$ rpki-client -vvf rpki.apnic.net/member_repository/A91249C2/E3A3DEE648C811F0B957261CC4F9AE02/dNzqqFBqKzJ_h6QtB0GsNu7e60k.mft File: dNzqqFBqKzJ_h6QtB0GsNu7e60k.mft (raw, json) Hash identifier: qN029heokWPCzmIH1AE2WRRZ6OZLTbOyMrgV14yjj9c= Subject key identifier: 41:08:27:93:F2:20:81:18:63:40:C2:BB:64:CF:33:CD:3D:CD:2E:86 Authority key identifier: 74:DC:EA:A8:50:6A:2B:32:7F:87:A4:2D:07:41:AC:36:EE:DE:EB:49 Certificate issuer: /CN=A91249C2/serialNumber=74DCEAA8506A2B327F87A42D0741AC36EEDEEB49 Certificate serial: 0F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dNzqqFBqKzJ_h6QtB0GsNu7e60k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91249C2/E3A3DEE648C811F0B957261CC4F9AE02/dNzqqFBqKzJ_h6QtB0GsNu7e60k.mft Manifest number: 0D Signing time: Tue 01 Jul 2025 08:55:50 +0000 Manifest this update: Tue 01 Jul 2025 08:55:50 +0000 Manifest next update: Tue 08 Jul 2025 08:55:50 +0000 Files and hashes: 1: dNzqqFBqKzJ_h6QtB0GsNu7e60k.crl (hash: 2ebROHYh6zwZfOduIVpi/HYZuHj+APO7RKoe8yIqKxQ=) 2: ED3D0F9E48C911F0B59FB71DC4F9AE02.roa (hash: yyRnOy3I+YsGzwaRvaOYjHZbPADEQBV8Fr6YK9Scj94=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91249C2/E3A3DEE648C811F0B957261CC4F9AE02/dNzqqFBqKzJ_h6QtB0GsNu7e60k.crl rsync://rpki.apnic.net/member_repository/A91249C2/E3A3DEE648C811F0B957261CC4F9AE02/dNzqqFBqKzJ_h6QtB0GsNu7e60k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dNzqqFBqKzJ_h6QtB0GsNu7e60k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 08:36:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15 (0xf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91249C2, serialNumber=74DCEAA8506A2B327F87A42D0741AC36EEDEEB49 Validity Not Before: Jul 1 08:55:50 2025 GMT Not After : Jul 8 08:55:50 2025 GMT Subject: CN=6863a296-2e79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:49:58:e2:74:a1:da:8f:8b:ae:5c:66:7f:f5: 11:76:a7:c1:20:2c:f4:f9:ec:f3:c5:15:a0:be:e2: 1b:72:e8:19:ba:67:34:3e:21:db:44:23:d3:a1:11: 9f:9e:a2:a8:d6:98:b7:bd:14:84:7e:59:e1:0f:9f: 17:27:b9:66:99:bf:09:ad:a3:1e:9d:8b:bf:33:eb: c7:40:41:f6:38:42:c7:97:a5:d6:c3:3c:3c:24:44: ea:1d:69:b1:6d:e8:c9:c8:f9:de:0d:93:d4:29:93: c3:a1:03:ec:82:a8:d3:d5:8b:0a:cf:0f:76:c3:62: 2d:bc:13:dd:c9:d8:e5:45:1c:d1:fd:a6:8a:49:e8: b9:9c:7c:06:ca:91:02:0f:cc:77:38:7e:b7:7f:4a: 7b:48:48:25:11:1f:7b:92:75:71:54:09:3d:fc:80: a1:b7:e4:41:64:09:73:3e:54:b8:58:71:20:5e:9b: be:bd:37:ff:3c:d7:1e:26:a7:51:d9:0b:4c:d9:02: 47:44:c6:7a:de:bf:4b:64:bd:ae:d8:8b:77:02:03: 59:71:59:aa:68:c0:3c:62:12:c6:2f:ca:b5:e6:6e: b9:00:18:25:de:4f:9a:e6:8b:80:1d:e5:c5:13:1d: b1:b4:e8:b9:83:27:e9:2f:95:20:79:8b:3b:73:09: fa:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:08:27:93:F2:20:81:18:63:40:C2:BB:64:CF:33:CD:3D:CD:2E:86 X509v3 Authority Key Identifier: