$ rpki-client -vvf rpki.apnic.net/member_repository/A91A284E/E905DCB0142311EB9FC4C224C4F9AE02/pWcIHaZpXdN7LCsbF6Abo95ZHss.mft File: pWcIHaZpXdN7LCsbF6Abo95ZHss.mft (raw, json) Hash identifier: MgxqLFCFlPxwhSZZToUTed8l7xkvgOl+4S70wN4Mgbg= Subject key identifier: 51:18:B4:E3:69:03:28:F5:06:63:17:A3:F2:47:25:EB:A6:A3:B5:0E Authority key identifier: A5:67:08:1D:A6:69:5D:D3:7B:2C:2B:1B:17:A0:1B:A3:DE:59:1E:CB Certificate issuer: /CN=A91A284E/serialNumber=A567081DA6695DD37B2C2B1B17A01BA3DE591ECB Certificate serial: 078E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pWcIHaZpXdN7LCsbF6Abo95ZHss.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A284E/E905DCB0142311EB9FC4C224C4F9AE02/pWcIHaZpXdN7LCsbF6Abo95ZHss.mft Manifest number: 0789 Signing time: Mon 30 Jun 2025 21:39:47 +0000 Manifest this update: Mon 30 Jun 2025 21:39:46 +0000 Manifest next update: Mon 07 Jul 2025 21:39:46 +0000 Files and hashes: 1: pWcIHaZpXdN7LCsbF6Abo95ZHss.crl (hash: DefjxCWJHre6U84+LDxyGtM/9uifxylb+QOGAiAw9GI=) 2: A3205106142511EB8FED0427C4F9AE02.roa (hash: VDZMZq0ravcenOYyOeGNgLAMJ2KdcwQBXJSf2fEc5SM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A284E/E905DCB0142311EB9FC4C224C4F9AE02/pWcIHaZpXdN7LCsbF6Abo95ZHss.crl rsync://rpki.apnic.net/member_repository/A91A284E/E905DCB0142311EB9FC4C224C4F9AE02/pWcIHaZpXdN7LCsbF6Abo95ZHss.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pWcIHaZpXdN7LCsbF6Abo95ZHss.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 21:39:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1934 (0x78e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A284E, serialNumber=A567081DA6695DD37B2C2B1B17A01BA3DE591ECB Validity Not Before: Jun 30 21:39:46 2025 GMT Not After : Jul 7 21:39:46 2025 GMT Subject: CN=68630422-3320 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:28:1f:8d:0d:5d:78:0e:ca:6c:28:98:d3:91: 20:b9:c0:5c:fd:8d:1e:a3:85:9e:02:e6:5e:5d:9e: f8:60:99:07:b9:30:ee:63:a7:db:ef:ef:2d:d6:f5: 4f:8f:a3:af:c4:c8:af:cb:14:da:f5:d4:07:b0:37: fc:d7:bf:2c:31:f5:7f:b0:74:6a:a6:4d:30:46:15: df:31:24:23:ac:c3:39:56:b4:f8:1b:5d:7a:92:b3: 24:a2:c5:51:3e:56:d5:64:24:a5:3f:20:7d:0b:b5: ca:71:3a:24:7d:47:22:a2:8d:7c:29:aa:f5:cd:d0: 0d:83:1d:d9:b5:ca:94:0c:f0:38:c3:80:10:9b:e2: 93:b6:6c:4c:a6:99:2a:af:eb:66:f7:5d:9f:81:7c: ec:1c:e8:35:9d:18:1b:af:b5:e4:3e:15:0b:bc:6c: a3:03:48:57:b0:7b:61:eb:4b:3a:fb:ae:42:0b:9a: f7:1e:c4:ea:19:21:8c:ce:89:6d:d2:23:8c:a0:e8: 1f:a7:22:bf:90:29:d9:df:0d:11:a2:40:07:48:67: a8:e9:ae:49:9e:3a:19:95:df:fb:da:fb:81:c1:80: 34:04:a5:47:99:b4:20:eb:4f:4e:b2:c3:dd:da:61: e7:f6:2b:dc:ee:04:f1:0a:30:51:94:09:27:a4:c1: 18:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:18:B4:E3:69:03:28:F5:06:63:17:A3:F2:47:25:EB:A6:A3:B5:0E X509v3 Authority Key Identifier: keyid:A5:67:08:1D:A6:69:5D:D3:7B:2C:2B:1B:17:A0:1B:A3:DE:59:1E:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A284E/E905DCB0142311EB9FC4C224C4F9AE02/pWcIHaZpXdN7LCsbF6Abo95ZHss.