$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB6F8/562C3CB4724E11ED8E20673EC4F9AE02/I3t9TKhKJtX8SVjUgZHzahS8ei8.mft File: I3t9TKhKJtX8SVjUgZHzahS8ei8.mft (raw, json) Hash identifier: WZdiMmgTex2jHoToqyxGBWzqtHgPZ3nlozI0qxxmcNQ= Subject key identifier: 0D:A8:B2:26:97:6C:DE:B1:F3:13:7C:B4:2C:BF:E6:97:E9:B9:1F:D0 Authority key identifier: 23:7B:7D:4C:A8:4A:26:D5:FC:49:58:D4:81:91:F3:6A:14:BC:7A:2F Certificate issuer: /CN=A91DB6F8/serialNumber=237B7D4CA84A26D5FC4958D48191F36A14BC7A2F Certificate serial: 01F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I3t9TKhKJtX8SVjUgZHzahS8ei8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB6F8/562C3CB4724E11ED8E20673EC4F9AE02/I3t9TKhKJtX8SVjUgZHzahS8ei8.mft Manifest number: 01E4 Signing time: Mon 09 Jun 2025 01:55:37 +0000 Manifest this update: Mon 09 Jun 2025 01:55:37 +0000 Manifest next update: Mon 16 Jun 2025 01:55:37 +0000 Files and hashes: 1: I3t9TKhKJtX8SVjUgZHzahS8ei8.crl (hash: gir6CCcMajKe8hkXvoqToK4YeIA7P1UnPg2w0yHosQ0=) 2: CC863C00AAC011EF8A637D09C4F9AE02.roa (hash: 0d8EDj7p85g61PO4rxhm2YW85ofVuKXgCa1+1ENa/7s=) 3: B76665B6AAC011EFBC479E79C4F9AE02.roa (hash: ebFVZb24qzMOclquLEvNefeGPzln4MMRSWx20kkSl4I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB6F8/562C3CB4724E11ED8E20673EC4F9AE02/I3t9TKhKJtX8SVjUgZHzahS8ei8.crl rsync://rpki.apnic.net/member_repository/A91DB6F8/562C3CB4724E11ED8E20673EC4F9AE02/I3t9TKhKJtX8SVjUgZHzahS8ei8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I3t9TKhKJtX8SVjUgZHzahS8ei8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Jun 2025 01:55:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 497 (0x1f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB6F8, serialNumber=237B7D4CA84A26D5FC4958D48191F36A14BC7A2F Validity Not Before: Jun 9 01:55:37 2025 GMT Not After : Jun 16 01:55:37 2025 GMT Subject: CN=68463f19-f402 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:18:75:41:00:9e:ab:4d:e4:b6:a9:7b:4f:3f: e7:45:c3:d3:76:1d:71:d7:8a:4a:12:cf:36:7d:37: a2:c1:c9:d7:76:63:4f:44:1d:b9:91:73:25:3b:e4: 1f:a1:67:23:67:51:d3:50:17:5b:5d:ef:1d:17:77: c0:21:99:28:c8:37:71:7a:8a:e6:bc:15:b7:07:69: b4:fc:e9:a9:5a:7d:87:1d:1f:a5:64:33:3d:36:b4: 35:0d:0d:92:69:ba:5b:a8:3a:d3:f3:19:80:06:4e: a6:a6:0c:b6:34:1c:67:03:97:5d:a6:03:d9:1a:f8: 66:f9:29:bf:db:b5:ef:35:bb:0d:5b:22:eb:46:b7: 0d:df:30:7e:c6:7c:6b:21:46:b1:ea:1b:c3:86:e1: e8:1d:86:88:03:ac:c9:0f:de:e3:ae:1c:4b:be:54: 98:3b:61:d2:2b:58:eb:9f:aa:b3:72:f1:fc:3e:09: 9f:c3:c1:fa:d8:fd:12:9a:a1:2f:2e:cf:77:e7:2c: 5a:89:0b:c0:07:fb:12:25:f0:4f:b6:9e:bf:f8:c0: a0:c2:97:c0:77:cb:62:88:f0:d0:52:94:f5:5d:29: 0f:c2:9c:df:f4:63:96:78:e8:de:04:10:07:f8:18: c8:eb:4a:cc:91:31:45:eb:94:ca:12:b6:80:80:34: 38:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:A8:B2:26:97:6C:DE:B1:F3:13:7C:B4:2C:BF:E6:97:E9:B9:1F:D0 X509v3 Authority