$ rpki-client -vvf rpki.apnic.net/member_repository/A91326B3/C55423AAE69111EEBF058932C4F9AE02/C9q2CGF_PDGDxHD05hmyeV91w4k.mft File: C9q2CGF_PDGDxHD05hmyeV91w4k.mft (raw, json) Hash identifier: ydwJlxj3jLQFmQfyyKmRw7sw2MjQ6IBTJiKqsN78pjA= Subject key identifier: 31:BB:B9:3E:96:73:2A:FF:A4:12:9A:23:4E:25:09:DF:C7:D0:76:2C Authority key identifier: 0B:DA:B6:08:61:7F:3C:31:83:C4:70:F4:E6:19:B2:79:5F:75:C3:89 Certificate issuer: /CN=A91326B3/serialNumber=0BDAB608617F3C3183C470F4E619B2795F75C389 Certificate serial: EC Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/C9q2CGF_PDGDxHD05hmyeV91w4k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91326B3/C55423AAE69111EEBF058932C4F9AE02/C9q2CGF_PDGDxHD05hmyeV91w4k.mft Manifest number: E8 Signing time: Mon 09 Jun 2025 04:26:37 +0000 Manifest this update: Mon 09 Jun 2025 04:26:37 +0000 Manifest next update: Mon 16 Jun 2025 04:26:37 +0000 Files and hashes: 1: C9q2CGF_PDGDxHD05hmyeV91w4k.crl (hash: Co0iwcAJCQL1s3UhJa1bzww1wJe6Exf+yfEafSInYk0=) 2: E3ABAA7AE69211EEB34D4B6AC4F9AE02.roa (hash: EyKD4I3R8YSy4asXY+8xvf07IP4owJwI772hb1AAhAw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91326B3/C55423AAE69111EEBF058932C4F9AE02/C9q2CGF_PDGDxHD05hmyeV91w4k.crl rsync://rpki.apnic.net/member_repository/A91326B3/C55423AAE69111EEBF058932C4F9AE02/C9q2CGF_PDGDxHD05hmyeV91w4k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/C9q2CGF_PDGDxHD05hmyeV91w4k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Jun 2025 04:26:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 236 (0xec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91326B3, serialNumber=0BDAB608617F3C3183C470F4E619B2795F75C389 Validity Not Before: Jun 9 04:26:37 2025 GMT Not After : Jun 16 04:26:37 2025 GMT Subject: CN=6846627d-7291 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:10:e9:4f:e4:28:9b:e8:d6:f1:de:16:d4:91: 57:f8:3a:84:fe:e7:63:3d:20:47:b7:23:28:25:4c: e6:ea:e9:38:f2:a0:1b:ce:be:b8:1e:19:cf:85:75: 78:66:cb:bc:22:42:0b:a2:b9:78:9e:57:ee:f0:8c: 11:b3:7e:5d:16:f3:26:cc:83:42:27:3a:1b:bb:b2: 97:1b:13:34:0f:ba:91:0b:6c:3b:0d:d7:bb:0c:19: 63:8d:55:68:78:b7:3d:c6:6c:69:60:9e:ba:3d:77: fa:29:2a:50:a2:46:0f:90:e4:59:8b:a4:1d:9f:d2: 41:f3:9e:53:a2:ca:05:4b:d6:f1:e9:93:40:d6:05: c3:b6:6b:08:42:b0:cf:93:47:dc:c4:f3:83:81:19: 0f:e8:e4:8d:9d:5b:81:7d:f5:2c:c2:7a:a2:15:27: f5:98:6d:c2:d8:d5:d7:b5:2a:e4:6c:6e:1a:e6:53: 7b:2c:de:59:c4:64:07:ab:c7:2b:66:53:c5:7d:6c: ff:a8:34:a1:bb:97:c8:6e:eb:c9:62:ad:28:42:83: c5:af:7d:27:25:c8:4c:44:99:72:50:9e:da:5a:24: b3:fe:0d:a0:b4:a4:f8:6a:49:69:5a:a3:8b:3a:7b: ad:b8:37:c9:6e:62:4a:36:4a:f0:13:69:78:78:21: d4:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:BB:B9:3E:96:73:2A:FF:A4:12:9A:23:4E:25:09:DF:C7:D0:76:2C X509v3 Authority Key Identifier: