$ rpki-client -vvf rpki.apnic.net/member_repository/A91A40AE/86215FD0FC3811EC9D1AA71EC4F9AE02/S91WBs7jg4cxsnbrWuJ0CVXm6DU.mft File: S91WBs7jg4cxsnbrWuJ0CVXm6DU.mft (raw, json) Hash identifier: SsGG8eKfSSnxc4oA7HvNhb3ju+RUJzTsVB8FD0u07p0= Subject key identifier: F3:4D:F0:71:13:44:9A:52:03:F2:51:3F:68:2A:F2:3F:92:62:35:AE Authority key identifier: 4B:DD:56:06:CE:E3:83:87:31:B2:76:EB:5A:E2:74:09:55:E6:E8:35 Certificate issuer: /CN=A91A40AE/serialNumber=4BDD5606CEE3838731B276EB5AE2740955E6E835 Certificate serial: 02B8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S91WBs7jg4cxsnbrWuJ0CVXm6DU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A40AE/86215FD0FC3811EC9D1AA71EC4F9AE02/S91WBs7jg4cxsnbrWuJ0CVXm6DU.mft Manifest number: 02B4 Signing time: Tue 01 Jul 2025 02:07:20 +0000 Manifest this update: Tue 01 Jul 2025 02:07:20 +0000 Manifest next update: Tue 08 Jul 2025 02:07:20 +0000 Files and hashes: 1: S91WBs7jg4cxsnbrWuJ0CVXm6DU.crl (hash: FDBItH7hroJ7Y6arVn9fukH6HzmkQFCXd/RSK1NdE/0=) 2: 0C2902B4FC3D11ECAD619C35C4F9AE02.roa (hash: MBRZFEnGY9HD1b044iv1jg/gd/S5QUVqB7co270dkzU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A40AE/86215FD0FC3811EC9D1AA71EC4F9AE02/S91WBs7jg4cxsnbrWuJ0CVXm6DU.crl rsync://rpki.apnic.net/member_repository/A91A40AE/86215FD0FC3811EC9D1AA71EC4F9AE02/S91WBs7jg4cxsnbrWuJ0CVXm6DU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S91WBs7jg4cxsnbrWuJ0CVXm6DU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 02:07:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 696 (0x2b8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A40AE, serialNumber=4BDD5606CEE3838731B276EB5AE2740955E6E835 Validity Not Before: Jul 1 02:07:20 2025 GMT Not After : Jul 8 02:07:20 2025 GMT Subject: CN=686342d8-842d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:0f:ce:79:35:ae:c9:55:47:e2:7b:02:8c:6a: 65:52:45:7c:4c:4b:b5:71:79:cd:5f:b3:67:d1:03: 1a:36:94:ae:b2:52:1b:e5:af:fe:32:ba:aa:1f:21: 5e:ad:b0:20:35:f9:7f:56:34:e4:52:56:97:4d:a1: 58:07:65:b3:09:d6:4e:88:3b:44:07:54:9e:71:ae: e0:3a:9e:3d:b2:39:32:9c:c5:7a:3e:36:00:7e:91: 4c:ee:fe:24:9a:11:27:e1:5e:74:7c:59:bc:75:bc: 50:e7:a8:d9:0f:0a:4d:42:c8:01:f6:b5:43:40:0a: fd:11:a1:81:bd:00:ff:28:3a:8a:a1:0d:47:3a:21: da:50:71:95:4b:22:5d:78:90:42:68:11:43:81:be: 74:f1:d7:da:92:9c:5b:02:56:f6:2d:12:d4:f4:1e: c3:20:5f:60:4b:8b:71:0f:fc:96:9e:d3:66:cc:f6: 1a:08:ad:0f:3b:c1:bc:95:27:1e:14:3f:3a:08:2b: d0:6e:94:a8:6c:3c:94:29:55:fc:01:f3:49:88:55: 7b:59:21:be:62:21:1f:19:cd:ef:d8:6d:9f:7d:cd: a9:cc:4e:fc:dc:00:16:73:57:e7:62:73:62:15:47: 89:a2:65:cd:fc:97:3d:68:43:19:f5:3e:84:61:fd: 64:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:4D:F0:71:13:44:9A:52:03:F2:51:3F:68:2A:F2:3F:92:62:35:AE X509v3 Authority Key Identifier: keyid:4B:DD:56:06:CE:E3:83:87:31:B2:76:EB:5A:E2:74:09:55:E6:E8:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A40AE/86215FD0FC3811EC9D1AA71EC4F9AE02/S91WBs7jg4cxsnbrWuJ0CVXm6DU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S91WBs7jg4cxsnbrWuJ0CVXm6DU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A40AE/86215FD0FC3811EC9D1AA71EC4F9AE02/S91WBs7jg4cxsnbrWuJ0CVXm6DU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:26:11:62:4b:47:e1:87:25:34:29:46:13:9e:e9:4e:a1:ff: f7:41:a6:9c:b1:a0:51:8d:e0:ba:e9:3c:c0:1b:bc:74:40:ea: 39:1d:80:ce:1c:6f:fb:0d:62:0a:48:cb:5f:a6:ec:c0:ba:c3: 42:0d:d4:19:84:3f:f3:8e:24:3a:32:dd:d5:63:ac:75:e9:c3: 83:80:73:76:6a:13:ca:b8:a1:cc:49:e3:d2:82:00:8c:3b:10: d6:0f:a7:20:a8:13:df:48:4f:d2:2a:55:5f:f2:22:71:3d:dd: 9e:86:37:c1:f8:4f:16:ec:b4:86:b5:78:46:09:28:ba:6f:e3: 0e:03:32:88:66:2c:ad:59:37:b6:af:f9:6e:1b:94:21:8a:ea: e0:d9:90:f1:27:6e:a3:ed:58:25:e2:f0:1b:c8:2d:66:67:6b: 73:b0:73:c3:e0:16:d6:2b:bb:3c:2b:2d:2f:d0:e9:0b:26:53: 6d:f3:20:90:1d:19:8f:bc:e4:b4:12:a3:13:99:2d:0a:f8:4a: f4:f1:63:65:86:6a:08:58:5e:97:0e:cd:1e:6e:22:1c:8b:19: aa:31:44:15:85:88:6a:16:37:0a:b0:30:4b:d1:59:fd:4a:fa: 5e:6a:87:7c:e6:c0:32:76:d1:e1:40:f9:75:f1:5d:12:c2:3a: ad:7c:4c:de -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICArgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQwQUUxMTAvBgNVBAUTKDRCREQ1NjA2Q0VFMzgzODczMUIyNzZFQjVBRTI3NDA5 NTVFNkU4MzUwHhcNMjUwNzAxMDIwNzIwWhcNMjUwNzA4MDIwNzIwWjAYMRYwFAYD VQQDEw02ODYzNDJkOC04NDJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmw/OeTWuyVVH4nsCjGplUkV8TEu1cXnNX7Nn0QMaNpSuslIb5a/+MrqqHyFe rbAgNfl/VjTkUlaXTaFYB2WzCdZOiDtEB1Seca7gOp49sjkynMV6PjYAfpFM7v4k mhEn4V50fFm8dbxQ56jZDwpNQsgB9rVDQAr9EaGBvQD/KDqKoQ1HOiHaUHGVSyJd eJBCaBFDgb508dfakpxbAlb2LRLU9B7DIF9gS4txD/yWntNmzPYaCK0PO8G8lSce FD86CCvQbpSobDyUKVX8AfNJiFV7WSG+YiEfGc3v2G2ffc2pzE783AAWc1fnYnNi FUeJomXN/Jc9aEMZ9T6EYf1k3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPNN8HET RJpSA/JRP2gq8j+SYjWuMB8GA1UdIwQYMBaAFEvdVgbO44OHMbJ261ridAlV5ug1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDBBRS84NjIxNUZEMEZD MzgxMUVDOUQxQUE3MUVDNEY5QUUwMi9TOTFXQnM3amc0Y3hzbmJyV3VKMENWWG02 RFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1M5MVdCczdqZzRjeHNuYnJXdUowQ1ZYbTZEVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDBBRS84NjIxNUZEMEZDMzgxMUVDOUQxQUE3MUVDNEY5QUUwMi9TOTFXQnM3amc0 Y3hzbmJyV3VKMENWWG02RFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBwJhFiS0fhhyU0KUYTnulOof/3QaacsaBRjeC66TzAG7x0QOo5HYDO HG/7DWIKSMtfpuzAusNCDdQZhD/zjiQ6Mt3VY6x16cODgHN2ahPKuKHMSePSggCM OxDWD6cgqBPfSE/SKlVf8iJxPd2ehjfB+E8W7LSGtXhGCSi6b+MOAzKIZiytWTe2 r/luG5Qhiurg2ZDxJ26j7Vgl4vAbyC1mZ2tzsHPD4BbWK7s8Ky0v0OkLJlNt8yCQ HRmPvOS0EqMTmS0K+Er08WNlhmoIWF6XDs0ebiIcixmqMUQVhYhqFjcKsDBL0Vn9 Svpeaod85sAydtHhQPl18V0SwjqtfEze -----END CERTIFICATE-----Generated at Thu Jul 3 00:51:25 2025 by rpki-client