$ rpki-client -vvf rpki.apnic.net/member_repository/A9136F59/5772AFBEF84F11ECA2923952C4F9AE02/91XB4Q_ErmiS0krLh4LX5cAEGLA.mft File: 91XB4Q_ErmiS0krLh4LX5cAEGLA.mft (raw, json) Hash identifier: D7yeaTLmd5+g8T+WGPkyyksZg8i+sUHFwxFCipDVhqc= Subject key identifier: E5:A0:63:81:62:88:58:EC:41:33:FD:26:24:FC:9B:4B:E4:B5:4A:45 Authority key identifier: F7:55:C1:E1:0F:C4:AE:68:92:D2:4A:CB:87:82:D7:E5:C0:04:18:B0 Certificate issuer: /CN=A9136F59/serialNumber=F755C1E10FC4AE6892D24ACB8782D7E5C00418B0 Certificate serial: 02B8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/91XB4Q_ErmiS0krLh4LX5cAEGLA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136F59/5772AFBEF84F11ECA2923952C4F9AE02/91XB4Q_ErmiS0krLh4LX5cAEGLA.mft Manifest number: 02B4 Signing time: Mon 09 Jun 2025 01:01:14 +0000 Manifest this update: Mon 09 Jun 2025 01:01:14 +0000 Manifest next update: Mon 16 Jun 2025 01:01:14 +0000 Files and hashes: 1: 91XB4Q_ErmiS0krLh4LX5cAEGLA.crl (hash: aUsb11DhtxgZ5QQ5Dfk7SfDwH53mc5l5B7Dvis/Cv0U=) 2: ED0C111CF8F611ECB6DF8835C4F9AE02.roa (hash: 4DnB0bL3NG78Ric1Q/fKLIMkj23xQICVd02+1wJapuQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136F59/5772AFBEF84F11ECA2923952C4F9AE02/91XB4Q_ErmiS0krLh4LX5cAEGLA.crl rsync://rpki.apnic.net/member_repository/A9136F59/5772AFBEF84F11ECA2923952C4F9AE02/91XB4Q_ErmiS0krLh4LX5cAEGLA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/91XB4Q_ErmiS0krLh4LX5cAEGLA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Jun 2025 01:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 696 (0x2b8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136F59, serialNumber=F755C1E10FC4AE6892D24ACB8782D7E5C00418B0 Validity Not Before: Jun 9 01:01:14 2025 GMT Not After : Jun 16 01:01:14 2025 GMT Subject: CN=6846325a-6159 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:28:bc:0a:62:ba:9e:4a:bf:1d:a4:dd:d3:af: db:3d:82:31:23:50:99:d4:cb:d3:13:55:cd:7c:ea: 3f:4e:63:b4:b2:57:fd:3e:7c:59:f6:8b:77:d6:2f: cd:08:85:d6:70:d4:92:6a:6c:d3:f4:42:c8:63:04: 79:af:9a:6e:9a:47:60:42:c8:4f:5f:01:ce:5c:8c: 4b:cc:96:4f:3d:76:a1:c1:2c:9d:2d:76:50:70:d4: 38:eb:3c:c1:e8:b2:de:bd:ba:90:47:2e:b5:85:43: d7:fb:87:56:0a:b3:40:23:13:25:6e:37:f6:b0:20: 88:7d:ac:2a:a9:bc:ba:92:70:5b:05:94:f6:3e:48: 79:b0:03:68:c1:9d:b3:31:0b:85:a4:4d:0f:53:3c: 37:45:64:91:c8:cd:89:8f:cc:18:44:81:19:83:e4: b3:06:81:04:97:68:7e:f6:00:d6:39:34:c6:55:aa: 99:74:68:e8:72:7c:e7:eb:a3:70:ae:12:02:64:ef: fd:96:e0:9b:64:68:96:13:2e:83:3a:eb:c7:4b:4e: 2f:1b:08:13:d4:e4:19:54:ae:ed:e7:2b:1b:b5:f9: 85:39:c0:db:a0:16:48:4f:8e:00:a3:70:cd:06:85: 24:43:27:73:4b:ab:cf:b7:4f:db:ae:c2:e2:28:63: b9:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:A0:63:81:62:88:58:EC:41:33:FD:26:24:FC:9B:4B:E4:B5:4A:45 X509v3 Authority Key Identifier: keyid:F7:55:C1:E1:0F:C4:AE:68:92:D2:4A:CB:87:82:D7:E5:C0:04:18:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136F59/5772AFBEF84F11ECA2923952C4F9AE02/91XB4Q_ErmiS0krLh4LX5cAEGLA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/91XB4Q_ErmiS0krLh4LX5cAEGLA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136F59/5772AFBEF84F11ECA2923952C4F9AE02/91XB4Q_ErmiS0krLh4LX5cAEGLA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:cc:c4:9c:c5:96:ed:95:1d:e3:75:0f:97:28:a2:d5:d8:8f: 90:7a:76:08:e4:5b:6f:4a:24:51:3b:24:d1:8c:b9:7e:c7:c7: f1:f7:80:ea:87:93:2b:eb:5a:5e:f0:14:5c:bd:d6:b5:af:25: ef:9e:8d:3a:f2:4b:77:0f:93:00:40:37:7d:5e:cb:d0:a1:2d: 5d:25:9b:15:6b:1c:55:9e:51:ea:12:53:a0:10:c2:14:76:2c: 5d:f0:0e:cb:b2:f8:af:3f:4b:69:66:de:34:25:1c:dc:d0:55: 03:39:0e:ed:0b:0f:78:97:0f:54:3e:c9:3c:31:5c:5c:84:ec: 22:04:d7:61:dd:04:f1:5f:97:36:be:6e:92:19:7a:1b:0b:61: d3:f2:85:20:6b:4f:07:c4:4f:1a:aa:ce:7b:b0:74:c2:e9:01: b8:78:d7:bc:ea:8e:00:6a:93:3c:0d:1e:64:34:a7:56:fd:40: 14:d7:5b:41:b4:9b:00:8c:ed:a6:e9:64:27:01:12:0f:22:d6: 7f:c2:cd:2a:61:b8:ea:cb:e4:17:f2:ce:86:50:29:d4:9b:3f: af:3e:61:bf:3a:ef:2c:7e:35:1a:b7:0f:51:36:99:1d:4e:55: 5c:21:0f:51:2c:ad:1b:de:96:3d:4f:e8:b9:b1:d3:be:b6:05: 19:7e:16:7d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICArgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzZGNTkxMTAvBgNVBAUTKEY3NTVDMUUxMEZDNEFFNjg5MkQyNEFDQjg3ODJEN0U1 QzAwNDE4QjAwHhcNMjUwNjA5MDEwMTE0WhcNMjUwNjE2MDEwMTE0WjAYMRYwFAYD VQQDEw02ODQ2MzI1YS02MTU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoii8CmK6nkq/HaTd06/bPYIxI1CZ1MvTE1XNfOo/TmO0slf9PnxZ9ot31i/N CIXWcNSSamzT9ELIYwR5r5pumkdgQshPXwHOXIxLzJZPPXahwSydLXZQcNQ46zzB 6LLevbqQRy61hUPX+4dWCrNAIxMlbjf2sCCIfawqqby6knBbBZT2Pkh5sANowZ2z MQuFpE0PUzw3RWSRyM2Jj8wYRIEZg+SzBoEEl2h+9gDWOTTGVaqZdGjocnzn66Nw rhICZO/9luCbZGiWEy6DOuvHS04vGwgT1OQZVK7t5ysbtfmFOcDboBZIT44Ao3DN BoUkQydzS6vPt0/brsLiKGO5OwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOWgY4Fi iFjsQTP9JiT8m0vktUpFMB8GA1UdIwQYMBaAFPdVweEPxK5oktJKy4eC1+XABBiw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNkY1OS81NzcyQUZCRUY4 NEYxMUVDQTI5MjM5NTJDNEY5QUUwMi85MVhCNFFfRXJtaVMwa3JMaDRMWDVjQUVH TEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzkxWEI0UV9Fcm1pUzBrckxoNExYNWNBRUdMQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NkY1OS81NzcyQUZCRUY4NEYxMUVDQTI5MjM5NTJDNEY5QUUwMi85MVhCNFFfRXJt aVMwa3JMaDRMWDVjQUVHTEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBbzMScxZbtlR3jdQ+XKKLV2I+QenYI5FtvSiRROyTRjLl+x8fx94Dq h5Mr61pe8BRcvda1ryXvno068kt3D5MAQDd9XsvQoS1dJZsVaxxVnlHqElOgEMIU dixd8A7LsvivP0tpZt40JRzc0FUDOQ7tCw94lw9UPsk8MVxchOwiBNdh3QTxX5c2 vm6SGXobC2HT8oUga08HxE8aqs57sHTC6QG4eNe86o4AapM8DR5kNKdW/UAU11tB tJsAjO2m6WQnARIPItZ/ws0qYbjqy+QX8s6GUCnUmz+vPmG/Ou8sfjUatw9RNpkd TlVcIQ9RLK0b3pY9T+i5sdO+tgUZfhZ9 -----END CERTIFICATE-----Generated at Mon Jun 9 12:10:40 2025 by rpki-client