$ rpki-client -vvf rpki.apnic.net/member_repository/A91E00FC/55F2C4C67F2F11EAADF4BF6AC4F9AE02/S9mZS8XP-ey2aDyU3G7s1e7uDng.mft File: S9mZS8XP-ey2aDyU3G7s1e7uDng.mft (raw, json) Hash identifier: I4HsO+YHJjoV+IfkU0+uelmWXW6yVN67n/7d1iSgnoM= Subject key identifier: 88:5B:A8:C7:91:40:E4:06:4C:54:97:0D:82:B9:EB:27:B3:7E:5B:5D Authority key identifier: 4B:D9:99:4B:C5:CF:F9:EC:B6:68:3C:94:DC:6E:EC:D5:EE:EE:0E:78 Certificate issuer: /CN=A91E00FC/serialNumber=4BD9994BC5CFF9ECB6683C94DC6EECD5EEEE0E78 Certificate serial: 09F4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/S9mZS8XP-ey2aDyU3G7s1e7uDng.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E00FC/55F2C4C67F2F11EAADF4BF6AC4F9AE02/S9mZS8XP-ey2aDyU3G7s1e7uDng.mft Manifest number: 09E7 Signing time: Fri 06 Jun 2025 19:59:29 +0000 Manifest this update: Fri 06 Jun 2025 19:59:29 +0000 Manifest next update: Fri 13 Jun 2025 19:59:29 +0000 Files and hashes: 1: S9mZS8XP-ey2aDyU3G7s1e7uDng.crl (hash: Q6Ltdv/3ADPLPz1QEqaJhAUIjcvcgwl6R8zDFLy9xcI=) 2: CD26CAC0431611EE80B53A75C4F9AE02.roa (hash: r8n2MjMUHYmVdEJ+7Xp+vud9daXi0fU7s6dyyzC3DT4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E00FC/55F2C4C67F2F11EAADF4BF6AC4F9AE02/S9mZS8XP-ey2aDyU3G7s1e7uDng.crl rsync://rpki.apnic.net/member_repository/A91E00FC/55F2C4C67F2F11EAADF4BF6AC4F9AE02/S9mZS8XP-ey2aDyU3G7s1e7uDng.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/S9mZS8XP-ey2aDyU3G7s1e7uDng.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 13 Jun 2025 19:59:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2548 (0x9f4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E00FC, serialNumber=4BD9994BC5CFF9ECB6683C94DC6EECD5EEEE0E78 Validity Not Before: Jun 6 19:59:29 2025 GMT Not After : Jun 13 19:59:29 2025 GMT Subject: CN=684348a1-c8f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:e8:49:ac:87:8c:f1:cd:f4:ff:ae:53:ec:27: 38:a5:94:c8:b3:2e:83:c2:12:5a:b1:e9:c3:29:36: 8b:84:30:42:f4:c4:e3:af:ef:cd:1e:84:dc:aa:c6: 36:82:81:6d:60:e5:71:7a:cd:b6:b7:6e:43:a7:a6: 4e:67:bd:25:ea:62:50:02:52:4c:6c:db:06:70:41: 3c:e8:76:ab:04:1b:b7:e0:39:79:95:26:fc:dc:35: ec:c6:45:0a:7c:b0:1f:f4:ce:58:fa:9d:f2:c4:51: 9c:c8:19:c4:df:4b:d2:61:c1:da:fc:1f:0f:cf:8e: e2:a4:08:74:3f:2b:cb:1d:b3:07:72:e8:b3:1d:2f: e1:2d:70:e6:f6:91:e4:1b:ff:db:9b:b8:b4:93:02: d5:1c:7b:85:29:c8:02:34:d0:d0:a8:9f:4c:17:18: 08:70:0b:8a:80:47:4d:00:e1:e0:47:38:3e:72:6a: bb:d8:7a:c4:4e:f2:c1:1d:75:3f:fd:36:9d:43:4f: 33:f0:2d:89:b5:15:5d:b8:7e:58:ad:bd:eb:58:e3: a0:c3:fe:c2:36:31:5f:66:f5:fd:f7:2e:74:1e:6f: 25:33:69:d1:9c:50:1e:80:2a:40:ff:0d:af:8a:43: a6:17:3b:14:5a:18:72:19:52:13:bd:ae:5a:c2:d3: 52:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:5B:A8:C7:91:40:E4:06:4C:54:97:0D:82:B9:EB:27:B3:7E:5B:5D X509v3 Authority Key Identifier: keyid:4B:D9:99:4B:C5:CF:F9:EC:B6:68:3C:94:DC:6E:EC:D5:EE:EE:0E:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E00FC/55F2C4C67F2F11EAADF4BF6AC4F9AE02/S9mZS8XP-ey2aDyU3G7s1e7uDng.