$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5098/C6809196AC9711E6A491DC17C4F9AE02/CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.mft File: CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.mft (raw, json) Hash identifier: Y/fr0kL73TVwb8Jvjkl3RifePDStBBBaOddZeLwOt5k= Subject key identifier: 5C:FD:C5:67:AB:3C:4F:F1:50:7C:B4:43:25:7E:73:19:50:29:3A:2E Authority key identifier: 09:97:14:A7:0E:6F:40:12:89:10:82:09:D6:A7:F4:85:9F:98:00:CC Certificate issuer: /CN=A91A5098/serialNumber=099714A70E6F401289108209D6A7F4859F9800CC Certificate serial: 1D97 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5098/C6809196AC9711E6A491DC17C4F9AE02/CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.mft Manifest number: 1D7F Signing time: Wed 02 Jul 2025 16:15:37 +0000 Manifest this update: Wed 02 Jul 2025 16:15:36 +0000 Manifest next update: Wed 09 Jul 2025 16:15:36 +0000 Files and hashes: 1: CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.crl (hash: Dm4aMwvm9Dk7f/bA0UtDShMpipeJaWrxoylEqoU/nr8=) 2: 945DB376E34711EE87868164C4F9AE02.roa (hash: NAFJJXNP6W1IL/8p5XX1DsTHhpW+KT2jLZylfntYa8I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5098/C6809196AC9711E6A491DC17C4F9AE02/CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.crl rsync://rpki.apnic.net/member_repository/A91A5098/C6809196AC9711E6A491DC17C4F9AE02/CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 16:15:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7575 (0x1d97) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5098, serialNumber=099714A70E6F401289108209D6A7F4859F9800CC Validity Not Before: Jul 2 16:15:36 2025 GMT Not After : Jul 9 16:15:36 2025 GMT Subject: CN=68655b28-313b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:12:a7:21:8c:84:2b:ee:3e:cc:a7:1d:04:5f: 1e:ea:c1:5e:6e:71:fa:ba:67:e2:47:30:ae:55:bf: c7:49:0e:7d:fb:73:2d:e0:0c:1d:63:9a:5f:26:0f: 8c:87:12:59:4b:f9:30:c6:6b:66:fb:45:4a:f9:ed: 18:36:5d:f8:0d:c1:63:04:e0:64:ee:a0:62:66:45: 8a:59:f6:14:0b:89:2a:09:93:9e:15:af:c9:cf:2c: 31:b4:65:06:d6:d9:e6:da:62:d4:78:1e:99:64:0a: 18:e3:02:3e:58:cb:eb:03:6f:6e:8a:49:49:07:29: 3d:7f:01:30:90:f9:ff:c1:d6:5b:ee:5e:b4:49:77: ae:b8:10:16:d5:65:d6:36:da:76:59:cf:68:4e:61: a9:73:63:41:5e:62:f2:9b:97:ba:46:53:47:26:83: a7:73:80:77:9d:86:ce:04:81:92:1a:f6:ce:2c:35: 0c:75:44:93:7c:4c:45:26:75:89:2a:0e:5f:e6:1f: 68:d7:4c:a4:cb:6c:15:91:69:23:ca:8d:ba:70:92: f5:30:f0:9a:42:57:2c:53:fe:7c:5a:d3:1f:d5:8b: 8e:49:55:a4:15:4a:65:e7:b6:f1:97:08:38:bc:16: 9e:94:eb:9d:fd:68:79:3d:7b:8d:91:0d:49:ba:0b: 98:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:FD:C5:67:AB:3C:4F:F1:50:7C:B4:43:25:7E:73:19:50:29:3A:2E X509v3 Authority Key Identifier: keyid:09:97:14:A7:0E:6F:40:12:89:10:82:09:D6:A7:F4:85:9F:98:00:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5098/C6809196AC9711E6A491DC17C4F9AE02/CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5098/C6809196AC9711E6A491DC17C4F9AE02/CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:44:48:de:18:d0:88:e6:2a:f8:55:e9:e4:2d:4e:a4:24:45: eb:9e:59:e4:9e:a7:45:df:f4:43:80:1c:b5:75:80:12:a7:f0: c1:26:9d:b5:f3:b5:84:43:c8:b4:65:ec:70:49:7d:da:58:e1: ca:9a:1a:1f:0e:61:97:47:8d:0c:12:2b:ff:a5:69:6e:73:81: 4c:33:40:2e:ad:04:30:ab:81:b9:a5:c6:50:b8:67:1d:c2:14: d7:15:1e:96:41:e4:6a:99:a6:7e:c0:12:eb:eb:4e:9e:4b:f2: d2:04:58:df:24:08:37:d2:13:91:9b:ac:bb:a4:93:30:33:78: 53:42:b2:7b:15:7b:e6:4d:43:26:d2:fe:87:52:27:0f:d9:fd: 9f:4b:03:be:44:ad:43:b5:fc:b0:cd:f9:78:d1:d6:49:d5:3c: b0:71:c7:47:4a:66:c2:75:90:2f:76:b8:e2:f7:eb:5b:e0:59: c7:2e:c0:4b:75:2b:da:52:36:1b:19:49:f0:15:cb:e2:1a:8d: 57:22:44:61:ea:59:af:50:e2:4b:88:19:7a:f7:6d:ed:19:78: 74:3e:33:81:5f:7b:b4:a5:95:92:b9:7e:72:48:b6:4a:fa:8c: c3:21:b0:f0:7b:73:92:4a:82:5e:f7:65:b6:b2:49:29:c5:95: 35:45:6e:69 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHZcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTUwOTgxMTAvBgNVBAUTKDA5OTcxNEE3MEU2RjQwMTI4OTEwODIwOUQ2QTdGNDg1 OUY5ODAwQ0MwHhcNMjUwNzAyMTYxNTM2WhcNMjUwNzA5MTYxNTM2WjAYMRYwFAYD VQQDEw02ODY1NWIyOC0zMTNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1RKnIYyEK+4+zKcdBF8e6sFebnH6umfiRzCuVb/HSQ59+3Mt4AwdY5pfJg+M hxJZS/kwxmtm+0VK+e0YNl34DcFjBOBk7qBiZkWKWfYUC4kqCZOeFa/JzywxtGUG 1tnm2mLUeB6ZZAoY4wI+WMvrA29uiklJByk9fwEwkPn/wdZb7l60SXeuuBAW1WXW Ntp2Wc9oTmGpc2NBXmLym5e6RlNHJoOnc4B3nYbOBIGSGvbOLDUMdUSTfExFJnWJ Kg5f5h9o10yky2wVkWkjyo26cJL1MPCaQlcsU/58WtMf1YuOSVWkFUpl57bxlwg4 vBaelOud/Wh5PXuNkQ1JuguYTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFz9xWer PE/xUHy0QyV+cxlQKTouMB8GA1UdIwQYMBaAFAmXFKcOb0ASiRCCCdan9IWfmADM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTA5OC9DNjgwOTE5NkFD OTcxMUU2QTQ5MURDMTdDNEY5QUUwMi9DWmNVcHc1dlFCS0pFSUlKMXFmMGhaLVlB TXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NaY1VwdzV2UUJLSkVJSUoxcWYwaFotWUFNdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NTA5OC9DNjgwOTE5NkFDOTcxMUU2QTQ5MURDMTdDNEY5QUUwMi9DWmNVcHc1dlFC S0pFSUlKMXFmMGhaLVlBTXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCTREjeGNCI5ir4VenkLU6kJEXrnlnknqdF3/RDgBy1dYASp/DBJp21 87WEQ8i0ZexwSX3aWOHKmhofDmGXR40MEiv/pWluc4FMM0AurQQwq4G5pcZQuGcd whTXFR6WQeRqmaZ+wBLr606eS/LSBFjfJAg30hORm6y7pJMwM3hTQrJ7FXvmTUMm 0v6HUicP2f2fSwO+RK1Dtfywzfl40dZJ1TywccdHSmbCdZAvdrji9+tb4FnHLsBL dSvaUjYbGUnwFcviGo1XIkRh6lmvUOJLiBl6923tGXh0PjOBX3u0pZWSuX5ySLZK +ozDIbDwe3OSSoJe92W2skkpxZU1RW5p -----END CERTIFICATE-----Generated at Thu Jul 3 14:58:42 2025 by rpki-client