$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF8DB/6579378C993411E8A0373724C4F9AE02/l9KbDTJFW7XG8SV4X0D1vCcJ99Q.mft File: l9KbDTJFW7XG8SV4X0D1vCcJ99Q.mft (raw, json) Hash identifier: DPUnKuKFWde7+91VP6EjAQqjDSqHaKQdbx1ajNvATaI= Subject key identifier: C7:13:2B:9F:F3:4B:50:4D:2D:61:9B:BB:55:BB:9B:16:51:7A:4A:E5 Authority key identifier: 97:D2:9B:0D:32:45:5B:B5:C6:F1:25:78:5F:40:F5:BC:27:09:F7:D4 Certificate issuer: /CN=A91DF8DB/serialNumber=97D29B0D32455BB5C6F125785F40F5BC2709F7D4 Certificate serial: 138B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9KbDTJFW7XG8SV4X0D1vCcJ99Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF8DB/6579378C993411E8A0373724C4F9AE02/l9KbDTJFW7XG8SV4X0D1vCcJ99Q.mft Manifest number: 1383 Signing time: Fri 06 Jun 2025 17:00:09 +0000 Manifest this update: Fri 06 Jun 2025 17:00:08 +0000 Manifest next update: Fri 13 Jun 2025 17:00:08 +0000 Files and hashes: 1: l9KbDTJFW7XG8SV4X0D1vCcJ99Q.crl (hash: VSOGPd1UdvekIfNTK43igesIXQ1TyYQRngGHD0O5+OU=) 2: A6C9934CA74111E88B3EAB2BC4F9AE02.roa (hash: YR3r/r5s57l7vc1QAVpusxxc4M0J/72ZS6UJiTG3pTc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF8DB/6579378C993411E8A0373724C4F9AE02/l9KbDTJFW7XG8SV4X0D1vCcJ99Q.crl rsync://rpki.apnic.net/member_repository/A91DF8DB/6579378C993411E8A0373724C4F9AE02/l9KbDTJFW7XG8SV4X0D1vCcJ99Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9KbDTJFW7XG8SV4X0D1vCcJ99Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 13 Jun 2025 17:00:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5003 (0x138b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF8DB, serialNumber=97D29B0D32455BB5C6F125785F40F5BC2709F7D4 Validity Not Before: Jun 6 17:00:08 2025 GMT Not After : Jun 13 17:00:08 2025 GMT Subject: CN=68431e98-273b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:f4:1d:7e:62:5b:1a:ab:a4:53:67:da:aa:d3: 4b:ac:af:78:b4:25:27:1a:12:12:e2:53:26:87:a6: 66:26:5b:9f:4d:51:9b:5e:f4:b5:1a:da:f7:da:63: 0a:a7:70:d7:59:e8:37:c0:e1:f3:8e:6c:31:02:5c: 12:dc:a5:12:b8:f3:1d:28:7e:25:dc:e6:b2:47:b1: bc:1a:39:a8:dd:22:80:c9:4a:24:e2:d4:ce:74:88: 49:0a:61:db:ca:f8:9b:b1:81:fb:65:6e:a2:78:dc: 2e:33:74:3b:be:5f:61:dd:2a:11:0d:72:f5:27:a3: 4d:9f:f5:f6:40:3e:54:8c:5d:e2:b1:03:42:ed:ce: ce:ff:00:df:0b:d6:d4:e7:74:89:1b:06:b8:ff:23: 51:f4:a7:81:39:0e:2f:8f:d0:b2:57:11:47:12:f8: 4e:6c:80:80:62:6c:cc:c0:e0:56:c5:87:26:a1:fb: 01:e4:2a:33:a4:5a:56:c0:3d:ee:2f:96:8b:30:f6: d7:87:27:14:b3:78:a7:ab:25:94:e4:e5:43:02:42: 66:8d:03:ad:4c:90:59:7b:bf:b8:d3:5f:02:59:03: 19:77:61:38:63:91:78:18:b0:53:c7:22:0b:ca:c0: 02:2c:61:69:e8:9b:6e:fc:40:1b:90:43:fc:42:de: f0:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:13:2B:9F:F3:4B:50:4D:2D:61:9B:BB:55:BB:9B:16:51:7A:4A:E5 X509v3 Authority Key Identifier: keyid:97:D2:9B:0D:32:45:5B:B5:C6:F1:25:78:5F:40:F5:BC:27:09:F7:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF8DB/6579378C993411E8A0373724C4F9AE02/l9KbDTJFW7XG8SV4X0D1vCcJ99Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9KbDTJFW7XG8SV4X0D1vCcJ99Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF8DB/6579378C993411E8A0373724C4F9AE02/l9KbDTJFW7XG8SV4X0D1vCcJ99Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:f8:0a:d1:0c:89:65:b9:44:7b:34:8b:dd:57:d5:6f:9e:95: 0e:9b:91:60:a5:e7:f3:10:54:53:ec:df:1c:a8:cc:ab:1e:c0: e5:51:09:06:b9:08:0a:2d:82:5d:fc:09:35:f6:a9:6e:8c:49: d6:18:58:e3:9d:2a:7b:39:cd:a9:8d:34:91:bf:71:61:7c:13: 9a:14:b8:8b:23:56:c2:3e:09:de:70:c6:65:5b:b8:3e:31:53: e4:a0:4c:11:02:eb:a3:37:a6:46:e4:a9:64:f5:11:5c:d6:cd: e8:4b:e7:6d:3c:ab:47:c6:22:fd:a4:a5:75:81:91:d9:f9:67: 37:b0:d8:f6:0e:ed:db:b1:f2:2a:64:ea:08:25:f7:d5:9e:ab: d9:dd:e4:12:0a:3f:9f:52:0a:7f:c4:65:9c:d8:04:a1:70:8c: 92:f2:a5:e5:c8:ee:c7:96:a5:2a:c7:c2:16:fa:3e:7d:8f:a9: 4e:8c:b7:dd:96:69:1d:54:4f:a1:30:44:79:13:98:e5:1d:da: dc:b0:0a:b5:86:e4:dd:0b:8d:7f:1a:d9:dc:80:c9:40:31:f0: d7:92:4b:b3:6f:a3:b3:d8:b4:66:0a:5f:d3:df:37:a9:37:be: 7b:61:09:7f:f3:5c:0a:0b:3a:c4:a1:50:73:d9:ef:18:92:a5: 88:ab:81:c9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICE4swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REY4REIxMTAvBgNVBAUTKDk3RDI5QjBEMzI0NTVCQjVDNkYxMjU3ODVGNDBGNUJD MjcwOUY3RDQwHhcNMjUwNjA2MTcwMDA4WhcNMjUwNjEzMTcwMDA4WjAYMRYwFAYD VQQDEw02ODQzMWU5OC0yNzNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs/QdfmJbGqukU2faqtNLrK94tCUnGhIS4lMmh6ZmJlufTVGbXvS1Gtr32mMK p3DXWeg3wOHzjmwxAlwS3KUSuPMdKH4l3OayR7G8Gjmo3SKAyUok4tTOdIhJCmHb yvibsYH7ZW6ieNwuM3Q7vl9h3SoRDXL1J6NNn/X2QD5UjF3isQNC7c7O/wDfC9bU 53SJGwa4/yNR9KeBOQ4vj9CyVxFHEvhObICAYmzMwOBWxYcmofsB5CozpFpWwD3u L5aLMPbXhycUs3inqyWU5OVDAkJmjQOtTJBZe7+4018CWQMZd2E4Y5F4GLBTxyIL ysACLGFp6Jtu/EAbkEP8Qt7wSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMcTK5/z S1BNLWGbu1W7mxZRekrlMB8GA1UdIwQYMBaAFJfSmw0yRVu1xvEleF9A9bwnCffU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjhEQi82NTc5Mzc4Qzk5 MzQxMUU4QTAzNzM3MjRDNEY5QUUwMi9sOUtiRFRKRlc3WEc4U1Y0WDBEMXZDY0o5 OVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2w5S2JEVEpGVzdYRzhTVjRYMEQxdkNjSjk5US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RjhEQi82NTc5Mzc4Qzk5MzQxMUU4QTAzNzM3MjRDNEY5QUUwMi9sOUtiRFRKRlc3 WEc4U1Y0WDBEMXZDY0o5OVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBA+ArRDIlluUR7NIvdV9VvnpUOm5FgpefzEFRT7N8cqMyrHsDlUQkG uQgKLYJd/Ak19qlujEnWGFjjnSp7Oc2pjTSRv3FhfBOaFLiLI1bCPgnecMZlW7g+ MVPkoEwRAuujN6ZG5Klk9RFc1s3oS+dtPKtHxiL9pKV1gZHZ+Wc3sNj2Du3bsfIq ZOoIJffVnqvZ3eQSCj+fUgp/xGWc2AShcIyS8qXlyO7HlqUqx8IW+j59j6lOjLfd lmkdVE+hMER5E5jlHdrcsAq1huTdC41/GtncgMlAMfDXkkuzb6Oz2LRmCl/T3zep N757YQl/81wKCzrEoVBz2e8YkqWIq4HJ -----END CERTIFICATE-----Generated at Sat Jun 7 06:13:39 2025 by rpki-client