47:40:2A:00:05:F4:C4:24:9A:C4:00:3A:44:73:40:72 X509v3 Authority Key Identifier: keyid:F4:10:C4:83:A4:C8:C9:16:FF:D4:CF:42:0C:4C:11:08:89:79:88:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2F80/94C54B80039511EF85B69F4EC4F9AE02/9BDEg6TIyRb_1M9CDEwRCIl5iJE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9BDEg6TIyRb_1M9CDEwRCIl5iJE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2F80/94C54B80039511EF85B69F4EC4F9AE02/9BDEg6TIyRb_1M9CDEwRCIl5iJE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:64:bd:0b:c8:75:9d:0c:8c:33:74:82:f4:f2:dd:7d:8d:c6: 9d:4c:aa:4c:15:d2:26:d3:bc:e3:85:bc:76:a7:2b:ad:cf:dc: f5:d3:72:3e:5b:51:62:8f:d9:a5:c2:c2:03:57:f5:12:8f:6b: b6:ef:7c:35:b5:eb:7a:05:a7:ed:5b:76:2f:12:dd:1a:35:d9: 83:4e:8d:a6:39:61:62:e7:30:fb:71:c8:85:e4:9f:58:f8:ac: 42:25:16:ca:4b:de:19:cb:f0:45:38:e2:23:cb:ba:8a:57:04: 1f:c2:b7:2f:b0:cf:85:20:24:a1:93:89:e9:8b:1e:3c:14:46: 97:03:04:72:40:60:75:18:e5:14:7d:18:24:a8:bf:67:99:76: ab:68:fe:42:1c:35:67:3d:dc:46:99:16:68:05:46:2e:65:a0: 95:f9:6c:56:ba:0f:28:cf:c8:89:35:79:2a:be:4a:76:95:04: 0b:5b:dc:14:7e:a2:9e:1f:bf:28:c1:06:c1:d5:96:7d:c8:dc: 60:31:6d:c2:75:4d:55:9d:76:cb:57:c0:6b:72:be:c8:b6:88: ed:57:a9:19:dd:7a:ad:e8:45:ac:27:86:75:0d:c1:82:88:e2: 48:2d:22:37:aa:bd:5e:40:3b:1d:71:f7:05:06:ec:d2:d2:9a: a2:72:a6:f9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTJGODAxMTAvBgNVBAUTKEY0MTBDNDgzQTRDOEM5MTZGRkQ0Q0Y0MjBDNEMxMTA4 ODk3OTg4OTEwHhcNMjUwNzAzMDU0MDU0WhcNMjUwNzEwMDU0MDU0WjAYMRYwFAYD VQQDEw02ODY2MTdlNi1mZmNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo/lQI2PILa2Taf5ySZw/NzQ+m2u7yFeiVfRuRPe5XbCK9A9KjdX6IDuhSYFa v9mJVB3NiYk3uGp+IAPX/fhsQ7OyN01kfjVf1rtpHiHYL1jE8wQ0UDf7fLWLPa6N 7sS0ZuB14nXyBhj3cgA2xF6U9mWeIE/WmdTLh3Mt7it9j7jreFfEYcj+lxJBwSnz qxUqKRc1bb+hdFuaeuTy2RvAdj4PYWZfLx/h4JJCmHJRC+CEKL6549zUc7UjldZ4 jxHV1xWQBaM3yptDMtJ/jAiz11sYZd5vKlPFBggCtbPZGI14MrTdjAYo172i+Wpd nMQWc4DUcpvOSMFVcaV1TVUrqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNVkAmJH QCoABfTEJJrEADpEc0ByMB8GA1UdIwQYMBaAFPQQxIOkyMkW/9TPQgxMEQiJeYiR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMkY4MC85NEM1NEI4MDAz OTUxMUVGODVCNjlGNEVDNEY5QUUwMi85QkRFZzZUSXlSYl8xTTlDREV3UkNJbDVp SkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlCREVnNlRJeVJiXzFNOUNERXdSQ0lsNWlKRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MkY4MC85NEM1NEI4MDAzOTUxMUVGODVCNjlGNEVDNEY5QUUwMi85QkRFZzZUSXlS Yl8xTTlDREV3UkNJbDVpSkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBbZL0LyHWdDIwzdIL08t19jcadTKpMFdIm07zjhbx2pyutz9z103I+ W1Fij9mlwsIDV/USj2u273w1tet6BaftW3YvEt0aNdmDTo2mOWFi5zD7cciF5J9Y +KxCJRbKS94Zy/BFOOIjy7qKVwQfwrcvsM+FICShk4npix48FEaXAwRyQGB1GOUU fRgkqL9nmXaraP5CHDVnPdxGmRZoBUYuZaCV+WxWug8oz8iJNXkqvkp2lQQLW9wU fqKeH78owQbB1ZZ9yNxgMW3CdU1VnXbLV8Brcr7ItojtV6kZ3Xqt6EWsJ4Z1DcGC iOJILSI3qr1eQDsdcfcFBuzS0pqicqb5 -----END CERTIFICATE-----Generated at Thu Jul 3 17:38:32 2025 by rpki-client