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/S9mZS8XP-ey2aDyU3G7s1e7uDng.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E00FC/55F2C4C67F2F11EAADF4BF6AC4F9AE02/S9mZS8XP-ey2aDyU3G7s1e7uDng.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:7d:ea:7e:b9:56:b5:49:4e:75:e9:bd:1c:f0:16:f2:5a:2f: 5a:93:98:ad:15:ad:eb:3c:03:e5:40:3c:0e:bc:4f:6f:d3:23: 63:3b:2b:86:60:22:b5:03:a9:10:10:90:a9:6e:34:90:92:39: 73:ad:bc:90:4c:44:3c:d6:4d:08:ff:b4:06:63:c1:35:d6:00: ee:9f:99:0e:68:9c:6d:33:b0:08:6d:c3:24:a6:2e:93:25:df: 34:33:86:8d:8a:67:78:d0:5d:c1:8e:ba:ae:a1:6d:ea:06:fc: 91:02:8c:85:cb:ce:47:db:f0:5e:40:2b:80:97:5f:19:63:68: f5:68:71:59:b0:e9:40:1a:7b:8b:3f:17:e5:9f:ae:47:fb:a0: 79:67:ce:3e:cc:45:23:cf:49:d0:81:47:ab:8d:02:66:be:7b: 24:1b:62:b6:6c:34:25:72:e6:c2:81:51:de:4d:cb:b3:4b:ce: 41:b4:0a:c3:2c:7e:7b:36:12:2f:af:4a:5a:2f:27:81:6e:e1: 52:a6:5f:23:7b:c9:4b:f2:ff:86:ce:63:fe:b5:72:ec:21:32: 4d:0c:15:4f:ea:b6:f0:d8:db:44:50:a0:5c:43:8e:bb:a0:0e: f5:f4:8a:5d:e7:df:19:43:e2:72:25:cb:15:41:37:64:15:36: f0:e3:1e:af -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCfQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTAwRkMxMTAvBgNVBAUTKDRCRDk5OTRCQzVDRkY5RUNCNjY4M0M5NERDNkVFQ0Q1 RUVFRTBFNzgwHhcNMjUwNjA2MTk1OTI5WhcNMjUwNjEzMTk1OTI5WjAYMRYwFAYD VQQDEw02ODQzNDhhMS1jOGY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzOhJrIeM8c30/65T7Cc4pZTIsy6DwhJasenDKTaLhDBC9MTjr+/NHoTcqsY2 goFtYOVxes22t25Dp6ZOZ70l6mJQAlJMbNsGcEE86HarBBu34Dl5lSb83DXsxkUK fLAf9M5Y+p3yxFGcyBnE30vSYcHa/B8Pz47ipAh0PyvLHbMHcuizHS/hLXDm9pHk G//bm7i0kwLVHHuFKcgCNNDQqJ9MFxgIcAuKgEdNAOHgRzg+cmq72HrETvLBHXU/ /TadQ08z8C2JtRVduH5Yrb3rWOOgw/7CNjFfZvX99y50Hm8lM2nRnFAegCpA/w2v ikOmFzsUWhhyGVITva5awtNSpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIhbqMeR QOQGTFSXDYK56yezfltdMB8GA1UdIwQYMBaAFEvZmUvFz/nstmg8lNxu7NXu7g54 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMDBGQy81NUYyQzRDNjdG MkYxMUVBQURGNEJGNkFDNEY5QUUwMi9TOW1aUzhYUC1leTJhRHlVM0c3czFlN3VE bmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1M5bVpTOFhQLWV5MmFEeVUzRzdzMWU3dURuZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MDBGQy81NUYyQzRDNjdGMkYxMUVBQURGNEJGNkFDNEY5QUUwMi9TOW1aUzhYUC1l eTJhRHlVM0c3czFlN3VEbmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBwfep+uVa1SU516b0c8BbyWi9ak5itFa3rPAPlQDwOvE9v0yNjOyuG YCK1A6kQEJCpbjSQkjlzrbyQTEQ81k0I/7QGY8E11gDun5kOaJxtM7AIbcMkpi6T Jd80M4aNimd40F3BjrquoW3qBvyRAoyFy85H2/BeQCuAl18ZY2j1aHFZsOlAGnuL Pxfln65H+6B5Z84+zEUjz0nQgUerjQJmvnskG2K2bDQlcubCgVHeTcuzS85BtArD LH57NhIvr0paLyeBbuFSpl8je8lL8v+GzmP+tXLsITJNDBVP6rbw2NtEUKBcQ467 oA719Ipd598ZQ+JyJcsVQTdkFTbw4x6v -----END CERTIFICATE-----Generated at Sat Jun 7 19:52:40 2025 by rpki-client