$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB92B/C46081F254BD11EE8102F07FC4F9AE02/9UFCkkKfU9qxhrQuVkFJWagL6gg.mft File: 9UFCkkKfU9qxhrQuVkFJWagL6gg.mft (raw, json) Hash identifier: y7hOKOUgIUmyUT5yXoAjp1Ri22LsAJ1Z01X/+R5KrSk= Subject key identifier: CB:AF:7E:D4:EA:D8:50:58:E7:1B:56:3B:D8:7D:69:F9:77:03:C8:66 Authority key identifier: F5:41:42:92:42:9F:53:DA:B1:86:B4:2E:56:41:49:59:A8:0B:EA:08 Certificate issuer: /CN=A91FB92B/serialNumber=F5414292429F53DAB186B42E56414959A80BEA08 Certificate serial: 0144 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9UFCkkKfU9qxhrQuVkFJWagL6gg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FB92B/C46081F254BD11EE8102F07FC4F9AE02/9UFCkkKfU9qxhrQuVkFJWagL6gg.mft Manifest number: 0141 Signing time: Tue 03 Jun 2025 04:08:45 +0000 Manifest this update: Tue 03 Jun 2025 04:08:44 +0000 Manifest next update: Tue 10 Jun 2025 04:08:44 +0000 Files and hashes: 1: 9UFCkkKfU9qxhrQuVkFJWagL6gg.crl (hash: rqFUQZAmP2idif+qE4qNdKiphogQe8mL75VxwEv7yzU=) 2: 25B9F9C454BE11EE810E4C27C4F9AE02.roa (hash: hIM8hUCuLsy66X6ZYsJbgYBhw69MQCF4aThPHyxIGMM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FB92B/C46081F254BD11EE8102F07FC4F9AE02/9UFCkkKfU9qxhrQuVkFJWagL6gg.crl rsync://rpki.apnic.net/member_repository/A91FB92B/C46081F254BD11EE8102F07FC4F9AE02/9UFCkkKfU9qxhrQuVkFJWagL6gg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9UFCkkKfU9qxhrQuVkFJWagL6gg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 04:08:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 324 (0x144) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FB92B, serialNumber=F5414292429F53DAB186B42E56414959A80BEA08 Validity Not Before: Jun 3 04:08:44 2025 GMT Not After : Jun 10 04:08:44 2025 GMT Subject: CN=683e754c-5bfb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:1c:d4:66:c0:6f:df:16:2a:f4:b7:80:e6:36: 68:3d:0e:5b:5d:a5:ad:3a:ae:34:d7:52:2f:24:c2: 15:1b:67:ba:79:84:26:f8:fd:ad:c9:e2:18:d8:2d: 7c:9f:b1:79:5e:01:3d:4d:90:40:41:45:02:7f:99: b2:94:53:01:61:34:a8:3a:bb:a6:f2:33:16:02:16: 18:e0:67:8e:08:ed:93:01:0d:1d:39:75:2d:99:cc: b1:80:a6:a6:75:d0:c9:54:82:d2:f9:9b:7b:b4:5a: af:38:43:68:e0:02:ca:b9:1c:c2:06:4e:71:79:57: 0b:b8:95:80:e2:2c:a9:db:ef:9e:46:36:4e:9b:c8: 24:c2:a4:a9:9b:89:a2:e1:5c:23:2b:d9:cb:d8:70: e0:18:23:3e:13:e2:51:1e:3d:b3:c9:13:86:1f:e1: 77:f3:38:96:93:98:11:cb:28:92:96:8b:a6:b1:4d: 35:07:45:ee:59:92:8b:28:c9:b3:f2:ac:82:a5:82: 34:33:2e:fb:c4:e6:80:03:0c:32:0e:64:84:e2:07: 62:9d:dc:2b:08:cf:6f:19:87:d0:ea:55:a6:80:6e: 43:ea:d7:36:e2:3b:c8:b5:35:ba:ae:eb:1b:8d:c3: 87:bc:d3:f7:30:95:a7:24:ad:e0:92:16:60:0f:e1: a6:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:AF:7E:D4:EA:D8:50:58:E7:1B:56:3B:D8:7D:69:F9:77:03:C8:66 X509v3 Authority Key Identifier: keyid:F5:41:42:92:42:9F:53:DA:B1:86:B4:2E:56:41:49:59:A8:0B:EA:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FB92B/C46081F254BD11EE8102F07FC4F9AE02/9UFCkkKfU9qxhrQuVkFJWagL6gg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9UFCkkKfU9qxhrQuVkFJWagL6gg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB92B/C46081F254BD11EE8102F07FC4F9AE02/9UFCkkKfU9qxhrQuVkFJWagL6gg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:af:ab:bf:b4:0f:6c:ab:f0:4e:20:47:83:63:5b:c4:2e:3b: 02:4e:d2:18:fa:7f:06:ab:a5:20:7f:b9:6d:9f:4e:8e:b4:e3: dc:e4:2e:dc:e7:fd:be:06:57:60:ea:37:c4:05:e8:c4:8c:f9: c5:a1:cb:29:fd:66:49:aa:74:d6:4c:6c:85:76:3a:c2:dd:b2: b6:63:53:2a:af:8d:09:61:96:5b:c0:33:e3:f7:87:15:8c:2c: 07:75:ff:cb:5a:3e:69:34:e7:aa:ec:29:c4:46:e9:a9:39:23: 79:29:c5:f7:4c:82:10:2f:29:92:3c:8d:0e:65:3b:82:fb:ab: 56:d8:53:1b:4c:63:b7:59:ca:a7:dd:c6:d6:1b:b8:d6:8a:04: 68:2b:c4:c2:0c:4b:ff:5b:a5:a5:15:e5:d3:bb:4a:43:8b:12: 54:f3:5e:40:e1:f7:40:44:99:bb:98:f8:36:92:bd:7c:6a:02: 23:0f:51:73:d8:c6:c0:72:56:cd:91:55:11:7e:37:7e:2e:d3: 30:c7:ff:06:8c:34:5a:6d:74:14:08:79:10:d5:0c:6b:09:4a: f3:4d:49:ff:f6:a1:ec:e0:43:0c:b2:49:7b:cf:2d:d4:25:ca: 50:76:62:03:a6:c8:63:09:45:a0:df:aa:67:15:96:42:d1:f7: ec:82:67:9d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkI5MkIxMTAvBgNVBAUTKEY1NDE0MjkyNDI5RjUzREFCMTg2QjQyRTU2NDE0OTU5 QTgwQkVBMDgwHhcNMjUwNjAzMDQwODQ0WhcNMjUwNjEwMDQwODQ0WjAYMRYwFAYD VQQDEw02ODNlNzU0Yy01YmZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyRzUZsBv3xYq9LeA5jZoPQ5bXaWtOq4011IvJMIVG2e6eYQm+P2tyeIY2C18 n7F5XgE9TZBAQUUCf5mylFMBYTSoOrum8jMWAhYY4GeOCO2TAQ0dOXUtmcyxgKam ddDJVILS+Zt7tFqvOENo4ALKuRzCBk5xeVcLuJWA4iyp2++eRjZOm8gkwqSpm4mi 4VwjK9nL2HDgGCM+E+JRHj2zyROGH+F38ziWk5gRyyiSloumsU01B0XuWZKLKMmz 8qyCpYI0My77xOaAAwwyDmSE4gdindwrCM9vGYfQ6lWmgG5D6tc24jvItTW6rusb jcOHvNP3MJWnJK3gkhZgD+GmqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMuvftTq 2FBY5xtWO9h9afl3A8hmMB8GA1UdIwQYMBaAFPVBQpJCn1PasYa0LlZBSVmoC+oI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQjkyQi9DNDYwODFGMjU0 QkQxMUVFODEwMkYwN0ZDNEY5QUUwMi85VUZDa2tLZlU5cXhoclF1VmtGSldhZ0w2 Z2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlVRkNra0tmVTlxeGhyUXVWa0ZKV2FnTDZnZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QjkyQi9DNDYwODFGMjU0QkQxMUVFODEwMkYwN0ZDNEY5QUUwMi85VUZDa2tLZlU5 cXhoclF1VmtGSldhZ0w2Z2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAnr6u/tA9sq/BOIEeDY1vELjsCTtIY+n8Gq6Ugf7ltn06OtOPc5C7c 5/2+Bldg6jfEBejEjPnFocsp/WZJqnTWTGyFdjrC3bK2Y1Mqr40JYZZbwDPj94cV jCwHdf/LWj5pNOeq7CnERumpOSN5KcX3TIIQLymSPI0OZTuC+6tW2FMbTGO3Wcqn 3cbWG7jWigRoK8TCDEv/W6WlFeXTu0pDixJU815A4fdARJm7mPg2kr18agIjD1Fz 2MbAclbNkVURfjd+LtMwx/8GjDRabXQUCHkQ1QxrCUrzTUn/9qHs4EMMskl7zy3U JcpQdmIDpshjCUWg36pnFZZC0ffsgmed -----END CERTIFICATE-----Generated at Tue Jun 3 23:51:48 2025 by rpki-client