$ rpki-client -vvf rpki.apnic.net/member_repository/A91ABD25/527DD25A4EAC11EDB4F71E38C4F9AE02/f_x8VcpIXDdqYe_sDlN3ZToEw70.mft File: f_x8VcpIXDdqYe_sDlN3ZToEw70.mft (raw, json) Hash identifier: 5cng4d8aZVwBZrA1YkSOYrQTIDqp17QK5zzk8gNi3AU= Subject key identifier: 79:44:ED:8D:21:4E:CB:D4:2A:B5:61:92:12:24:BF:C4:98:AB:58:0A Authority key identifier: 7F:FC:7C:55:CA:48:5C:37:6A:61:EF:EC:0E:53:77:65:3A:04:C3:BD Certificate issuer: /CN=A91ABD25/serialNumber=7FFC7C55CA485C376A61EFEC0E5377653A04C3BD Certificate serial: 0202 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_x8VcpIXDdqYe_sDlN3ZToEw70.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ABD25/527DD25A4EAC11EDB4F71E38C4F9AE02/f_x8VcpIXDdqYe_sDlN3ZToEw70.mft Manifest number: 01F9 Signing time: Wed 11 Jun 2025 02:00:27 +0000 Manifest this update: Wed 11 Jun 2025 02:00:27 +0000 Manifest next update: Wed 18 Jun 2025 02:00:26 +0000 Files and hashes: 1: f_x8VcpIXDdqYe_sDlN3ZToEw70.crl (hash: ifg5Ji5YMDRxwztLW7axkr2oD7vOeqN4pUrO3vxKoBM=) 2: 9535628E5C0D11EDA7191A0AC4F9AE02.roa (hash: GEtYiWLknMjIUtasCLz3xO+Z9HJ/gkoudL4BFK8Uyb8=) 3: E7FC6A1A4EAE11EDBF0D8256C4F9AE02.roa (hash: JJtIODUU0vxeCd16MdkVxGe00rno7Fl7ALBMI2DvnXE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ABD25/527DD25A4EAC11EDB4F71E38C4F9AE02/f_x8VcpIXDdqYe_sDlN3ZToEw70.crl rsync://rpki.apnic.net/member_repository/A91ABD25/527DD25A4EAC11EDB4F71E38C4F9AE02/f_x8VcpIXDdqYe_sDlN3ZToEw70.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_x8VcpIXDdqYe_sDlN3ZToEw70.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 02:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 514 (0x202) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ABD25, serialNumber=7FFC7C55CA485C376A61EFEC0E5377653A04C3BD Validity Not Before: Jun 11 02:00:27 2025 GMT Not After : Jun 18 02:00:26 2025 GMT Subject: CN=6848e33b-7a48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:a9:53:46:94:24:95:b4:bb:3d:bb:1b:be:99: 96:87:61:02:cb:a6:ae:4f:41:7f:5e:e5:9f:4a:65: 02:bd:74:a2:91:aa:1a:40:82:61:73:a0:b7:c9:40: 06:53:7e:53:3e:2e:98:91:1b:49:92:3b:c9:10:1e: c6:83:b1:59:85:33:62:3b:9e:16:87:e6:c6:21:f3: 73:fe:8f:f2:29:c8:0b:d8:ba:6d:27:b5:0d:76:0a: cf:da:67:77:bf:8f:03:8d:59:6c:b1:45:ef:12:a3: 56:9b:43:53:03:14:79:b6:d7:06:cc:a8:9c:cd:58: 45:93:de:e4:e6:c9:b2:c9:7d:2c:4d:c3:ed:34:4a: ea:e4:e2:03:d9:17:d6:78:60:cd:9a:3a:99:e8:5a: 79:76:92:ce:94:85:b0:eb:f1:e2:f8:36:26:a8:13: 3c:d6:1c:02:20:94:dd:40:1a:25:3d:1e:75:20:f7: ed:10:b7:63:d9:77:bf:fe:c4:d2:b4:b5:6d:c9:40: 35:d7:64:81:64:10:ac:75:1e:6e:14:cf:99:d7:66: 82:07:25:1c:7b:9c:cd:39:38:25:9d:4e:34:e0:ad: fd:35:54:e9:0e:39:33:99:c2:97:a4:78:bf:0b:1e: ef:13:ba:1d:f0:3d:3b:3a:8a:81:31:db:b7:a6:87: 45:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:44:ED:8D:21:4E:CB:D4:2A:B5:61:92:12:24:BF:C4:98:AB:58:0A X509v3 Authority Key Identifier: keyid:7F:FC:7C:55:CA:48:5C:37:6A:61:EF:EC:0E:53:77:65:3A:04:C3:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ABD25/527DD25A4EAC11EDB4F71E38C4F9AE02/f_x8VcpIXDdqYe_sDlN3ZToEw70.