$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA5A2/4670EAAC98F611EEBBF1F417C4F9AE02/9bEXBUr1CcLDM2nalh9Ebdyrg0I.mft File: 9bEXBUr1CcLDM2nalh9Ebdyrg0I.mft (raw, json) Hash identifier: UbLyK2vXP1qXhG2Z/mUUfqbtqCVO7uLvKVhAfCahqNo= Subject key identifier: 45:D4:E8:5C:46:E3:59:D7:0D:CC:25:7A:FC:27:04:C2:74:80:58:63 Authority key identifier: F5:B1:17:05:4A:F5:09:C2:C3:33:69:DA:96:1F:44:6D:DC:AB:83:42 Certificate issuer: /CN=A91FA5A2/serialNumber=F5B117054AF509C2C33369DA961F446DDCAB8342 Certificate serial: 013C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9bEXBUr1CcLDM2nalh9Ebdyrg0I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FA5A2/4670EAAC98F611EEBBF1F417C4F9AE02/9bEXBUr1CcLDM2nalh9Ebdyrg0I.mft Manifest number: 0133 Signing time: Sun 29 Jun 2025 03:49:47 +0000 Manifest this update: Sun 29 Jun 2025 03:49:47 +0000 Manifest next update: Sun 06 Jul 2025 03:49:47 +0000 Files and hashes: 1: 9bEXBUr1CcLDM2nalh9Ebdyrg0I.crl (hash: 6acdLyzDB50uy2vPHZAz0cuLXyLgNq4pfTT8iESvZuE=) 2: 9FE80B2898F711EE87DF6E1FC4F9AE02.roa (hash: D3GA9GI+1ZpOYK34vPRNum86peu3I5thgqu5liFntgU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FA5A2/4670EAAC98F611EEBBF1F417C4F9AE02/9bEXBUr1CcLDM2nalh9Ebdyrg0I.crl rsync://rpki.apnic.net/member_repository/A91FA5A2/4670EAAC98F611EEBBF1F417C4F9AE02/9bEXBUr1CcLDM2nalh9Ebdyrg0I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9bEXBUr1CcLDM2nalh9Ebdyrg0I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 03:49:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 316 (0x13c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA5A2, serialNumber=F5B117054AF509C2C33369DA961F446DDCAB8342 Validity Not Before: Jun 29 03:49:47 2025 GMT Not After : Jul 6 03:49:47 2025 GMT Subject: CN=6860b7db-089e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:81:67:ef:af:c3:d4:07:1b:a3:09:2e:10:ee: 7d:84:34:74:05:28:4b:58:04:b6:e3:6b:ad:5b:93: b2:09:33:0a:7c:f8:06:23:cb:02:81:72:d9:ed:f5: 6f:1f:97:14:1d:d7:0e:6e:64:a3:12:1f:c3:38:a9: 06:b3:1d:78:7b:c0:a7:f3:bf:dc:3b:52:dd:60:c7: 5c:7e:b6:ee:e8:61:f3:6c:f3:75:e5:2b:82:8d:12: 55:52:02:24:b0:18:f5:8c:f3:8a:d3:35:80:dd:73: 70:68:29:1b:39:17:62:bf:29:96:b1:05:93:a7:cc: c5:46:35:07:8c:3d:0a:21:f4:da:f3:e8:de:dd:b5: 91:5b:82:53:f0:0a:e1:c9:84:03:58:42:c7:26:a2: 59:2c:3e:3e:2e:ca:ea:8a:8a:b5:d3:27:09:89:ac: 78:52:0b:ef:49:9a:45:c6:b6:0f:d3:18:ff:0f:aa: 01:b9:35:0e:6a:ce:e0:f4:8f:27:73:32:8f:29:1f: 1a:c4:77:74:51:b7:06:ab:3c:cb:b8:34:6c:49:79: 25:86:bc:3f:d5:be:a6:a4:9d:de:f9:2a:79:2f:d3: 4d:69:a3:e3:2f:37:3b:b8:f7:5b:42:48:cf:11:b9: 3c:b4:45:ee:27:3f:11:e4:d5:16:76:49:63:f7:a9: 72:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:D4:E8:5C:46:E3:59:D7:0D:CC:25:7A:FC:27:04:C2:74:80:58:63 X509v3 Authority Key Identifier: keyid:F5:B1:17:05:4A:F5:09:C2:C3:33:69:DA:96:1F:44:6D:DC:AB:83:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FA5A2/4670EAAC98F611EEBBF1F417C4F9AE02/9bEXBUr1CcLDM2nalh9Ebdyrg0I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9bEXBUr1CcLDM2nalh9Ebdyrg0I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA5A2/4670EAAC98F611EEBBF1F417C4F9AE02/9bEXBUr1CcLDM2nalh9Ebdyrg0I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b9:0e:3a:e4:4c:ae:00:df:a4:fc:55:6e:8e:cd:0f:73:62:75: 40:66:bf:ff:cb:0e:bf:2d:46:45:0b:9c:33:af:d0:fc:b6:d1: 9b:85:af:56:c7:96:32:4f:38:cd:a7:d9:4f:28:6f:6c:17:a1: 05:7f:a6:48:eb:aa:b0:93:79:76:81:7c:d4:31:e6:69:97:f7: 72:b7:40:58:a8:c8:2b:e8:cd:18:c2:51:e0:c4:69:27:ad:5f: 8f:19:85:3a:47:1f:2d:0f:d7:d5:64:77:31:e1:e2:58:6f:29: 0d:1e:d2:88:27:fb:19:d8:4a:27:8d:02:dc:7d:4c:6a:66:31: 13:93:2d:5a:a4:91:93:3d:a3:b1:4f:ca:37:b6:07:4b:28:cb: e4:c2:46:16:d1:16:df:d1:cc:6f:99:d6:7a:7a:5d:e8:1c:27: 39:f4:97:c6:ee:ab:74:da:ed:37:e1:ac:0f:34:cb:93:23:f8: c5:a0:ba:6c:de:a9:11:97:4c:d7:34:42:80:40:07:ef:8e:f0: 40:48:3c:77:da:99:f1:f3:7c:0a:96:64:09:a5:d7:40:67:af: 51:16:d2:4a:3e:13:fc:a6:7b:1c:34:45:72:1c:29:bf:5a:06: ca:57:18:46:6f:d5:99:43:f1:ef:ea:9f:4d:e3:b1:7e:39:fa: 82:5b:0f:ae -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkE1QTIxMTAvBgNVBAUTKEY1QjExNzA1NEFGNTA5QzJDMzMzNjlEQTk2MUY0NDZE RENBQjgzNDIwHhcNMjUwNjI5MDM0OTQ3WhcNMjUwNzA2MDM0OTQ3WjAYMRYwFAYD VQQDEw02ODYwYjdkYi0wODllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4oFn76/D1AcbowkuEO59hDR0BShLWAS242utW5OyCTMKfPgGI8sCgXLZ7fVv H5cUHdcObmSjEh/DOKkGsx14e8Cn87/cO1LdYMdcfrbu6GHzbPN15SuCjRJVUgIk sBj1jPOK0zWA3XNwaCkbORdivymWsQWTp8zFRjUHjD0KIfTa8+je3bWRW4JT8Arh yYQDWELHJqJZLD4+Lsrqioq10ycJiax4UgvvSZpFxrYP0xj/D6oBuTUOas7g9I8n czKPKR8axHd0UbcGqzzLuDRsSXklhrw/1b6mpJ3e+Sp5L9NNaaPjLzc7uPdbQkjP Ebk8tEXuJz8R5NUWdklj96ly0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEXU6FxG 41nXDcwlevwnBMJ0gFhjMB8GA1UdIwQYMBaAFPWxFwVK9QnCwzNp2pYfRG3cq4NC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQTVBMi80NjcwRUFBQzk4 RjYxMUVFQkJGMUY0MTdDNEY5QUUwMi85YkVYQlVyMUNjTERNMm5hbGg5RWJkeXJn MEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzliRVhCVXIxQ2NMRE0ybmFsaDlFYmR5cmcwSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QTVBMi80NjcwRUFBQzk4RjYxMUVFQkJGMUY0MTdDNEY5QUUwMi85YkVYQlVyMUNj TERNMm5hbGg5RWJkeXJnMEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC5DjrkTK4A36T8VW6OzQ9zYnVAZr//yw6/LUZFC5wzr9D8ttGbha9W x5YyTzjNp9lPKG9sF6EFf6ZI66qwk3l2gXzUMeZpl/dyt0BYqMgr6M0YwlHgxGkn rV+PGYU6Rx8tD9fVZHcx4eJYbykNHtKIJ/sZ2EonjQLcfUxqZjETky1apJGTPaOx T8o3tgdLKMvkwkYW0Rbf0cxvmdZ6el3oHCc59JfG7qt02u034awPNMuTI/jFoLps 3qkRl0zXNEKAQAfvjvBASDx32pnx83wKlmQJpddAZ69RFtJKPhP8pnscNEVyHCm/ WgbKVxhGb9WZQ/Hv6p9N47F+OfqCWw+u -----END CERTIFICATE-----Generated at Tue Jul 1 04:44:29 2025 by rpki-client