$ rpki-client -vvf rpki.apnic.net/member_repository/A91DBC93/8FB48BB6537011E696BAC815C4F9AE02/-J0aOgEq7dJ69ICrnjbpKOaPiUI.mft File: -J0aOgEq7dJ69ICrnjbpKOaPiUI.mft (raw, json) Hash identifier: 9+Hi4t7eV0Oa6m/YZqvW0mh1gsHJl/tQoFtP++5O20c= Subject key identifier: C9:76:B9:D3:F2:3A:03:25:35:0A:17:6B:73:0E:57:43:D4:10:FA:42 Authority key identifier: F8:9D:1A:3A:01:2A:ED:D2:7A:F4:80:AB:9E:36:E9:28:E6:8F:89:42 Certificate issuer: /CN=A91DBC93/serialNumber=F89D1A3A012AEDD27AF480AB9E36E928E68F8942 Certificate serial: 1F14 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-J0aOgEq7dJ69ICrnjbpKOaPiUI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DBC93/8FB48BB6537011E696BAC815C4F9AE02/-J0aOgEq7dJ69ICrnjbpKOaPiUI.mft Manifest number: 1F14 Signing time: Tue 10 Jun 2025 16:01:34 +0000 Manifest this update: Tue 10 Jun 2025 16:01:34 +0000 Manifest next update: Tue 17 Jun 2025 16:01:34 +0000 Files and hashes: 1: -J0aOgEq7dJ69ICrnjbpKOaPiUI.crl (hash: U6w6QSyZmMUvw+hkD8OBCaPzKGxhBElUcX1Hs4msrqU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DBC93/8FB48BB6537011E696BAC815C4F9AE02/-J0aOgEq7dJ69ICrnjbpKOaPiUI.crl rsync://rpki.apnic.net/member_repository/A91DBC93/8FB48BB6537011E696BAC815C4F9AE02/-J0aOgEq7dJ69ICrnjbpKOaPiUI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-J0aOgEq7dJ69ICrnjbpKOaPiUI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 17 Jun 2025 16:01:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7956 (0x1f14) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DBC93, serialNumber=F89D1A3A012AEDD27AF480AB9E36E928E68F8942 Validity Not Before: Jun 10 16:01:34 2025 GMT Not After : Jun 17 16:01:34 2025 GMT Subject: CN=684856de-67b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:c8:a9:db:30:dc:5f:86:f4:03:d4:fe:d9:12: 61:63:81:b9:d6:6c:f8:87:19:44:ee:04:b5:e9:4a: 6d:69:7d:8b:eb:04:be:cf:89:85:46:c1:69:59:9f: 9b:53:23:89:14:a7:d3:9e:14:5c:f3:40:db:10:c8: 62:07:a0:37:6f:ee:d3:d0:f1:7c:6e:4a:ff:ce:fa: 24:65:7c:bc:e3:2d:4e:96:5b:b2:c2:eb:23:09:14: 32:81:b7:a4:1b:60:e9:26:7d:f7:72:31:11:46:ec: 58:09:1d:a4:a9:b3:f3:39:83:f5:03:ba:ad:50:2a: 45:ce:a3:41:db:72:85:31:7d:ed:f8:31:2a:f8:d2: d9:b3:39:6f:40:b8:74:f6:9d:ee:e6:0f:3b:4b:0b: 53:1e:30:d8:d1:1d:3d:3f:ad:ec:99:c3:27:8c:ed: f4:fe:dc:1f:df:04:68:88:de:22:a0:4e:20:c0:39: a3:a7:38:db:90:5b:24:ca:15:bd:a4:d2:db:4f:fa: 52:e6:f0:df:07:d4:88:f9:03:72:96:80:d5:15:87: 8f:0b:fc:40:25:48:b1:ab:33:65:46:d4:b7:b8:98: 1d:4e:4c:51:e3:4b:0e:aa:39:aa:d7:7c:91:be:36: 77:46:d7:42:c3:04:bd:9a:b7:da:2d:6a:f3:47:e0: c4:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:76:B9:D3:F2:3A:03:25:35:0A:17:6B:73:0E:57:43:D4:10:FA:42 X509v3 Authority Key Identifier: keyid:F8:9D:1A:3A:01:2A:ED:D2:7A:F4:80:AB:9E:36:E9:28:E6:8F:89:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DBC93/8FB48BB6537011E696BAC815C4F9AE02/-J0aOgEq7dJ69ICrnjbpKOaPiUI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-J0aOgEq7dJ69ICrnjbpKOaPiUI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBC93/8FB48BB6537011E696BAC815C4F9AE02/-J0aOgEq7dJ69ICrnjbpKOaPiUI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:2c:a1:ea:4b:62:d1:b8:72:1e:ad:ef:78:77:4c:a8:7c:05: 08:40:11:40:51:c4:c0:c7:eb:0f:95:27:98:ed:77:43:98:4c: 69:1c:09:c0:29:c2:f8:21:f9:6a:fd:5a:e7:61:75:6a:24:52: bb:88:fc:53:cc:8e:3c:d9:d8:59:67:cd:33:8e:f2:7d:9b:df: 4f:a4:63:e9:d5:76:8d:d0:9e:1c:39:f2:1b:a8:19:c6:5b:af: 62:5c:1a:dd:1a:65:c9:2f:8e:7e:68:3e:ca:1b:3a:69:27:f7: 0b:73:2a:87:f5:08:a8:bb:ad:a5:e4:6c:0c:ce:a1:33:cf:91: 81:8b:a5:2a:21:a1:f4:58:9c:f6:8a:02:77:55:00:15:59:87: 2b:b8:3f:8d:2a:4f:48:8a:87:0f:74:e8:fd:c0:74:8d:02:9b: 15:ed:42:18:03:ff:02:6a:ad:f3:34:df:82:bd:ef:74:74:60: dd:da:59:66:8f:a2:66:c4:a5:1c:1e:67:07:ef:eb:e3:2f:7e: 85:1e:31:fe:72:52:91:86:f4:b6:86:e3:a7:d0:cd:43:ca:4b: 47:06:25:87:26:f9:52:7e:a6:d2:a9:84:a3:51:b3:6b:9b:0c: f0:27:1e:78:69:96:c3:45:09:20:fc:41:b0:5e:d3:dd:e5:e6: 34:40:23:2d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHxQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REJDOTMxMTAvBgNVBAUTKEY4OUQxQTNBMDEyQUVERDI3QUY0ODBBQjlFMzZFOTI4 RTY4Rjg5NDIwHhcNMjUwNjEwMTYwMTM0WhcNMjUwNjE3MTYwMTM0WjAYMRYwFAYD VQQDEw02ODQ4NTZkZS02N2I5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAncip2zDcX4b0A9T+2RJhY4G51mz4hxlE7gS16UptaX2L6wS+z4mFRsFpWZ+b UyOJFKfTnhRc80DbEMhiB6A3b+7T0PF8bkr/zvokZXy84y1OlluywusjCRQygbek G2DpJn33cjERRuxYCR2kqbPzOYP1A7qtUCpFzqNB23KFMX3t+DEq+NLZszlvQLh0 9p3u5g87SwtTHjDY0R09P63smcMnjO30/twf3wRoiN4ioE4gwDmjpzjbkFskyhW9 pNLbT/pS5vDfB9SI+QNyloDVFYePC/xAJUixqzNlRtS3uJgdTkxR40sOqjmq13yR vjZ3RtdCwwS9mrfaLWrzR+DEYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMl2udPy OgMlNQoXa3MOV0PUEPpCMB8GA1UdIwQYMBaAFPidGjoBKu3SevSAq5426Sjmj4lC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQkM5My84RkI0OEJCNjUz NzAxMUU2OTZCQUM4MTVDNEY5QUUwMi8tSjBhT2dFcTdkSjY5SUNybmpicEtPYVBp VUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1KMGFPZ0VxN2RKNjlJQ3JuamJwS09hUGlVSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QkM5My84RkI0OEJCNjUzNzAxMUU2OTZCQUM4MTVDNEY5QUUwMi8tSjBhT2dFcTdk SjY5SUNybmpicEtPYVBpVUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCVLKHqS2LRuHIere94d0yofAUIQBFAUcTAx+sPlSeY7XdDmExpHAnA KcL4Iflq/VrnYXVqJFK7iPxTzI482dhZZ80zjvJ9m99PpGPp1XaN0J4cOfIbqBnG W69iXBrdGmXJL45+aD7KGzppJ/cLcyqH9Qiou62l5GwMzqEzz5GBi6UqIaH0WJz2 igJ3VQAVWYcruD+NKk9IiocPdOj9wHSNApsV7UIYA/8Caq3zNN+Cve90dGDd2llm j6JmxKUcHmcH7+vjL36FHjH+clKRhvS2huOn0M1DyktHBiWHJvlSfqbSqYSjUbNr mwzwJx54aZbDRQkg/EGwXtPd5eY0QCMt -----END CERTIFICATE-----Generated at Tue Jun 10 19:25:16 2025 by rpki-client