$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8F57/4C59F966FEBA11E99ED9824CC4F9AE02/T-09NyGnirIEhs2vNKOuaRfYfL4.mft File: T-09NyGnirIEhs2vNKOuaRfYfL4.mft (raw, json) Hash identifier: 5u8s9HonPcbw/HvYWujWWCCEHO6EamjQGQ5cgbikh18= Subject key identifier: EB:A3:FE:C1:91:68:23:F1:67:A0:4E:54:D7:A6:9C:C4:3E:46:DD:09 Authority key identifier: 4F:ED:3D:37:21:A7:8A:B2:04:86:CD:AF:34:A3:AE:69:17:D8:7C:BE Certificate issuer: /CN=A91D8F57/serialNumber=4FED3D3721A78AB20486CDAF34A3AE6917D87CBE Certificate serial: 0C6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-09NyGnirIEhs2vNKOuaRfYfL4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D8F57/4C59F966FEBA11E99ED9824CC4F9AE02/T-09NyGnirIEhs2vNKOuaRfYfL4.mft Manifest number: 0C64 Signing time: Sat 31 May 2025 18:19:42 +0000 Manifest this update: Sat 31 May 2025 18:19:41 +0000 Manifest next update: Sat 07 Jun 2025 18:19:41 +0000 Files and hashes: 1: T-09NyGnirIEhs2vNKOuaRfYfL4.crl (hash: XiqUx5JP7tTwFjrsGL70jHFtKWl8QUvatZpgR0Mg1Sc=) 2: 21997AB0FEBC11E9B0463650C4F9AE02.roa (hash: UjvCEDYZnGIMs7cUk//riKADIcRlVC/6WW+32mEJgZ8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D8F57/4C59F966FEBA11E99ED9824CC4F9AE02/T-09NyGnirIEhs2vNKOuaRfYfL4.crl rsync://rpki.apnic.net/member_repository/A91D8F57/4C59F966FEBA11E99ED9824CC4F9AE02/T-09NyGnirIEhs2vNKOuaRfYfL4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-09NyGnirIEhs2vNKOuaRfYfL4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 18:19:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3179 (0xc6b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D8F57, serialNumber=4FED3D3721A78AB20486CDAF34A3AE6917D87CBE Validity Not Before: May 31 18:19:41 2025 GMT Not After : Jun 7 18:19:41 2025 GMT Subject: CN=683b483d-a733 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:e3:1a:85:25:97:42:e5:a7:65:46:10:08:e0: b0:86:65:35:74:72:22:a8:95:a6:6a:e4:11:65:ec: 49:df:8d:01:a9:f3:ee:36:d5:9c:8a:39:a8:b2:54: 39:68:8e:b9:f8:39:76:00:10:fb:54:aa:3d:ee:25: 69:32:b7:b2:5e:7f:9e:bb:d1:8d:78:38:0e:49:61: 49:0c:5e:73:51:93:0d:ab:60:c8:c7:94:80:58:5e: b7:a1:2c:b5:2f:9f:ee:82:ef:b0:b4:9f:82:53:f1: b0:1c:da:bb:05:ab:bb:67:ca:f0:dc:ac:b0:30:29: 37:02:b9:28:ce:1d:57:f2:8f:4a:d2:7e:2a:c2:ac: 8c:1f:aa:5a:60:c0:80:4c:d5:6a:37:ee:ad:a2:42: 28:eb:ca:90:b0:f9:68:8e:32:e5:d1:e1:8e:31:f2: 7e:66:ee:8a:d5:03:e0:09:6d:54:8b:dd:4a:20:c8: a4:04:b9:ca:17:62:c4:03:58:be:f5:64:54:48:b2: b8:20:f0:ee:1d:82:df:6e:2a:68:c2:e5:2f:be:6b: 6b:df:0a:f8:11:08:71:7f:65:12:a1:b7:67:02:f5: 02:40:32:72:9c:d2:f0:c6:32:b9:5a:a5:9b:07:70: 57:4e:c6:af:76:13:d4:cf:33:de:23:93:bc:d5:48: c9:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:A3:FE:C1:91:68:23:F1:67:A0:4E:54:D7:A6:9C:C4:3E:46:DD:09 X509v3 Authority Key Identifier: