$ rpki-client -vvf rpki.apnic.net/member_repository/A91923E1/2AF4B374322511ECA285F341C4F9AE02/664fmrSVbxg0tzUpNXyfPx4SBfA.mft File: 664fmrSVbxg0tzUpNXyfPx4SBfA.mft (raw, json) Hash identifier: N/G745yU5XdB7HUKoYj1rDURqId+tSChKewOJ5cEyb0= Subject key identifier: 01:95:EC:D8:4A:71:E6:96:D4:68:E2:7B:11:C0:D9:A6:DC:1F:18:40 Authority key identifier: EB:AE:1F:9A:B4:95:6F:18:34:B7:35:29:35:7C:9F:3F:1E:12:05:F0 Certificate issuer: /CN=A91923E1/serialNumber=EBAE1F9AB4956F1834B73529357C9F3F1E1205F0 Certificate serial: 04D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/664fmrSVbxg0tzUpNXyfPx4SBfA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91923E1/2AF4B374322511ECA285F341C4F9AE02/664fmrSVbxg0tzUpNXyfPx4SBfA.mft Manifest number: 04C7 Signing time: Thu 03 Jul 2025 00:14:11 +0000 Manifest this update: Thu 03 Jul 2025 00:14:10 +0000 Manifest next update: Thu 10 Jul 2025 00:14:10 +0000 Files and hashes: 1: 664fmrSVbxg0tzUpNXyfPx4SBfA.crl (hash: ajd6fz9af1ir+sAcKVoze6nvwUbEHSI/JB3MU5mDv1M=) 2: 42A39472C74E11ECB4AD656CC4F9AE02.roa (hash: fImPoQjcCGEMtVaG0vXMRn+nIx0n4x6cFQDmdGHL2YY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91923E1/2AF4B374322511ECA285F341C4F9AE02/664fmrSVbxg0tzUpNXyfPx4SBfA.crl rsync://rpki.apnic.net/member_repository/A91923E1/2AF4B374322511ECA285F341C4F9AE02/664fmrSVbxg0tzUpNXyfPx4SBfA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/664fmrSVbxg0tzUpNXyfPx4SBfA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 00:14:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1232 (0x4d0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91923E1, serialNumber=EBAE1F9AB4956F1834B73529357C9F3F1E1205F0 Validity Not Before: Jul 3 00:14:10 2025 GMT Not After : Jul 10 00:14:10 2025 GMT Subject: CN=6865cb52-923d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:c4:59:b9:a7:38:52:19:0f:d4:22:dc:c5:ee: 5f:5f:bf:2e:0c:b9:8c:33:4a:dc:02:1b:99:b0:af: df:de:0f:71:09:02:9a:07:73:18:bf:8b:c4:28:3e: 6d:ae:ef:63:38:28:b2:ef:84:8b:ba:29:a5:c6:fe: 31:08:e5:07:e7:90:52:4a:a7:02:cf:9f:6f:fd:e3: 20:5a:36:90:e6:c3:7d:64:11:c5:72:a8:1e:e2:39: b4:04:56:9f:55:4f:25:ca:71:de:fa:1d:f9:ad:d5: 5e:c5:b1:f0:1a:d2:b2:42:c7:c4:3c:a9:cf:79:ce: 6d:7a:cb:12:74:bf:d0:a1:21:00:ef:32:a9:f8:9a: 32:e9:67:fa:0c:61:13:e5:24:0c:40:06:bb:46:b6: 0f:24:59:2a:80:62:d2:18:bd:62:df:81:14:15:f1: c9:05:e1:2c:b4:f5:92:ea:d9:0f:c8:a8:b6:89:35: cd:28:bb:0e:6c:5f:dd:48:16:bd:9f:8e:2a:7a:a7: 49:37:bd:0e:d5:07:6f:5b:6f:93:65:25:c7:fe:78: 10:07:7a:ed:8e:2e:1f:e5:04:ff:2f:d1:7b:14:b3: d2:57:08:9c:df:2a:57:87:ea:d7:f8:71:19:8a:22: 2b:83:7f:ab:46:f6:2b:27:00:92:a3:7e:4d:f8:a6: fd:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:95:EC:D8:4A:71:E6:96:D4:68:E2:7B:11:C0:D9:A6:DC:1F:18:40 X509v3 Authority Key Identifier: