$ rpki-client -vvf rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/RIvZcaMGqwNjmecW3CIcozj1i1k.mft File: RIvZcaMGqwNjmecW3CIcozj1i1k.mft (raw, json) Hash identifier: fF2LveyPYA76argogxauU3gLa2Gfy1jJ95gbQA2jU1w= Subject key identifier: F8:23:69:FA:02:5A:85:FD:03:A8:82:89:08:78:16:EE:F0:08:8E:AB Authority key identifier: 44:8B:D9:71:A3:06:AB:03:63:99:E7:16:DC:22:1C:A3:38:F5:8B:59 Certificate issuer: /CN=A91301D5/serialNumber=448BD971A306AB036399E716DC221CA338F58B59 Certificate serial: 1522 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RIvZcaMGqwNjmecW3CIcozj1i1k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/RIvZcaMGqwNjmecW3CIcozj1i1k.mft Manifest number: 14DA Signing time: Sat 28 Jun 2025 16:43:43 +0000 Manifest this update: Sat 28 Jun 2025 16:43:43 +0000 Manifest next update: Sat 05 Jul 2025 16:43:43 +0000 Files and hashes: 1: RIvZcaMGqwNjmecW3CIcozj1i1k.crl (hash: duU+QMsxbsQqlXvWfVRMENAYbBBGnyCWbVDC5hKBgZ8=) 2: 7338235CC06011EE882BC34AC4F9AE02.roa (hash: gzRITOkOOGrTx/TsBYiR/c3khv1Gc2m9Qh3FJnnq+g4=) 3: 743770A0C06011EE882BC34AC4F9AE02.roa (hash: wDUkAV/G8nH6a42xA1jspBcH2CyrvgBJPhHTMVF0vF4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/RIvZcaMGqwNjmecW3CIcozj1i1k.crl rsync://rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/RIvZcaMGqwNjmecW3CIcozj1i1k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RIvZcaMGqwNjmecW3CIcozj1i1k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 16:43:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5410 (0x1522) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91301D5, serialNumber=448BD971A306AB036399E716DC221CA338F58B59 Validity Not Before: Jun 28 16:43:43 2025 GMT Not After : Jul 5 16:43:43 2025 GMT Subject: CN=68601bbf-eca8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:23:ce:3d:4a:09:8e:50:43:03:e3:1e:45:6f: 59:c2:d1:67:99:f4:04:39:54:32:79:a4:d4:bb:13: f0:8a:1d:19:e9:30:71:02:93:00:86:ac:2e:4e:6d: a5:2d:4f:2e:cb:92:82:48:a5:5b:5e:3c:8f:16:24: cd:1e:ee:94:33:54:37:9b:00:58:1b:53:53:fb:fa: 0f:5b:3d:9e:f5:08:f4:c9:46:65:8a:b0:7c:64:0e: 7e:b5:be:7b:c3:7e:2d:01:af:91:55:af:55:20:7c: 88:08:b2:a1:37:e3:22:45:e0:c2:eb:6d:2d:52:e7: bf:06:d3:d9:e3:53:79:af:fa:c9:bb:74:23:0e:22: 7c:5f:f9:13:81:00:26:f2:7b:7d:37:45:98:f1:69: e7:d6:26:c0:94:35:f5:db:73:04:08:34:96:8d:1a: ca:31:44:be:6e:aa:3c:62:5f:10:81:90:75:7b:1b: 7a:51:a7:7c:2b:21:ab:78:33:b4:77:df:71:46:93: da:5b:a9:85:b2:55:1b:18:bf:be:d4:d1:26:9c:dd: 3e:e3:dc:9a:f5:50:db:55:38:7b:f2:3b:ed:be:19: 1b:a1:05:66:79:e5:97:cd:95:64:e2:4a:0c:d3:34: f0:cd:bf:92:1b:18:3b:eb:a7:bc:bb:73:43:b0:17: 9a:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:23:69:FA:02:5A:85:FD:03:A8:82:89:08:78:16:EE:F0:08:8E:AB X509v3 Authority Key Identifier: keyid:44:8B:D9:71:A3:06:AB:03:63:99:E7:16:DC:22:1C:A3:38:F5:8B:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/RIvZcaMGqwNjmecW3CIcozj1i1k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RIvZcaMGqwNjmecW3CIcozj1i1k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/RIvZcaMGqwNjmecW3CIcozj1i1k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:78:a7:85:f1:2a:10:1c:41:29:2a:fa:fb:6d:4a:30:2c:16: d7:19:33:d8:79:bc:6c:71:32:7d:eb:79:b7:50:69:f2:5d:d6: 4e:77:e1:ca:70:ed:75:38:00:99:44:e0:41:f7:b9:8a:6b:0f: 91:81:d8:b0:e9:b4:35:5a:18:e4:b2:1e:74:49:ec:d9:ef:cf: e3:ef:be:fa:30:a7:d3:72:0a:ef:56:67:05:f9:9b:89:b4:76: 20:7e:99:11:36:60:2b:73:2b:70:a0:f3:fc:a4:86:b5:b1:64: de:02:a1:81:80:78:c1:c2:a6:7a:2d:7a:2d:10:32:93:4f:75: 4a:5f:5d:e5:4f:3e:9b:b1:1c:fe:37:1f:3e:d3:35:10:ae:44: a3:37:cd:26:7e:46:31:21:18:7a:cb:45:fd:59:e6:eb:f0:be: 53:52:ab:32:9c:c0:ef:ea:26:74:58:97:de:9c:65:69:84:49: 90:ae:e6:56:1b:e3:f8:d5:50:80:cb:48:30:3c:77:b4:fc:a6: f0:8d:cc:a1:fd:d8:b8:49:8e:4c:b4:41:95:16:59:e6:69:a1: 2b:6b:27:83:d8:fc:9d:57:3f:f0:0f:c5:bd:37:28:fc:b1:b3: 19:e8:bb:86:86:d1:ab:bb:b0:2a:f7:52:2c:df:80:40:5c:34: 5e:6a:c8:8d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFSIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzAxRDUxMTAvBgNVBAUTKDQ0OEJEOTcxQTMwNkFCMDM2Mzk5RTcxNkRDMjIxQ0Ez MzhGNThCNTkwHhcNMjUwNjI4MTY0MzQzWhcNMjUwNzA1MTY0MzQzWjAYMRYwFAYD VQQDEw02ODYwMWJiZi1lY2E4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5iPOPUoJjlBDA+MeRW9ZwtFnmfQEOVQyeaTUuxPwih0Z6TBxApMAhqwuTm2l LU8uy5KCSKVbXjyPFiTNHu6UM1Q3mwBYG1NT+/oPWz2e9Qj0yUZlirB8ZA5+tb57 w34tAa+RVa9VIHyICLKhN+MiReDC620tUue/BtPZ41N5r/rJu3QjDiJ8X/kTgQAm 8nt9N0WY8Wnn1ibAlDX123MECDSWjRrKMUS+bqo8Yl8QgZB1ext6Uad8KyGreDO0 d99xRpPaW6mFslUbGL++1NEmnN0+49ya9VDbVTh78jvtvhkboQVmeeWXzZVk4koM 0zTwzb+SGxg766e8u3NDsBeaQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPgjafoC WoX9A6iCiQh4Fu7wCI6rMB8GA1UdIwQYMBaAFESL2XGjBqsDY5nnFtwiHKM49YtZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDFENS9ENEJFMDBENDYz RTUxMUU4QjVDRkU0MUFDNEY5QUUwMi9SSXZaY2FNR3F3TmptZWNXM0NJY296ajFp MWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JJdlpjYU1HcXdOam1lY1czQ0ljb3pqMWkxay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MDFENS9ENEJFMDBENDYzRTUxMUU4QjVDRkU0MUFDNEY5QUUwMi9SSXZaY2FNR3F3 TmptZWNXM0NJY296ajFpMWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBmeKeF8SoQHEEpKvr7bUowLBbXGTPYebxscTJ963m3UGnyXdZOd+HK cO11OACZROBB97mKaw+Rgdiw6bQ1Whjksh50SezZ78/j7776MKfTcgrvVmcF+ZuJ tHYgfpkRNmArcytwoPP8pIa1sWTeAqGBgHjBwqZ6LXotEDKTT3VKX13lTz6bsRz+ Nx8+0zUQrkSjN80mfkYxIRh6y0X9Webr8L5TUqsynMDv6iZ0WJfenGVphEmQruZW G+P41VCAy0gwPHe0/Kbwjcyh/di4SY5MtEGVFlnmaaErayeD2PydVz/wD8W9Nyj8 sbMZ6LuGhtGru7Aq91Is34BAXDReasiN -----END CERTIFICATE-----Generated at Sun Jun 29 21:04:03 2025 by rpki-client