$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADE0A/43567EE43D2811ECBEF77C76C4F9AE02/RrT_jckWend9mNhfL1Id0TZwc7M.mft File: RrT_jckWend9mNhfL1Id0TZwc7M.mft (raw, json) Hash identifier: 9ikt5rU4gsNkSY2kct+sgzvv3h9DS486Zcc1yhthbWg= Subject key identifier: 5D:99:AE:51:95:D9:AF:CC:BA:EF:CD:FE:41:6D:4C:5F:AE:79:DF:89 Authority key identifier: 46:B4:FF:8D:C9:16:7A:77:7D:98:D8:5F:2F:52:1D:D1:36:70:73:B3 Certificate issuer: /CN=A91ADE0A/serialNumber=46B4FF8DC9167A777D98D85F2F521DD1367073B3 Certificate serial: 04A5 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/RrT_jckWend9mNhfL1Id0TZwc7M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ADE0A/43567EE43D2811ECBEF77C76C4F9AE02/RrT_jckWend9mNhfL1Id0TZwc7M.mft Manifest number: 049D Signing time: Fri 06 Jun 2025 15:56:26 +0000 Manifest this update: Fri 06 Jun 2025 15:56:26 +0000 Manifest next update: Fri 13 Jun 2025 15:56:26 +0000 Files and hashes: 1: RrT_jckWend9mNhfL1Id0TZwc7M.crl (hash: JryhYh8ksprDDcb7KWIsv8ugbIS5SZaslWqmaMy155c=) 2: B3789882F23211EC9A7DB924C4F9AE02.roa (hash: mHbYCPxnBj3PWJdh7qbfDGDK73T1pf2kWSW1uT2gXIg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ADE0A/43567EE43D2811ECBEF77C76C4F9AE02/RrT_jckWend9mNhfL1Id0TZwc7M.crl rsync://rpki.apnic.net/member_repository/A91ADE0A/43567EE43D2811ECBEF77C76C4F9AE02/RrT_jckWend9mNhfL1Id0TZwc7M.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/RrT_jckWend9mNhfL1Id0TZwc7M.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 13 Jun 2025 15:56:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1189 (0x4a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ADE0A, serialNumber=46B4FF8DC9167A777D98D85F2F521DD1367073B3 Validity Not Before: Jun 6 15:56:26 2025 GMT Not After : Jun 13 15:56:26 2025 GMT Subject: CN=68430faa-e096 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:b7:b8:18:64:06:62:5b:15:de:8c:31:e2:b1: f6:df:1c:8f:35:93:86:a4:6f:fc:ca:3d:f5:a0:b9: ac:28:79:2c:e8:b2:3f:5a:9d:00:aa:18:59:24:6a: 3d:6b:a4:ca:6f:fc:3c:d2:f9:07:ef:03:d1:b9:34: 43:84:8f:02:5c:91:73:ec:b7:22:73:a6:0c:64:85: f1:cd:af:ea:77:6e:51:04:f6:6e:70:40:56:97:1f: 33:cf:f2:6f:38:98:3f:2e:22:a8:85:45:fa:f6:c5: 79:05:5c:96:a2:a6:ef:1b:89:87:3f:18:33:f6:d5: e8:c4:16:d3:e3:63:cc:f0:b2:c5:ba:84:cf:3a:34: f5:18:f8:0a:bd:c3:b4:58:41:ed:7e:ef:8d:01:56: 30:88:a1:68:61:df:c1:4d:22:dd:5c:8f:a0:33:84: b5:ad:73:3e:23:51:30:3d:e4:ef:e8:54:1c:db:5d: 57:83:47:d0:72:15:6a:d3:9d:10:46:ab:03:d4:2c: b3:a5:69:c7:37:79:94:04:0b:ab:20:92:43:75:37: 64:4c:51:e9:bc:1e:37:83:04:fa:fc:6b:98:a0:a2: 43:3f:ea:88:20:2d:90:11:b8:be:e0:13:26:34:91: 5f:ac:57:95:87:0a:d1:0c:a1:c8:10:e9:82:35:bf: 4f:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:99:AE:51:95:D9:AF:CC:BA:EF:CD:FE:41:6D:4C:5F:AE:79:DF:89 X509v3 Authority Key Identifier: