$ rpki-client -vvf rpki.apnic.net/member_repository/A91A532D/EAA979FA0AC311EB964A8924C4F9AE02/h1tC98YnJXePVtlRtxLriHk0ikU.mft File: h1tC98YnJXePVtlRtxLriHk0ikU.mft (raw, json) Hash identifier: r8Sw1zKBLdM3N9n+EaRJ24Gukxd4EmPkf9ovjcaDd8A= Subject key identifier: 75:33:12:7B:78:EF:82:90:DF:3B:06:A8:13:A8:58:0B:FA:A9:D7:40 Authority key identifier: 87:5B:42:F7:C6:27:25:77:8F:56:D9:51:B7:12:EB:88:79:34:8A:45 Certificate issuer: /CN=A91A532D/serialNumber=875B42F7C62725778F56D951B712EB8879348A45 Certificate serial: 07B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h1tC98YnJXePVtlRtxLriHk0ikU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A532D/EAA979FA0AC311EB964A8924C4F9AE02/h1tC98YnJXePVtlRtxLriHk0ikU.mft Manifest number: 07A9 Signing time: Wed 02 Jul 2025 21:33:36 +0000 Manifest this update: Wed 02 Jul 2025 21:33:35 +0000 Manifest next update: Wed 09 Jul 2025 21:33:35 +0000 Files and hashes: 1: h1tC98YnJXePVtlRtxLriHk0ikU.crl (hash: JyA3sUBTcAJKGzU0Q1lLMnHX5v1FF9LQ2tWVIn/mTBc=) 2: 8C6AAF380AC511EB890DE026C4F9AE02.roa (hash: a4ANf8uGuOcHttQZdM48a5efk77lhvSIMBktbozPiW8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A532D/EAA979FA0AC311EB964A8924C4F9AE02/h1tC98YnJXePVtlRtxLriHk0ikU.crl rsync://rpki.apnic.net/member_repository/A91A532D/EAA979FA0AC311EB964A8924C4F9AE02/h1tC98YnJXePVtlRtxLriHk0ikU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h1tC98YnJXePVtlRtxLriHk0ikU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 21:33:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1970 (0x7b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A532D, serialNumber=875B42F7C62725778F56D951B712EB8879348A45 Validity Not Before: Jul 2 21:33:35 2025 GMT Not After : Jul 9 21:33:35 2025 GMT Subject: CN=6865a5af-19c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:3a:31:b8:01:44:f2:9f:dc:48:7c:a5:bb:cf: d1:67:8c:79:e1:92:8a:12:86:f3:60:24:05:99:90: 21:1e:2d:f6:ef:3f:50:8d:c9:14:47:5d:d3:d0:99: 65:15:9c:eb:d2:2b:95:a9:3c:d9:ea:a5:b6:72:5c: 07:63:e1:65:8b:6d:64:17:08:e3:56:5c:09:b5:de: d1:00:2a:07:d0:0a:de:e8:3c:f9:1c:6e:41:e4:73: 96:b2:db:eb:18:f3:1b:17:09:e7:a4:a8:fe:73:4c: 2f:0c:cb:4e:47:d7:90:57:af:20:6f:89:1b:c0:cd: 1e:d8:8d:e8:10:21:cf:c6:bf:0b:9a:ae:3c:63:6b: 5a:36:3f:9d:ae:43:63:33:64:ad:e1:c1:91:ab:a8: dc:a3:70:fc:36:28:45:3f:68:19:3d:c3:61:8a:79: 39:96:28:4a:7f:e1:36:95:b5:f7:5a:37:89:e0:96: 41:dc:ea:47:62:6f:65:84:f1:46:24:a8:86:ae:bc: 5a:a2:cc:9d:1d:db:02:91:26:99:c0:a4:e2:b9:59: d3:74:89:08:d8:0a:2b:5a:67:94:6d:9e:e9:04:d1: d2:c8:7c:31:09:3e:83:54:b5:f2:d9:55:b5:2a:7c: 26:47:bb:1a:94:c9:8d:ae:1e:cf:9a:9e:89:ce:48: 67:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:33:12:7B:78:EF:82:90:DF:3B:06:A8:13:A8:58:0B:FA:A9:D7:40 X509v3 Authority Key Identifier: keyid:87:5B:42:F7:C6:27:25:77:8F:56:D9:51:B7:12:EB:88:79:34:8A:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A532D/EAA979FA0AC311EB964A8924C4F9AE02/h1tC98YnJXePVtlRtxLriHk0ikU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h1tC98YnJXePVtlRtxLriHk0ikU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A532D/EAA979FA0AC311EB964A8924C4F9AE02/h1tC98YnJXePVtlRtxLriHk0ikU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:67:9a:1f:1d:11:eb:30:c0:98:48:00:f5:7e:f3:af:13:93: bd:0c:12:df:38:56:0f:73:b1:5d:f9:2a:62:ca:4c:0c:20:24: 0b:eb:4e:87:11:83:d2:3a:3f:61:41:2d:67:16:dc:d5:c3:5b: f8:8c:71:22:94:d8:e3:4a:4c:79:f8:a1:10:c3:b4:dc:cc:78: 15:ce:1a:c0:ef:b5:fd:33:5e:03:4f:47:77:aa:24:99:d5:0f: da:d6:d8:90:55:ed:06:3e:75:c7:5d:2b:1b:12:5d:67:06:30: 6c:46:7b:53:ab:51:3d:10:cb:de:dc:d4:4c:37:33:ee:4e:2c: 91:44:15:34:6c:bf:9e:91:97:4b:3f:64:10:ff:2e:d9:e5:3c: 97:75:b4:56:42:70:eb:44:bd:ce:3e:45:4f:30:28:24:9f:e7: 7b:69:38:52:c9:96:41:a0:ee:51:c4:9c:26:a6:22:6c:be:f2: cd:01:ed:0e:35:8f:ba:c6:9f:0a:fb:0a:01:bb:d5:a0:5c:c9: bc:5b:30:fa:7e:ab:34:4a:dd:26:a7:14:0f:f9:57:a6:62:5b: eb:61:59:f5:e7:d6:c1:ba:dc:a9:07:11:cd:1c:c4:db:2a:99: 49:58:ca:ea:07:49:d3:ec:4f:e7:53:ac:5d:20:23:b3:f9:49: 67:e7:20:f3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB7IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTUzMkQxMTAvBgNVBAUTKDg3NUI0MkY3QzYyNzI1Nzc4RjU2RDk1MUI3MTJFQjg4 NzkzNDhBNDUwHhcNMjUwNzAyMjEzMzM1WhcNMjUwNzA5MjEzMzM1WjAYMRYwFAYD VQQDEw02ODY1YTVhZi0xOWM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApDoxuAFE8p/cSHylu8/RZ4x54ZKKEobzYCQFmZAhHi327z9QjckUR13T0Jll FZzr0iuVqTzZ6qW2clwHY+Fli21kFwjjVlwJtd7RACoH0Are6Dz5HG5B5HOWstvr GPMbFwnnpKj+c0wvDMtOR9eQV68gb4kbwM0e2I3oECHPxr8Lmq48Y2taNj+drkNj M2St4cGRq6jco3D8NihFP2gZPcNhink5lihKf+E2lbX3WjeJ4JZB3OpHYm9lhPFG JKiGrrxaosydHdsCkSaZwKTiuVnTdIkI2AorWmeUbZ7pBNHSyHwxCT6DVLXy2VW1 KnwmR7salMmNrh7Pmp6JzkhnVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHUzEnt4 74KQ3zsGqBOoWAv6qddAMB8GA1UdIwQYMBaAFIdbQvfGJyV3j1bZUbcS64h5NIpF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTMyRC9FQUE5NzlGQTBB QzMxMUVCOTY0QTg5MjRDNEY5QUUwMi9oMXRDOThZbkpYZVBWdGxSdHhMcmlIazBp a1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2gxdEM5OFluSlhlUFZ0bFJ0eExyaUhrMGlrVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NTMyRC9FQUE5NzlGQTBBQzMxMUVCOTY0QTg5MjRDNEY5QUUwMi9oMXRDOThZbkpY ZVBWdGxSdHhMcmlIazBpa1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC0Z5ofHRHrMMCYSAD1fvOvE5O9DBLfOFYPc7Fd+SpiykwMICQL606H EYPSOj9hQS1nFtzVw1v4jHEilNjjSkx5+KEQw7TczHgVzhrA77X9M14DT0d3qiSZ 1Q/a1tiQVe0GPnXHXSsbEl1nBjBsRntTq1E9EMve3NRMNzPuTiyRRBU0bL+ekZdL P2QQ/y7Z5TyXdbRWQnDrRL3OPkVPMCgkn+d7aThSyZZBoO5RxJwmpiJsvvLNAe0O NY+6xp8K+woBu9WgXMm8WzD6fqs0St0mpxQP+VemYlvrYVn159bButypBxHNHMTb KplJWMrqB0nT7E/nU6xdICOz+Uln5yDz -----END CERTIFICATE-----Generated at Thu Jul 3 17:38:39 2025 by rpki-client