$ rpki-client -vvf rpki.apnic.net/member_repository/A91C609A/A37AE926FD6F11EA8E815E33C4F9AE02/P9OJWVL9hJqXvBEkdJUChMaGhkU.mft File: P9OJWVL9hJqXvBEkdJUChMaGhkU.mft (raw, json) Hash identifier: sbLpdg8t8LIHM9jNnHbDiNfsdyfjqV9aHogj5ekBaJY= Subject key identifier: F2:71:36:C2:F1:EE:E0:5C:9B:C5:EA:88:BD:A7:0C:56:78:90:08:1B Authority key identifier: 3F:D3:89:59:52:FD:84:9A:97:BC:11:24:74:95:02:84:C6:86:86:45 Certificate issuer: /CN=A91C609A/serialNumber=3FD3895952FD849A97BC112474950284C6868645 Certificate serial: 07C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P9OJWVL9hJqXvBEkdJUChMaGhkU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C609A/A37AE926FD6F11EA8E815E33C4F9AE02/P9OJWVL9hJqXvBEkdJUChMaGhkU.mft Manifest number: 07BE Signing time: Wed 04 Jun 2025 21:04:15 +0000 Manifest this update: Wed 04 Jun 2025 21:04:15 +0000 Manifest next update: Wed 11 Jun 2025 21:04:15 +0000 Files and hashes: 1: P9OJWVL9hJqXvBEkdJUChMaGhkU.crl (hash: 8vqTaruQHFF2JXyIgF/V/BPUF2vkjP43G5eLRNGRdH4=) 2: A84FB264FD7011EAA1DF3534C4F9AE02.roa (hash: ipH52NvI6j7Qm3VJ3UEcq9yvGVo2LC48K1opbVhCFvU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C609A/A37AE926FD6F11EA8E815E33C4F9AE02/P9OJWVL9hJqXvBEkdJUChMaGhkU.crl rsync://rpki.apnic.net/member_repository/A91C609A/A37AE926FD6F11EA8E815E33C4F9AE02/P9OJWVL9hJqXvBEkdJUChMaGhkU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P9OJWVL9hJqXvBEkdJUChMaGhkU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Jun 2025 21:04:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1992 (0x7c8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C609A, serialNumber=3FD3895952FD849A97BC112474950284C6868645 Validity Not Before: Jun 4 21:04:15 2025 GMT Not After : Jun 11 21:04:15 2025 GMT Subject: CN=6840b4cf-c624 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:0d:32:3f:00:c5:e7:90:0a:f5:1b:6d:98:57: ac:f0:84:ea:31:d9:e8:56:18:9a:18:38:27:6a:b0: 87:27:a4:79:f4:bd:de:9a:22:4c:6b:90:55:96:93: 11:0e:34:a1:d7:62:ae:f5:3f:37:50:5b:8e:46:99: 7a:6e:c0:7f:c0:0c:16:dd:a6:3c:fa:62:82:9e:cb: 02:4e:ce:2e:76:b8:c4:10:18:3d:0e:a9:42:77:e9: 9a:c5:0d:9e:6d:6c:99:8f:02:2a:4f:fa:8f:dc:a6: 97:27:1a:03:6c:d9:c9:b5:f6:6c:90:86:16:85:35: 0c:d8:a3:cb:86:a2:23:a1:2e:2c:2f:1e:ee:fc:de: bd:dd:f5:c5:1c:74:e2:ad:12:13:53:89:e9:31:72: 68:e3:65:45:50:38:4b:f3:0b:50:08:99:02:94:31: 0e:86:43:90:b6:ed:b9:96:fe:69:9a:18:d7:e0:2a: 9d:64:41:99:80:bf:2e:bb:8b:98:f5:cc:d6:cf:6a: a4:6b:89:82:48:dc:07:8f:8f:62:b6:1d:b0:55:83: e5:52:10:81:2b:62:66:18:3f:31:e5:67:64:bc:f5: 29:a3:1d:47:0e:53:f9:9b:d9:57:51:35:61:7e:ab: 5f:f5:38:f1:51:cd:f1:ce:8e:42:02:45:7d:fc:16: 75:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:71:36:C2:F1:EE:E0:5C:9B:C5:EA:88:BD:A7:0C:56:78:90:08:1B X509v3 Authority Key Identifier: keyid:3F:D3:89:59:52:FD:84:9A:97:BC:11:24:74:95:02:84:C6:86:86:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C609A/A37AE926FD6F11EA8E815E33C4F9AE02/P9OJWVL9hJqXvBEkdJUChMaGhkU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P9OJWVL9hJqXvBEkdJUChMaGhkU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C609A/A37AE926FD6F11EA8E815E33C4F9AE02/P9OJWVL9hJqXvBEkdJUChMaGhkU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:c5:89:48:ef:93:3f:03:b2:6b:67:a9:cf:81:2d:a7:4c:c3: 34:9b:e6:d2:09:ca:15:59:a6:2e:eb:12:74:e4:41:75:a9:19: 89:41:0c:b4:ae:93:e2:12:fb:be:ec:c4:2c:fa:0f:0c:fe:44: cb:13:f0:86:44:6c:38:c3:de:42:a9:34:82:f8:86:4b:e5:45: cf:ad:3e:68:11:dc:52:87:bc:a6:73:c5:e3:3b:ec:eb:bf:46: b8:b9:3f:b1:6f:5a:35:4b:0d:f5:2d:39:b2:cf:83:7d:53:a9: 6c:94:16:51:f4:05:30:f2:31:4f:58:b6:43:b3:5b:60:39:2c: 95:f7:5e:72:73:ba:61:f9:4e:c4:64:c9:34:f4:2a:d5:5d:fc: 56:ea:5b:af:67:af:e3:c1:11:a3:a9:bc:48:b3:fa:db:03:ce: 67:e5:50:87:56:2a:0a:d9:15:3f:d3:27:8f:32:9c:f6:f4:dd: 96:71:e3:42:57:80:88:fc:10:eb:d2:ae:69:b6:25:0e:70:5e: 80:db:12:19:04:70:30:d2:ed:4e:5d:42:cf:bd:2f:94:b6:01: c7:0e:b9:a0:65:19:92:be:22:eb:9d:11:85:21:fe:a3:73:96: 57:22:17:91:d9:d8:9a:44:85:b7:63:8e:98:e6:96:11:32:ef: 38:83:39:75 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB8gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzYwOUExMTAvBgNVBAUTKDNGRDM4OTU5NTJGRDg0OUE5N0JDMTEyNDc0OTUwMjg0 QzY4Njg2NDUwHhcNMjUwNjA0MjEwNDE1WhcNMjUwNjExMjEwNDE1WjAYMRYwFAYD VQQDEw02ODQwYjRjZi1jNjI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqw0yPwDF55AK9RttmFes8ITqMdnoVhiaGDgnarCHJ6R59L3emiJMa5BVlpMR DjSh12Ku9T83UFuORpl6bsB/wAwW3aY8+mKCnssCTs4udrjEEBg9DqlCd+maxQ2e bWyZjwIqT/qP3KaXJxoDbNnJtfZskIYWhTUM2KPLhqIjoS4sLx7u/N693fXFHHTi rRITU4npMXJo42VFUDhL8wtQCJkClDEOhkOQtu25lv5pmhjX4CqdZEGZgL8uu4uY 9czWz2qka4mCSNwHj49ith2wVYPlUhCBK2JmGD8x5WdkvPUpox1HDlP5m9lXUTVh fqtf9TjxUc3xzo5CAkV9/BZ1JwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPJxNsLx 7uBcm8XqiL2nDFZ4kAgbMB8GA1UdIwQYMBaAFD/TiVlS/YSal7wRJHSVAoTGhoZF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjA5QS9BMzdBRTkyNkZE NkYxMUVBOEU4MTVFMzNDNEY5QUUwMi9QOU9KV1ZMOWhKcVh2QkVrZEpVQ2hNYUdo a1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1A5T0pXVkw5aEpxWHZCRWtkSlVDaE1hR2hrVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NjA5QS9BMzdBRTkyNkZENkYxMUVBOEU4MTVFMzNDNEY5QUUwMi9QOU9KV1ZMOWhK cVh2QkVrZEpVQ2hNYUdoa1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC4xYlI75M/A7JrZ6nPgS2nTMM0m+bSCcoVWaYu6xJ05EF1qRmJQQy0 rpPiEvu+7MQs+g8M/kTLE/CGRGw4w95CqTSC+IZL5UXPrT5oEdxSh7ymc8XjO+zr v0a4uT+xb1o1Sw31LTmyz4N9U6lslBZR9AUw8jFPWLZDs1tgOSyV915yc7ph+U7E ZMk09CrVXfxW6luvZ6/jwRGjqbxIs/rbA85n5VCHVioK2RU/0yePMpz29N2WceNC V4CI/BDr0q5ptiUOcF6A2xIZBHAw0u1OXULPvS+UtgHHDrmgZRmSviLrnRGFIf6j c5ZXIheR2diaRIW3Y46Y5pYRMu84gzl1 -----END CERTIFICATE-----Generated at Fri Jun 6 17:17:22 2025 by rpki-client