keyid:46:B4:FF:8D:C9:16:7A:77:7D:98:D8:5F:2F:52:1D:D1:36:70:73:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ADE0A/43567EE43D2811ECBEF77C76C4F9AE02/RrT_jckWend9mNhfL1Id0TZwc7M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/RrT_jckWend9mNhfL1Id0TZwc7M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADE0A/43567EE43D2811ECBEF77C76C4F9AE02/RrT_jckWend9mNhfL1Id0TZwc7M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:6a:17:3c:ea:d1:11:93:90:3c:2a:18:4c:52:64:4f:af:39: f1:1f:b5:1f:09:52:39:7a:be:a6:57:ad:b6:e1:1f:cb:bf:3e: 02:48:3a:66:ab:fc:79:0f:4c:74:41:1f:b4:5f:08:75:cd:e3: a8:49:b8:c0:df:02:1c:28:48:52:bb:0a:f3:f1:62:5e:0d:38: a9:26:cd:c5:2c:89:e4:da:84:5a:40:b7:e3:3b:e2:68:95:90: 0e:bb:f0:08:1e:00:d9:b6:d5:3e:42:4d:4d:30:4d:02:8c:73: f6:c4:03:ac:d7:89:91:6e:48:96:81:fb:28:4f:33:31:b0:77: 24:fc:ab:c6:20:a8:50:11:79:04:0a:1b:c8:e1:52:d5:4e:24: 2f:c8:9d:36:86:6d:af:19:aa:b3:1a:37:03:f4:c8:2c:63:23: d5:db:be:8c:3b:e7:f6:1f:42:bb:a4:f1:9e:40:56:75:ff:86: 35:ec:37:75:43:a7:d4:18:4c:c7:93:bd:d1:45:3f:62:50:09: 39:6f:0a:37:f3:c8:4e:0e:4c:47:25:13:10:3a:7f:fe:d1:e8: a9:dc:10:47:8a:d4:6c:cf:df:30:cd:ae:97:03:84:a2:22:8d: e9:b2:d2:75:9e:a0:ee:92:28:86:3c:d0:4d:2a:a8:78:67:b5: 51:90:70:ac -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBKUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QURFMEExMTAvBgNVBAUTKDQ2QjRGRjhEQzkxNjdBNzc3RDk4RDg1RjJGNTIxREQx MzY3MDczQjMwHhcNMjUwNjA2MTU1NjI2WhcNMjUwNjEzMTU1NjI2WjAYMRYwFAYD VQQDEw02ODQzMGZhYS1lMDk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4be4GGQGYlsV3owx4rH23xyPNZOGpG/8yj31oLmsKHks6LI/Wp0AqhhZJGo9 a6TKb/w80vkH7wPRuTRDhI8CXJFz7Lcic6YMZIXxza/qd25RBPZucEBWlx8zz/Jv OJg/LiKohUX69sV5BVyWoqbvG4mHPxgz9tXoxBbT42PM8LLFuoTPOjT1GPgKvcO0 WEHtfu+NAVYwiKFoYd/BTSLdXI+gM4S1rXM+I1EwPeTv6FQc211Xg0fQchVq050Q RqsD1CyzpWnHN3mUBAurIJJDdTdkTFHpvB43gwT6/GuYoKJDP+qIIC2QEbi+4BMm NJFfrFeVhwrRDKHIEOmCNb9P9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF2ZrlGV 2a/Muu/N/kFtTF+ued+JMB8GA1UdIwQYMBaAFEa0/43JFnp3fZjYXy9SHdE2cHOz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBREUwQS80MzU2N0VFNDNE MjgxMUVDQkVGNzdDNzZDNEY5QUUwMi9SclRfamNrV2VuZDltTmhmTDFJZDBUWndj N00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL1JyVF9qY2tXZW5kOW1OaGZMMUlkMFRad2M3TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB REUwQS80MzU2N0VFNDNEMjgxMUVDQkVGNzdDNzZDNEY5QUUwMi9SclRfamNrV2Vu ZDltTmhmTDFJZDBUWndjN00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBuahc86tERk5A8KhhMUmRPrznxH7UfCVI5er6mV6224R/Lvz4CSDpm q/x5D0x0QR+0Xwh1zeOoSbjA3wIcKEhSuwrz8WJeDTipJs3FLInk2oRaQLfjO+Jo lZAOu/AIHgDZttU+Qk1NME0CjHP2xAOs14mRbkiWgfsoTzMxsHck/KvGIKhQEXkE ChvI4VLVTiQvyJ02hm2vGaqzGjcD9MgsYyPV276MO+f2H0K7pPGeQFZ1/4Y17Dd1 Q6fUGEzHk73RRT9iUAk5bwo388hODkxHJRMQOn/+0eip3BBHitRsz98wza6XA4Si Io3pstJ1nqDukiiGPNBNKqh4Z7VRkHCs -----END CERTIFICATE-----Generated at Sat Jun 7 12:26:50 2025 by rpki-client