$ rpki-client -vvf rpki.apnic.net/member_repository/A91222CD/7E3115C8165A11E7B27F9B46C4F9AE02/MbPZBFfR_fg8NXTL0X_CiyzdVu8.mft File: MbPZBFfR_fg8NXTL0X_CiyzdVu8.mft (raw, json) Hash identifier: Ed2MAGYk6vFz4iW5/m8O+2F7LaDaCLGwh0GGvpYhCxQ= Subject key identifier: E2:52:A2:57:B4:48:07:2B:1D:0D:62:5E:08:A6:C7:AF:F5:1F:C3:14 Authority key identifier: 31:B3:D9:04:57:D1:FD:F8:3C:35:74:CB:D1:7F:C2:8B:2C:DD:56:EF Certificate issuer: /CN=A91222CD/serialNumber=31B3D90457D1FDF83C3574CBD17FC28B2CDD56EF Certificate serial: 1B3A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MbPZBFfR_fg8NXTL0X_CiyzdVu8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91222CD/7E3115C8165A11E7B27F9B46C4F9AE02/MbPZBFfR_fg8NXTL0X_CiyzdVu8.mft Manifest number: 1B39 Signing time: Wed 02 Jul 2025 16:24:16 +0000 Manifest this update: Wed 02 Jul 2025 16:24:16 +0000 Manifest next update: Wed 09 Jul 2025 16:24:16 +0000 Files and hashes: 1: MbPZBFfR_fg8NXTL0X_CiyzdVu8.crl (hash: IeCr7LUnjLT9/DM23IQ8WquBXWXp4zg5SfqGnO9rFNQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91222CD/7E3115C8165A11E7B27F9B46C4F9AE02/MbPZBFfR_fg8NXTL0X_CiyzdVu8.crl rsync://rpki.apnic.net/member_repository/A91222CD/7E3115C8165A11E7B27F9B46C4F9AE02/MbPZBFfR_fg8NXTL0X_CiyzdVu8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MbPZBFfR_fg8NXTL0X_CiyzdVu8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 16:24:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6970 (0x1b3a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91222CD, serialNumber=31B3D90457D1FDF83C3574CBD17FC28B2CDD56EF Validity Not Before: Jul 2 16:24:16 2025 GMT Not After : Jul 9 16:24:16 2025 GMT Subject: CN=68655d30-bf40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:a4:fc:fe:8d:fd:a4:a6:e8:a3:d0:21:ec:13: 24:09:e8:e9:a0:92:38:d7:c8:ae:ae:e9:c9:e0:f7: cb:04:9c:0a:41:dc:f7:c4:f4:66:23:16:09:4e:83: a3:0e:44:63:2c:e9:21:79:82:f3:e7:47:94:eb:b5: ad:f3:55:32:a8:d2:9f:d2:d0:c3:88:69:d1:ce:dc: b1:6d:58:24:f2:dd:3b:2a:9d:fd:2d:6e:c4:d9:f4: 1c:39:87:6f:42:c8:6d:de:d4:30:66:90:c8:60:a7: 51:8f:4b:30:b7:5a:15:39:4d:2c:b7:85:86:24:23: 58:dd:8c:45:55:52:8b:fc:1b:82:a6:b9:ab:3d:12: 3a:fc:ed:d4:3e:22:84:a1:70:fb:bc:da:37:a5:bb: c4:d3:a3:7d:0c:fa:ab:3b:2c:78:c8:92:c9:ca:38: 00:f9:01:08:32:f4:27:6e:bb:95:d5:36:79:7d:99: 46:bd:9e:db:62:df:0a:95:e4:b6:b4:0a:9e:0e:ab: a6:b4:f5:7f:f4:ef:2c:ab:83:31:22:04:8c:b7:ea: f0:56:0b:ce:a4:20:34:82:5e:d3:02:7a:33:6a:0f: b4:56:77:d8:56:6a:c2:8f:d8:fe:53:b4:9e:c0:d7: 8b:15:d6:42:a0:9f:ec:6e:51:cb:2f:b5:f9:c3:c2: 7a:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:52:A2:57:B4:48:07:2B:1D:0D:62:5E:08:A6:C7:AF:F5:1F:C3:14 X509v3 Authority Key Identifier: