$ rpki-client -vvf rpki.apnic.net/member_repository/A91B85FC/8816EFF8493411EAAD84BF1EC4F9AE02/V09tVmTqm98xXPZMjl5n0mODwgU.mft File: V09tVmTqm98xXPZMjl5n0mODwgU.mft (raw, json) Hash identifier: HmambGzi6KR+x9YvvIyNv6tjFTOEu+omWiBBJetvOME= Subject key identifier: 27:7B:35:92:05:AC:29:50:3F:ED:35:C7:A0:33:A7:EF:94:FD:39:26 Authority key identifier: 57:4F:6D:56:64:EA:9B:DF:31:5C:F6:4C:8E:5E:67:D2:63:83:C2:05 Certificate issuer: /CN=A91B85FC/serialNumber=574F6D5664EA9BDF315CF64C8E5E67D26383C205 Certificate serial: 0AE7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V09tVmTqm98xXPZMjl5n0mODwgU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B85FC/8816EFF8493411EAAD84BF1EC4F9AE02/V09tVmTqm98xXPZMjl5n0mODwgU.mft Manifest number: 0AE1 Signing time: Fri 30 May 2025 19:36:49 +0000 Manifest this update: Fri 30 May 2025 19:36:49 +0000 Manifest next update: Fri 06 Jun 2025 19:36:49 +0000 Files and hashes: 1: V09tVmTqm98xXPZMjl5n0mODwgU.crl (hash: EE8zDdYth2uHAqBs+YbN/FmCR7dTvY29DWdHGmlMjJE=) 2: 52216250493611EAA0968624C4F9AE02.roa (hash: XjkXLtL5CTFLl3MU4C1ptKiUasRS1cFai/QK6ioOeWA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B85FC/8816EFF8493411EAAD84BF1EC4F9AE02/V09tVmTqm98xXPZMjl5n0mODwgU.crl rsync://rpki.apnic.net/member_repository/A91B85FC/8816EFF8493411EAAD84BF1EC4F9AE02/V09tVmTqm98xXPZMjl5n0mODwgU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V09tVmTqm98xXPZMjl5n0mODwgU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 19:36:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2791 (0xae7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B85FC, serialNumber=574F6D5664EA9BDF315CF64C8E5E67D26383C205 Validity Not Before: May 30 19:36:49 2025 GMT Not After : Jun 6 19:36:49 2025 GMT Subject: CN=683a08d1-d016 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:eb:05:cf:e8:7b:68:c8:35:1f:01:9c:3d:e8: 02:aa:74:42:7a:ef:1f:56:ff:d2:f8:51:02:b2:14: 21:bf:49:58:2f:7d:dc:0e:a2:f7:11:14:03:63:06: 86:31:49:a1:7d:6a:78:8b:9c:4d:f9:2c:70:f6:19: 87:e4:ec:75:05:55:17:c3:d9:c3:e4:23:cc:4e:13: 8f:b9:1d:7a:c2:1c:41:dd:6d:67:e2:1c:a8:3f:33: ef:86:fb:92:3b:15:f4:f2:8e:b4:d1:0d:54:7c:52: b7:2d:ce:05:06:03:9b:07:62:38:e1:f7:a4:09:bb: 60:66:8f:d5:b3:f4:22:b8:f4:79:79:d7:dd:49:6d: 22:e2:29:f5:3d:6e:c4:90:46:c6:e7:8d:93:ea:68: 2b:e3:a9:4c:51:75:56:2a:0c:8d:8c:1d:e7:a3:69: 00:55:f1:e2:d8:9c:c8:5d:40:87:2e:68:5d:cd:a8: 10:81:30:ac:6b:2c:19:b8:57:d8:bb:1b:bd:9d:67: f5:a8:80:04:64:41:7e:b1:e3:62:28:5e:dd:a1:0a: 6b:ef:9b:14:3a:43:7d:e4:5b:34:d2:6a:61:25:28: d6:68:58:81:93:f1:ce:f7:d0:9f:87:e5:01:48:25: 64:51:6b:2b:17:ca:68:76:93:c6:fd:43:81:75:e8: 06:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:7B:35:92:05:AC:29:50:3F:ED:35:C7:A0:33:A7:EF:94:FD:39:26 X509v3 Authority Key Identifier: keyid:57:4F:6D:56:64:EA:9B:DF:31:5C:F6:4C:8E:5E:67:D2:63:83:C2:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B85FC/8816EFF8493411EAAD84BF1EC4F9AE02/V09tVmTqm98xXPZMjl5n0mODwgU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V09tVmTqm98xXPZMjl5n0mODwgU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B85FC/8816EFF8493411EAAD84BF1EC4F9AE02/V09tVmTqm98xXPZMjl5n0mODwgU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cf:02:c7:72:75:6a:d8:3f:a4:6e:81:48:ce:8f:02:96:36:9a: 20:80:9e:28:3f:75:cd:66:a0:fe:a2:84:16:d3:e3:93:3d:b0: 0d:49:19:f5:f1:df:ee:c0:ec:10:28:2b:8b:1e:d5:c3:5a:e6: c7:07:68:d7:c7:cc:20:45:35:45:3f:51:90:eb:1f:5e:75:4c: 47:09:1e:59:06:6d:30:23:78:09:0e:bd:80:55:41:d8:63:c5: 24:b7:65:64:84:f9:dc:bd:e2:da:6a:fb:17:9d:84:86:cc:9d: 0e:db:bf:df:23:94:70:03:59:a1:b8:66:28:1f:cb:bc:09:98: 36:e4:e3:e2:ee:8e:38:bc:32:f4:64:c2:a2:86:17:bf:8c:dd: c6:6c:55:42:e1:e4:44:c7:c0:d2:2d:45:5d:f3:84:1f:bc:57: a3:55:d7:84:a5:db:d4:00:aa:96:29:2b:b8:11:df:ea:5e:5f: 50:08:e5:10:50:7c:6a:41:1b:51:57:ba:0e:cf:ac:39:9c:28: 19:76:d7:ee:11:ee:5f:8d:3b:9d:39:22:c5:02:19:41:e8:bc: af:0f:4d:c7:88:e6:f0:c5:87:7e:79:95:dd:b8:d4:9c:0a:b8: 5b:cb:b1:3c:c1:c3:d4:f3:8f:e5:ff:8a:2f:c9:3f:fd:06:19: 02:59:49:d2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCucwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjg1RkMxMTAvBgNVBAUTKDU3NEY2RDU2NjRFQTlCREYzMTVDRjY0QzhFNUU2N0Qy NjM4M0MyMDUwHhcNMjUwNTMwMTkzNjQ5WhcNMjUwNjA2MTkzNjQ5WjAYMRYwFAYD VQQDEw02ODNhMDhkMS1kMDE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz+sFz+h7aMg1HwGcPegCqnRCeu8fVv/S+FECshQhv0lYL33cDqL3ERQDYwaG MUmhfWp4i5xN+Sxw9hmH5Ox1BVUXw9nD5CPMThOPuR16whxB3W1n4hyoPzPvhvuS OxX08o600Q1UfFK3Lc4FBgObB2I44fekCbtgZo/Vs/QiuPR5edfdSW0i4in1PW7E kEbG542T6mgr46lMUXVWKgyNjB3no2kAVfHi2JzIXUCHLmhdzagQgTCsaywZuFfY uxu9nWf1qIAEZEF+seNiKF7doQpr75sUOkN95Fs00mphJSjWaFiBk/HO99Cfh+UB SCVkUWsrF8podpPG/UOBdegGIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCd7NZIF rClQP+01x6Azp++U/TkmMB8GA1UdIwQYMBaAFFdPbVZk6pvfMVz2TI5eZ9Jjg8IF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCODVGQy84ODE2RUZGODQ5 MzQxMUVBQUQ4NEJGMUVDNEY5QUUwMi9WMDl0Vm1UcW05OHhYUFpNamw1bjBtT0R3 Z1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1YwOXRWbVRxbTk4eFhQWk1qbDVuMG1PRHdnVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC ODVGQy84ODE2RUZGODQ5MzQxMUVBQUQ4NEJGMUVDNEY5QUUwMi9WMDl0Vm1UcW05 OHhYUFpNamw1bjBtT0R3Z1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDPAsdydWrYP6RugUjOjwKWNpoggJ4oP3XNZqD+ooQW0+OTPbANSRn1 8d/uwOwQKCuLHtXDWubHB2jXx8wgRTVFP1GQ6x9edUxHCR5ZBm0wI3gJDr2AVUHY Y8Ukt2VkhPncveLaavsXnYSGzJ0O27/fI5RwA1mhuGYoH8u8CZg25OPi7o44vDL0 ZMKihhe/jN3GbFVC4eREx8DSLUVd84QfvFejVdeEpdvUAKqWKSu4Ed/qXl9QCOUQ UHxqQRtRV7oOz6w5nCgZdtfuEe5fjTudOSLFAhlB6LyvD03HiObwxYd+eZXduNSc Crhby7E8wcPU84/l/4ovyT/9BhkCWUnS -----END CERTIFICATE-----Generated at Sat May 31 17:37:50 2025 by rpki-client