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_x8VcpIXDdqYe_sDlN3ZToEw70.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ABD25/527DD25A4EAC11EDB4F71E38C4F9AE02/f_x8VcpIXDdqYe_sDlN3ZToEw70.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:6f:57:e3:dd:c3:d0:88:00:bf:02:2b:04:84:c9:04:cb:ee: 6f:f0:12:1b:6c:e0:0b:db:0e:a9:e5:97:40:ef:0d:65:d4:de: ed:57:c9:ec:64:f2:69:7f:05:67:9d:1d:35:b3:0f:c1:de:7f: 06:af:46:0b:6c:06:58:14:38:30:9d:04:14:87:ce:06:92:29: b2:48:bf:38:07:42:95:48:3a:65:de:16:af:2e:66:e1:cc:ea: f4:4f:1d:41:fb:9c:7b:09:7b:9b:e5:41:57:77:5c:de:93:1f: 49:c3:0a:8b:58:2d:da:26:af:ba:70:7e:4b:bd:2c:58:cd:47: ef:14:13:37:d3:34:e6:75:21:7d:c2:82:ca:f2:4e:63:c7:ce: 7d:9b:a6:e7:de:8a:2d:cd:13:97:04:c0:40:6a:eb:02:90:ab: e3:dc:f0:5d:cc:77:4a:6f:88:51:39:55:3b:34:3e:29:a1:7b: f5:30:f4:0d:e8:3b:fe:27:20:6d:8c:94:7f:e4:09:48:78:14: 34:54:e3:14:99:6e:29:7f:12:fa:3e:35:df:c4:ea:3e:28:b3: 31:08:c9:57:75:90:89:c4:3d:1d:1c:84:01:b5:3e:9b:5d:89: a0:f1:10:82:03:a0:1e:75:af:72:57:4b:32:54:d3:e7:c1:c2: 9f:f2:4b:cb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUJEMjUxMTAvBgNVBAUTKDdGRkM3QzU1Q0E0ODVDMzc2QTYxRUZFQzBFNTM3NzY1 M0EwNEMzQkQwHhcNMjUwNjExMDIwMDI3WhcNMjUwNjE4MDIwMDI2WjAYMRYwFAYD VQQDEw02ODQ4ZTMzYi03YTQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw6lTRpQklbS7PbsbvpmWh2ECy6auT0F/XuWfSmUCvXSikaoaQIJhc6C3yUAG U35TPi6YkRtJkjvJEB7Gg7FZhTNiO54Wh+bGIfNz/o/yKcgL2LptJ7UNdgrP2md3 v48DjVlssUXvEqNWm0NTAxR5ttcGzKiczVhFk97k5smyyX0sTcPtNErq5OID2RfW eGDNmjqZ6Fp5dpLOlIWw6/Hi+DYmqBM81hwCIJTdQBolPR51IPftELdj2Xe//sTS tLVtyUA112SBZBCsdR5uFM+Z12aCByUce5zNOTglnU404K39NVTpDjkzmcKXpHi/ Cx7vE7od8D07OoqBMdu3podFcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHlE7Y0h TsvUKrVhkhIkv8SYq1gKMB8GA1UdIwQYMBaAFH/8fFXKSFw3amHv7A5Td2U6BMO9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQkQyNS81MjdERDI1QTRF QUMxMUVEQjRGNzFFMzhDNEY5QUUwMi9mX3g4VmNwSVhEZHFZZV9zRGxOM1pUb0V3 NzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZfeDhWY3BJWERkcVllX3NEbE4zWlRvRXc3MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QkQyNS81MjdERDI1QTRFQUMxMUVEQjRGNzFFMzhDNEY5QUUwMi9mX3g4VmNwSVhE ZHFZZV9zRGxOM1pUb0V3NzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCwb1fj3cPQiAC/AisEhMkEy+5v8BIbbOAL2w6p5ZdA7w1l1N7tV8ns ZPJpfwVnnR01sw/B3n8Gr0YLbAZYFDgwnQQUh84GkimySL84B0KVSDpl3havLmbh zOr0Tx1B+5x7CXub5UFXd1zekx9JwwqLWC3aJq+6cH5LvSxYzUfvFBM30zTmdSF9 woLK8k5jx859m6bn3ootzROXBMBAausCkKvj3PBdzHdKb4hROVU7ND4poXv1MPQN 6Dv+JyBtjJR/5AlIeBQ0VOMUmW4pfxL6PjXfxOo+KLMxCMlXdZCJxD0dHIQBtT6b XYmg8RCCA6Aeda9yV0syVNPnwcKf8kvL -----END CERTIFICATE-----Generated at Thu Jun 12 14:04:37 2025 by rpki-client