keyid:EB:AE:1F:9A:B4:95:6F:18:34:B7:35:29:35:7C:9F:3F:1E:12:05:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91923E1/2AF4B374322511ECA285F341C4F9AE02/664fmrSVbxg0tzUpNXyfPx4SBfA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/664fmrSVbxg0tzUpNXyfPx4SBfA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91923E1/2AF4B374322511ECA285F341C4F9AE02/664fmrSVbxg0tzUpNXyfPx4SBfA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:80:fc:da:da:6a:05:60:58:eb:34:61:fe:f0:ac:09:ad:56: 02:94:6b:48:da:9d:3b:e9:2e:3d:ad:0a:01:02:ad:b6:2b:98: 3e:1a:1b:df:4e:b7:ef:b0:b1:6b:d5:9e:d4:e6:0b:49:c6:fa: 25:64:7d:b4:c6:b5:12:dc:c0:1b:52:be:d0:4f:a7:94:fc:5b: 14:24:25:03:f3:15:a2:d9:b7:7d:dd:71:ba:b2:60:ee:04:4d: f8:5d:da:c6:69:ff:56:02:0d:e5:f7:d8:15:cb:83:a4:61:ba: 71:0d:f1:d0:1b:84:38:6a:d1:47:07:b3:6a:70:08:c1:c4:95: 8f:9a:0c:d2:08:27:fd:a5:94:b0:dc:5d:1b:aa:83:4a:0f:10: 20:66:da:0d:a5:ac:11:4a:f7:44:7a:7c:12:0e:6e:ca:49:e5: 04:ec:d6:62:22:1b:d8:e2:c7:28:bc:5a:48:52:d0:bf:d0:3e: 9e:53:72:2f:ad:70:9a:48:36:f6:86:6a:2a:98:33:1c:7d:57: c2:b1:6e:db:b6:b9:5f:af:b8:e8:84:9f:b8:af:cb:c6:34:56: 37:7e:34:e9:c0:82:df:d9:49:05:bd:11:73:ec:a1:98:6e:21: cf:ac:55:5d:c2:a3:cd:a8:0f:b1:11:92:ab:98:d6:33:b1:ea: 1e:6a:04:b6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBNAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTIzRTExMTAvBgNVBAUTKEVCQUUxRjlBQjQ5NTZGMTgzNEI3MzUyOTM1N0M5RjNG MUUxMjA1RjAwHhcNMjUwNzAzMDAxNDEwWhcNMjUwNzEwMDAxNDEwWjAYMRYwFAYD VQQDEw02ODY1Y2I1Mi05MjNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvMRZuac4UhkP1CLcxe5fX78uDLmMM0rcAhuZsK/f3g9xCQKaB3MYv4vEKD5t ru9jOCiy74SLuimlxv4xCOUH55BSSqcCz59v/eMgWjaQ5sN9ZBHFcqge4jm0BFaf VU8lynHe+h35rdVexbHwGtKyQsfEPKnPec5tessSdL/QoSEA7zKp+Joy6Wf6DGET 5SQMQAa7RrYPJFkqgGLSGL1i34EUFfHJBeEstPWS6tkPyKi2iTXNKLsObF/dSBa9 n44qeqdJN70O1QdvW2+TZSXH/ngQB3rtji4f5QT/L9F7FLPSVwic3ypXh+rX+HEZ iiIrg3+rRvYrJwCSo35N+Kb9+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAGV7NhK ceaW1GjiexHA2abcHxhAMB8GA1UdIwQYMBaAFOuuH5q0lW8YNLc1KTV8nz8eEgXw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MjNFMS8yQUY0QjM3NDMy MjUxMUVDQTI4NUYzNDFDNEY5QUUwMi82NjRmbXJTVmJ4ZzB0elVwTlh5ZlB4NFNC ZkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzY2NGZtclNWYnhnMHR6VXBOWHlmUHg0U0JmQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MjNFMS8yQUY0QjM3NDMyMjUxMUVDQTI4NUYzNDFDNEY5QUUwMi82NjRmbXJTVmJ4 ZzB0elVwTlh5ZlB4NFNCZkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAkgPza2moFYFjrNGH+8KwJrVYClGtI2p076S49rQoBAq22K5g+Ghvf TrfvsLFr1Z7U5gtJxvolZH20xrUS3MAbUr7QT6eU/FsUJCUD8xWi2bd93XG6smDu BE34XdrGaf9WAg3l99gVy4OkYbpxDfHQG4Q4atFHB7NqcAjBxJWPmgzSCCf9pZSw 3F0bqoNKDxAgZtoNpawRSvdEenwSDm7KSeUE7NZiIhvY4scovFpIUtC/0D6eU3Iv rXCaSDb2hmoqmDMcfVfCsW7btrlfr7johJ+4r8vGNFY3fjTpwILf2UkFvRFz7KGY biHPrFVdwqPNqA+xEZKrmNYzseoeagS2 -----END CERTIFICATE-----Generated at Thu Jul 3 14:51:05 2025 by rpki-client