keyid:0B:DA:B6:08:61:7F:3C:31:83:C4:70:F4:E6:19:B2:79:5F:75:C3:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91326B3/C55423AAE69111EEBF058932C4F9AE02/C9q2CGF_PDGDxHD05hmyeV91w4k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/C9q2CGF_PDGDxHD05hmyeV91w4k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91326B3/C55423AAE69111EEBF058932C4F9AE02/C9q2CGF_PDGDxHD05hmyeV91w4k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:08:4c:1b:e2:51:27:49:14:3e:53:77:33:98:51:1a:c2:15: be:35:18:10:0e:13:e2:f7:fb:1e:a7:b9:8e:04:c5:d1:05:74: ac:7e:c3:ef:67:96:84:13:1f:c0:9d:74:3f:a6:56:bc:75:13: 2d:f1:98:4e:ea:33:a0:33:bf:ba:59:be:d5:c4:86:b9:b4:12: 22:e6:b4:bf:7b:01:00:94:9c:45:91:98:9e:18:df:34:f4:7b: 3f:f2:4c:8f:8e:b4:f0:3a:77:76:58:f9:94:2e:42:a6:19:12: 86:b6:a7:be:c0:52:0f:5e:ef:69:86:d9:ba:34:a6:83:82:fa: cc:3c:69:ed:cc:c0:bf:f8:76:a1:71:18:72:dc:e8:e0:07:ac: 8e:8d:1d:0f:78:7e:82:a6:b3:82:d7:bb:ec:36:89:2e:b0:4d: 01:48:33:ad:e2:df:e5:88:b2:b0:91:dd:36:ae:e4:ce:c6:e5: 3e:a6:72:d7:0a:fa:74:a8:da:fd:b1:25:8f:56:7b:fe:55:59: 09:2b:88:57:3b:01:23:a1:4b:c0:8a:43:d0:b4:a8:c0:bd:a4: c9:80:c4:d4:9b:f4:0a:53:ee:5f:a2:4b:47:89:57:d8:77:e7: a5:1f:9a:72:a0:a5:19:17:bb:bc:b1:1c:2c:a2:c1:91:c5:5f: 80:4e:ca:5b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzI2QjMxMTAvBgNVBAUTKDBCREFCNjA4NjE3RjNDMzE4M0M0NzBGNEU2MTlCMjc5 NUY3NUMzODkwHhcNMjUwNjA5MDQyNjM3WhcNMjUwNjE2MDQyNjM3WjAYMRYwFAYD VQQDEw02ODQ2NjI3ZC03MjkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwBDpT+Qom+jW8d4W1JFX+DqE/udjPSBHtyMoJUzm6uk48qAbzr64HhnPhXV4 Zsu8IkILorl4nlfu8IwRs35dFvMmzINCJzobu7KXGxM0D7qRC2w7Dde7DBljjVVo eLc9xmxpYJ66PXf6KSpQokYPkORZi6Qdn9JB855TosoFS9bx6ZNA1gXDtmsIQrDP k0fcxPODgRkP6OSNnVuBffUswnqiFSf1mG3C2NXXtSrkbG4a5lN7LN5ZxGQHq8cr ZlPFfWz/qDShu5fIbuvJYq0oQoPFr30nJchMRJlyUJ7aWiSz/g2gtKT4aklpWqOL OnutuDfJbmJKNkrwE2l4eCHU4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDG7uT6W cyr/pBKaI04lCd/H0HYsMB8GA1UdIwQYMBaAFAvatghhfzwxg8Rw9OYZsnlfdcOJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMjZCMy9DNTU0MjNBQUU2 OTExMUVFQkYwNTg5MzJDNEY5QUUwMi9DOXEyQ0dGX1BER0R4SEQwNWhteWVWOTF3 NGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0M5cTJDR0ZfUERHRHhIRDA1aG15ZVY5MXc0ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MjZCMy9DNTU0MjNBQUU2OTExMUVFQkYwNTg5MzJDNEY5QUUwMi9DOXEyQ0dGX1BE R0R4SEQwNWhteWVWOTF3NGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAmCEwb4lEnSRQ+U3czmFEawhW+NRgQDhPi9/sep7mOBMXRBXSsfsPv Z5aEEx/AnXQ/pla8dRMt8ZhO6jOgM7+6Wb7VxIa5tBIi5rS/ewEAlJxFkZieGN80 9Hs/8kyPjrTwOnd2WPmULkKmGRKGtqe+wFIPXu9phtm6NKaDgvrMPGntzMC/+Hah cRhy3OjgB6yOjR0PeH6CprOC17vsNokusE0BSDOt4t/liLKwkd02ruTOxuU+pnLX Cvp0qNr9sSWPVnv+VVkJK4hXOwEjoUvAikPQtKjAvaTJgMTUm/QKU+5foktHiVfY d+elH5pyoKUZF7u8sRwsosGRxV+ATspb -----END CERTIFICATE-----Generated at Wed Jun 11 07:24:44 2025 by rpki-client