$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC93F/60A8F88CDEAD11ED8A6DF14DC4F9AE02/CUoNzYAqBb91c_96buCnqXIFUNE.mft File: CUoNzYAqBb91c_96buCnqXIFUNE.mft (raw, json) Hash identifier: ZJA+1WeQRcdodMmQidC55Vgor20D5g80YHA1U31zvUU= Subject key identifier: 90:B8:EB:0A:C8:F5:1B:6B:B5:71:D0:F8:01:91:02:16:B4:5B:53:74 Authority key identifier: 09:4A:0D:CD:80:2A:05:BF:75:73:FF:7A:6E:E0:A7:A9:72:05:50:D1 Certificate issuer: /CN=A91EC93F/serialNumber=094A0DCD802A05BF7573FF7A6EE0A7A9720550D1 Certificate serial: 019E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUoNzYAqBb91c_96buCnqXIFUNE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EC93F/60A8F88CDEAD11ED8A6DF14DC4F9AE02/CUoNzYAqBb91c_96buCnqXIFUNE.mft Manifest number: 019B Signing time: Sun 29 Jun 2025 02:30:38 +0000 Manifest this update: Sun 29 Jun 2025 02:30:38 +0000 Manifest next update: Sun 06 Jul 2025 02:30:38 +0000 Files and hashes: 1: CUoNzYAqBb91c_96buCnqXIFUNE.crl (hash: U1NdfjKhauppdL94dlZ/LWddrhLSLAPS76ytTXj4S20=) 2: 5BA557A6DEB011EDB7B0C04EC4F9AE02.roa (hash: SAjkukJRb4ZF5aM/fUJAbMY1lnAEeXzzgnRTsvAlM7Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EC93F/60A8F88CDEAD11ED8A6DF14DC4F9AE02/CUoNzYAqBb91c_96buCnqXIFUNE.crl rsync://rpki.apnic.net/member_repository/A91EC93F/60A8F88CDEAD11ED8A6DF14DC4F9AE02/CUoNzYAqBb91c_96buCnqXIFUNE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUoNzYAqBb91c_96buCnqXIFUNE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 02:30:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 414 (0x19e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EC93F, serialNumber=094A0DCD802A05BF7573FF7A6EE0A7A9720550D1 Validity Not Before: Jun 29 02:30:38 2025 GMT Not After : Jul 6 02:30:38 2025 GMT Subject: CN=6860a54e-fab9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:83:46:ae:b6:a6:b0:40:74:6d:05:9e:ef:e7: 52:48:63:65:9a:3e:98:25:cc:17:87:af:a1:1c:56: bd:fc:bc:f3:a1:f4:0d:6b:e7:25:8f:d3:72:9b:6a: c5:41:6f:ed:de:5e:ef:3d:18:44:d4:10:59:32:6b: c4:4c:98:d7:25:68:13:f5:b1:d4:52:22:f0:62:5d: 91:64:e8:c4:98:31:2f:83:4c:8d:06:5d:47:18:3c: d3:65:eb:a4:99:ff:1d:ef:07:6e:56:b1:45:e7:d3: c9:8a:a8:49:7e:82:13:cb:1f:03:eb:b4:95:c6:e3: 72:23:7c:c9:f1:76:79:e3:cf:d9:96:6c:75:0a:4d: 86:65:97:57:14:8b:54:ce:2c:5f:75:df:3d:6f:63: 18:46:f5:04:27:c3:b2:07:10:da:65:c4:eb:e5:fb: b2:77:b9:2c:fe:f9:22:1f:ea:59:25:73:0d:e6:ea: b6:17:e0:e3:b6:1f:4f:6b:62:21:08:ad:5a:8e:59: eb:d8:30:c3:15:a4:e8:03:65:cf:35:c7:90:73:9a: 7c:4f:87:86:0f:d1:a8:6d:ce:5c:b4:ab:8c:96:c8: 07:87:2c:15:cf:33:27:5c:3e:ed:00:db:5e:3e:66: 63:0a:a4:f1:6a:ad:b0:1c:43:8d:d7:b1:24:e3:db: 36:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:B8:EB:0A:C8:F5:1B:6B:B5:71:D0:F8:01:91:02:16:B4:5B:53:74 X509v3 Authority Key Identifier: keyid:09:4A:0D:CD:80:2A:05:BF:75:73:FF:7A:6E:E0:A7:A9:72:05:50:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EC93F/60A8F88CDEAD11ED8A6DF14DC4F9AE02/CUoNzYAqBb91c_96buCnqXIFUNE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUoNzYAqBb91c_96buCnqXIFUNE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC93F/60A8F88CDEAD11ED8A6DF14DC4F9AE02/CUoNzYAqBb91c_96buCnqXIFUNE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:50:d1:51:65:10:22:a9:30:5e:41:44:d4:4f:9f:08:c6:fe: fc:3b:e4:21:9d:b7:72:1c:51:10:0b:cd:a5:ec:58:4c:19:ea: cd:1b:74:e6:44:86:e1:f1:5f:c4:55:66:0f:44:f0:b4:3c:b7: a1:0d:c6:7e:65:f5:5f:57:49:4a:fa:c8:33:ea:c7:64:2b:a2: 93:6e:c9:73:0c:2d:47:76:39:d8:f3:29:3f:ef:e1:35:e9:ad: 68:56:7a:88:a5:01:c0:ba:4a:2c:38:fe:05:87:fc:d6:d3:d9: f8:48:96:7a:22:21:b3:a2:77:11:2f:6a:c0:aa:33:4e:fd:b3: 82:cd:c3:99:9c:d7:2a:ec:90:5e:bb:cd:4e:63:32:70:f6:7c: a0:62:2b:10:b8:2b:c5:9d:a8:86:74:b7:67:4d:8a:4b:50:d8: f2:be:a9:fc:a3:b5:62:54:1a:1f:02:6a:db:f1:50:0f:67:51: bd:ad:83:e2:8b:05:e2:30:f0:ae:00:77:8f:96:0d:8b:8a:ca: e5:e9:60:3d:61:b0:08:f2:7f:45:7c:c1:4e:e8:6f:29:16:4f: 97:a2:cc:34:5b:ba:29:a5:2f:26:1e:58:55:c7:9b:6a:7c:80: 37:ae:6f:94:54:f4:07:46:90:84:6e:55:f5:03:52:67:3d:fd: 3d:f4:4c:b7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUM5M0YxMTAvBgNVBAUTKDA5NEEwRENEODAyQTA1QkY3NTczRkY3QTZFRTBBN0E5 NzIwNTUwRDEwHhcNMjUwNjI5MDIzMDM4WhcNMjUwNzA2MDIzMDM4WjAYMRYwFAYD VQQDEw02ODYwYTU0ZS1mYWI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwYNGrramsEB0bQWe7+dSSGNlmj6YJcwXh6+hHFa9/LzzofQNa+clj9Nym2rF QW/t3l7vPRhE1BBZMmvETJjXJWgT9bHUUiLwYl2RZOjEmDEvg0yNBl1HGDzTZeuk mf8d7wduVrFF59PJiqhJfoITyx8D67SVxuNyI3zJ8XZ548/Zlmx1Ck2GZZdXFItU zixfdd89b2MYRvUEJ8OyBxDaZcTr5fuyd7ks/vkiH+pZJXMN5uq2F+Djth9Pa2Ih CK1ajlnr2DDDFaToA2XPNceQc5p8T4eGD9Gobc5ctKuMlsgHhywVzzMnXD7tANte PmZjCqTxaq2wHEON17Ek49s2DwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJC46wrI 9RtrtXHQ+AGRAha0W1N0MB8GA1UdIwQYMBaAFAlKDc2AKgW/dXP/em7gp6lyBVDR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQzkzRi82MEE4Rjg4Q0RF QUQxMUVEOEE2REYxNERDNEY5QUUwMi9DVW9OellBcUJiOTFjXzk2YnVDbnFYSUZV TkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NVb056WUFxQmI5MWNfOTZidUNucVhJRlVORS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QzkzRi82MEE4Rjg4Q0RFQUQxMUVEOEE2REYxNERDNEY5QUUwMi9DVW9OellBcUJi OTFjXzk2YnVDbnFYSUZVTkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB4UNFRZRAiqTBeQUTUT58Ixv78O+QhnbdyHFEQC82l7FhMGerNG3Tm RIbh8V/EVWYPRPC0PLehDcZ+ZfVfV0lK+sgz6sdkK6KTbslzDC1HdjnY8yk/7+E1 6a1oVnqIpQHAukosOP4Fh/zW09n4SJZ6IiGzoncRL2rAqjNO/bOCzcOZnNcq7JBe u81OYzJw9nygYisQuCvFnaiGdLdnTYpLUNjyvqn8o7ViVBofAmrb8VAPZ1G9rYPi iwXiMPCuAHePlg2Lisrl6WA9YbAI8n9FfMFO6G8pFk+Xosw0W7oppS8mHlhVx5tq fIA3rm+UVPQHRpCEblX1A1JnPf099Ey3 -----END CERTIFICATE-----Generated at Sun Jun 29 21:27:43 2025 by rpki-client