$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB384/BF4BD458448311EA8EBC6D25C4F9AE02/jJ9EB3zFHbCUj7KV8MpQ_uAGJUs.mft File: jJ9EB3zFHbCUj7KV8MpQ_uAGJUs.mft (raw, json) Hash identifier: TH3zPeIm+vZcMxNPtEZiwzU6ylxI+ewdaMSa3tIMRk4= Subject key identifier: 72:0C:30:20:FE:93:F5:59:BE:67:5C:8B:E4:33:3C:AE:93:AF:A0:3E Authority key identifier: 8C:9F:44:07:7C:C5:1D:B0:94:8F:B2:95:F0:CA:50:FE:E0:06:25:4B Certificate issuer: /CN=A91AB384/serialNumber=8C9F44077CC51DB0948FB295F0CA50FEE006254B Certificate serial: 0B17 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jJ9EB3zFHbCUj7KV8MpQ_uAGJUs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB384/BF4BD458448311EA8EBC6D25C4F9AE02/jJ9EB3zFHbCUj7KV8MpQ_uAGJUs.mft Manifest number: 0B09 Signing time: Sun 08 Jun 2025 19:06:08 +0000 Manifest this update: Sun 08 Jun 2025 19:06:07 +0000 Manifest next update: Sun 15 Jun 2025 19:06:07 +0000 Files and hashes: 1: jJ9EB3zFHbCUj7KV8MpQ_uAGJUs.crl (hash: EK9pBZlxbG574Kqxo/qPyQCjxuw2oxE58nYPX6NCmBs=) 2: C66D2D8C467B11EA9717DF7CC4F9AE02.roa (hash: B1y/XJhc58ZxuiEanrd53aB6RU6j2Af7j8lspYzP41Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB384/BF4BD458448311EA8EBC6D25C4F9AE02/jJ9EB3zFHbCUj7KV8MpQ_uAGJUs.crl rsync://rpki.apnic.net/member_repository/A91AB384/BF4BD458448311EA8EBC6D25C4F9AE02/jJ9EB3zFHbCUj7KV8MpQ_uAGJUs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jJ9EB3zFHbCUj7KV8MpQ_uAGJUs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Jun 2025 19:06:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2839 (0xb17) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB384, serialNumber=8C9F44077CC51DB0948FB295F0CA50FEE006254B Validity Not Before: Jun 8 19:06:07 2025 GMT Not After : Jun 15 19:06:07 2025 GMT Subject: CN=6845df20-d049 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:fa:26:09:81:2e:ad:87:a9:a8:c5:28:d3:ca: 48:28:ee:e7:57:7f:67:c0:f3:c3:d1:f4:2b:93:cd: 7a:38:e4:f0:cd:96:21:cc:d6:e8:eb:69:4e:f4:b2: 2a:33:21:6c:69:f2:f4:8e:57:6a:53:b7:a6:04:85: 33:7b:4c:c5:08:a1:0c:a6:11:33:be:6c:f0:a5:4b: c8:63:98:01:8d:97:7e:e7:cd:5a:68:aa:18:c1:a0: bd:35:16:0e:6f:02:80:67:9b:bc:0c:3c:79:dd:4e: 16:de:38:66:bc:c5:43:0a:8c:84:5c:a4:10:f3:bc: 74:c9:9d:41:c7:da:ce:82:df:ec:85:b7:c1:2d:cd: a6:a7:31:ae:6e:b9:a3:17:62:50:8d:05:b8:9a:b2: 60:4a:ce:6e:5f:85:fd:8c:92:71:3f:cd:85:fb:51: 72:3e:9c:e4:1e:b9:63:1f:73:03:75:fb:88:f5:48: 1f:15:e4:31:88:ba:7f:9f:d9:24:d5:56:5c:6b:6e: d6:cd:5a:3b:cb:11:2a:8e:06:34:9c:08:db:7c:aa: 17:86:4f:18:41:cc:c1:39:8f:37:a1:01:07:5f:64: 23:b5:3d:23:9f:97:5f:7f:7c:e1:67:09:c3:37:86: 25:58:4d:4b:94:d4:bc:48:78:0a:ff:c7:7d:ba:ff: 6a:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:0C:30:20:FE:93:F5:59:BE:67:5C:8B:E4:33:3C:AE:93:AF:A0:3E X509v3 Authority Key Identifier: