$ rpki-client -vvf rpki.apnic.net/member_repository/A91221EF/6F2FEBD6891F11EA89B6277CC4F9AE02/_5APJL-aiYLZX4RHqnubtPesRjk.mft File: _5APJL-aiYLZX4RHqnubtPesRjk.mft (raw, json) Hash identifier: tcXqvErnyqxgCkYRigLvgV+g42aXP/0kfbjU4+LvxHM= Subject key identifier: 26:4C:8B:C3:ED:0B:C7:85:54:9C:73:28:EC:AB:16:69:DF:7E:AE:D2 Authority key identifier: FF:90:0F:24:BF:9A:89:82:D9:5F:84:47:AA:7B:9B:B4:F7:AC:46:39 Certificate issuer: /CN=A91221EF/serialNumber=FF900F24BF9A8982D95F8447AA7B9BB4F7AC4639 Certificate serial: 09C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_5APJL-aiYLZX4RHqnubtPesRjk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91221EF/6F2FEBD6891F11EA89B6277CC4F9AE02/_5APJL-aiYLZX4RHqnubtPesRjk.mft Manifest number: 09B6 Signing time: Wed 02 Jul 2025 20:15:58 +0000 Manifest this update: Wed 02 Jul 2025 20:15:58 +0000 Manifest next update: Wed 09 Jul 2025 20:15:58 +0000 Files and hashes: 1: _5APJL-aiYLZX4RHqnubtPesRjk.crl (hash: /tIUJsc/FFgQS9r/LgRG3slCagn41KAoK/if49y/BQc=) 2: D3037D06738E11ED8283FF53C4F9AE02.roa (hash: fmsh1X3Q3HooxV4YfKkoLFlrGgD13/WeDGjBg2CNmMg=) 3: D1A6B6D0738E11ED8283FF53C4F9AE02.roa (hash: WgMRh1pD8v+j2OuHDw2wLrJ+bXBsyv6ChtDmNGRF1/k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91221EF/6F2FEBD6891F11EA89B6277CC4F9AE02/_5APJL-aiYLZX4RHqnubtPesRjk.crl rsync://rpki.apnic.net/member_repository/A91221EF/6F2FEBD6891F11EA89B6277CC4F9AE02/_5APJL-aiYLZX4RHqnubtPesRjk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_5APJL-aiYLZX4RHqnubtPesRjk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 20:15:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2500 (0x9c4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91221EF, serialNumber=FF900F24BF9A8982D95F8447AA7B9BB4F7AC4639 Validity Not Before: Jul 2 20:15:58 2025 GMT Not After : Jul 9 20:15:58 2025 GMT Subject: CN=6865937e-f94d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:27:4f:c2:5c:a4:19:68:0e:28:c0:58:71:6f: b2:62:fb:c9:22:e9:fe:6d:97:50:c2:bb:35:76:77: 4a:03:62:f1:d6:3d:c0:0e:86:b7:38:4f:73:bb:82: 35:c5:03:3c:58:27:d1:ad:51:4f:8f:56:0d:e6:d4: 78:9a:7e:2d:91:45:6a:23:c6:96:6e:4b:b8:1b:1e: 17:0f:cd:13:87:c3:86:c6:c7:8b:04:74:17:3b:e4: d0:55:e8:2a:84:fb:6b:bc:0d:6d:c1:07:b6:24:80: 1b:8c:c1:b6:b2:aa:e0:a7:dd:93:2c:af:fd:94:98: 29:9d:18:9f:c3:df:ca:ee:73:00:c8:b8:3c:86:75: c5:10:97:26:6a:c6:2c:28:f9:18:45:78:cc:62:5c: 82:0c:00:09:bf:7f:f9:82:a7:0c:76:d3:50:db:48: 62:23:5c:7a:d0:4b:29:fa:48:59:5a:15:14:5a:72: 11:26:8e:e0:9c:83:53:ef:74:0f:39:2d:39:28:6f: 2a:c3:7c:5d:8e:91:27:6c:0e:c7:3f:fb:3c:01:fa: 11:4d:97:3b:bc:5d:f2:80:69:b4:4f:02:39:4f:7a: 98:60:24:9d:d7:82:2c:16:eb:ca:ee:85:8a:30:e1: 79:0b:6d:a3:ac:ba:d4:86:a9:11:c0:aa:36:f6:1b: 29:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:4C:8B:C3:ED:0B:C7:85:54:9C:73:28:EC:AB:16:69:DF:7E:AE:D2 X509v3 Authority Key Identifier: keyid:FF:90:0F:24:BF:9A:89:82:D9:5F:84:47:AA:7B:9B:B4:F7:AC:46:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91221EF/6F2FEBD6891F11EA89B6277CC4F9AE02/_5APJL-aiYLZX4RHqnubtPesRjk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_5APJL-aiYLZX4RHqnubtPesRjk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91221EF/6F2FEBD6891F11EA89B6277CC4F9AE02/_5APJL-aiYLZX4RHqnubtPesRjk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:25:0f:ad:84:34:32:c9:de:84:a2:99:83:3f:63:cc:f4:2c: 7c:f0:60:ab:e9:9b:2b:e7:5a:c5:66:3a:64:cb:8e:29:e2:d6: 03:29:37:76:21:bf:e4:2e:b1:09:47:b0:b4:33:b2:b9:24:f4: 15:b0:6c:b0:b6:db:34:3b:41:a8:44:1d:fb:49:62:f4:ac:81: f5:07:9f:5b:c5:18:c1:3f:9a:b4:30:42:a5:c9:0b:a5:0d:f0: e5:0e:f1:98:ea:09:37:ec:6f:6d:a3:a5:ce:f8:ae:65:69:86: 9b:c8:a2:80:85:c1:4a:9b:84:99:61:20:13:57:2f:68:12:ce: 8d:29:47:3a:72:15:0d:59:76:8c:b5:8f:0e:74:6d:e9:5c:d6: 2f:c9:4a:c4:a4:d7:d5:e2:47:f0:2c:c6:8a:45:5d:37:1b:b5: e1:9f:e5:2e:f8:b9:3e:89:78:1d:6c:76:6a:6b:cd:c5:db:93: 9b:68:3f:33:d2:eb:c3:88:8b:47:ab:ce:d1:b1:90:0d:4f:50: bb:fb:e9:aa:9e:7b:9b:b1:30:fb:2a:54:e0:de:3f:05:24:fa: 7c:ef:c3:64:5a:f0:5d:f2:ce:1e:d2:02:f6:08:21:ca:e6:37: 3b:61:9c:b4:67:11:31:86:d7:f4:9a:28:e4:31:af:b6:e0:31: 94:04:93:24 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCcQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjIxRUYxMTAvBgNVBAUTKEZGOTAwRjI0QkY5QTg5ODJEOTVGODQ0N0FBN0I5QkI0 RjdBQzQ2MzkwHhcNMjUwNzAyMjAxNTU4WhcNMjUwNzA5MjAxNTU4WjAYMRYwFAYD VQQDEw02ODY1OTM3ZS1mOTRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtydPwlykGWgOKMBYcW+yYvvJIun+bZdQwrs1dndKA2Lx1j3ADoa3OE9zu4I1 xQM8WCfRrVFPj1YN5tR4mn4tkUVqI8aWbku4Gx4XD80Th8OGxseLBHQXO+TQVegq hPtrvA1twQe2JIAbjMG2sqrgp92TLK/9lJgpnRifw9/K7nMAyLg8hnXFEJcmasYs KPkYRXjMYlyCDAAJv3/5gqcMdtNQ20hiI1x60Esp+khZWhUUWnIRJo7gnINT73QP OS05KG8qw3xdjpEnbA7HP/s8AfoRTZc7vF3ygGm0TwI5T3qYYCSd14IsFuvK7oWK MOF5C22jrLrUhqkRwKo29hsp0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCZMi8Pt C8eFVJxzKOyrFmnffq7SMB8GA1UdIwQYMBaAFP+QDyS/momC2V+ER6p7m7T3rEY5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMjFFRi82RjJGRUJENjg5 MUYxMUVBODlCNjI3N0NDNEY5QUUwMi9fNUFQSkwtYWlZTFpYNFJIcW51YnRQZXNS amsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL181QVBKTC1haVlMWlg0UkhxbnVidFBlc1Jqay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MjFFRi82RjJGRUJENjg5MUYxMUVBODlCNjI3N0NDNEY5QUUwMi9fNUFQSkwtYWlZ TFpYNFJIcW51YnRQZXNSamsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBbJQ+thDQyyd6EopmDP2PM9Cx88GCr6Zsr51rFZjpky44p4tYDKTd2 Ib/kLrEJR7C0M7K5JPQVsGywtts0O0GoRB37SWL0rIH1B59bxRjBP5q0MEKlyQul DfDlDvGY6gk37G9to6XO+K5laYabyKKAhcFKm4SZYSATVy9oEs6NKUc6chUNWXaM tY8OdG3pXNYvyUrEpNfV4kfwLMaKRV03G7Xhn+Uu+Lk+iXgdbHZqa83F25ObaD8z 0uvDiItHq87RsZANT1C7++mqnnubsTD7KlTg3j8FJPp878NkWvBd8s4e0gL2CCHK 5jc7YZy0ZxExhtf0mijkMa+24DGUBJMk -----END CERTIFICATE-----Generated at Thu Jul 3 10:40:38 2025 by rpki-client