$ rpki-client -vvf rpki.apnic.net/member_repository/A91B62BF/44EC5106103011EAB112A232C4F9AE02/0Ll9wB2J8jqAX75YYe43vwmcP_A.mft File: 0Ll9wB2J8jqAX75YYe43vwmcP_A.mft (raw, json) Hash identifier: CMqqnA2LMgZuptkbpSaB1DcdvFZDKdv9vx4BoMk0aYw= Subject key identifier: B1:7A:D9:E3:0C:E4:EA:79:80:06:7C:05:AE:92:74:D2:2F:42:1F:A0 Authority key identifier: D0:B9:7D:C0:1D:89:F2:3A:80:5F:BE:58:61:EE:37:BF:09:9C:3F:F0 Certificate issuer: /CN=A91B62BF/serialNumber=D0B97DC01D89F23A805FBE5861EE37BF099C3FF0 Certificate serial: 0C2C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Ll9wB2J8jqAX75YYe43vwmcP_A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B62BF/44EC5106103011EAB112A232C4F9AE02/0Ll9wB2J8jqAX75YYe43vwmcP_A.mft Manifest number: 0C1A Signing time: Fri 30 May 2025 18:52:49 +0000 Manifest this update: Fri 30 May 2025 18:52:49 +0000 Manifest next update: Fri 06 Jun 2025 18:52:49 +0000 Files and hashes: 1: 0Ll9wB2J8jqAX75YYe43vwmcP_A.crl (hash: 9R2/+WUwPdg1gwEe0X9NqxBG8FBUhfmC/2Sivp4U3XQ=) 2: 498ED6046FD011EDA007D478C4F9AE02.roa (hash: lwkH9V+4ruYpDtKVAny/uyyCWO7r9GoTBPNu4gEXlEg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B62BF/44EC5106103011EAB112A232C4F9AE02/0Ll9wB2J8jqAX75YYe43vwmcP_A.crl rsync://rpki.apnic.net/member_repository/A91B62BF/44EC5106103011EAB112A232C4F9AE02/0Ll9wB2J8jqAX75YYe43vwmcP_A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Ll9wB2J8jqAX75YYe43vwmcP_A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 18:52:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3116 (0xc2c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B62BF, serialNumber=D0B97DC01D89F23A805FBE5861EE37BF099C3FF0 Validity Not Before: May 30 18:52:49 2025 GMT Not After : Jun 6 18:52:49 2025 GMT Subject: CN=6839fe81-836f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:2f:cc:f3:30:32:fc:2f:4a:a8:85:cf:ee:4e: 4b:6f:88:ae:35:ac:49:64:b1:d2:4d:26:9a:86:60: d4:3d:15:04:67:a0:c7:02:da:3e:ec:29:d2:60:22: 48:3d:29:6b:97:d9:79:2e:ed:f7:64:0f:2c:19:a6: a9:c8:5c:04:63:3a:1f:01:1f:bb:9b:d2:dd:7f:bf: 43:f0:f6:b2:24:77:6c:7f:f8:f7:97:1c:c7:0e:19: 9b:81:f6:76:ec:cb:2c:54:b3:0c:2a:22:a5:ff:6c: 7d:16:a5:ad:61:72:f3:94:1d:d4:29:55:41:4b:b1: ee:83:57:3f:77:69:f2:cf:5a:ab:fd:ef:02:3c:c1: d8:b3:f0:8e:e1:50:aa:53:0d:7d:86:0e:65:8f:ed: 76:5d:ed:0c:22:13:35:3d:d9:c8:af:c2:05:42:99: 28:98:20:18:e6:f2:d3:49:52:70:0b:1f:6c:88:75: e5:92:09:93:ff:a0:ca:fb:e5:84:fb:f7:f9:3d:95: ea:00:26:52:8f:23:74:27:38:ef:b2:97:58:cc:4c: a2:63:b6:ca:8c:cb:32:a2:bb:8e:6e:2d:0e:26:e5: 2f:3e:c9:cd:3e:2b:69:5b:bf:f2:11:40:6c:8e:3f: 6b:8c:37:51:3d:eb:f0:34:15:c4:f6:42:69:40:eb: f2:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:7A:D9:E3:0C:E4:EA:79:80:06:7C:05:AE:92:74:D2:2F:42:1F:A0 X509v3 Authority Key Identifier: keyid:D0:B9:7D:C0:1D:89:F2:3A:80:5F:BE:58:61:EE:37:BF:09:9C:3F:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B62BF/44EC5106103011EAB112A232C4F9AE02/0Ll9wB2J8jqAX75YYe43vwmcP_A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Ll9wB2J8jqAX75YYe43vwmcP_A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B62BF/44EC5106103011EAB112A232C4F9AE02/0Ll9wB2J8jqAX75YYe43vwmcP_A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:cc:d8:49:17:97:99:bc:46:f4:58:ad:5c:4d:3c:2e:c9:74: bf:54:2b:55:33:56:6c:a2:cf:17:e0:b5:56:b9:d5:a9:02:4d: 6d:2a:e0:52:a1:78:75:b4:b8:8e:07:5b:e7:1d:56:2b:68:1a: e1:22:0d:11:89:32:fb:a2:0e:b1:7a:b6:54:01:47:b2:07:c2: 2d:cb:dd:d1:2c:25:8c:6a:63:79:58:02:d8:0f:ed:2b:ce:ad: 3f:67:50:fd:44:7c:be:fc:68:98:6a:1a:4c:30:09:e2:fa:1a: fc:b8:28:cb:8f:8b:14:0f:b8:2d:56:6a:14:b7:7a:97:40:51: 32:b3:30:aa:f7:5b:60:d4:c8:fd:84:3b:36:ca:19:13:19:80: 08:19:65:fe:eb:e5:7b:47:65:29:3c:3b:e3:c6:ae:dc:b0:38: 46:a8:ac:dc:27:fd:23:f5:aa:7b:86:96:3c:e6:2e:89:39:23: 96:de:44:22:77:6e:55:63:9c:69:a6:0e:ce:6d:1b:b2:04:95: 0a:ed:5c:93:8c:76:00:3d:95:04:4a:db:ee:af:8a:5b:aa:6e: 27:49:4c:5c:3f:8b:3f:22:27:a3:09:06:e3:c0:60:76:3c:67: 23:15:36:fa:44:1f:1e:4a:d7:32:9b:ac:32:34:f3:7f:de:bd: 6f:02:40:21 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDCwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjYyQkYxMTAvBgNVBAUTKEQwQjk3REMwMUQ4OUYyM0E4MDVGQkU1ODYxRUUzN0JG MDk5QzNGRjAwHhcNMjUwNTMwMTg1MjQ5WhcNMjUwNjA2MTg1MjQ5WjAYMRYwFAYD VQQDEw02ODM5ZmU4MS04MzZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtC/M8zAy/C9KqIXP7k5Lb4iuNaxJZLHSTSaahmDUPRUEZ6DHAto+7CnSYCJI PSlrl9l5Lu33ZA8sGaapyFwEYzofAR+7m9Ldf79D8PayJHdsf/j3lxzHDhmbgfZ2 7MssVLMMKiKl/2x9FqWtYXLzlB3UKVVBS7Hug1c/d2nyz1qr/e8CPMHYs/CO4VCq Uw19hg5lj+12Xe0MIhM1PdnIr8IFQpkomCAY5vLTSVJwCx9siHXlkgmT/6DK++WE +/f5PZXqACZSjyN0JzjvspdYzEyiY7bKjMsyoruObi0OJuUvPsnNPitpW7/yEUBs jj9rjDdRPevwNBXE9kJpQOvypQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLF62eMM 5Op5gAZ8Ba6SdNIvQh+gMB8GA1UdIwQYMBaAFNC5fcAdifI6gF++WGHuN78JnD/w MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjJCRi80NEVDNTEwNjEw MzAxMUVBQjExMkEyMzJDNEY5QUUwMi8wTGw5d0IySjhqcUFYNzVZWWU0M3Z3bWNQ X0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBMbDl3QjJKOGpxQVg3NVlZZTQzdndtY1BfQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NjJCRi80NEVDNTEwNjEwMzAxMUVBQjExMkEyMzJDNEY5QUUwMi8wTGw5d0IySjhq cUFYNzVZWWU0M3Z3bWNQX0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCfzNhJF5eZvEb0WK1cTTwuyXS/VCtVM1Zsos8X4LVWudWpAk1tKuBS oXh1tLiOB1vnHVYraBrhIg0RiTL7og6xerZUAUeyB8Ity93RLCWMamN5WALYD+0r zq0/Z1D9RHy+/GiYahpMMAni+hr8uCjLj4sUD7gtVmoUt3qXQFEyszCq91tg1Mj9 hDs2yhkTGYAIGWX+6+V7R2UpPDvjxq7csDhGqKzcJ/0j9ap7hpY85i6JOSOW3kQi d25VY5xppg7ObRuyBJUK7VyTjHYAPZUEStvur4pbqm4nSUxcP4s/IiejCQbjwGB2 PGcjFTb6RB8eStcym6wyNPN/3r1vAkAh -----END CERTIFICATE-----Generated at Sat May 31 17:31:54 2025 by rpki-client