$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9484/6FF0DDE01D9411E29DECB5F808B02CD2/-XLnXj0D5c4ZAZMMQ9FtxKicR5I.mft File: -XLnXj0D5c4ZAZMMQ9FtxKicR5I.mft (raw, json) Hash identifier: K4ic8G5O28edJHUv0zSCE3cbIpdiVe+5kC9A7lrn2gA= Subject key identifier: 88:C6:18:5F:B4:71:5C:3D:1F:EC:CA:75:87:D1:36:27:7C:25:D1:CC Authority key identifier: F9:72:E7:5E:3D:03:E5:CE:19:01:93:0C:43:D1:6D:C4:A8:9C:47:92 Certificate issuer: /CN=A91C9484/serialNumber=F972E75E3D03E5CE1901930C43D16DC4A89C4792 Certificate serial: 34C0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XLnXj0D5c4ZAZMMQ9FtxKicR5I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9484/6FF0DDE01D9411E29DECB5F808B02CD2/-XLnXj0D5c4ZAZMMQ9FtxKicR5I.mft Manifest number: 34A9 Signing time: Sun 08 Jun 2025 14:46:19 +0000 Manifest this update: Sun 08 Jun 2025 14:46:19 +0000 Manifest next update: Sun 15 Jun 2025 14:46:19 +0000 Files and hashes: 1: -XLnXj0D5c4ZAZMMQ9FtxKicR5I.crl (hash: vAsw6GwTLJmnn/GnCT6in7ofAWI++Zk/u/5gi1DUxxQ=) 2: 49036D2CB0D711E58B185E0FC4F9AE02.roa (hash: AsLmLNpdLhba6hfcYMLpd0sVqrUh2auGXL+sqK0hCjo=) 3: FFC89DF8CECD11EEA4AA6D44C4F9AE02.roa (hash: LT0aNSmVv5vvmR7dpu4yqP0BpA8hfoKsmy5XfMM5RqM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9484/6FF0DDE01D9411E29DECB5F808B02CD2/-XLnXj0D5c4ZAZMMQ9FtxKicR5I.crl rsync://rpki.apnic.net/member_repository/A91C9484/6FF0DDE01D9411E29DECB5F808B02CD2/-XLnXj0D5c4ZAZMMQ9FtxKicR5I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XLnXj0D5c4ZAZMMQ9FtxKicR5I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Jun 2025 14:46:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13504 (0x34c0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9484, serialNumber=F972E75E3D03E5CE1901930C43D16DC4A89C4792 Validity Not Before: Jun 8 14:46:19 2025 GMT Not After : Jun 15 14:46:19 2025 GMT Subject: CN=6845a23b-84bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:c5:42:88:5d:bc:09:6a:ca:4e:4d:34:fa:26: ce:f4:6b:ca:3a:a2:53:21:bf:9e:4f:f5:6d:16:9b: 30:2a:65:69:e3:fe:81:6f:f6:e3:7e:8c:e4:3e:cb: 15:21:7c:2f:bb:f0:4e:be:14:b9:04:19:8a:b9:e3: b9:25:9c:f4:4d:7d:32:77:db:ae:94:05:52:56:ff: d8:c4:84:11:04:4a:d3:8e:24:d8:49:74:f5:d5:7e: 08:b2:81:2a:91:16:ac:26:42:1f:66:0c:fa:3d:f3: 63:42:bd:6b:fc:da:47:bf:39:18:2b:59:55:3f:be: ee:5b:02:6b:e9:bc:7c:23:33:31:fc:da:21:29:c7: 57:08:bb:52:9a:70:fc:32:f9:b9:58:69:bd:9e:b1: 24:29:8f:44:ed:85:d5:4d:c3:6a:e5:7c:0a:6b:7a: 07:21:69:bc:92:f0:55:1f:f6:1d:1c:52:09:35:a6: f7:64:94:ad:b8:2a:66:32:3b:e2:4c:0f:3e:bb:7b: cb:bb:99:0d:ab:15:1a:d8:3a:94:8b:ed:01:45:67: 52:26:48:86:dc:e2:1f:28:58:00:eb:68:7a:de:91: a7:cc:b6:1e:a9:d7:bf:70:97:97:c1:7e:66:85:0c: ec:e7:d7:3c:09:e2:4d:e3:01:ff:21:ce:b2:fb:df: 55:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:C6:18:5F:B4:71:5C:3D:1F:EC:CA:75:87:D1:36:27:7C:25:D1:CC X509v3 Authority Key Identifier: