$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6C4E/3448652CF3CB11E5AE366062C4F9AE02/_0Md-OE71_7FHntTUHtFOan5ZWY.mft File: _0Md-OE71_7FHntTUHtFOan5ZWY.mft (raw, json) Hash identifier: vttWKzlX6FP/b2BJj7pm+e4IXLcMjXAe6zp11iz2oJE= Subject key identifier: B9:70:28:81:9F:8C:91:F1:C2:E6:F8:EC:69:F1:1E:00:47:09:68:59 Authority key identifier: FF:43:1D:F8:E1:3B:D7:FE:C5:1E:7B:53:50:7B:45:39:A9:F9:65:66 Certificate issuer: /CN=A91E6C4E/serialNumber=FF431DF8E13BD7FEC51E7B53507B4539A9F96566 Certificate serial: 210D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0Md-OE71_7FHntTUHtFOan5ZWY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6C4E/3448652CF3CB11E5AE366062C4F9AE02/_0Md-OE71_7FHntTUHtFOan5ZWY.mft Manifest number: 2101 Signing time: Tue 10 Jun 2025 15:57:07 +0000 Manifest this update: Tue 10 Jun 2025 15:57:07 +0000 Manifest next update: Tue 17 Jun 2025 15:57:07 +0000 Files and hashes: 1: _0Md-OE71_7FHntTUHtFOan5ZWY.crl (hash: ze96I3vKRCnTvKEFn7LXvGgbHKKxSqLq/3fzbJcUW3I=) 2: 5F0B20081CBF11EAA5FCAC86C4F9AE02.roa (hash: BjqwppR+NMle1n/1OCoqadfW2SGArIC17ShPvDamqQc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6C4E/3448652CF3CB11E5AE366062C4F9AE02/_0Md-OE71_7FHntTUHtFOan5ZWY.crl rsync://rpki.apnic.net/member_repository/A91E6C4E/3448652CF3CB11E5AE366062C4F9AE02/_0Md-OE71_7FHntTUHtFOan5ZWY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0Md-OE71_7FHntTUHtFOan5ZWY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 17 Jun 2025 15:57:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8461 (0x210d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6C4E, serialNumber=FF431DF8E13BD7FEC51E7B53507B4539A9F96566 Validity Not Before: Jun 10 15:57:07 2025 GMT Not After : Jun 17 15:57:07 2025 GMT Subject: CN=684855d3-4773 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:fa:c3:bf:fb:bb:ef:18:77:59:e1:62:72:9a: 04:e0:b6:b5:84:6c:1b:33:e6:4d:b4:58:0e:51:94: 02:42:a4:c6:ee:72:0c:a6:5b:43:cf:97:fa:46:dd: 91:aa:b3:01:da:4b:25:8e:35:7b:75:3e:dd:29:81: c2:64:2c:46:3b:dc:43:e5:f0:27:1b:48:f8:23:2e: 74:63:39:de:ac:66:7c:95:d2:14:8c:ee:d5:e5:7b: 2a:5c:05:06:54:6c:7b:7f:64:69:66:97:c5:6b:11: 1a:ac:2f:86:e5:3f:ef:2c:05:dc:19:5f:67:69:77: 15:e7:87:ae:53:b7:72:90:e3:82:f5:4d:ba:7d:b4: ee:80:da:ba:75:cf:c8:e5:a9:52:4c:16:9c:a6:58: f7:74:fd:5d:64:00:54:94:56:f5:13:61:4c:88:1f: b8:ec:d3:4e:0d:f9:4a:d0:18:5a:49:5a:44:df:60: 01:66:17:b9:b3:8f:c7:13:93:19:eb:49:6b:8c:1b: 20:4c:6e:f3:f1:34:90:38:5a:c6:0b:74:47:5c:6f: 7f:58:e9:8f:e4:15:f1:7b:a0:fc:45:d5:70:04:70: 73:9e:53:87:11:f0:56:9b:db:6d:b9:13:8b:aa:30: 94:74:cf:30:c3:f2:c8:28:d1:1c:fa:fd:67:dd:d0: 42:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:70:28:81:9F:8C:91:F1:C2:E6:F8:EC:69:F1:1E:00:47:09:68:59 X509v3 Authority Key Identifier: keyid:FF:43:1D:F8:E1:3B:D7:FE:C5:1E:7B:53:50:7B:45:39:A9:F9:65:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6C4E/3448652CF3CB11E5AE366062C4F9AE02/_0Md-OE71_7FHntTUHtFOan5ZWY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0Md-OE71_7FHntTUHtFOan5ZWY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6C4E/3448652CF3CB11E5AE366062C4F9AE02/_0Md-OE71_7FHntTUHtFOan5ZWY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:67:7e:6b:0c:d1:12:97:16:07:99:e8:7e:53:e4:d0:f2:00: 54:8c:a9:10:64:e8:48:87:f8:75:8a:f2:36:df:e1:62:58:e8: 6e:36:ad:6e:91:b1:41:f2:ba:f4:03:5c:65:13:0b:f2:9b:d9: d8:25:58:22:6b:79:5e:25:b9:c5:7c:e2:78:c3:9f:18:23:40: b4:b9:f2:60:1c:ba:e5:41:27:5a:87:7f:73:c8:a9:e6:c9:07: d3:aa:fc:0e:9b:e6:ab:8e:d8:e2:c2:3e:ad:50:94:20:51:03: 42:e5:11:13:57:58:1f:9d:c9:08:3d:46:0a:01:5f:39:2b:e0: 5d:38:d0:02:44:30:2e:a1:dc:ce:b7:b9:09:da:60:74:ab:6c: 61:c0:fc:28:b9:c1:d4:cc:12:cf:90:fb:bd:3b:4a:e2:84:59: 9d:89:bf:c2:71:4e:1e:fe:b4:b9:f4:25:a1:ee:55:13:4e:84: 8c:36:b2:d9:09:69:00:b5:b7:a9:1a:03:a2:f3:6d:1f:e9:72: 5c:df:81:0b:68:ee:a4:c0:c6:99:fc:12:16:cc:19:8c:fd:03: 99:73:7e:25:eb:5d:2e:6d:d5:9b:74:de:20:87:ea:5e:41:0a: 10:0a:5d:b7:34:54:37:0c:5f:9a:5e:53:33:93:88:86:1e:e5: db:c4:79:d8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIQ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTZDNEUxMTAvBgNVBAUTKEZGNDMxREY4RTEzQkQ3RkVDNTFFN0I1MzUwN0I0NTM5 QTlGOTY1NjYwHhcNMjUwNjEwMTU1NzA3WhcNMjUwNjE3MTU1NzA3WjAYMRYwFAYD VQQDEw02ODQ4NTVkMy00NzczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0frDv/u77xh3WeFicpoE4La1hGwbM+ZNtFgOUZQCQqTG7nIMpltDz5f6Rt2R qrMB2ksljjV7dT7dKYHCZCxGO9xD5fAnG0j4Iy50YznerGZ8ldIUjO7V5XsqXAUG VGx7f2RpZpfFaxEarC+G5T/vLAXcGV9naXcV54euU7dykOOC9U26fbTugNq6dc/I 5alSTBacplj3dP1dZABUlFb1E2FMiB+47NNODflK0BhaSVpE32ABZhe5s4/HE5MZ 60lrjBsgTG7z8TSQOFrGC3RHXG9/WOmP5BXxe6D8RdVwBHBznlOHEfBWm9ttuROL qjCUdM8ww/LIKNEc+v1n3dBCxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLlwKIGf jJHxwub47GnxHgBHCWhZMB8GA1UdIwQYMBaAFP9DHfjhO9f+xR57U1B7RTmp+WVm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNkM0RS8zNDQ4NjUyQ0Yz Q0IxMUU1QUUzNjYwNjJDNEY5QUUwMi9fME1kLU9FNzFfN0ZIbnRUVUh0Rk9hbjVa V1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL18wTWQtT0U3MV83RkhudFRVSHRGT2FuNVpXWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NkM0RS8zNDQ4NjUyQ0YzQ0IxMUU1QUUzNjYwNjJDNEY5QUUwMi9fME1kLU9FNzFf N0ZIbnRUVUh0Rk9hbjVaV1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZZ35rDNESlxYHmeh+U+TQ8gBUjKkQZOhIh/h1ivI23+FiWOhuNq1u kbFB8rr0A1xlEwvym9nYJVgia3leJbnFfOJ4w58YI0C0ufJgHLrlQSdah39zyKnm yQfTqvwOm+arjtjiwj6tUJQgUQNC5RETV1gfnckIPUYKAV85K+BdONACRDAuodzO t7kJ2mB0q2xhwPwoucHUzBLPkPu9O0rihFmdib/CcU4e/rS59CWh7lUTToSMNrLZ CWkAtbepGgOi820f6XJc34ELaO6kwMaZ/BIWzBmM/QOZc34l610ubdWbdN4gh+pe QQoQCl23NFQ3DF+aXlMzk4iGHuXbxHnY -----END CERTIFICATE-----Generated at Thu Jun 12 07:09:00 2025 by rpki-client