$ rpki-client -vvf rpki.apnic.net/member_repository/A91167F7/BFD3EB1A541611EBA4D56863C4F9AE02/RMCz5V6PTVgxhgXnITScArKJwv0.mft File: RMCz5V6PTVgxhgXnITScArKJwv0.mft (raw, json) Hash identifier: w7wi+8wGYROMb0/RAVoIdWm/9X88Q0KAxt7ozE6Ahlo= Subject key identifier: A6:ED:86:55:29:0C:6B:13:9D:BC:62:F4:C5:29:D2:C0:EA:66:99:BE Authority key identifier: 44:C0:B3:E5:5E:8F:4D:58:31:86:05:E7:21:34:9C:02:B2:89:C2:FD Certificate issuer: /CN=A91167F7/serialNumber=44C0B3E55E8F4D58318605E721349C02B289C2FD Certificate serial: 06EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RMCz5V6PTVgxhgXnITScArKJwv0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91167F7/BFD3EB1A541611EBA4D56863C4F9AE02/RMCz5V6PTVgxhgXnITScArKJwv0.mft Manifest number: 06E5 Signing time: Mon 30 Jun 2025 22:16:22 +0000 Manifest this update: Mon 30 Jun 2025 22:16:22 +0000 Manifest next update: Mon 07 Jul 2025 22:16:22 +0000 Files and hashes: 1: RMCz5V6PTVgxhgXnITScArKJwv0.crl (hash: QTp+QR1Zm/ri20c317jZysB2z0cu883aU3zl3QI6bFs=) 2: 980A0D7254B511EBAC30E864C4F9AE02.roa (hash: PrgqmGPVCZutr73KuPF9z7k4L5rKkcCQ9HWUA608bqU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91167F7/BFD3EB1A541611EBA4D56863C4F9AE02/RMCz5V6PTVgxhgXnITScArKJwv0.crl rsync://rpki.apnic.net/member_repository/A91167F7/BFD3EB1A541611EBA4D56863C4F9AE02/RMCz5V6PTVgxhgXnITScArKJwv0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RMCz5V6PTVgxhgXnITScArKJwv0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 22:16:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1770 (0x6ea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91167F7, serialNumber=44C0B3E55E8F4D58318605E721349C02B289C2FD Validity Not Before: Jun 30 22:16:22 2025 GMT Not After : Jul 7 22:16:22 2025 GMT Subject: CN=68630cb6-aa56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:e6:88:44:a7:59:9e:d0:b5:36:09:fd:ec:a8: eb:86:99:5b:56:15:2a:b3:e9:12:02:83:43:12:c4: 3d:10:7d:d9:2a:72:48:64:d0:80:71:ea:b5:f6:45: d3:72:33:47:f5:9e:64:9b:26:95:41:40:cc:34:35: c7:11:4b:95:b9:e2:03:8c:a3:24:c1:f0:84:7f:9c: 8e:c9:1a:48:5c:3e:b0:8c:2a:91:3a:a0:17:14:19: 1c:6a:e2:d4:bf:0e:aa:67:bd:c0:0a:b5:0a:c1:1b: 21:2c:ef:6a:a9:a2:7c:1c:f2:e7:31:29:82:47:f5: 11:ff:3a:fd:26:80:1b:8f:3b:05:1d:08:35:4f:38: 6a:6a:33:4e:79:9e:39:ca:69:8d:c4:8c:eb:5c:b7: 7a:4e:5b:75:dc:96:bd:12:ed:c6:3d:76:7d:5c:5e: 29:f7:63:d6:70:09:40:72:dc:d7:0a:39:d8:e9:79: 82:96:0f:e7:c5:b0:bc:58:f7:2e:50:6a:3d:d9:25: 9f:f3:52:73:42:b6:80:fb:76:96:e1:c3:2c:1b:bd: 0c:43:b8:77:27:5f:6a:1e:18:4f:59:27:ad:6f:65: db:05:c5:68:bf:8d:2f:29:06:29:59:f0:9c:1e:5f: dd:70:a6:15:0e:a5:e4:d1:06:e7:60:7b:17:ca:da: f5:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:ED:86:55:29:0C:6B:13:9D:BC:62:F4:C5:29:D2:C0:EA:66:99:BE X509v3 Authority Key Identifier: keyid:44:C0:B3:E5:5E:8F:4D:58:31:86:05:E7:21:34:9C:02:B2:89:C2:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91167F7/BFD3EB1A541611EBA4D56863C4F9AE02/RMCz5V6PTVgxhgXnITScArKJwv0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RMCz5V6PTVgxhgXnITScArKJwv0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91167F7/BFD3EB1A541611EBA4D56863C4F9AE02/RMCz5V6PTVgxhgXnITScArKJwv0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:70:88:19:8d:17:fc:02:46:4c:a9:d8:a0:d3:5d:f1:41:8c: 27:42:19:d8:63:b1:02:c9:0f:89:66:d6:a5:11:67:14:ff:de: 9d:af:a7:06:cb:5f:8d:23:21:c3:8e:31:8c:46:64:39:d5:35: bd:13:21:ef:55:b4:37:65:cb:03:6c:ad:2c:26:15:32:7d:11: a0:69:6f:7d:b8:51:57:81:4e:97:8a:96:73:a8:1b:80:ea:4d: 33:17:2e:79:3d:a7:b0:74:86:e3:87:01:19:26:78:80:d1:6b: d6:e7:00:75:ae:2e:ec:20:95:b6:e6:96:5b:cf:c7:9e:82:ce: 43:93:fc:99:4c:c7:e1:72:cd:68:17:51:69:30:50:d8:1a:e0: 4c:2a:16:38:98:f0:d0:f0:1f:70:b6:67:2c:56:f0:d0:fb:98: 8b:f5:a1:b6:f6:ab:4f:6c:ca:60:17:a4:1d:ee:f5:93:7c:7b: 12:38:64:f8:5d:2d:b7:36:7e:f7:c8:ea:9a:37:d4:96:c2:c5: e1:09:3d:8f:f4:a9:6e:54:b5:25:b3:4b:37:43:15:ff:6e:6f: f2:2a:f4:b0:52:fb:fc:f0:e9:6e:57:38:b3:99:8a:04:0d:b5: ab:e7:8b:54:d5:f9:18:f6:26:2e:cc:dc:45:97:25:fa:e0:9f: 28:85:f6:a6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBuowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTY3RjcxMTAvBgNVBAUTKDQ0QzBCM0U1NUU4RjRENTgzMTg2MDVFNzIxMzQ5QzAy QjI4OUMyRkQwHhcNMjUwNjMwMjIxNjIyWhcNMjUwNzA3MjIxNjIyWjAYMRYwFAYD VQQDEw02ODYzMGNiNi1hYTU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs+aIRKdZntC1Ngn97KjrhplbVhUqs+kSAoNDEsQ9EH3ZKnJIZNCAceq19kXT cjNH9Z5kmyaVQUDMNDXHEUuVueIDjKMkwfCEf5yOyRpIXD6wjCqROqAXFBkcauLU vw6qZ73ACrUKwRshLO9qqaJ8HPLnMSmCR/UR/zr9JoAbjzsFHQg1TzhqajNOeZ45 ymmNxIzrXLd6Tlt13Ja9Eu3GPXZ9XF4p92PWcAlActzXCjnY6XmClg/nxbC8WPcu UGo92SWf81JzQraA+3aW4cMsG70MQ7h3J19qHhhPWSetb2XbBcVov40vKQYpWfCc Hl/dcKYVDqXk0QbnYHsXytr18wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKbthlUp DGsTnbxi9MUp0sDqZpm+MB8GA1UdIwQYMBaAFETAs+Vej01YMYYF5yE0nAKyicL9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjdGNy9CRkQzRUIxQTU0 MTYxMUVCQTRENTY4NjNDNEY5QUUwMi9STUN6NVY2UFRWZ3hoZ1huSVRTY0FyS0p3 djAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JNQ3o1VjZQVFZneGhnWG5JVFNjQXJLSnd2MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NjdGNy9CRkQzRUIxQTU0MTYxMUVCQTRENTY4NjNDNEY5QUUwMi9STUN6NVY2UFRW Z3hoZ1huSVRTY0FyS0p3djAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQADcIgZjRf8AkZMqdig013xQYwnQhnYY7ECyQ+JZtalEWcU/96dr6cG y1+NIyHDjjGMRmQ51TW9EyHvVbQ3ZcsDbK0sJhUyfRGgaW99uFFXgU6XipZzqBuA 6k0zFy55PaewdIbjhwEZJniA0WvW5wB1ri7sIJW25pZbz8eegs5Dk/yZTMfhcs1o F1FpMFDYGuBMKhY4mPDQ8B9wtmcsVvDQ+5iL9aG29qtPbMpgF6Qd7vWTfHsSOGT4 XS23Nn73yOqaN9SWwsXhCT2P9KluVLUls0s3QxX/bm/yKvSwUvv88OluVzizmYoE DbWr54tU1fkY9iYuzNxFlyX64J8ohfam -----END CERTIFICATE-----Generated at Tue Jul 1 23:55:49 2025 by rpki-client