$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1018/8836FA608D4C11EC988AE85DC4F9AE02/r9CVWn3X-bDsKkShHZNyB8J1SmM.mft File: r9CVWn3X-bDsKkShHZNyB8J1SmM.mft (raw, json) Hash identifier: LQXFuZWuash5PBXUtgex191cIuz2Moo91Jb/pfe1rkY= Subject key identifier: A9:63:DA:FC:3D:C0:BF:97:9A:24:8E:E3:D1:3E:68:78:B9:CC:A8:2E Authority key identifier: AF:D0:95:5A:7D:D7:F9:B0:EC:2A:44:A1:1D:93:72:07:C2:75:4A:63 Certificate issuer: /CN=A91B1018/serialNumber=AFD0955A7DD7F9B0EC2A44A11D937207C2754A63 Certificate serial: 03EF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r9CVWn3X-bDsKkShHZNyB8J1SmM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B1018/8836FA608D4C11EC988AE85DC4F9AE02/r9CVWn3X-bDsKkShHZNyB8J1SmM.mft Manifest number: 03DB Signing time: Sat 31 May 2025 00:50:45 +0000 Manifest this update: Sat 31 May 2025 00:50:45 +0000 Manifest next update: Sat 07 Jun 2025 00:50:45 +0000 Files and hashes: 1: r9CVWn3X-bDsKkShHZNyB8J1SmM.crl (hash: Ru2noPWmI8U33Tpu5KAHeGPB4QC5C+/EslujTZCqpqg=) 2: E69ABF78033911EFBE28FC1FC4F9AE02.roa (hash: Rg7/HWvbLuN8QkYRlBgqkedDJt7Lv8j0nbDNMsIVYIo=) 3: CB8AA43A4D9B11EFB201E984C4F9AE02.roa (hash: BndO95FjlN4yoYJHwmdg6jMh7CCU5xFJrJ+5TfJ2qvA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B1018/8836FA608D4C11EC988AE85DC4F9AE02/r9CVWn3X-bDsKkShHZNyB8J1SmM.crl rsync://rpki.apnic.net/member_repository/A91B1018/8836FA608D4C11EC988AE85DC4F9AE02/r9CVWn3X-bDsKkShHZNyB8J1SmM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r9CVWn3X-bDsKkShHZNyB8J1SmM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 00:50:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1007 (0x3ef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B1018, serialNumber=AFD0955A7DD7F9B0EC2A44A11D937207C2754A63 Validity Not Before: May 31 00:50:45 2025 GMT Not After : Jun 7 00:50:45 2025 GMT Subject: CN=683a5265-a62d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:74:cf:4d:e8:db:e4:0e:9c:db:64:00:65:61: a0:af:64:fd:a9:1a:ed:e8:a6:ab:b1:d9:72:91:85: 1f:f2:05:f9:d5:7f:ad:4b:85:70:91:d4:05:16:b4: ec:b0:1f:72:b0:46:92:0b:88:d3:fc:f0:89:6a:f7: ba:75:6d:e9:8f:b5:dc:20:70:9c:95:23:c1:4d:eb: 09:07:de:4a:9a:12:0e:5f:b3:e1:12:3a:a3:f0:58: 6a:34:bc:2b:32:42:21:56:e9:11:b5:00:81:7e:55: 02:04:87:d6:23:f1:a1:15:db:4f:6e:c8:ea:92:8b: 6d:d7:9d:ac:6c:e8:41:77:10:0f:22:52:54:2d:bc: 24:2c:f1:5c:cc:3f:36:7c:b8:b7:44:98:9b:6c:41: 9f:4e:2f:74:66:e0:ed:8c:13:4f:45:84:9c:b2:59: 72:13:0a:9a:92:98:d1:ba:f3:98:ca:0e:c8:57:6e: 17:e2:51:cc:07:77:de:81:6c:5c:ec:73:bf:0d:fd: 27:8d:b9:c3:b9:c4:45:2f:ef:70:69:a8:03:59:19: ab:ed:9a:0a:7c:bb:99:68:bd:be:32:26:13:a3:3e: 6c:15:27:b3:02:d8:74:c3:dd:8c:40:3c:39:ff:dc: eb:c4:5a:39:a8:b9:64:8f:39:b5:3b:3a:4c:4b:31: 9e:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:63:DA:FC:3D:C0:BF:97:9A:24:8E:E3:D1:3E:68:78:B9:CC:A8:2E X509v3 Authority Key Identifier: keyid:AF:D0:95:5A:7D:D7:F9:B0:EC:2A:44:A1:1D:93:72:07:C2:75:4A:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B1018/8836FA608D4C11EC988AE85DC4F9AE02/r9CVWn3X-bDsKkShHZNyB8J1SmM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r9CVWn3X-bDsKkShHZNyB8J1SmM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1018/8836FA608D4C11EC988AE85DC4F9AE02/r9CVWn3X-bDsKkShHZNyB8J1SmM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:04:8e:1e:b4:6c:79:56:c0:a8:6c:94:89:d6:ff:c9:13:d1: b8:c2:c3:de:34:82:34:2d:32:1d:d9:ee:64:39:14:ec:bd:93: e6:ec:a7:1e:ba:95:b5:c9:a6:00:8a:6e:a7:e3:08:76:98:9e: 08:52:30:ba:86:70:e2:2c:e5:a0:0a:4f:64:de:1d:a4:c2:76: 14:91:d8:3e:8d:32:20:46:73:fd:6a:4a:75:02:92:a5:0a:0b: 3f:f7:2d:2b:a2:2c:3f:87:6b:69:97:c7:41:1f:b5:8e:28:0e: 5b:73:de:9e:76:b4:80:7d:b7:40:50:5e:24:bb:8e:2b:12:13: 17:96:e0:79:7e:d8:9b:63:76:5c:16:35:bb:8d:c4:aa:c5:e7: 74:c1:2c:e5:17:8c:a7:3f:cb:fd:d3:31:02:a6:a7:63:71:88: ee:90:00:1f:49:b1:40:cb:d2:e7:f1:44:7b:dd:15:8e:d9:c2: 20:3c:1d:76:9d:c4:eb:b9:8b:a3:de:60:64:24:94:16:6a:ed: 08:ad:67:50:d9:8f:35:ea:f6:ac:e7:a2:60:2d:ab:51:5d:10: 8b:b1:0f:68:01:22:f0:3d:8a:2d:9b:51:4b:d7:bd:98:92:81: 9b:ed:91:a9:ac:8a:6a:ec:3e:e9:19:0f:4a:64:1e:61:52:bb: 95:bf:2b:7a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA+8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjEwMTgxMTAvBgNVBAUTKEFGRDA5NTVBN0REN0Y5QjBFQzJBNDRBMTFEOTM3MjA3 QzI3NTRBNjMwHhcNMjUwNTMxMDA1MDQ1WhcNMjUwNjA3MDA1MDQ1WjAYMRYwFAYD VQQDEw02ODNhNTI2NS1hNjJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxXTPTejb5A6c22QAZWGgr2T9qRrt6KarsdlykYUf8gX51X+tS4VwkdQFFrTs sB9ysEaSC4jT/PCJave6dW3pj7XcIHCclSPBTesJB95KmhIOX7PhEjqj8FhqNLwr MkIhVukRtQCBflUCBIfWI/GhFdtPbsjqkott152sbOhBdxAPIlJULbwkLPFczD82 fLi3RJibbEGfTi90ZuDtjBNPRYScsllyEwqakpjRuvOYyg7IV24X4lHMB3fegWxc 7HO/Df0njbnDucRFL+9waagDWRmr7ZoKfLuZaL2+MiYToz5sFSezAth0w92MQDw5 /9zrxFo5qLlkjzm1OzpMSzGewwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKlj2vw9 wL+XmiSO49E+aHi5zKguMB8GA1UdIwQYMBaAFK/QlVp91/mw7CpEoR2TcgfCdUpj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMTAxOC84ODM2RkE2MDhE NEMxMUVDOTg4QUU4NURDNEY5QUUwMi9yOUNWV24zWC1iRHNLa1NoSFpOeUI4SjFT bU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3I5Q1ZXbjNYLWJEc0trU2hIWk55QjhKMVNtTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MTAxOC84ODM2RkE2MDhENEMxMUVDOTg4QUU4NURDNEY5QUUwMi9yOUNWV24zWC1i RHNLa1NoSFpOeUI4SjFTbU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAOBI4etGx5VsCobJSJ1v/JE9G4wsPeNII0LTId2e5kORTsvZPm7Kce upW1yaYAim6n4wh2mJ4IUjC6hnDiLOWgCk9k3h2kwnYUkdg+jTIgRnP9akp1ApKl Cgs/9y0roiw/h2tpl8dBH7WOKA5bc96edrSAfbdAUF4ku44rEhMXluB5ftibY3Zc FjW7jcSqxed0wSzlF4ynP8v90zECpqdjcYjukAAfSbFAy9Ln8UR73RWO2cIgPB12 ncTruYuj3mBkJJQWau0IrWdQ2Y816vas56JgLatRXRCLsQ9oASLwPYotm1FL172Y koGb7ZGprIpq7D7pGQ9KZB5hUruVvyt6 -----END CERTIFICATE-----Generated at Sat May 31 16:56:18 2025 by rpki-client