$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9AB9/C76F92C06E8411EFA3CD983FC4F9AE02/-c1w52K-aV9LpJAqoguUD3cKBjg.mft File: -c1w52K-aV9LpJAqoguUD3cKBjg.mft (raw, json) Hash identifier: q08JgbUh98ajNeP4GyEAufBJn+ZDKXcxgup/z9bFmjY= Subject key identifier: 6F:67:19:1C:C7:25:39:EB:19:C0:56:DA:56:86:7A:71:20:C4:2F:01 Authority key identifier: F9:CD:70:E7:62:BE:69:5F:4B:A4:90:2A:A2:0B:94:0F:77:0A:06:38 Certificate issuer: /CN=A91B9AB9/serialNumber=F9CD70E762BE695F4BA4902AA20B940F770A0638 Certificate serial: 89 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-c1w52K-aV9LpJAqoguUD3cKBjg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B9AB9/C76F92C06E8411EFA3CD983FC4F9AE02/-c1w52K-aV9LpJAqoguUD3cKBjg.mft Manifest number: 88 Signing time: Sun 01 Jun 2025 06:15:43 +0000 Manifest this update: Sun 01 Jun 2025 06:15:43 +0000 Manifest next update: Sun 08 Jun 2025 06:15:43 +0000 Files and hashes: 1: -c1w52K-aV9LpJAqoguUD3cKBjg.crl (hash: 2IKmHffcQvPutiRD3V1NpaOCoAIFAUfOLvcTAoh0MPU=) 2: 723EACFE6E8511EF83048D43C4F9AE02.roa (hash: SORlAdQ9FssMHlMIfPwfvKAJ6kXMG+aUvNMZPsDTNq4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B9AB9/C76F92C06E8411EFA3CD983FC4F9AE02/-c1w52K-aV9LpJAqoguUD3cKBjg.crl rsync://rpki.apnic.net/member_repository/A91B9AB9/C76F92C06E8411EFA3CD983FC4F9AE02/-c1w52K-aV9LpJAqoguUD3cKBjg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-c1w52K-aV9LpJAqoguUD3cKBjg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 06:15:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 137 (0x89) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B9AB9, serialNumber=F9CD70E762BE695F4BA4902AA20B940F770A0638 Validity Not Before: Jun 1 06:15:43 2025 GMT Not After : Jun 8 06:15:43 2025 GMT Subject: CN=683bf00f-8562 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:5a:43:4b:54:74:94:97:55:e4:fa:89:9e:aa: 46:35:b9:ab:de:21:82:c1:cf:bc:68:e6:e4:4d:92: 2c:10:b7:69:98:88:e8:bb:bc:40:28:b4:60:a0:83: 0a:05:97:c6:6f:38:99:45:3a:89:33:73:80:0b:95: 9e:9e:b2:f7:3a:30:2c:27:84:fc:1d:5d:e5:4a:b5: d2:4b:33:a8:89:2a:a6:fe:ca:8a:f9:86:48:b0:a7: 46:c4:a6:e9:63:5f:85:18:df:b4:c4:3b:e5:d6:47: 81:9c:b7:2c:a2:b2:44:b2:30:61:23:c5:fb:29:06: 09:6c:08:d3:48:95:08:20:9f:24:af:45:bc:54:c4: bf:fa:a6:30:61:3b:fd:76:4f:d8:2d:6b:6e:85:c8: 28:83:c1:c5:2e:46:90:28:d2:88:69:b2:81:37:6a: dc:c5:fd:03:12:ae:fc:60:03:87:7f:74:fd:7c:32: 64:15:c0:2e:a4:b3:7b:62:bc:4a:d2:cf:58:c6:62: b8:28:7e:a8:88:95:f6:84:eb:56:53:ff:3a:c4:10: 7e:16:df:24:e0:f1:22:df:98:f3:18:ae:10:7b:22: 86:64:b6:52:a4:96:3e:d8:69:56:8b:8e:cc:3c:c5: 63:30:b0:7a:c1:58:cf:a5:4a:d6:1c:d6:af:73:7a: e9:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:67:19:1C:C7:25:39:EB:19:C0:56:DA:56:86:7A:71:20:C4:2F:01 X509v3 Authority Key Identifier: keyid:F9:CD:70:E7:62:BE:69:5F:4B:A4:90:2A:A2:0B:94:0F:77:0A:06:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B9AB9/C76F92C06E8411EFA3CD983FC4F9AE02/-c1w52K-aV9LpJAqoguUD3cKBjg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-c1w52K-aV9LpJAqoguUD3cKBjg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9AB9/C76F92C06E8411EFA3CD983FC4F9AE02/-c1w52K-aV9LpJAqoguUD3cKBjg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:84:a8:34:8f:5e:b5:62:f8:5f:59:d7:cd:f6:a7:5f:b2:50: 2e:f2:3b:2d:7b:e1:1d:94:ef:8e:3a:de:d3:2c:3b:8b:1d:9d: 1a:a1:48:04:cc:81:ac:6b:6e:cb:cb:45:ff:50:7f:1d:22:9d: 21:41:3a:98:15:4d:cf:2c:91:bd:51:32:89:a5:d1:e5:58:65: 9a:8f:5a:55:29:b1:6f:ce:86:3e:10:d8:04:f5:a6:db:35:91: 6b:e2:06:7a:a0:08:f3:b0:58:e0:5f:a6:f8:c7:4f:d0:a1:4f: 34:9c:d9:9c:59:43:0d:ae:ea:50:5e:97:09:37:6d:26:6e:c4: 1b:8b:6c:60:a3:be:c5:a3:00:e3:ec:7f:0b:6b:f7:0d:b6:84: e2:26:ef:da:74:3e:e7:c4:e2:b1:5b:80:bc:33:47:56:7b:a3: 00:7e:ea:24:d0:bb:a1:ed:76:6b:61:91:d7:1d:cc:9b:4b:3f: 4d:4a:90:2a:ec:51:41:e1:66:8f:6f:da:df:72:78:80:c1:1f: ed:db:fe:d6:cc:5a:01:dc:d5:44:ed:03:01:c5:26:c3:6f:b4: 8f:61:04:40:48:5b:10:a3:e1:90:99:5b:65:13:41:09:1a:96: 1b:a6:63:9c:9f:10:2f:e6:16:cf:58:94:c4:f8:5a:95:ac:47: 9d:0e:06:c4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjlBQjkxMTAvBgNVBAUTKEY5Q0Q3MEU3NjJCRTY5NUY0QkE0OTAyQUEyMEI5NDBG NzcwQTA2MzgwHhcNMjUwNjAxMDYxNTQzWhcNMjUwNjA4MDYxNTQzWjAYMRYwFAYD VQQDEw02ODNiZjAwZi04NTYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6FpDS1R0lJdV5PqJnqpGNbmr3iGCwc+8aObkTZIsELdpmIjou7xAKLRgoIMK BZfGbziZRTqJM3OAC5WenrL3OjAsJ4T8HV3lSrXSSzOoiSqm/sqK+YZIsKdGxKbp Y1+FGN+0xDvl1keBnLcsorJEsjBhI8X7KQYJbAjTSJUIIJ8kr0W8VMS/+qYwYTv9 dk/YLWtuhcgog8HFLkaQKNKIabKBN2rcxf0DEq78YAOHf3T9fDJkFcAupLN7YrxK 0s9YxmK4KH6oiJX2hOtWU/86xBB+Ft8k4PEi35jzGK4QeyKGZLZSpJY+2GlWi47M PMVjMLB6wVjPpUrWHNavc3rpKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG9nGRzH JTnrGcBW2laGenEgxC8BMB8GA1UdIwQYMBaAFPnNcOdivmlfS6SQKqILlA93CgY4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOUFCOS9DNzZGOTJDMDZF ODQxMUVGQTNDRDk4M0ZDNEY5QUUwMi8tYzF3NTJLLWFWOUxwSkFxb2d1VUQzY0tC amcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLy1jMXc1MkstYVY5THBKQXFvZ3VVRDNjS0JqZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OUFCOS9DNzZGOTJDMDZFODQxMUVGQTNDRDk4M0ZDNEY5QUUwMi8tYzF3NTJLLWFW OUxwSkFxb2d1VUQzY0tCamcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCIhKg0j161YvhfWdfN9qdfslAu8jste+EdlO+OOt7TLDuLHZ0aoUgE zIGsa27Ly0X/UH8dIp0hQTqYFU3PLJG9UTKJpdHlWGWaj1pVKbFvzoY+ENgE9abb NZFr4gZ6oAjzsFjgX6b4x0/QoU80nNmcWUMNrupQXpcJN20mbsQbi2xgo77FowDj 7H8La/cNtoTiJu/adD7nxOKxW4C8M0dWe6MAfuok0Luh7XZrYZHXHcybSz9NSpAq 7FFB4WaPb9rfcniAwR/t2/7WzFoB3NVE7QMBxSbDb7SPYQRASFsQo+GQmVtlE0EJ GpYbpmOcnxAv5hbPWJTE+FqVrEedDgbE -----END CERTIFICATE-----Generated at Mon Jun 2 19:49:36 2025 by rpki-client