$ rpki-client -vvf rpki.apnic.net/member_repository/A91221EF/6F2FEBD6891F11EA89B6277CC4F9AE02/_5APJL-aiYLZX4RHqnubtPesRjk.mft File: _5APJL-aiYLZX4RHqnubtPesRjk.mft (raw, json) Hash identifier: 5Qqq3H8eVQrrJwnYVQXiD0cfXQ9k428RnsrV1GuBdEc= Subject key identifier: A6:9D:2B:62:53:D9:DC:30:C1:AC:EB:92:11:8C:65:6C:36:E4:51:18 Authority key identifier: FF:90:0F:24:BF:9A:89:82:D9:5F:84:47:AA:7B:9B:B4:F7:AC:46:39 Certificate issuer: /CN=A91221EF/serialNumber=FF900F24BF9A8982D95F8447AA7B9BB4F7AC4639 Certificate serial: 09B8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_5APJL-aiYLZX4RHqnubtPesRjk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91221EF/6F2FEBD6891F11EA89B6277CC4F9AE02/_5APJL-aiYLZX4RHqnubtPesRjk.mft Manifest number: 09AA Signing time: Sun 08 Jun 2025 19:47:21 +0000 Manifest this update: Sun 08 Jun 2025 19:47:21 +0000 Manifest next update: Sun 15 Jun 2025 19:47:21 +0000 Files and hashes: 1: _5APJL-aiYLZX4RHqnubtPesRjk.crl (hash: Jeo6dbI1/DE6UwUKNHhHh+P5bQpviWk9Uhx1C3EHbv4=) 2: D3037D06738E11ED8283FF53C4F9AE02.roa (hash: fmsh1X3Q3HooxV4YfKkoLFlrGgD13/WeDGjBg2CNmMg=) 3: D1A6B6D0738E11ED8283FF53C4F9AE02.roa (hash: WgMRh1pD8v+j2OuHDw2wLrJ+bXBsyv6ChtDmNGRF1/k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91221EF/6F2FEBD6891F11EA89B6277CC4F9AE02/_5APJL-aiYLZX4RHqnubtPesRjk.crl rsync://rpki.apnic.net/member_repository/A91221EF/6F2FEBD6891F11EA89B6277CC4F9AE02/_5APJL-aiYLZX4RHqnubtPesRjk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_5APJL-aiYLZX4RHqnubtPesRjk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Jun 2025 19:47:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2488 (0x9b8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91221EF, serialNumber=FF900F24BF9A8982D95F8447AA7B9BB4F7AC4639 Validity Not Before: Jun 8 19:47:21 2025 GMT Not After : Jun 15 19:47:21 2025 GMT Subject: CN=6845e8c9-019c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:6a:fc:cd:93:ad:ab:af:92:30:7a:9e:32:12: 10:7e:d2:e3:2a:08:85:ed:8d:1d:bd:1d:80:ff:8b: 44:d7:15:50:92:26:75:8e:8f:53:c8:0e:b6:13:0b: aa:33:ee:d4:e4:db:3c:b9:de:fe:e6:e0:7b:f3:74: bb:8c:08:8d:36:ab:d3:8a:3a:bd:ec:21:25:8d:4b: 7f:ae:a2:0a:4c:f7:0f:14:cf:58:db:89:fd:3e:02: 1b:38:a9:84:47:e8:16:7d:a3:66:24:cd:d7:1f:f3: 29:5b:cf:fa:bd:96:1c:53:8b:b0:8f:59:e3:c6:14: 12:d8:e7:40:82:81:32:1a:8b:09:c5:6d:cd:e7:d4: 61:14:81:0e:9d:92:60:2f:17:ef:fe:d7:b5:fe:ba: 83:e3:e1:7d:93:4f:61:02:69:6b:58:d9:74:05:57: a2:9f:de:08:ba:2d:24:1b:08:79:be:ea:15:99:e3: eb:d6:9c:a0:02:34:06:43:56:79:39:7b:32:6f:d5: a1:ca:33:38:aa:27:6a:02:7d:ab:7f:8a:6a:e5:c8: af:d5:75:50:ac:65:f0:72:cb:00:83:cd:80:4a:e8: 24:2b:b0:73:6f:56:97:da:2f:a5:ba:d3:91:82:10: f4:eb:52:fc:ac:89:0d:d5:62:df:4c:fc:ce:dc:2d: 2a:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:9D:2B:62:53:D9:DC:30:C1:AC:EB:92:11:8C:65:6C:36:E4:51:18 X509v3 Authority Key Identifier: keyid:FF:90:0F:24:BF:9A:89:82:D9:5F:84:47:AA:7B:9B:B4:F7:AC:46:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91221EF/6F2FEBD6891F11EA89B6277CC4F9AE02/_5APJL-aiYLZX4RHqnubtPesRjk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_5APJL-aiYLZX4RHqnubtPesRjk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91221EF/6F2FEBD6891F11EA89B6277CC4F9AE02/_5APJL-aiYLZX4RHqnubtPesRjk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:63:56:63:2c:1f:2f:ad:ac:a6:72:88:64:45:f0:4a:21:b4: c2:06:80:26:64:c5:64:9a:ba:f4:2d:51:b9:e5:c5:08:8c:26: 1c:45:a5:4a:61:4c:e6:fe:a1:22:d7:96:df:39:65:58:89:45: 36:fc:1f:ee:f5:cd:67:e8:45:5a:f9:91:c8:df:9f:e2:7e:eb: cb:1e:8a:c6:02:0e:47:11:c6:38:6b:82:a2:6b:de:82:65:7d: 3e:cc:e7:58:3f:77:7e:d4:ed:6e:b6:35:7b:e5:bf:92:42:00: 41:15:6d:d1:db:2e:0e:49:44:6d:69:70:28:46:d8:59:39:92: bd:b1:92:d2:2b:93:b7:42:8a:ce:a8:2f:32:72:72:9c:a0:c5: 45:fa:b6:f7:64:5b:b8:8c:44:48:54:95:f6:f9:07:32:2c:57: 6c:01:b3:b5:33:95:d4:4a:83:44:55:cb:1e:96:79:76:49:ce: 62:9c:c9:ef:75:14:01:28:98:28:84:ae:60:b6:b0:c3:93:24: b7:af:27:40:7d:84:11:cd:39:41:b7:69:d3:43:0d:ee:e4:e3: 49:eb:29:4a:4d:d1:b6:4c:90:ae:84:fc:03:dd:05:71:a6:ba: a6:be:38:38:63:77:41:89:e8:8e:f0:cf:b1:b0:34:3c:4f:50: f2:e1:bf:fd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCbgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjIxRUYxMTAvBgNVBAUTKEZGOTAwRjI0QkY5QTg5ODJEOTVGODQ0N0FBN0I5QkI0 RjdBQzQ2MzkwHhcNMjUwNjA4MTk0NzIxWhcNMjUwNjE1MTk0NzIxWjAYMRYwFAYD VQQDEw02ODQ1ZThjOS0wMTljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArWr8zZOtq6+SMHqeMhIQftLjKgiF7Y0dvR2A/4tE1xVQkiZ1jo9TyA62Ewuq M+7U5Ns8ud7+5uB783S7jAiNNqvTijq97CEljUt/rqIKTPcPFM9Y24n9PgIbOKmE R+gWfaNmJM3XH/MpW8/6vZYcU4uwj1njxhQS2OdAgoEyGosJxW3N59RhFIEOnZJg Lxfv/te1/rqD4+F9k09hAmlrWNl0BVein94Iui0kGwh5vuoVmePr1pygAjQGQ1Z5 OXsyb9WhyjM4qidqAn2rf4pq5civ1XVQrGXwcssAg82ASugkK7Bzb1aX2i+lutOR ghD061L8rIkN1WLfTPzO3C0qFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKadK2JT 2dwwwazrkhGMZWw25FEYMB8GA1UdIwQYMBaAFP+QDyS/momC2V+ER6p7m7T3rEY5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMjFFRi82RjJGRUJENjg5 MUYxMUVBODlCNjI3N0NDNEY5QUUwMi9fNUFQSkwtYWlZTFpYNFJIcW51YnRQZXNS amsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL181QVBKTC1haVlMWlg0UkhxbnVidFBlc1Jqay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MjFFRi82RjJGRUJENjg5MUYxMUVBODlCNjI3N0NDNEY5QUUwMi9fNUFQSkwtYWlZ TFpYNFJIcW51YnRQZXNSamsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQATY1ZjLB8vraymcohkRfBKIbTCBoAmZMVkmrr0LVG55cUIjCYcRaVK YUzm/qEi15bfOWVYiUU2/B/u9c1n6EVa+ZHI35/ifuvLHorGAg5HEcY4a4Kia96C ZX0+zOdYP3d+1O1utjV75b+SQgBBFW3R2y4OSURtaXAoRthZOZK9sZLSK5O3QorO qC8ycnKcoMVF+rb3ZFu4jERIVJX2+QcyLFdsAbO1M5XUSoNEVcselnl2Sc5inMnv dRQBKJgohK5gtrDDkyS3rydAfYQRzTlBt2nTQw3u5ONJ6ylKTdG2TJCuhPwD3QVx prqmvjg4Y3dBieiO8M+xsDQ8T1Dy4b/9 -----END CERTIFICATE-----Generated at Mon Jun 9 11:55:52 2025 by rpki-client