keyid:4F:ED:3D:37:21:A7:8A:B2:04:86:CD:AF:34:A3:AE:69:17:D8:7C:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D8F57/4C59F966FEBA11E99ED9824CC4F9AE02/T-09NyGnirIEhs2vNKOuaRfYfL4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-09NyGnirIEhs2vNKOuaRfYfL4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8F57/4C59F966FEBA11E99ED9824CC4F9AE02/T-09NyGnirIEhs2vNKOuaRfYfL4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d0:24:14:82:31:cc:b8:e2:b1:69:a9:75:94:f7:34:ec:3d:e4: 85:5a:4a:ad:c2:49:ef:92:c5:3d:95:c9:0e:56:e5:93:63:cb: 2f:68:03:46:68:c3:77:85:ba:e8:9f:99:c2:c0:a1:de:c3:65: a7:57:43:db:f2:4b:32:93:8d:95:20:6c:05:b9:51:25:f9:79: 06:25:29:03:30:29:8d:16:bc:20:f2:49:6b:22:e6:ff:02:83: 1e:94:d4:90:cd:20:83:66:09:0d:93:06:a2:1d:bd:01:60:18: 51:6a:70:1f:20:01:d5:d1:49:ac:8f:aa:ca:47:c7:94:f3:7f: 57:5a:63:4a:9e:81:b7:b0:ff:98:9d:c3:a7:98:ee:a9:64:ea: 02:bf:30:f1:ef:ea:1e:8f:23:db:a0:86:38:7b:f8:bb:24:9f: e9:1c:2d:b8:c2:99:60:ee:ef:34:58:f9:a5:82:64:33:e4:65: 3b:4b:c5:65:67:1a:b1:5d:a7:d4:bb:fb:f0:5b:d6:f2:b3:b7: d5:c2:b9:64:e9:11:4c:c5:7d:f8:b6:3e:17:9f:74:e6:1b:3d: 3c:36:b9:ab:ce:d2:5e:db:ae:59:72:de:1a:88:4f:a5:68:9d: 8f:d5:b5:6f:4d:57:eb:0b:45:09:3e:4b:1d:e5:74:b5:cf:54: 1a:30:2a:8b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDGswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDhGNTcxMTAvBgNVBAUTKDRGRUQzRDM3MjFBNzhBQjIwNDg2Q0RBRjM0QTNBRTY5 MTdEODdDQkUwHhcNMjUwNTMxMTgxOTQxWhcNMjUwNjA3MTgxOTQxWjAYMRYwFAYD VQQDEw02ODNiNDgzZC1hNzMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvOMahSWXQuWnZUYQCOCwhmU1dHIiqJWmauQRZexJ340BqfPuNtWcijmoslQ5 aI65+Dl2ABD7VKo97iVpMreyXn+eu9GNeDgOSWFJDF5zUZMNq2DIx5SAWF63oSy1 L5/ugu+wtJ+CU/GwHNq7Bau7Z8rw3KywMCk3Arkozh1X8o9K0n4qwqyMH6paYMCA TNVqN+6tokIo68qQsPlojjLl0eGOMfJ+Zu6K1QPgCW1Ui91KIMikBLnKF2LEA1i+ 9WRUSLK4IPDuHYLfbipowuUvvmtr3wr4EQhxf2USobdnAvUCQDJynNLwxjK5WqWb B3BXTsavdhPUzzPeI5O81UjJjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOuj/sGR aCPxZ6BOVNemnMQ+Rt0JMB8GA1UdIwQYMBaAFE/tPTchp4qyBIbNrzSjrmkX2Hy+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOEY1Ny80QzU5Rjk2NkZF QkExMUU5OUVEOTgyNENDNEY5QUUwMi9ULTA5TnlHbmlySUVoczJ2TktPdWFSZllm TDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1QtMDlOeUduaXJJRWhzMnZOS091YVJmWWZMNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OEY1Ny80QzU5Rjk2NkZFQkExMUU5OUVEOTgyNENDNEY5QUUwMi9ULTA5TnlHbmly SUVoczJ2TktPdWFSZllmTDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDQJBSCMcy44rFpqXWU9zTsPeSFWkqtwknvksU9lckOVuWTY8svaANG aMN3hbron5nCwKHew2WnV0Pb8ksyk42VIGwFuVEl+XkGJSkDMCmNFrwg8klrIub/ AoMelNSQzSCDZgkNkwaiHb0BYBhRanAfIAHV0Umsj6rKR8eU839XWmNKnoG3sP+Y ncOnmO6pZOoCvzDx7+oejyPboIY4e/i7JJ/pHC24wplg7u80WPmlgmQz5GU7S8Vl ZxqxXafUu/vwW9bys7fVwrlk6RFMxX34tj4Xn3TmGz08NrmrztJe265Zct4aiE+l aJ2P1bVvTVfrC0UJPksd5XS1z1QaMCqL -----END CERTIFICATE-----Generated at Mon Jun 2 06:34:53 2025 by rpki-client