$ rpki-client -vvf rpki.apnic.net/member_repository/A91A657F/E94BCC48603211EFA5F8EE7EC4F9AE02/R_rmMixRsd0CJJdveh0rkibQkOo.mft File: R_rmMixRsd0CJJdveh0rkibQkOo.mft (raw, json) Hash identifier: LLEIIiXKfx9b5Mr8/PvUgPBUE77sK+jkik2ewVqbgGQ= Subject key identifier: 93:B1:AA:4D:4B:3A:B5:7C:3C:FC:17:F7:73:E3:EC:A8:4B:B7:5E:C5 Authority key identifier: 47:FA:E6:32:2C:51:B1:DD:02:24:97:6F:7A:1D:2B:92:26:D0:90:EA Certificate issuer: /CN=A91A657F/serialNumber=47FAE6322C51B1DD0224976F7A1D2B9226D090EA Certificate serial: AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R_rmMixRsd0CJJdveh0rkibQkOo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A657F/E94BCC48603211EFA5F8EE7EC4F9AE02/R_rmMixRsd0CJJdveh0rkibQkOo.mft Manifest number: A7 Signing time: Tue 01 Jul 2025 06:55:20 +0000 Manifest this update: Tue 01 Jul 2025 06:55:19 +0000 Manifest next update: Tue 08 Jul 2025 06:55:19 +0000 Files and hashes: 1: R_rmMixRsd0CJJdveh0rkibQkOo.crl (hash: V0vZlILSR2Z0ym+l/FdwG3Q/UC4bDV8Q0fQkaNwZMdY=) 2: 7564FD08603311EFA997483AC4F9AE02.roa (hash: j5L2oMlmz/AOJc/zBZV6x799FBe2Mb9/ypYCcp0WrrY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A657F/E94BCC48603211EFA5F8EE7EC4F9AE02/R_rmMixRsd0CJJdveh0rkibQkOo.crl rsync://rpki.apnic.net/member_repository/A91A657F/E94BCC48603211EFA5F8EE7EC4F9AE02/R_rmMixRsd0CJJdveh0rkibQkOo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R_rmMixRsd0CJJdveh0rkibQkOo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 06:55:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 171 (0xab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A657F, serialNumber=47FAE6322C51B1DD0224976F7A1D2B9226D090EA Validity Not Before: Jul 1 06:55:19 2025 GMT Not After : Jul 8 06:55:19 2025 GMT Subject: CN=68638658-3115 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:14:b4:bc:15:5f:8f:90:aa:f8:c2:d3:ca:fe: 25:56:ee:f0:32:5c:ce:ef:2f:7a:b7:7d:51:e6:c0: d8:8f:0a:7d:2b:2d:bf:3f:b9:6c:73:c9:52:be:20: 32:d3:60:1b:77:ea:42:74:57:d1:89:fd:4a:47:ef: bc:fe:77:07:7e:fa:34:f1:ca:01:09:57:53:35:8b: 2a:9f:da:67:92:12:0b:b4:1e:f7:6a:7e:8b:41:07: bb:cd:4f:45:7f:5c:7f:f9:89:20:a6:43:69:29:b6: df:9c:05:e4:81:88:86:e1:d8:e2:58:86:ff:a3:1d: 82:a7:39:d1:07:67:f3:bc:94:39:fa:69:46:78:1d: df:c0:88:8f:f4:b5:bc:83:82:6b:25:b3:92:6b:b5: 41:52:25:3e:59:eb:0c:5d:00:26:16:d8:6a:ab:dd: 48:75:ae:cc:74:12:eb:ae:4f:81:c9:23:6b:6f:b7: 09:19:39:84:8c:45:da:4f:a1:94:7d:4a:2c:11:de: 5e:cd:69:78:08:60:1e:91:62:be:33:88:4b:50:dc: 5e:14:d8:1e:56:fa:b2:ce:98:cf:98:4d:b0:93:32: d9:60:24:0f:b6:de:a8:b7:7c:08:cb:54:2c:cf:a2: 27:ce:2b:5b:e9:db:97:a1:f2:1a:cd:1a:21:09:ae: ba:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:B1:AA:4D:4B:3A:B5:7C:3C:FC:17:F7:73:E3:EC:A8:4B:B7:5E:C5 X509v3 Authority Key Identifier: keyid:47:FA:E6:32:2C:51:B1:DD:02:24:97:6F:7A:1D:2B:92:26:D0:90:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A657F/E94BCC48603211EFA5F8EE7EC4F9AE02/R_rmMixRsd0CJJdveh0rkibQkOo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R_rmMixRsd0CJJdveh0rkibQkOo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A657F/E94BCC48603211EFA5F8EE7EC4F9AE02/R_rmMixRsd0CJJdveh0rkibQkOo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:82:9c:4d:b3:92:6a:4c:80:8d:ad:07:34:b7:0c:a2:b2:81: ad:a4:af:f8:0f:45:9e:2f:a1:6f:8d:04:35:41:6b:44:e0:0e: 62:47:13:ad:a4:19:ac:4c:5f:40:15:6a:20:2a:e4:23:05:70: 9b:c5:03:30:7a:f1:80:70:44:ca:12:72:59:2c:05:34:6d:f9: 72:3b:64:9c:fe:ac:48:e3:51:14:5f:a3:9f:2a:d8:b5:3a:7d: c2:e6:39:00:d7:86:91:f4:26:77:fb:63:9f:bc:bf:70:cd:22: bc:e0:5e:64:ef:d6:de:71:dd:a3:e5:ba:2a:31:33:72:2d:61: ed:03:9a:e1:ac:f9:f0:d6:34:20:0b:69:61:36:9e:1f:17:2b: a7:83:cc:af:09:87:20:38:cf:56:41:a3:d6:ff:07:21:96:03: a5:4c:a2:d0:40:51:d2:35:14:7d:19:b9:14:35:43:50:01:a3: 08:70:25:b4:e6:fd:37:cb:fa:5f:3a:20:a1:9e:0f:0f:df:86: 17:18:aa:8d:11:29:b6:04:b4:bc:cf:ce:32:43:3b:4e:20:2c: ab:ab:52:e0:87:37:fe:5f:6f:62:70:91:0d:7a:37:ba:56:26: 84:47:0c:c3:a7:70:d4:73:72:3f:95:54:8f:80:f9:11:9a:fd: 7a:5f:97:37 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTY1N0YxMTAvBgNVBAUTKDQ3RkFFNjMyMkM1MUIxREQwMjI0OTc2RjdBMUQyQjky MjZEMDkwRUEwHhcNMjUwNzAxMDY1NTE5WhcNMjUwNzA4MDY1NTE5WjAYMRYwFAYD VQQDEw02ODYzODY1OC0zMTE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqBS0vBVfj5Cq+MLTyv4lVu7wMlzO7y96t31R5sDYjwp9Ky2/P7lsc8lSviAy 02Abd+pCdFfRif1KR++8/ncHfvo08coBCVdTNYsqn9pnkhILtB73an6LQQe7zU9F f1x/+YkgpkNpKbbfnAXkgYiG4djiWIb/ox2CpznRB2fzvJQ5+mlGeB3fwIiP9LW8 g4JrJbOSa7VBUiU+WesMXQAmFthqq91Ida7MdBLrrk+BySNrb7cJGTmEjEXaT6GU fUosEd5ezWl4CGAekWK+M4hLUNxeFNgeVvqyzpjPmE2wkzLZYCQPtt6ot3wIy1Qs z6Inzitb6duXofIazRohCa66gwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJOxqk1L OrV8PPwX93Pj7KhLt17FMB8GA1UdIwQYMBaAFEf65jIsUbHdAiSXb3odK5Im0JDq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNjU3Ri9FOTRCQ0M0ODYw MzIxMUVGQTVGOEVFN0VDNEY5QUUwMi9SX3JtTWl4UnNkMENKSmR2ZWgwcmtpYlFr T28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Jfcm1NaXhSc2QwQ0pKZHZlaDBya2liUWtPby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NjU3Ri9FOTRCQ0M0ODYwMzIxMUVGQTVGOEVFN0VDNEY5QUUwMi9SX3JtTWl4UnNk MENKSmR2ZWgwcmtpYlFrT28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAJgpxNs5JqTICNrQc0twyisoGtpK/4D0WeL6FvjQQ1QWtE4A5iRxOt pBmsTF9AFWogKuQjBXCbxQMwevGAcETKEnJZLAU0bflyO2Sc/qxI41EUX6OfKti1 On3C5jkA14aR9CZ3+2OfvL9wzSK84F5k79becd2j5boqMTNyLWHtA5rhrPnw1jQg C2lhNp4fFyung8yvCYcgOM9WQaPW/wchlgOlTKLQQFHSNRR9GbkUNUNQAaMIcCW0 5v03y/pfOiChng8P34YXGKqNESm2BLS8z84yQztOICyrq1Lghzf+X29icJENeje6 ViaERwzDp3DUc3I/lVSPgPkRmv16X5c3 -----END CERTIFICATE-----Generated at Tue Jul 1 09:21:50 2025 by rpki-client