$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/-cREz887ajdUceO1SHT8K0myxyY.mft File: -cREz887ajdUceO1SHT8K0myxyY.mft (raw, json) Hash identifier: sGsvmJmyIqlvk+hoOkzFLAvpls7UwOZRYu1h+FqYBVA= Subject key identifier: 23:7B:74:80:EE:B0:7B:BE:70:A3:7E:DE:67:D5:12:3A:88:0D:1F:0B Authority key identifier: F9:C4:44:CF:CF:3B:6A:37:54:71:E3:B5:48:74:FC:2B:49:B2:C7:26 Certificate issuer: /CN=A91E6B9A/serialNumber=F9C444CFCF3B6A375471E3B54874FC2B49B2C726 Certificate serial: 95 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-cREz887ajdUceO1SHT8K0myxyY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/-cREz887ajdUceO1SHT8K0myxyY.mft Manifest number: 93 Signing time: Sun 01 Jun 2025 06:09:37 +0000 Manifest this update: Sun 01 Jun 2025 06:09:37 +0000 Manifest next update: Sun 08 Jun 2025 06:09:37 +0000 Files and hashes: 1: -cREz887ajdUceO1SHT8K0myxyY.crl (hash: Vb7fp0JxGik+Ok7T57HPE3YNgNb73zXVtM0LMwtIrFY=) 2: 58CA0E62615111EFACF30C14C4F9AE02.roa (hash: n/H7m4JyEx7dcVifKMlTV7vtmvQ/Ig1JHl4d6IW0aVA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/-cREz887ajdUceO1SHT8K0myxyY.crl rsync://rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/-cREz887ajdUceO1SHT8K0myxyY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-cREz887ajdUceO1SHT8K0myxyY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 06:09:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 149 (0x95) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6B9A, serialNumber=F9C444CFCF3B6A375471E3B54874FC2B49B2C726 Validity Not Before: Jun 1 06:09:37 2025 GMT Not After : Jun 8 06:09:37 2025 GMT Subject: CN=683beea1-efaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:10:bb:ec:d4:92:ec:a6:2a:83:b9:e9:42:f9: 07:9e:f7:56:52:d7:9f:f4:3d:ef:16:d6:0d:08:d5: d8:21:c7:26:8d:7a:26:a4:54:61:84:79:aa:b7:b2: 92:18:77:d9:25:cc:cc:c1:73:4c:9e:e8:f0:18:09: 6e:0d:ea:e6:ac:8f:13:6a:de:0b:7e:b3:f2:f1:44: a1:2c:12:5c:69:48:3a:22:97:2a:4f:8a:b9:3c:e3: 0b:43:e1:2a:0f:a0:b6:4e:0a:a4:4d:3c:a2:8d:2e: ec:43:3a:7a:3c:a6:01:15:dd:82:aa:7b:6e:f8:96: e7:a6:49:f9:5f:ae:c7:09:86:05:f2:3e:27:d7:8b: b0:a8:1e:4f:cf:45:49:86:22:44:46:09:e7:5a:38: 53:e6:f1:89:c1:01:9d:c0:5f:8a:b9:f1:d7:8d:dc: ea:f1:32:46:c6:9f:f2:84:fc:c1:7e:9a:c6:38:9a: 4b:7d:68:45:b4:90:41:05:3f:88:15:6b:f5:96:2e: 08:64:d5:7a:1e:f8:a7:74:c9:b2:84:33:64:62:f8: 8c:49:37:20:82:30:f9:e0:9b:e1:77:1c:5e:eb:e3: a2:c4:bf:ef:9c:7e:f4:bb:d1:ca:ca:29:09:17:ff: df:a9:64:69:a6:0a:95:75:fe:00:9f:aa:33:ee:cd: 68:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:7B:74:80:EE:B0:7B:BE:70:A3:7E:DE:67:D5:12:3A:88:0D:1F:0B X509v3 Authority Key Identifier: keyid:F9:C4:44:CF:CF:3B:6A:37:54:71:E3:B5:48:74:FC:2B:49:B2:C7:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/-cREz887ajdUceO1SHT8K0myxyY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-cREz887ajdUceO1SHT8K0myxyY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/-cREz887ajdUceO1SHT8K0myxyY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:93:0c:3e:ae:d3:81:10:16:08:00:83:c6:61:c5:a4:81:ab: be:63:d8:00:d4:8a:24:f5:a8:a8:bd:3e:30:b7:ac:68:43:04: 5c:57:72:0c:56:09:fb:cb:c7:5f:44:9c:6a:4c:0e:20:fe:73: c9:f0:4a:12:45:b8:cd:be:7d:5a:fb:e3:cc:0a:12:69:60:7e: 35:b4:e2:68:51:e0:d8:10:ef:ec:45:09:f0:af:8f:1c:85:7c: 3b:35:55:f0:13:1f:e2:38:79:98:00:81:3e:cb:d2:2c:fc:9a: a4:e4:24:e5:cd:61:b3:75:e7:24:bb:e9:72:db:2b:a4:c7:2d: 2c:42:b9:9c:71:d8:5b:9a:e1:e0:70:09:5d:e0:cb:95:1e:d1: 46:83:cf:94:17:7b:59:b0:6d:05:e3:22:ae:94:91:c3:de:8c: 31:52:08:c5:36:15:6c:38:f9:91:5e:3e:61:5f:42:57:b4:bf: 26:ef:09:90:f8:34:42:97:ba:8e:d7:60:ce:77:a9:fe:4e:2c: 9b:0d:6a:c1:ec:86:d1:20:20:48:50:6d:2b:00:95:50:c2:ce: d0:7a:60:8b:6f:cc:94:64:bc:8b:8a:95:fd:37:36:0f:a0:f8: eb:f6:6c:7d:b5:49:99:a8:ae:52:62:28:fb:bb:57:18:c3:ff: ff:28:b3:85 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTZCOUExMTAvBgNVBAUTKEY5QzQ0NENGQ0YzQjZBMzc1NDcxRTNCNTQ4NzRGQzJC NDlCMkM3MjYwHhcNMjUwNjAxMDYwOTM3WhcNMjUwNjA4MDYwOTM3WjAYMRYwFAYD VQQDEw02ODNiZWVhMS1lZmFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwBC77NSS7KYqg7npQvkHnvdWUtef9D3vFtYNCNXYIccmjXompFRhhHmqt7KS GHfZJczMwXNMnujwGAluDermrI8Tat4LfrPy8UShLBJcaUg6IpcqT4q5POMLQ+Eq D6C2TgqkTTyijS7sQzp6PKYBFd2Cqntu+Jbnpkn5X67HCYYF8j4n14uwqB5Pz0VJ hiJERgnnWjhT5vGJwQGdwF+KufHXjdzq8TJGxp/yhPzBfprGOJpLfWhFtJBBBT+I FWv1li4IZNV6HvindMmyhDNkYviMSTcggjD54Jvhdxxe6+OixL/vnH70u9HKyikJ F//fqWRppgqVdf4An6oz7s1o7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCN7dIDu sHu+cKN+3mfVEjqIDR8LMB8GA1UdIwQYMBaAFPnERM/PO2o3VHHjtUh0/CtJsscm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNkI5QS8xMTYwMTI4RTYx NTAxMUVGQUU3QThDNzNDNEY5QUUwMi8tY1JFejg4N2FqZFVjZU8xU0hUOEswbXl4 eVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLy1jUkV6ODg3YWpkVWNlTzFTSFQ4SzBteXh5WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NkI5QS8xMTYwMTI4RTYxNTAxMUVGQUU3QThDNzNDNEY5QUUwMi8tY1JFejg4N2Fq ZFVjZU8xU0hUOEswbXl4eVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB4kww+rtOBEBYIAIPGYcWkgau+Y9gA1Iok9aiovT4wt6xoQwRcV3IM Vgn7y8dfRJxqTA4g/nPJ8EoSRbjNvn1a++PMChJpYH41tOJoUeDYEO/sRQnwr48c hXw7NVXwEx/iOHmYAIE+y9Is/Jqk5CTlzWGzdecku+ly2yukxy0sQrmccdhbmuHg cAld4MuVHtFGg8+UF3tZsG0F4yKulJHD3owxUgjFNhVsOPmRXj5hX0JXtL8m7wmQ +DRCl7qO12DOd6n+TiybDWrB7IbRICBIUG0rAJVQws7QemCLb8yUZLyLipX9NzYP oPjr9mx9tUmZqK5SYij7u1cYw///KLOF -----END CERTIFICATE-----Generated at Mon Jun 2 21:45:29 2025 by rpki-client