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pWcIHaZpXdN7LCsbF6Abo95ZHss.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A284E/E905DCB0142311EB9FC4C224C4F9AE02/pWcIHaZpXdN7LCsbF6Abo95ZHss.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:8c:56:50:c8:d3:27:15:66:c9:1e:cd:0a:85:45:6e:9d:d6: 0b:8c:19:12:fb:50:d0:36:90:69:0d:da:a6:82:50:1d:ef:b8: b6:7c:78:ff:c0:89:ce:44:34:b9:34:f9:12:7b:0c:27:b9:13: 4e:30:22:df:38:49:23:c2:b9:d3:7c:f9:85:41:6c:dc:fa:d1: cb:3b:dc:cb:23:4c:b9:22:58:07:a4:b7:12:86:66:1a:52:8a: 3c:39:32:a7:ca:47:22:8f:ad:92:e9:f0:2e:7c:75:09:d8:ef: db:40:ad:99:03:b0:2e:08:fb:61:3c:b5:2a:79:c8:96:92:a4: c6:16:05:6d:a1:8a:ce:57:ad:f3:eb:48:62:c9:66:22:6c:fc: a9:18:16:9a:1b:03:a8:1e:02:80:ba:80:51:99:7b:20:6d:04: b5:62:a4:92:e1:71:01:ae:43:3b:2c:ab:56:55:fa:a6:9d:85: d6:f5:3f:e9:b9:10:14:64:03:10:5c:1c:99:44:aa:90:06:80: f3:77:1a:ce:e3:f8:3b:d4:f3:5c:c9:86:8b:0d:2d:58:3b:f3: 01:24:84:7f:da:85:ec:bc:08:ef:2c:05:3e:e9:cf:89:78:02: 32:df:93:18:5c:d6:99:fa:df:a1:78:bb:89:79:25:bf:db:5f: 49:5f:9d:6d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB44wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTI4NEUxMTAvBgNVBAUTKEE1NjcwODFEQTY2OTVERDM3QjJDMkIxQjE3QTAxQkEz REU1OTFFQ0IwHhcNMjUwNjMwMjEzOTQ2WhcNMjUwNzA3MjEzOTQ2WjAYMRYwFAYD VQQDEw02ODYzMDQyMi0zMzIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3SgfjQ1deA7KbCiY05EgucBc/Y0eo4WeAuZeXZ74YJkHuTDuY6fb7+8t1vVP j6OvxMivyxTa9dQHsDf8178sMfV/sHRqpk0wRhXfMSQjrMM5VrT4G116krMkosVR PlbVZCSlPyB9C7XKcTokfUcioo18Kar1zdANgx3ZtcqUDPA4w4AQm+KTtmxMppkq r+tm912fgXzsHOg1nRgbr7XkPhULvGyjA0hXsHth60s6+65CC5r3HsTqGSGMzolt 0iOMoOgfpyK/kCnZ3w0RokAHSGeo6a5JnjoZld/72vuBwYA0BKVHmbQg609OssPd 2mHn9ivc7gTxCjBRlAknpMEYbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFEYtONp Ayj1BmMXo/JHJeumo7UOMB8GA1UdIwQYMBaAFKVnCB2maV3TeywrGxegG6PeWR7L MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMjg0RS9FOTA1RENCMDE0 MjMxMUVCOUZDNEMyMjRDNEY5QUUwMi9wV2NJSGFacFhkTjdMQ3NiRjZBYm85NVpI c3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BXY0lIYVpwWGRON0xDc2JGNkFibzk1Wkhzcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Mjg0RS9FOTA1RENCMDE0MjMxMUVCOUZDNEMyMjRDNEY5QUUwMi9wV2NJSGFacFhk TjdMQ3NiRjZBYm85NVpIc3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZjFZQyNMnFWbJHs0KhUVundYLjBkS+1DQNpBpDdqmglAd77i2fHj/ wInORDS5NPkSewwnuRNOMCLfOEkjwrnTfPmFQWzc+tHLO9zLI0y5IlgHpLcShmYa Uoo8OTKnykcij62S6fAufHUJ2O/bQK2ZA7AuCPthPLUqeciWkqTGFgVtoYrOV63z 60hiyWYibPypGBaaGwOoHgKAuoBRmXsgbQS1YqSS4XEBrkM7LKtWVfqmnYXW9T/p uRAUZAMQXByZRKqQBoDzdxrO4/g71PNcyYaLDS1YO/MBJIR/2oXsvAjvLAU+6c+J eAIy35MYXNaZ+t+heLuJeSW/219JX51t -----END CERTIFICATE-----Generated at Wed Jul 2 10:19:24 2025 by rpki-client