keyid:31:B3:D9:04:57:D1:FD:F8:3C:35:74:CB:D1:7F:C2:8B:2C:DD:56:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91222CD/7E3115C8165A11E7B27F9B46C4F9AE02/MbPZBFfR_fg8NXTL0X_CiyzdVu8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MbPZBFfR_fg8NXTL0X_CiyzdVu8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91222CD/7E3115C8165A11E7B27F9B46C4F9AE02/MbPZBFfR_fg8NXTL0X_CiyzdVu8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:4e:e5:bb:f9:b9:cb:60:b7:8b:7e:5f:ea:2f:3f:98:6e:8e: 75:5f:81:44:cd:22:6e:b1:2b:c7:3b:65:dc:19:23:89:06:a6: 47:97:7c:a5:75:a8:2a:f4:04:fe:89:96:4a:14:2f:36:47:46: e2:30:d7:5a:aa:4f:82:c8:c9:ae:c9:9b:e4:95:3c:44:40:51: ba:6c:4f:9b:76:e1:9b:d3:70:56:85:c1:2e:2f:62:38:3e:b9: 19:08:8f:e9:99:1a:fe:6b:cb:40:da:34:16:78:27:c5:e3:1b: 30:7a:cd:32:32:a7:d6:17:db:6e:0f:ac:bf:da:47:3a:84:f4: 0a:be:18:34:ed:b2:dc:f2:21:bb:ab:8a:6f:6a:71:68:d9:18: cc:83:fd:ba:77:4c:09:94:a5:da:67:42:e4:23:89:5e:33:20: cd:35:34:f9:2a:44:d8:c1:ef:83:56:3e:8e:f5:bf:30:0b:4c: d1:23:a5:c9:1e:4e:b1:a4:96:9a:55:e1:d5:4d:4d:56:07:cd: b0:b2:21:a3:01:0b:d8:2a:00:fe:87:f7:6e:35:e9:1f:52:76: 97:a8:5d:0e:71:0b:4a:06:d4:dc:5b:f6:eb:96:d9:95:11:e4: 6f:dc:d4:2a:9e:f9:f1:38:b4:8e:20:9d:a1:aa:a9:6f:56:8a: 9d:5e:43:ef -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGzowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjIyQ0QxMTAvBgNVBAUTKDMxQjNEOTA0NTdEMUZERjgzQzM1NzRDQkQxN0ZDMjhC MkNERDU2RUYwHhcNMjUwNzAyMTYyNDE2WhcNMjUwNzA5MTYyNDE2WjAYMRYwFAYD VQQDEw02ODY1NWQzMC1iZjQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0KT8/o39pKboo9Ah7BMkCejpoJI418iurunJ4PfLBJwKQdz3xPRmIxYJToOj DkRjLOkheYLz50eU67Wt81UyqNKf0tDDiGnRztyxbVgk8t07Kp39LW7E2fQcOYdv Qsht3tQwZpDIYKdRj0swt1oVOU0st4WGJCNY3YxFVVKL/BuCprmrPRI6/O3UPiKE oXD7vNo3pbvE06N9DPqrOyx4yJLJyjgA+QEIMvQnbruV1TZ5fZlGvZ7bYt8KleS2 tAqeDqumtPV/9O8sq4MxIgSMt+rwVgvOpCA0gl7TAnozag+0VnfYVmrCj9j+U7Se wNeLFdZCoJ/sblHLL7X5w8J6KwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOJSole0 SAcrHQ1iXgimx6/1H8MUMB8GA1UdIwQYMBaAFDGz2QRX0f34PDV0y9F/woss3Vbv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMjJDRC83RTMxMTVDODE2 NUExMUU3QjI3RjlCNDZDNEY5QUUwMi9NYlBaQkZmUl9mZzhOWFRMMFhfQ2l5emRW dTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01iUFpCRmZSX2ZnOE5YVEwwWF9DaXl6ZFZ1OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MjJDRC83RTMxMTVDODE2NUExMUU3QjI3RjlCNDZDNEY5QUUwMi9NYlBaQkZmUl9m ZzhOWFRMMFhfQ2l5emRWdTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA8TuW7+bnLYLeLfl/qLz+Ybo51X4FEzSJusSvHO2XcGSOJBqZHl3yl dagq9AT+iZZKFC82R0biMNdaqk+CyMmuyZvklTxEQFG6bE+bduGb03BWhcEuL2I4 PrkZCI/pmRr+a8tA2jQWeCfF4xswes0yMqfWF9tuD6y/2kc6hPQKvhg07bLc8iG7 q4pvanFo2RjMg/26d0wJlKXaZ0LkI4leMyDNNTT5KkTYwe+DVj6O9b8wC0zRI6XJ Hk6xpJaaVeHVTU1WB82wsiGjAQvYKgD+h/duNekfUnaXqF0OcQtKBtTcW/brltmV EeRv3NQqnvnxOLSOIJ2hqqlvVoqdXkPv -----END CERTIFICATE-----Generated at Thu Jul 3 10:42:31 2025 by rpki-client