$ rpki-client -vvf rpki.apnic.net/member_repository/A91820CE/B73069C66BE911EBB7D5560DC4F9AE02/csG8nD23m0PzVvI_lWiEjJz7jdU.mft File: csG8nD23m0PzVvI_lWiEjJz7jdU.mft (raw, json) Hash identifier: gquPICUSPA1QyDPz7tlD0cswWERiw7z+JrDShKGJQxQ= Subject key identifier: 21:30:48:62:5A:73:D7:E2:AF:C7:7B:1F:03:8C:13:49:C6:F5:65:66 Authority key identifier: 72:C1:BC:9C:3D:B7:9B:43:F3:56:F2:3F:95:68:84:8C:9C:FB:8D:D5 Certificate issuer: /CN=A91820CE/serialNumber=72C1BC9C3DB79B43F356F23F9568848C9CFB8DD5 Certificate serial: 06B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/csG8nD23m0PzVvI_lWiEjJz7jdU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91820CE/B73069C66BE911EBB7D5560DC4F9AE02/csG8nD23m0PzVvI_lWiEjJz7jdU.mft Manifest number: 06AE Signing time: Wed 02 Jul 2025 22:26:43 +0000 Manifest this update: Wed 02 Jul 2025 22:26:42 +0000 Manifest next update: Wed 09 Jul 2025 22:26:42 +0000 Files and hashes: 1: csG8nD23m0PzVvI_lWiEjJz7jdU.crl (hash: tYGAK7sB3PpRhCBFGYRkH1L3Wi4BqetxZX0I7flvAdI=) 2: EB292D8A6BF811EB8E899650C4F9AE02.roa (hash: QHZWlLh2PyAY4WTgaNICz7qTAAizZpA7yqBBQ8slHlk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91820CE/B73069C66BE911EBB7D5560DC4F9AE02/csG8nD23m0PzVvI_lWiEjJz7jdU.crl rsync://rpki.apnic.net/member_repository/A91820CE/B73069C66BE911EBB7D5560DC4F9AE02/csG8nD23m0PzVvI_lWiEjJz7jdU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/csG8nD23m0PzVvI_lWiEjJz7jdU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 22:26:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1716 (0x6b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91820CE, serialNumber=72C1BC9C3DB79B43F356F23F9568848C9CFB8DD5 Validity Not Before: Jul 2 22:26:42 2025 GMT Not After : Jul 9 22:26:42 2025 GMT Subject: CN=6865b223-b70f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:40:f0:78:18:41:1b:06:ee:0a:f6:9d:64:34: ae:25:65:f8:13:0a:f5:1c:e2:6b:a7:c2:73:4a:6a: 66:ee:52:d3:8c:27:81:39:ad:6a:6c:7d:b8:17:fa: 8a:57:10:50:48:fc:a7:9e:b3:e8:4b:dd:71:4b:b9: e2:13:13:64:29:9a:80:ba:b6:97:81:23:ec:7f:5e: 7c:d6:d0:4d:17:19:59:26:8c:53:a4:65:f3:ed:49: 5c:33:b1:6e:31:8f:4a:4d:81:f0:29:7b:9f:5b:14: f6:7c:b6:24:b0:54:9b:ec:42:ad:e1:66:66:df:d3: 41:20:a4:b7:e4:3b:42:0e:98:17:de:3d:31:56:e1: 1b:7d:e4:9a:95:b4:7e:73:69:f8:82:43:1c:34:c5: c8:ba:cf:92:68:5b:a3:42:8f:b8:2e:7c:fa:49:e0: 11:e6:82:fe:2e:b8:08:38:85:f8:75:8d:dc:fe:17: ed:b4:0c:c7:2a:81:c8:22:4d:cc:06:07:9b:ac:0c: 4d:f5:7e:7f:a8:7b:5b:09:81:52:51:21:95:ea:96: 98:a4:c8:d3:cd:e4:80:5d:70:6a:8a:45:c7:11:94: 53:e4:55:de:3e:6f:b1:e4:cb:67:ed:f1:25:7e:14: 99:f2:11:35:28:5b:e7:cb:6b:e3:66:78:b9:5d:36: d7:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:30:48:62:5A:73:D7:E2:AF:C7:7B:1F:03:8C:13:49:C6:F5:65:66 X509v3 Authority Key Identifier: keyid:72:C1:BC:9C:3D:B7:9B:43:F3:56:F2:3F:95:68:84:8C:9C:FB:8D:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91820CE/B73069C66BE911EBB7D5560DC4F9AE02/csG8nD23m0PzVvI_lWiEjJz7jdU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/csG8nD23m0PzVvI_lWiEjJz7jdU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91820CE/B73069C66BE911EBB7D5560DC4F9AE02/csG8nD23m0PzVvI_lWiEjJz7jdU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:58:48:c8:cb:52:1f:ca:ff:36:96:e7:8d:31:91:60:b2:ef: 87:b0:22:e7:27:39:36:62:cf:fc:44:2d:e0:b0:de:10:62:56: d6:a6:cf:c1:94:09:6d:74:af:24:a3:97:5b:43:12:f5:bc:47: c2:6e:77:6d:b1:cf:ca:ef:12:2a:11:48:45:13:0b:a8:6e:4a: 55:35:b0:25:5d:9d:f0:8a:29:72:13:1d:be:17:9c:51:19:4f: 01:ec:79:47:e6:c8:37:7d:91:32:2c:ec:0f:30:be:ad:d6:b7: cc:b6:fc:76:ee:e9:d5:70:21:f6:2b:36:12:b2:8d:72:35:ca: a9:42:68:27:b1:4a:4c:08:7f:a7:d4:2a:36:a6:66:b8:3b:8c: 54:ba:f5:58:d8:5a:da:65:33:4a:00:b4:b2:9d:a4:51:8a:89: 3e:f5:dc:e2:f7:85:93:50:90:f5:49:27:89:90:3b:38:7e:01: 86:bc:f7:a4:8b:c9:95:5b:bf:5f:d1:2b:65:1a:96:13:5f:15: 59:e6:e7:a2:cb:98:be:a1:89:5f:0d:c3:db:93:c7:02:fa:55: 06:1c:a0:3e:34:80:2a:d9:b3:8f:53:98:81:20:c2:b7:11:68: 35:78:e6:e7:74:4a:3a:1f:82:d3:ed:41:75:a6:76:eb:e9:57: 01:7f:44:36 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBrQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODIwQ0UxMTAvBgNVBAUTKDcyQzFCQzlDM0RCNzlCNDNGMzU2RjIzRjk1Njg4NDhD OUNGQjhERDUwHhcNMjUwNzAyMjIyNjQyWhcNMjUwNzA5MjIyNjQyWjAYMRYwFAYD VQQDEw02ODY1YjIyMy1iNzBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArUDweBhBGwbuCvadZDSuJWX4Ewr1HOJrp8JzSmpm7lLTjCeBOa1qbH24F/qK VxBQSPynnrPoS91xS7niExNkKZqAuraXgSPsf1581tBNFxlZJoxTpGXz7UlcM7Fu MY9KTYHwKXufWxT2fLYksFSb7EKt4WZm39NBIKS35DtCDpgX3j0xVuEbfeSalbR+ c2n4gkMcNMXIus+SaFujQo+4Lnz6SeAR5oL+LrgIOIX4dY3c/hfttAzHKoHIIk3M BgebrAxN9X5/qHtbCYFSUSGV6paYpMjTzeSAXXBqikXHEZRT5FXePm+x5Mtn7fEl fhSZ8hE1KFvny2vjZni5XTbXQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCEwSGJa c9fir8d7HwOME0nG9WVmMB8GA1UdIwQYMBaAFHLBvJw9t5tD81byP5VohIyc+43V MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MjBDRS9CNzMwNjlDNjZC RTkxMUVCQjdENTU2MERDNEY5QUUwMi9jc0c4bkQyM20wUHpWdklfbFdpRWpKejdq ZFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NzRzhuRDIzbTBQelZ2SV9sV2lFakp6N2pkVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MjBDRS9CNzMwNjlDNjZCRTkxMUVCQjdENTU2MERDNEY5QUUwMi9jc0c4bkQyM20w UHpWdklfbFdpRWpKejdqZFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCeWEjIy1Ifyv82lueNMZFgsu+HsCLnJzk2Ys/8RC3gsN4QYlbWps/B lAltdK8ko5dbQxL1vEfCbndtsc/K7xIqEUhFEwuobkpVNbAlXZ3wiilyEx2+F5xR GU8B7HlH5sg3fZEyLOwPML6t1rfMtvx27unVcCH2KzYSso1yNcqpQmgnsUpMCH+n 1Co2pma4O4xUuvVY2FraZTNKALSynaRRiok+9dzi94WTUJD1SSeJkDs4fgGGvPek i8mVW79f0StlGpYTXxVZ5ueiy5i+oYlfDcPbk8cC+lUGHKA+NIAq2bOPU5iBIMK3 EWg1eObndEo6H4LT7UF1pnbr6VcBf0Q2 -----END CERTIFICATE-----Generated at Thu Jul 3 10:20:31 2025 by rpki-client