$ rpki-client -vvf rpki.apnic.net/member_repository/A9191A09/3C412C36BF3911E9897D7C2EC4F9AE02/5o7RJO9le2eb0SpY-gNQFODf6Cc.mft File: 5o7RJO9le2eb0SpY-gNQFODf6Cc.mft (raw, json) Hash identifier: wnzOLNSIvdIial+/hAXgoQjY1CDIALjosTRjxc1I1uE= Subject key identifier: 3B:6A:DB:B6:5B:51:2E:03:AD:EF:FD:11:46:C7:FB:64:88:9D:EF:25 Authority key identifier: E6:8E:D1:24:EF:65:7B:67:9B:D1:2A:58:FA:03:50:14:E0:DF:E8:27 Certificate issuer: /CN=A9191A09/serialNumber=E68ED124EF657B679BD12A58FA035014E0DFE827 Certificate serial: 0DCE Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/5o7RJO9le2eb0SpY-gNQFODf6Cc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191A09/3C412C36BF3911E9897D7C2EC4F9AE02/5o7RJO9le2eb0SpY-gNQFODf6Cc.mft Manifest number: 0DBA Signing time: Mon 02 Jun 2025 14:43:29 +0000 Manifest this update: Mon 02 Jun 2025 14:43:28 +0000 Manifest next update: Mon 09 Jun 2025 14:43:28 +0000 Files and hashes: 1: 5o7RJO9le2eb0SpY-gNQFODf6Cc.crl (hash: 7eerjE9e/ApTJ7u8lGiNTwbhTc0XLD2u7LeJIS7sCF0=) 2: 9C06E51EE37A11EA84A20810C4F9AE02.roa (hash: BIq27Hxj0ymd/MyK4xyxLJopPOW9viNW0+I2cxj8GdM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191A09/3C412C36BF3911E9897D7C2EC4F9AE02/5o7RJO9le2eb0SpY-gNQFODf6Cc.crl rsync://rpki.apnic.net/member_repository/A9191A09/3C412C36BF3911E9897D7C2EC4F9AE02/5o7RJO9le2eb0SpY-gNQFODf6Cc.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/5o7RJO9le2eb0SpY-gNQFODf6Cc.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 14:43:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3534 (0xdce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191A09, serialNumber=E68ED124EF657B679BD12A58FA035014E0DFE827 Validity Not Before: Jun 2 14:43:28 2025 GMT Not After : Jun 9 14:43:28 2025 GMT Subject: CN=683db890-7ca0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:67:6d:40:8d:64:4c:5e:d4:61:4b:30:cf:57: b1:cd:f8:12:fc:da:81:4b:5c:6a:68:df:35:1b:9c: ff:f8:91:aa:ea:84:6f:20:9c:f2:c4:49:ef:b0:2e: 49:bb:b8:b2:26:e3:f5:df:52:6c:08:b6:15:e6:7f: e3:49:24:e9:05:f7:f5:73:8a:53:6b:af:56:f2:0a: cc:c2:6b:a0:48:4b:62:b9:6e:a5:9e:dd:56:96:09: e1:fd:7d:bd:3c:8e:86:d4:52:f0:0a:12:72:19:ab: 8d:05:d4:24:2e:5f:ee:ba:6b:3f:b7:f1:9b:90:f9: 36:83:6b:2a:29:47:1a:34:d4:80:4d:76:c0:ac:e4: b3:ad:3b:78:58:23:40:36:07:8c:cc:60:d6:78:af: e5:a0:a1:f5:e4:23:66:2e:7e:99:97:19:26:85:45: de:23:f4:9a:de:b6:1f:49:77:50:17:17:fc:c0:2b: e5:8c:8f:94:3d:e7:90:07:95:a1:82:07:72:64:40: 6e:84:15:80:ac:8a:83:9c:fb:3d:38:dd:c4:6f:42: 70:e2:d2:e6:7b:92:1c:59:9d:7b:e8:c8:e1:4b:67: 4f:48:61:7b:15:6b:5e:dc:22:9d:f9:99:96:a3:6e: 7d:3c:7c:0e:1b:bb:a1:a1:51:95:a5:ee:c7:c1:b5: ec:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:6A:DB:B6:5B:51:2E:03:AD:EF:FD:11:46:C7:FB:64:88:9D:EF:25 X509v3 Authority Key Identifier: keyid:E6:8E:D1:24:EF:65:7B:67:9B:D1:2A:58:FA:03:50:14:E0:DF:E8:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191A09/3C412C36BF3911E9897D7C2EC4F9AE02/5o7RJO9le2eb0SpY-gNQFODf6Cc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/5o7RJO9le2eb0SpY-gNQFODf6Cc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191A09/3C412C36BF3911E9897D7C2EC4F9AE02/5o7RJO9le2eb0SpY-gNQFODf6Cc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:c8:6d:e6:34:69:4e:4f:06:aa:30:3c:14:8f:ff:30:3a:4d: 2c:67:73:77:66:b6:7d:48:2a:45:a4:f4:5f:64:82:b6:b0:9a: dd:7e:e6:04:ac:49:32:42:ae:6b:74:7f:89:32:01:4b:26:d3: da:4f:87:5f:68:b4:c7:0e:90:2a:de:81:65:30:7a:7c:35:d3: c3:fc:c9:01:75:35:af:80:61:79:50:12:d0:4b:e7:cf:81:ce: 13:4a:64:8c:c9:fa:69:77:fa:f0:21:c3:d8:31:b6:9f:e8:e9: 48:7c:8e:90:66:4b:6d:3d:20:f0:07:5c:6c:52:86:cb:b1:38: 74:7e:c6:56:4f:78:65:16:26:25:d0:a6:b4:44:ce:a8:c4:83: 2e:98:72:30:94:1f:6d:4d:fb:71:63:82:c1:e4:ab:75:eb:50: ee:6f:3f:f1:92:3e:fa:66:f0:d2:25:fb:50:d8:a8:e1:95:96: 38:e1:b8:0a:7b:47:20:29:0b:43:0e:1b:6e:00:f6:71:8e:66: 31:20:5a:81:a9:d7:58:9e:77:52:bb:15:47:96:b8:17:04:7f: cc:88:05:17:34:95:ad:96:7a:21:f6:79:ea:db:20:30:bb:7c: f3:a0:e9:05:8a:49:ed:a8:6c:db:29:02:53:ef:02:f3:ec:aa: 51:75:fd:2d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDc4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTFBMDkxMTAvBgNVBAUTKEU2OEVEMTI0RUY2NTdCNjc5QkQxMkE1OEZBMDM1MDE0 RTBERkU4MjcwHhcNMjUwNjAyMTQ0MzI4WhcNMjUwNjA5MTQ0MzI4WjAYMRYwFAYD VQQDEw02ODNkYjg5MC03Y2EwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzWdtQI1kTF7UYUswz1exzfgS/NqBS1xqaN81G5z/+JGq6oRvIJzyxEnvsC5J u7iyJuP131JsCLYV5n/jSSTpBff1c4pTa69W8grMwmugSEtiuW6lnt1Wlgnh/X29 PI6G1FLwChJyGauNBdQkLl/uums/t/GbkPk2g2sqKUcaNNSATXbArOSzrTt4WCNA NgeMzGDWeK/loKH15CNmLn6ZlxkmhUXeI/Sa3rYfSXdQFxf8wCvljI+UPeeQB5Wh ggdyZEBuhBWArIqDnPs9ON3Eb0Jw4tLme5IcWZ176MjhS2dPSGF7FWte3CKd+ZmW o259PHwOG7uhoVGVpe7HwbXsqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDtq27Zb US4Dre/9EUbH+2SIne8lMB8GA1UdIwQYMBaAFOaO0STvZXtnm9EqWPoDUBTg3+gn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MUEwOS8zQzQxMkMzNkJG MzkxMUU5ODk3RDdDMkVDNEY5QUUwMi81bzdSSk85bGUyZWIwU3BZLWdOUUZPRGY2 Q2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyLzVvN1JKTzlsZTJlYjBTcFktZ05RRk9EZjZDYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MUEwOS8zQzQxMkMzNkJGMzkxMUU5ODk3RDdDMkVDNEY5QUUwMi81bzdSSk85bGUy ZWIwU3BZLWdOUUZPRGY2Q2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBkyG3mNGlOTwaqMDwUj/8wOk0sZ3N3ZrZ9SCpFpPRfZIK2sJrdfuYE rEkyQq5rdH+JMgFLJtPaT4dfaLTHDpAq3oFlMHp8NdPD/MkBdTWvgGF5UBLQS+fP gc4TSmSMyfppd/rwIcPYMbaf6OlIfI6QZkttPSDwB1xsUobLsTh0fsZWT3hlFiYl 0Ka0RM6oxIMumHIwlB9tTftxY4LB5Kt161Dubz/xkj76ZvDSJftQ2KjhlZY44bgK e0cgKQtDDhtuAPZxjmYxIFqBqddYnndSuxVHlrgXBH/MiAUXNJWtlnoh9nnq2yAw u3zzoOkFikntqGzbKQJT7wLz7KpRdf0t -----END CERTIFICATE-----Generated at Tue Jun 3 23:44:36 2025 by rpki-client