$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBBAF/10C19D3036DD11F096862166C4F9AE02/0gZrYZNOd88mep3MOL9d7iHwe6M.mft File: 0gZrYZNOd88mep3MOL9d7iHwe6M.mft (raw, json) Hash identifier: 2uOg0hlW2M6w6fJVaDOKtneDBSBQ+zKlE6XIrPBoEqM= Subject key identifier: 35:D8:00:CD:AB:37:54:21:AD:E6:E7:79:A7:E0:C4:98:6F:32:A1:6F Authority key identifier: D2:06:6B:61:93:4E:77:CF:26:7A:9D:CC:38:BF:5D:EE:21:F0:7B:A3 Certificate issuer: /CN=A91EBBAF/serialNumber=D2066B61934E77CF267A9DCC38BF5DEE21F07BA3 Certificate serial: 0C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0gZrYZNOd88mep3MOL9d7iHwe6M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EBBAF/10C19D3036DD11F096862166C4F9AE02/0gZrYZNOd88mep3MOL9d7iHwe6M.mft Manifest number: 0A Signing time: Thu 05 Jun 2025 07:33:30 +0000 Manifest this update: Thu 05 Jun 2025 07:33:29 +0000 Manifest next update: Thu 12 Jun 2025 07:33:29 +0000 Files and hashes: 1: 0gZrYZNOd88mep3MOL9d7iHwe6M.crl (hash: s9ucCSQ4aA9CUX5HqVZ9dVxpK8o008mqONCuvKaKuKo=) 2: C3C056A636DD11F08C82E269C4F9AE02.roa (hash: HBKXI2AjuuTAqBzBKbi8y9q49xdsPFITyMYY5p5WuOA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EBBAF/10C19D3036DD11F096862166C4F9AE02/0gZrYZNOd88mep3MOL9d7iHwe6M.crl rsync://rpki.apnic.net/member_repository/A91EBBAF/10C19D3036DD11F096862166C4F9AE02/0gZrYZNOd88mep3MOL9d7iHwe6M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0gZrYZNOd88mep3MOL9d7iHwe6M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 12 Jun 2025 07:33:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12 (0xc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EBBAF, serialNumber=D2066B61934E77CF267A9DCC38BF5DEE21F07BA3 Validity Not Before: Jun 5 07:33:29 2025 GMT Not After : Jun 12 07:33:29 2025 GMT Subject: CN=6841484a-7fe6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:9a:3b:98:f9:d0:e2:42:32:70:b5:e0:f5:b7: 27:a6:0f:a2:ac:f9:b0:35:23:7f:72:dd:bb:a5:11: ed:b1:3a:0d:2e:23:d4:6a:0e:d3:8a:c3:3c:8d:16: 8a:1b:20:58:b3:7e:21:59:97:7a:a9:7d:c7:8c:ce: fc:f3:4c:4a:80:60:d3:1f:db:7e:4e:7c:d5:3b:c9: 20:ff:4c:1e:7d:de:a7:3f:8c:da:b6:10:d3:4f:99: cd:45:c1:54:a3:00:91:10:3c:0a:c7:21:51:32:6b: 1e:4b:f3:d2:ae:3e:a6:85:e3:57:32:7b:33:3b:67: 15:92:7e:fb:6b:d0:0f:79:c5:3a:79:d6:22:5e:6f: 38:6a:e5:14:21:69:27:69:30:85:39:65:f7:9a:16: 07:f7:d6:9d:b2:ac:c9:c9:67:8e:01:53:72:d5:54: 2c:cc:8b:5d:96:21:01:79:84:d0:af:69:c1:b5:be: 5a:d6:97:66:a9:65:b8:bf:59:62:22:15:b1:55:c9: 7e:23:78:af:9d:35:25:58:a2:c3:52:df:16:ae:63: 29:f3:a8:4e:7e:0b:b3:48:1d:1e:e2:8a:ec:63:e7: 9e:32:75:a3:13:01:32:4f:a0:b7:90:91:1a:b4:cf: c3:4e:43:21:79:1d:f4:c5:14:3e:4c:cf:d9:bd:a9: c7:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:D8:00:CD:AB:37:54:21:AD:E6:E7:79:A7:E0:C4:98:6F:32:A1:6F X509v3 Authority Key Identifier: keyid:D2:06:6B:61:93:4E:77:CF:26:7A:9D:CC:38:BF:5D:EE:21:F0:7B:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EBBAF/10C19D3036DD11F096862166C4F9AE02/0gZrYZNOd88mep3MOL9d7iHwe6M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0gZrYZNOd88mep3MOL9d7iHwe6M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBBAF/10C19D3036DD11F096862166C4F9AE02/0gZrYZNOd88mep3MOL9d7iHwe6M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:cf:76:6b:cc:a1:33:e1:40:12:23:88:2b:84:eb:14:2e:af: 38:bc:45:d9:7f:8a:72:76:4b:be:7e:51:e8:e4:da:b1:8e:03: 31:34:1c:dc:bc:0b:2b:4e:aa:70:54:49:50:4b:28:62:e8:f8: ba:38:84:87:1d:e6:33:37:de:e5:bb:a1:a2:d3:ba:1d:e5:1e: 44:a0:f3:54:af:ca:17:fc:b7:4b:ae:60:63:05:83:b6:df:e5: f2:d3:53:2a:ea:40:72:2d:53:05:47:f2:51:7b:ca:de:d6:7c: 30:9e:f3:f9:eb:4a:68:3a:62:b5:5d:c0:13:8e:fd:a1:f0:89: 22:b3:ef:cc:5d:e0:65:8f:18:f6:7b:18:a9:ad:15:64:46:e2: 3c:5a:a4:bd:f2:b7:8b:19:a9:9a:00:34:e1:45:91:48:35:3b: 29:55:db:4d:97:29:cc:4d:2b:55:de:8b:26:8f:57:8a:6b:2d: 28:10:c0:b3:5f:c7:65:cb:21:82:dc:46:2b:1f:b1:3b:16:d3: c0:43:32:bf:db:5c:03:b6:10:ba:d6:31:9a:90:b1:5e:13:39: 48:6a:2e:07:b3:0e:0d:f3:78:f9:74:1f:2c:35:08:f6:c6:32: 4d:a0:6c:7a:a8:b5:aa:5c:d6:5b:c5:73:c6:97:60:90:96:eb: 07:36:12:04 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF QkJBRjExMC8GA1UEBRMoRDIwNjZCNjE5MzRFNzdDRjI2N0E5RENDMzhCRjVERUUy MUYwN0JBMzAeFw0yNTA2MDUwNzMzMjlaFw0yNTA2MTIwNzMzMjlaMBgxFjAUBgNV BAMTDTY4NDE0ODRhLTdmZTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC3mjuY+dDiQjJwteD1tyemD6Ks+bA1I39y3bulEe2xOg0uI9RqDtOKwzyNFoob IFizfiFZl3qpfceMzvzzTEqAYNMf235OfNU7ySD/TB593qc/jNq2ENNPmc1FwVSj AJEQPArHIVEyax5L89KuPqaF41cyezM7ZxWSfvtr0A95xTp51iJebzhq5RQhaSdp MIU5ZfeaFgf31p2yrMnJZ44BU3LVVCzMi12WIQF5hNCvacG1vlrWl2apZbi/WWIi FbFVyX4jeK+dNSVYosNS3xauYynzqE5+C7NIHR7iiuxj554ydaMTATJPoLeQkRq0 z8NOQyF5HfTFFD5Mz9m9qcfhAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUNdgAzas3 VCGt5ud5p+DEmG8yoW8wHwYDVR0jBBgwFoAU0gZrYZNOd88mep3MOL9d7iHwe6Mw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVCQkFGLzEwQzE5RDMwMzZE RDExRjA5Njg2MjE2NkM0RjlBRTAyLzBnWnJZWk5PZDg4bWVwM01PTDlkN2lId2U2 TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvMGdacllaTk9kODhtZXAzTU9MOWQ3aUh3ZTZNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVC QkFGLzEwQzE5RDMwMzZERDExRjA5Njg2MjE2NkM0RjlBRTAyLzBnWnJZWk5PZDg4 bWVwM01PTDlkN2lId2U2TS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADPPdmvMoTPhQBIjiCuE6xQurzi8Rdl/inJ2S75+Uejk2rGOAzE0HNy8 CytOqnBUSVBLKGLo+Lo4hIcd5jM33uW7oaLTuh3lHkSg81Svyhf8t0uuYGMFg7bf 5fLTUyrqQHItUwVH8lF7yt7WfDCe8/nrSmg6YrVdwBOO/aHwiSKz78xd4GWPGPZ7 GKmtFWRG4jxapL3yt4sZqZoANOFFkUg1OylV202XKcxNK1XeiyaPV4prLSgQwLNf x2XLIYLcRisfsTsW08BDMr/bXAO2ELrWMZqQsV4TOUhqLgezDg3zePl0Hyw1CPbG Mk2gbHqotapc1lvFc8aXYJCW6wc2EgQ= -----END CERTIFICATE-----Generated at Fri Jun 6 16:46:37 2025 by rpki-client