$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5A9F/021A960CF67811E9B5209625C4F9AE02/a-rAl7V48XydcRl3ez9RFPvglxs.mft File: a-rAl7V48XydcRl3ez9RFPvglxs.mft (raw, json) Hash identifier: I+0W6bCNjN4pucvXH84tqmlz67gC62Ay74coRcav5H4= Subject key identifier: 87:87:BB:4C:30:C4:A3:14:E6:CE:B0:6B:B9:8A:83:ED:C2:53:E4:70 Authority key identifier: 6B:EA:C0:97:B5:78:F1:7C:9D:71:19:77:7B:3F:51:14:FB:E0:97:1B Certificate issuer: /CN=A91C5A9F/serialNumber=6BEAC097B578F17C9D7119777B3F5114FBE0971B Certificate serial: 0CB3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a-rAl7V48XydcRl3ez9RFPvglxs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C5A9F/021A960CF67811E9B5209625C4F9AE02/a-rAl7V48XydcRl3ez9RFPvglxs.mft Manifest number: 0C9D Signing time: Tue 10 Jun 2025 18:08:46 +0000 Manifest this update: Tue 10 Jun 2025 18:08:46 +0000 Manifest next update: Tue 17 Jun 2025 18:08:46 +0000 Files and hashes: 1: a-rAl7V48XydcRl3ez9RFPvglxs.crl (hash: Z1wfv3BVRg8+tqBGV3FXx8ENSTcAZU8xNqkohqRNfzo=) 2: 498956B8FFC411EEB2369013C4F9AE02.roa (hash: w5Dpoxz9EcTss3nAI8ZMtrwKEHayowiUIHwPNhpEFMM=) 3: 48B3316EFFC411EEB2369013C4F9AE02.roa (hash: Fswv/F/vaivrwx2kQ/qe3AmxF+uS0o5WMUgISHj2Mxo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C5A9F/021A960CF67811E9B5209625C4F9AE02/a-rAl7V48XydcRl3ez9RFPvglxs.crl rsync://rpki.apnic.net/member_repository/A91C5A9F/021A960CF67811E9B5209625C4F9AE02/a-rAl7V48XydcRl3ez9RFPvglxs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a-rAl7V48XydcRl3ez9RFPvglxs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 17 Jun 2025 18:08:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3251 (0xcb3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C5A9F, serialNumber=6BEAC097B578F17C9D7119777B3F5114FBE0971B Validity Not Before: Jun 10 18:08:46 2025 GMT Not After : Jun 17 18:08:46 2025 GMT Subject: CN=684874ae-7489 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:69:77:e9:08:4c:20:d2:78:9f:5f:95:e6:c0: a8:20:e9:3b:e0:2c:ac:b3:90:2a:37:c3:49:5b:1c: 9f:42:77:8b:37:5f:f8:fc:60:00:73:61:31:6c:04: ab:e1:cf:26:83:69:36:6d:c0:5d:7a:27:0c:0e:a3: be:ac:ef:08:32:28:8b:53:df:cd:3a:31:60:f1:d8: 40:94:04:4a:ba:db:85:78:c7:7a:70:d9:d3:9c:c7: 47:c7:99:b1:ca:81:aa:be:9f:9c:a0:70:2e:61:fc: 0f:08:4b:32:da:93:88:fb:24:2d:24:10:2c:01:3e: 24:72:b5:01:8c:cc:2e:e2:31:33:d2:72:63:bc:61: 9a:21:ae:1b:f6:86:53:6e:7e:ce:e9:c6:a5:d4:bc: c7:3e:6b:08:ce:8d:9e:df:ac:e7:d2:19:e3:75:96: c2:1c:96:3c:89:c6:a7:b7:9c:11:f8:2f:1b:32:5c: cd:c2:27:4b:7d:06:6e:aa:ac:01:92:06:fc:e6:9a: f8:e8:ad:c7:6f:a3:c8:99:ec:a3:d6:b0:51:38:ba: 5a:99:8f:9c:aa:e2:1b:76:8a:76:00:35:ef:82:d4: 87:e9:c0:15:55:60:4d:75:9f:c3:8f:07:94:74:31: bd:4e:8d:47:15:ed:71:bb:cc:a3:4b:2b:a7:35:60: 04:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:87:BB:4C:30:C4:A3:14:E6:CE:B0:6B:B9:8A:83:ED:C2:53:E4:70 X509v3 Authority Key Identifier: keyid:6B:EA:C0:97:B5:78:F1:7C:9D:71:19:77:7B:3F:51:14:FB:E0:97:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C5A9F/021A960CF67811E9B5209625C4F9AE02/a-rAl7V48XydcRl3ez9RFPvglxs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a-rAl7V48XydcRl3ez9RFPvglxs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5A9F/021A960CF67811E9B5209625C4F9AE02/a-rAl7V48XydcRl3ez9RFPvglxs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:a4:f9:2a:63:aa:a8:86:02:a8:ca:0c:2e:6e:38:2d:b3:62: 18:5a:5e:86:e4:6f:ef:c5:cd:51:dd:cf:e5:ee:ba:37:e4:15: 83:33:d9:7e:9b:be:e4:ae:c3:0b:ed:a2:61:fb:af:92:63:89: f4:a2:b0:02:f2:bb:8b:0e:40:a8:de:ce:e3:3f:ce:be:c4:25: a1:db:ca:06:6f:8e:5c:4b:21:6b:d5:32:7e:44:26:71:8f:05: 3a:dd:2f:80:71:68:35:05:96:47:cd:c9:01:99:57:4f:d7:6b: 85:0d:48:33:ea:c7:49:4e:f3:45:fb:bd:cf:b4:c3:be:3a:c2: 92:48:98:0a:aa:d6:1e:66:d6:14:b7:f4:65:34:a5:b7:b7:9c: 34:c2:dc:d1:4b:b6:df:e1:67:81:cc:8e:b5:38:63:78:86:17: 71:89:6c:03:66:08:5c:08:3f:ff:73:95:be:72:6e:72:e3:d8: 5d:99:00:66:5e:46:41:13:31:3a:27:ea:72:37:00:27:78:93: ae:80:0b:4b:84:ca:f8:60:75:00:96:17:c5:16:68:82:e3:c1: d4:6b:12:5d:83:2f:1d:b4:95:29:b4:cf:70:7d:6e:fe:f7:38: 46:e7:ac:90:b3:28:5e:f0:98:83:99:07:96:14:d0:20:c2:5f: 50:df:99:f9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDLMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzVBOUYxMTAvBgNVBAUTKDZCRUFDMDk3QjU3OEYxN0M5RDcxMTk3NzdCM0Y1MTE0 RkJFMDk3MUIwHhcNMjUwNjEwMTgwODQ2WhcNMjUwNjE3MTgwODQ2WjAYMRYwFAYD VQQDEw02ODQ4NzRhZS03NDg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoWl36QhMINJ4n1+V5sCoIOk74Cyss5AqN8NJWxyfQneLN1/4/GAAc2ExbASr 4c8mg2k2bcBdeicMDqO+rO8IMiiLU9/NOjFg8dhAlARKutuFeMd6cNnTnMdHx5mx yoGqvp+coHAuYfwPCEsy2pOI+yQtJBAsAT4kcrUBjMwu4jEz0nJjvGGaIa4b9oZT bn7O6cal1LzHPmsIzo2e36zn0hnjdZbCHJY8icant5wR+C8bMlzNwidLfQZuqqwB kgb85pr46K3Hb6PImeyj1rBROLpamY+cquIbdop2ADXvgtSH6cAVVWBNdZ/DjweU dDG9To1HFe1xu8yjSyunNWAEgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIeHu0ww xKMU5s6wa7mKg+3CU+RwMB8GA1UdIwQYMBaAFGvqwJe1ePF8nXEZd3s/URT74Jcb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNUE5Ri8wMjFBOTYwQ0Y2 NzgxMUU5QjUyMDk2MjVDNEY5QUUwMi9hLXJBbDdWNDhYeWRjUmwzZXo5UkZQdmds eHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2EtckFsN1Y0OFh5ZGNSbDNlejlSRlB2Z2x4cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NUE5Ri8wMjFBOTYwQ0Y2NzgxMUU5QjUyMDk2MjVDNEY5QUUwMi9hLXJBbDdWNDhY eWRjUmwzZXo5UkZQdmdseHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBxpPkqY6qohgKoygwubjgts2IYWl6G5G/vxc1R3c/l7ro35BWDM9l+ m77krsML7aJh+6+SY4n0orAC8ruLDkCo3s7jP86+xCWh28oGb45cSyFr1TJ+RCZx jwU63S+AcWg1BZZHzckBmVdP12uFDUgz6sdJTvNF+73PtMO+OsKSSJgKqtYeZtYU t/RlNKW3t5w0wtzRS7bf4WeBzI61OGN4hhdxiWwDZghcCD//c5W+cm5y49hdmQBm XkZBEzE6J+pyNwAneJOugAtLhMr4YHUAlhfFFmiC48HUaxJdgy8dtJUptM9wfW7+ 9zhG56yQsyhe8JiDmQeWFNAgwl9Q35n5 -----END CERTIFICATE-----Generated at Thu Jun 12 13:20:08 2025 by rpki-client