Key Identifier: keyid:23:7B:7D:4C:A8:4A:26:D5:FC:49:58:D4:81:91:F3:6A:14:BC:7A:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB6F8/562C3CB4724E11ED8E20673EC4F9AE02/I3t9TKhKJtX8SVjUgZHzahS8ei8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I3t9TKhKJtX8SVjUgZHzahS8ei8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB6F8/562C3CB4724E11ED8E20673EC4F9AE02/I3t9TKhKJtX8SVjUgZHzahS8ei8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:7c:1b:84:a6:ea:df:88:54:44:e1:62:2d:58:6c:9f:d9:64: 46:ae:4b:71:5a:7b:1f:d6:3e:3c:31:48:30:3e:d6:25:82:a0: 61:d6:c8:ac:e4:09:d7:7d:ae:eb:b8:c1:65:e0:c0:bf:de:60: c6:1c:7b:65:31:a8:ba:1f:70:b6:80:6c:df:52:a3:25:d3:3e: 8e:0b:1e:84:63:7a:16:c6:14:5a:ca:22:5c:11:f9:12:aa:87: 58:bf:2f:4e:ac:4a:c2:57:c4:07:8c:01:58:35:68:ff:90:2e: c2:be:3d:37:44:33:ad:13:9d:df:a7:49:d7:ec:d3:ba:27:dd: df:ca:72:45:24:56:ef:28:5f:a2:e7:43:24:53:9d:fa:64:81: a8:d7:db:89:73:0c:22:e9:04:c3:d1:53:8c:98:e9:65:d5:51: 4f:53:64:7d:08:72:90:58:b2:28:33:ff:6f:e4:e0:cd:25:66: 0a:e0:81:0e:2d:3d:f1:a2:7a:aa:b4:1f:0b:76:a8:4e:75:7b: f3:d3:18:c1:37:23:e9:11:c9:88:60:87:ed:1c:23:af:10:9c: 15:98:17:c8:4d:a4:27:5e:c1:47:56:12:ff:0b:33:52:0b:23: e5:97:c9:23:ad:e9:73:9d:47:94:5f:78:d4:5b:45:16:a2:16: 4a:5d:51:40 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REI2RjgxMTAvBgNVBAUTKDIzN0I3RDRDQTg0QTI2RDVGQzQ5NThENDgxOTFGMzZB MTRCQzdBMkYwHhcNMjUwNjA5MDE1NTM3WhcNMjUwNjE2MDE1NTM3WjAYMRYwFAYD VQQDEw02ODQ2M2YxOS1mNDAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqxh1QQCeq03ktql7Tz/nRcPTdh1x14pKEs82fTeiwcnXdmNPRB25kXMlO+Qf oWcjZ1HTUBdbXe8dF3fAIZkoyDdxeormvBW3B2m0/OmpWn2HHR+lZDM9NrQ1DQ2S abpbqDrT8xmABk6mpgy2NBxnA5ddpgPZGvhm+Sm/27XvNbsNWyLrRrcN3zB+xnxr IUax6hvDhuHoHYaIA6zJD97jrhxLvlSYO2HSK1jrn6qzcvH8Pgmfw8H62P0SmqEv Ls935yxaiQvAB/sSJfBPtp6/+MCgwpfAd8tiiPDQUpT1XSkPwpzf9GOWeOjeBBAH +BjI60rMkTFF65TKEraAgDQ4SwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA2osiaX bN6x8xN8tCy/5pfpuR/QMB8GA1UdIwQYMBaAFCN7fUyoSibV/ElY1IGR82oUvHov MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjZGOC81NjJDM0NCNDcy NEUxMUVEOEUyMDY3M0VDNEY5QUUwMi9JM3Q5VEtoS0p0WDhTVmpVZ1pIemFoUzhl aTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0kzdDlUS2hLSnRYOFNWalVnWkh6YWhTOGVpOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QjZGOC81NjJDM0NCNDcyNEUxMUVEOEUyMDY3M0VDNEY5QUUwMi9JM3Q5VEtoS0p0 WDhTVmpVZ1pIemFoUzhlaTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAFfBuEpurfiFRE4WItWGyf2WRGrktxWnsf1j48MUgwPtYlgqBh1sis 5AnXfa7ruMFl4MC/3mDGHHtlMai6H3C2gGzfUqMl0z6OCx6EY3oWxhRayiJcEfkS qodYvy9OrErCV8QHjAFYNWj/kC7Cvj03RDOtE53fp0nX7NO6J93fynJFJFbvKF+i 50MkU536ZIGo19uJcwwi6QTD0VOMmOll1VFPU2R9CHKQWLIoM/9v5ODNJWYK4IEO LT3xonqqtB8LdqhOdXvz0xjBNyPpEcmIYIftHCOvEJwVmBfITaQnXsFHVhL/CzNS CyPll8kjrelznUeUX3jUW0UWohZKXVFA -----END CERTIFICATE-----Generated at Wed Jun 11 00:39:36 2025 by rpki-client