keyid:F9:72:E7:5E:3D:03:E5:CE:19:01:93:0C:43:D1:6D:C4:A8:9C:47:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9484/6FF0DDE01D9411E29DECB5F808B02CD2/-XLnXj0D5c4ZAZMMQ9FtxKicR5I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XLnXj0D5c4ZAZMMQ9FtxKicR5I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9484/6FF0DDE01D9411E29DECB5F808B02CD2/-XLnXj0D5c4ZAZMMQ9FtxKicR5I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:78:b0:21:4e:ea:0d:ad:74:2b:5a:84:ff:99:24:28:19:1f: 86:01:f7:83:bf:ee:0b:23:5d:54:51:31:ce:4a:c8:5f:4d:6b: 74:b0:3f:4e:ef:e8:ad:ad:e9:70:9c:f6:59:dc:19:f1:97:e6: 1c:b9:33:e2:ad:bf:90:5c:61:1e:b5:bf:73:2a:f5:39:c6:19: 66:70:e6:f5:b8:97:d6:e1:b3:82:2d:9b:14:95:8a:de:f9:71: d8:8a:27:42:dd:55:30:f6:0a:f3:79:dd:ab:92:79:fb:11:2e: 47:39:06:a9:c3:7d:55:6b:09:30:c1:1f:96:32:5f:fb:83:f3: 09:c4:4e:4f:d0:ce:da:0e:dc:06:04:85:22:86:e5:9f:a7:55: 96:2c:a2:1b:f7:0b:fe:6d:6d:94:31:b8:f6:66:27:05:f7:f9: 9d:48:d7:ea:36:de:18:1d:ea:f0:ca:5b:b5:62:5d:5f:2e:86: 0c:ad:a3:a1:c1:4d:83:b4:c8:34:ce:43:25:e6:35:37:63:43: d2:45:a1:f3:88:2c:0a:3c:ab:cb:f0:dd:9c:48:8d:d8:94:ff: 8b:6a:0b:41:d4:c6:1e:a6:82:37:5d:ba:c5:45:84:fa:86:47: b0:d6:73:f2:9f:2d:94:5a:3d:43:4f:22:ce:3d:11:a8:77:db: 19:61:8d:40 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNMAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzk0ODQxMTAvBgNVBAUTKEY5NzJFNzVFM0QwM0U1Q0UxOTAxOTMwQzQzRDE2REM0 QTg5QzQ3OTIwHhcNMjUwNjA4MTQ0NjE5WhcNMjUwNjE1MTQ0NjE5WjAYMRYwFAYD VQQDEw02ODQ1YTIzYi04NGJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAscVCiF28CWrKTk00+ibO9GvKOqJTIb+eT/VtFpswKmVp4/6Bb/bjfozkPssV IXwvu/BOvhS5BBmKueO5JZz0TX0yd9uulAVSVv/YxIQRBErTjiTYSXT11X4IsoEq kRasJkIfZgz6PfNjQr1r/NpHvzkYK1lVP77uWwJr6bx8IzMx/NohKcdXCLtSmnD8 Mvm5WGm9nrEkKY9E7YXVTcNq5XwKa3oHIWm8kvBVH/YdHFIJNab3ZJStuCpmMjvi TA8+u3vLu5kNqxUa2DqUi+0BRWdSJkiG3OIfKFgA62h63pGnzLYeqde/cJeXwX5m hQzs59c8CeJN4wH/Ic6y+99VCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIjGGF+0 cVw9H+zKdYfRNid8JdHMMB8GA1UdIwQYMBaAFPly5149A+XOGQGTDEPRbcSonEeS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTQ4NC82RkYwRERFMDFE OTQxMUUyOURFQ0I1RjgwOEIwMkNEMi8tWExuWGowRDVjNFpBWk1NUTlGdHhLaWNS NUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1YTG5YajBENWM0WkFaTU1ROUZ0eEtpY1I1SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTQ4NC82RkYwRERFMDFEOTQxMUUyOURFQ0I1RjgwOEIwMkNEMi8tWExuWGowRDVj NFpBWk1NUTlGdHhLaWNSNUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZeLAhTuoNrXQrWoT/mSQoGR+GAfeDv+4LI11UUTHOSshfTWt0sD9O 7+itrelwnPZZ3Bnxl+YcuTPirb+QXGEetb9zKvU5xhlmcOb1uJfW4bOCLZsUlYre +XHYiidC3VUw9grzed2rknn7ES5HOQapw31VawkwwR+WMl/7g/MJxE5P0M7aDtwG BIUihuWfp1WWLKIb9wv+bW2UMbj2ZicF9/mdSNfqNt4YHerwylu1Yl1fLoYMraOh wU2DtMg0zkMl5jU3Y0PSRaHziCwKPKvL8N2cSI3YlP+LagtB1MYepoI3XbrFRYT6 hkew1nPyny2UWj1DTyLOPRGod9sZYY1A -----END CERTIFICATE-----Generated at Sun Jun 8 19:39:44 2025 by rpki-client