keyid:74:DC:EA:A8:50:6A:2B:32:7F:87:A4:2D:07:41:AC:36:EE:DE:EB:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91249C2/E3A3DEE648C811F0B957261CC4F9AE02/dNzqqFBqKzJ_h6QtB0GsNu7e60k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dNzqqFBqKzJ_h6QtB0GsNu7e60k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91249C2/E3A3DEE648C811F0B957261CC4F9AE02/dNzqqFBqKzJ_h6QtB0GsNu7e60k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:19:2a:e1:e2:8c:3a:37:07:dc:b3:1c:21:64:6b:04:9b:34: 2d:fb:7e:47:91:6c:89:79:5d:7d:d2:06:a2:fe:f0:c4:d2:c8: ce:2f:79:e7:e9:9a:a8:c3:d3:64:b4:9b:29:65:83:d4:35:85: 47:13:b8:35:cc:2e:95:8f:a4:2b:c8:8e:b8:02:15:a1:5c:33: ad:5b:9e:0c:8b:c0:e6:4c:0f:20:21:6c:c2:73:bc:07:95:67: 85:96:22:5f:c8:3e:a0:ce:0b:52:d9:69:eb:9a:77:ef:c6:ca: 5b:f3:62:1d:42:99:ab:0a:e8:f0:0e:ed:92:08:f8:a9:19:bb: 29:45:df:49:9d:21:61:5d:37:2b:6b:fe:3c:53:98:a7:9b:0f: 48:ff:94:5e:02:58:71:63:01:fa:3c:52:46:70:f5:1d:92:6a: 32:a9:fb:98:3b:29:9c:7b:3a:38:b7:c8:8d:d6:0c:9f:65:1d: 94:1c:4a:ef:04:c3:3b:fe:03:6c:64:d0:28:55:c6:fe:81:08: 1b:c9:76:43:84:ad:bc:4d:73:4a:09:b7:9d:38:2b:b6:fa:6b: ca:e3:67:87:09:da:db:1c:b1:92:9d:8e:d6:04:7d:02:a5:6e: ef:a1:05:0e:ce:03:23:fb:47:e1:48:af:28:3a:c6:4f:43:85: 7f:b9:0d:ac -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy NDlDMjExMC8GA1UEBRMoNzREQ0VBQTg1MDZBMkIzMjdGODdBNDJEMDc0MUFDMzZF RURFRUI0OTAeFw0yNTA3MDEwODU1NTBaFw0yNTA3MDgwODU1NTBaMBgxFjAUBgNV BAMTDTY4NjNhMjk2LTJlNzkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC4SVjidKHaj4uuXGZ/9RF2p8EgLPT57PPFFaC+4hty6Bm6ZzQ+IdtEI9OhEZ+e oqjWmLe9FIR+WeEPnxcnuWaZvwmtox6di78z68dAQfY4QseXpdbDPDwkROodabFt 6MnI+d4Nk9Qpk8OhA+yCqNPViwrPD3bDYi28E93J2OVFHNH9popJ6LmcfAbKkQIP zHc4frd/SntISCURH3uSdXFUCT38gKG35EFkCXM+VLhYcSBem769N/881x4mp1HZ C0zZAkdExnrev0tkva7Yi3cCA1lxWapowDxiEsYvyrXmbrkAGCXeT5rmi4Ad5cUT HbG06LmDJ+kvlSB5iztzCfqVAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUQQgnk/Ig gRhjQMK7ZM8zzT3NLoYwHwYDVR0jBBgwFoAUdNzqqFBqKzJ/h6QtB0GsNu7e60kw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI0OUMyL0UzQTNERUU2NDhD ODExRjBCOTU3MjYxQ0M0RjlBRTAyL2ROenFxRkJxS3pKX2g2UXRCMEdzTnU3ZTYw ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZE56cXFGQnFLekpfaDZRdEIwR3NOdTdlNjBrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI0 OUMyL0UzQTNERUU2NDhDODExRjBCOTU3MjYxQ0M0RjlBRTAyL2ROenFxRkJxS3pK X2g2UXRCMEdzTnU3ZTYway5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAkZKuHijDo3B9yzHCFkawSbNC37fkeRbIl5XX3SBqL+8MTSyM4veefp mqjD02S0myllg9Q1hUcTuDXMLpWPpCvIjrgCFaFcM61bngyLwOZMDyAhbMJzvAeV Z4WWIl/IPqDOC1LZaeuad+/GylvzYh1CmasK6PAO7ZII+KkZuylF30mdIWFdNytr /jxTmKebD0j/lF4CWHFjAfo8UkZw9R2SajKp+5g7KZx7Oji3yI3WDJ9lHZQcSu8E wzv+A2xk0ChVxv6BCBvJdkOErbxNc0oJt504K7b6a8rjZ4cJ2tscsZKdjtYEfQKl bu+hBQ7OAyP7R+FIryg6xk9DhX+5Daw= -----END CERTIFICATE-----Generated at Tue Jul 1 13:09:53 2025 by rpki-client