$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7FEA/1EE3AEEC604811EA8C690B38C4F9AE02/_g28w89QoeDrA9MSluOfuogMGQU.mft File: _g28w89QoeDrA9MSluOfuogMGQU.mft (raw, json) Hash identifier: B7DY4E8tPC2amUr4nafu6BEWCoVtVnwpjnh2plFlEro= Subject key identifier: 9E:10:48:62:AE:63:A2:CE:6A:A3:42:DF:AF:BD:E4:71:0B:E0:CA:5C Authority key identifier: FE:0D:BC:C3:CF:50:A1:E0:EB:03:D3:12:96:E3:9F:BA:88:0C:19:05 Certificate issuer: /CN=A91F7FEA/serialNumber=FE0DBCC3CF50A1E0EB03D31296E39FBA880C1905 Certificate serial: 0A91 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_g28w89QoeDrA9MSluOfuogMGQU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F7FEA/1EE3AEEC604811EA8C690B38C4F9AE02/_g28w89QoeDrA9MSluOfuogMGQU.mft Manifest number: 0A83 Signing time: Fri 06 Jun 2025 19:40:45 +0000 Manifest this update: Fri 06 Jun 2025 19:40:45 +0000 Manifest next update: Fri 13 Jun 2025 19:40:45 +0000 Files and hashes: 1: _g28w89QoeDrA9MSluOfuogMGQU.crl (hash: aYAYl1t3Sg3rRvcdplj0x/cg3kRoQZYz7HEJekWlwk0=) 2: AF5AC6B69E3F11EEA6B6CB0DC4F9AE02.roa (hash: aO7ZzsxjyqFcAzfGikfamjQffULd11X020Rl4PUmMgc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F7FEA/1EE3AEEC604811EA8C690B38C4F9AE02/_g28w89QoeDrA9MSluOfuogMGQU.crl rsync://rpki.apnic.net/member_repository/A91F7FEA/1EE3AEEC604811EA8C690B38C4F9AE02/_g28w89QoeDrA9MSluOfuogMGQU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_g28w89QoeDrA9MSluOfuogMGQU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 13 Jun 2025 19:40:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2705 (0xa91) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F7FEA, serialNumber=FE0DBCC3CF50A1E0EB03D31296E39FBA880C1905 Validity Not Before: Jun 6 19:40:45 2025 GMT Not After : Jun 13 19:40:45 2025 GMT Subject: CN=6843443d-3b03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:04:6c:37:19:6f:54:79:84:23:40:4f:c8:99: d3:23:d3:e2:dc:28:5b:9e:ef:cb:9c:3d:ac:2d:9e: 97:eb:0a:a5:19:3c:5f:63:c4:e4:91:8b:e2:d4:c0: 9d:16:c9:d7:57:04:61:dd:43:5b:29:16:65:24:38: b2:f4:52:9f:e9:d0:8d:91:92:5e:d6:ae:9d:6d:4c: 58:ec:09:da:22:9d:5a:8b:5d:19:4b:0c:3f:32:49: 3d:81:b3:43:9b:64:98:56:41:8b:f8:31:3b:65:b3: 10:7a:ba:3a:b9:81:68:a4:2c:68:ce:65:3e:41:47: 75:62:48:78:15:3b:45:08:77:73:c3:e4:cd:3b:64: e7:1a:26:83:79:13:56:30:58:f5:da:f5:96:bd:10: fd:22:ca:c8:b0:a4:47:9d:47:df:62:91:2c:59:20: d7:db:ae:bf:8c:b3:16:a4:5e:56:0a:00:b7:e0:16: 64:51:f2:7a:a9:a4:2a:eb:1a:f1:d6:1a:40:99:20: 05:6b:b9:79:0e:c5:e4:5d:3a:8e:2d:2b:f1:07:85: 7e:bd:8e:e0:d0:48:be:58:8f:a5:28:2f:3b:8c:83: 5d:56:74:32:6f:40:02:83:ac:d0:ce:1f:9a:83:08: 49:35:d6:ba:7f:fa:f2:cb:ec:3b:c8:2c:a6:52:96: 04:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:10:48:62:AE:63:A2:CE:6A:A3:42:DF:AF:BD:E4:71:0B:E0:CA:5C X509v3 Authority Key Identifier: keyid:FE:0D:BC:C3:CF:50:A1:E0:EB:03:D3:12:96:E3:9F:BA:88:0C:19:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F7FEA/1EE3AEEC604811EA8C690B38C4F9AE02/_g28w89QoeDrA9MSluOfuogMGQU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_g28w89QoeDrA9MSluOfuogMGQU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7FEA/1EE3AEEC604811EA8C690B38C4F9AE02/_g28w89QoeDrA9MSluOfuogMGQU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:0f:c8:c8:1a:12:de:42:36:2c:7b:74:fd:f9:71:3c:d6:b1: f4:77:6b:f7:88:65:c8:b4:40:2c:89:05:4a:50:eb:83:4c:f0: b2:c1:ce:1b:66:20:cd:cf:a2:b1:d4:1b:b0:d5:35:ef:d7:ce: a5:81:f0:49:59:c7:3c:3f:c1:14:db:43:65:80:87:64:9c:1c: 18:d3:e7:de:4f:01:10:c5:ca:62:36:68:91:b8:f6:44:f1:9b: 86:a5:53:aa:24:1d:d0:ee:54:62:69:74:8d:45:44:6d:f7:20: 24:5d:d5:27:28:08:01:db:5e:fa:48:8f:9c:a9:6a:37:2e:fc: c5:3f:63:04:78:84:96:5e:5f:84:32:c8:63:2f:9f:27:d6:9f: 47:27:33:ca:43:16:c1:4b:1c:54:d8:5d:ca:65:7a:a3:b6:0a: 29:03:17:f6:96:e5:f4:af:ba:9d:09:d4:82:24:c3:a6:ca:0a: 5d:08:d0:13:ed:62:4b:49:47:25:6e:39:42:da:f2:9e:4c:d1: 13:7b:06:cf:e9:40:b2:a2:55:78:9a:d6:7e:c6:bf:2a:00:1f: ff:7c:f3:e4:2a:bb:fe:8a:b8:bf:5a:88:0f:9e:bc:5d:21:15: 26:fa:bd:b8:bd:a0:5e:d6:03:bf:7d:3e:d9:dd:19:19:ed:1d: 3f:61:bc:f7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCpEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjdGRUExMTAvBgNVBAUTKEZFMERCQ0MzQ0Y1MEExRTBFQjAzRDMxMjk2RTM5RkJB ODgwQzE5MDUwHhcNMjUwNjA2MTk0MDQ1WhcNMjUwNjEzMTk0MDQ1WjAYMRYwFAYD VQQDEw02ODQzNDQzZC0zYjAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6gRsNxlvVHmEI0BPyJnTI9Pi3Chbnu/LnD2sLZ6X6wqlGTxfY8TkkYvi1MCd FsnXVwRh3UNbKRZlJDiy9FKf6dCNkZJe1q6dbUxY7AnaIp1ai10ZSww/Mkk9gbND m2SYVkGL+DE7ZbMQero6uYFopCxozmU+QUd1Ykh4FTtFCHdzw+TNO2TnGiaDeRNW MFj12vWWvRD9IsrIsKRHnUffYpEsWSDX266/jLMWpF5WCgC34BZkUfJ6qaQq6xrx 1hpAmSAFa7l5DsXkXTqOLSvxB4V+vY7g0Ei+WI+lKC87jINdVnQyb0ACg6zQzh+a gwhJNda6f/ryy+w7yCymUpYENwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ4QSGKu Y6LOaqNC36+95HEL4MpcMB8GA1UdIwQYMBaAFP4NvMPPUKHg6wPTEpbjn7qIDBkF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGN0ZFQS8xRUUzQUVFQzYw NDgxMUVBOEM2OTBCMzhDNEY5QUUwMi9fZzI4dzg5UW9lRHJBOU1TbHVPZnVvZ01H UVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19nMjh3ODlRb2VEckE5TVNsdU9mdW9nTUdRVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG N0ZFQS8xRUUzQUVFQzYwNDgxMUVBOEM2OTBCMzhDNEY5QUUwMi9fZzI4dzg5UW9l RHJBOU1TbHVPZnVvZ01HUVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCXD8jIGhLeQjYse3T9+XE81rH0d2v3iGXItEAsiQVKUOuDTPCywc4b ZiDNz6Kx1Buw1TXv186lgfBJWcc8P8EU20NlgIdknBwY0+feTwEQxcpiNmiRuPZE 8ZuGpVOqJB3Q7lRiaXSNRURt9yAkXdUnKAgB2176SI+cqWo3LvzFP2MEeISWXl+E MshjL58n1p9HJzPKQxbBSxxU2F3KZXqjtgopAxf2luX0r7qdCdSCJMOmygpdCNAT 7WJLSUclbjlC2vKeTNETewbP6UCyolV4mtZ+xr8qAB//fPPkKrv+iri/WogPnrxd IRUm+r24vaBe1gO/fT7Z3RkZ7R0/Ybz3 -----END CERTIFICATE-----Generated at Sat Jun 7 05:35:43 2025 by rpki-client