keyid:8C:9F:44:07:7C:C5:1D:B0:94:8F:B2:95:F0:CA:50:FE:E0:06:25:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB384/BF4BD458448311EA8EBC6D25C4F9AE02/jJ9EB3zFHbCUj7KV8MpQ_uAGJUs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jJ9EB3zFHbCUj7KV8MpQ_uAGJUs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB384/BF4BD458448311EA8EBC6D25C4F9AE02/jJ9EB3zFHbCUj7KV8MpQ_uAGJUs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:70:30:d1:58:f5:96:0e:0c:a6:7e:ce:ee:ae:3b:fd:ec:e7: a9:df:ad:83:c5:54:60:db:bb:bf:ef:14:6c:f9:f8:ca:cc:af: 41:f5:48:99:61:76:61:6d:b5:5f:91:cc:b7:25:3b:9e:55:f8: 23:86:59:96:cb:e6:56:ce:57:67:a0:1e:05:e1:4f:eb:89:5b: 05:7e:b5:6f:b5:9a:3d:93:7d:a7:00:ee:dc:99:4f:fc:81:bc: bd:79:00:72:8c:fc:7f:70:ce:cf:59:34:6e:5d:76:6a:3b:d9: 61:80:fb:dd:87:ca:c6:13:ed:09:de:e1:6a:b3:d4:d2:1d:79: 0d:5a:07:35:c3:cd:4e:03:f3:d7:ab:ab:7e:01:1b:59:ea:1d: b1:4b:54:94:cc:15:0a:64:1a:a3:1a:c8:3f:ca:20:5c:79:fb: 43:89:51:4a:c9:3b:8a:1b:45:e6:b0:13:2f:34:0f:1c:8f:84: f5:54:a7:a3:d2:e4:a8:8c:da:7c:4d:54:7a:65:a0:36:c5:2b: e4:ca:b7:64:a1:46:57:07:40:a5:1d:c0:68:5e:96:30:15:c4: b3:8e:40:9b:8e:e1:3b:2e:e7:f5:82:7d:bc:cf:95:47:2a:9c: 3a:05:a0:81:2a:81:dc:34:4a:f6:12:47:82:4c:08:c6:36:18: 65:d5:7c:a2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCxcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUIzODQxMTAvBgNVBAUTKDhDOUY0NDA3N0NDNTFEQjA5NDhGQjI5NUYwQ0E1MEZF RTAwNjI1NEIwHhcNMjUwNjA4MTkwNjA3WhcNMjUwNjE1MTkwNjA3WjAYMRYwFAYD VQQDEw02ODQ1ZGYyMC1kMDQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs/omCYEurYepqMUo08pIKO7nV39nwPPD0fQrk816OOTwzZYhzNbo62lO9LIq MyFsafL0jldqU7emBIUze0zFCKEMphEzvmzwpUvIY5gBjZd+581aaKoYwaC9NRYO bwKAZ5u8DDx53U4W3jhmvMVDCoyEXKQQ87x0yZ1Bx9rOgt/shbfBLc2mpzGubrmj F2JQjQW4mrJgSs5uX4X9jJJxP82F+1FyPpzkHrljH3MDdfuI9UgfFeQxiLp/n9kk 1VZca27WzVo7yxEqjgY0nAjbfKoXhk8YQczBOY83oQEHX2QjtT0jn5dff3zhZwnD N4YlWE1LlNS8SHgK/8d9uv9qRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHIMMCD+ k/VZvmdci+QzPK6Tr6A+MB8GA1UdIwQYMBaAFIyfRAd8xR2wlI+ylfDKUP7gBiVL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjM4NC9CRjRCRDQ1ODQ0 ODMxMUVBOEVCQzZEMjVDNEY5QUUwMi9qSjlFQjN6RkhiQ1VqN0tWOE1wUV91QUdK VXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pKOUVCM3pGSGJDVWo3S1Y4TXBRX3VBR0pVcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QjM4NC9CRjRCRDQ1ODQ0ODMxMUVBOEVCQzZEMjVDNEY5QUUwMi9qSjlFQjN6Rkhi Q1VqN0tWOE1wUV91QUdKVXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCPcDDRWPWWDgymfs7urjv97Oep362DxVRg27u/7xRs+fjKzK9B9UiZ YXZhbbVfkcy3JTueVfgjhlmWy+ZWzldnoB4F4U/riVsFfrVvtZo9k32nAO7cmU/8 gby9eQByjPx/cM7PWTRuXXZqO9lhgPvdh8rGE+0J3uFqs9TSHXkNWgc1w81OA/PX q6t+ARtZ6h2xS1SUzBUKZBqjGsg/yiBceftDiVFKyTuKG0XmsBMvNA8cj4T1VKej 0uSojNp8TVR6ZaA2xSvkyrdkoUZXB0ClHcBoXpYwFcSzjkCbjuE7Luf1gn28z5VH Kpw6BaCBKoHcNEr2EkeCTAjGNhhl1Xyi -----END CERTIFICATE-----Generated at Mon Jun 9 07:45:58 2025 by rpki-client