$ rpki-client -vvf rpki.apnic.net/member_repository/A91D536E/A6D748FA29FA11EBBC65AF7DC4F9AE02/9zQzO1u1T7qIKyMv0lMlLn6gu8A.mft File: 9zQzO1u1T7qIKyMv0lMlLn6gu8A.mft (raw, json) Hash identifier: 8d3fgKKx+98BBog/06A224g6S5Et2zrye+tLNF5fxBQ= Subject key identifier: 2A:1D:AB:08:C9:EA:DE:AC:D0:51:3B:70:D3:F0:32:21:AC:07:88:F6 Authority key identifier: F7:34:33:3B:5B:B5:4F:BA:88:2B:23:2F:D2:53:25:2E:7E:A0:BB:C0 Certificate issuer: /CN=A91D536E/serialNumber=F734333B5BB54FBA882B232FD253252E7EA0BBC0 Certificate serial: 074C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9zQzO1u1T7qIKyMv0lMlLn6gu8A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D536E/A6D748FA29FA11EBBC65AF7DC4F9AE02/9zQzO1u1T7qIKyMv0lMlLn6gu8A.mft Manifest number: 0747 Signing time: Tue 10 Jun 2025 21:34:23 +0000 Manifest this update: Tue 10 Jun 2025 21:34:22 +0000 Manifest next update: Tue 17 Jun 2025 21:34:22 +0000 Files and hashes: 1: 9zQzO1u1T7qIKyMv0lMlLn6gu8A.crl (hash: m8KYGgefViu0/4cJduip5qtB7SuYCX3eBTXDwHFemOA=) 2: 6091D05229FC11EB861CCA7FC4F9AE02.roa (hash: oXfgRMCkFYhKUKORBUUeo77MRVn7Mx2xxFkJ1oK4WsM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D536E/A6D748FA29FA11EBBC65AF7DC4F9AE02/9zQzO1u1T7qIKyMv0lMlLn6gu8A.crl rsync://rpki.apnic.net/member_repository/A91D536E/A6D748FA29FA11EBBC65AF7DC4F9AE02/9zQzO1u1T7qIKyMv0lMlLn6gu8A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9zQzO1u1T7qIKyMv0lMlLn6gu8A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 17 Jun 2025 21:34:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1868 (0x74c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D536E, serialNumber=F734333B5BB54FBA882B232FD253252E7EA0BBC0 Validity Not Before: Jun 10 21:34:22 2025 GMT Not After : Jun 17 21:34:22 2025 GMT Subject: CN=6848a4de-d8b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:a5:b6:24:f3:cf:96:c3:a4:07:0f:5e:0b:67: af:37:6c:ea:cf:09:52:db:ff:9d:b3:13:8d:18:08: fa:c4:49:86:67:d2:6c:b0:c8:e0:e7:46:13:9e:28: 69:bb:44:5e:39:1b:42:16:47:d8:0e:f8:12:e0:0d: 24:7b:05:53:0c:93:a8:c4:2c:71:d3:f6:2e:69:e9: 22:c9:4c:f7:8d:db:6b:0a:bf:e2:5f:61:66:4f:00: de:a8:a2:70:c0:67:c5:56:7a:75:37:84:e3:f4:20: 80:90:dc:9b:63:b3:fb:fa:f0:94:e6:ac:d9:4b:f5: fb:5d:bf:58:61:67:c5:84:c0:ed:cf:f7:5f:39:f0: f9:01:96:fd:e1:4b:39:d8:7e:19:b5:35:ba:1b:05: 4f:a4:52:e7:f7:71:b9:4a:88:ff:10:09:5b:92:4f: 27:46:39:72:0e:60:a7:af:4d:f4:00:15:9f:da:c6: 8d:06:3d:39:c4:2a:85:d0:2a:2f:34:27:4d:53:f1: 25:f5:a7:79:83:01:0c:f2:e4:54:4b:5e:83:02:7a: 24:2c:14:75:5a:51:a7:75:5e:fa:f4:ed:9d:e2:bd: d4:ae:b6:e5:c2:76:f1:6d:10:7c:ff:f4:67:3e:1e: 94:b1:83:17:3c:a9:8b:31:68:5e:87:e2:b9:42:5a: ae:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:1D:AB:08:C9:EA:DE:AC:D0:51:3B:70:D3:F0:32:21:AC:07:88:F6 X509v3 Authority Key Identifier: keyid:F7:34:33:3B:5B:B5:4F:BA:88:2B:23:2F:D2:53:25:2E:7E:A0:BB:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D536E/A6D748FA29FA11EBBC65AF7DC4F9AE02/9zQzO1u1T7qIKyMv0lMlLn6gu8A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9zQzO1u1T7qIKyMv0lMlLn6gu8A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D536E/A6D748FA29FA11EBBC65AF7DC4F9AE02/9zQzO1u1T7qIKyMv0lMlLn6gu8A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:d9:a0:2b:50:dd:a2:f8:bf:b3:87:29:18:cd:73:7c:e6:b8: 72:b4:61:e3:86:df:4b:13:f9:9f:00:58:fb:b5:7f:b1:dc:9c: 8d:cf:31:71:6d:af:98:df:f3:22:10:46:23:43:a5:cc:7d:81: 02:e7:e9:69:bb:49:99:49:1c:5f:63:3e:36:45:da:d8:f6:68: bc:18:d3:0f:22:5d:09:2e:86:be:49:d2:16:1d:3c:12:2a:af: f5:54:a0:aa:28:fc:73:fc:ba:b0:15:19:20:da:ee:27:88:5c: 76:25:a7:c7:0b:40:ba:81:6b:64:cf:e4:72:98:1e:c3:a3:d5: 92:82:80:fc:ec:69:a0:93:44:a4:7a:c7:ab:20:cc:b9:2c:4c: a8:95:c9:fa:a4:63:a3:23:05:4a:b5:12:09:e5:4a:4a:fd:2e: 83:b9:c9:e7:a5:a0:bb:e0:64:16:44:a3:a4:ae:4a:0d:57:a2: ed:6b:e7:94:35:e1:03:dc:ee:cb:99:cb:42:8b:87:c3:66:79: cd:06:0e:7f:03:4d:2b:0a:1c:2f:c4:cf:a6:b5:83:5f:8d:ee: 3c:b6:81:28:2b:14:3f:ef:41:c0:c2:01:76:b8:d5:2a:6e:7d: 2e:78:36:84:e7:5c:28:63:0b:31:fb:e1:76:f8:09:dd:0a:cc: 10:4f:a2:8d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB0wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDUzNkUxMTAvBgNVBAUTKEY3MzQzMzNCNUJCNTRGQkE4ODJCMjMyRkQyNTMyNTJF N0VBMEJCQzAwHhcNMjUwNjEwMjEzNDIyWhcNMjUwNjE3MjEzNDIyWjAYMRYwFAYD VQQDEw02ODQ4YTRkZS1kOGI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyaW2JPPPlsOkBw9eC2evN2zqzwlS2/+dsxONGAj6xEmGZ9JssMjg50YTnihp u0ReORtCFkfYDvgS4A0kewVTDJOoxCxx0/YuaekiyUz3jdtrCr/iX2FmTwDeqKJw wGfFVnp1N4Tj9CCAkNybY7P7+vCU5qzZS/X7Xb9YYWfFhMDtz/dfOfD5AZb94Us5 2H4ZtTW6GwVPpFLn93G5Soj/EAlbkk8nRjlyDmCnr030ABWf2saNBj05xCqF0Cov NCdNU/El9ad5gwEM8uRUS16DAnokLBR1WlGndV769O2d4r3UrrblwnbxbRB8//Rn Ph6UsYMXPKmLMWheh+K5QlquAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCodqwjJ 6t6s0FE7cNPwMiGsB4j2MB8GA1UdIwQYMBaAFPc0MztbtU+6iCsjL9JTJS5+oLvA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENTM2RS9BNkQ3NDhGQTI5 RkExMUVCQkM2NUFGN0RDNEY5QUUwMi85elF6TzF1MVQ3cUlLeU12MGxNbExuNmd1 OEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzl6UXpPMXUxVDdxSUt5TXYwbE1sTG42Z3U4QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NTM2RS9BNkQ3NDhGQTI5RkExMUVCQkM2NUFGN0RDNEY5QUUwMi85elF6TzF1MVQ3 cUlLeU12MGxNbExuNmd1OEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAB2aArUN2i+L+zhykYzXN85rhytGHjht9LE/mfAFj7tX+x3JyNzzFx ba+Y3/MiEEYjQ6XMfYEC5+lpu0mZSRxfYz42RdrY9mi8GNMPIl0JLoa+SdIWHTwS Kq/1VKCqKPxz/LqwFRkg2u4niFx2JafHC0C6gWtkz+RymB7Do9WSgoD87Gmgk0Sk eserIMy5LEyolcn6pGOjIwVKtRIJ5UpK/S6DucnnpaC74GQWRKOkrkoNV6Lta+eU NeED3O7LmctCi4fDZnnNBg5/A00rChwvxM+mtYNfje48toEoKxQ/70HAwgF2uNUq bn0ueDaE51woYwsx++F2+AndCswQT6KN -----END CERTIFICATE-----Generated at Thu Jun 12 14:00:55 2025 by rpki-client