$ rpki-client -vvf rpki.apnic.net/member_repository/A91A78A7/104B19460CBD11EDAA77D12DC4F9AE02/RTN9xeSDnkmBkSneoqlGGwIc0ZA.mft File: RTN9xeSDnkmBkSneoqlGGwIc0ZA.mft (raw, json) Hash identifier: dJ07W5q9GRCnJPiyKavfJS7KdJyJDPqehIott935PII= Subject key identifier: 79:62:27:EE:0E:4A:7F:7D:A9:F4:B8:DF:1E:01:9B:03:7E:C2:30:D8 Authority key identifier: 45:33:7D:C5:E4:83:9E:49:81:91:29:DE:A2:A9:46:1B:02:1C:D1:90 Certificate issuer: /CN=A91A78A7/serialNumber=45337DC5E4839E49819129DEA2A9461B021CD190 Certificate serial: 028D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RTN9xeSDnkmBkSneoqlGGwIc0ZA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A78A7/104B19460CBD11EDAA77D12DC4F9AE02/RTN9xeSDnkmBkSneoqlGGwIc0ZA.mft Manifest number: 028A Signing time: Thu 03 Jul 2025 02:01:24 +0000 Manifest this update: Thu 03 Jul 2025 02:01:24 +0000 Manifest next update: Thu 10 Jul 2025 02:01:24 +0000 Files and hashes: 1: RTN9xeSDnkmBkSneoqlGGwIc0ZA.crl (hash: SBPS6F/7u4QBJvVFxVm3EhXebbHvxyRvkgg/lHKT6wI=) 2: D470449E0E4411ED9C0F5B45C4F9AE02.roa (hash: 9zqxhpOangW9769mdxLoJSN4Rv/Y8CMGWvMe+D0Ah7w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A78A7/104B19460CBD11EDAA77D12DC4F9AE02/RTN9xeSDnkmBkSneoqlGGwIc0ZA.crl rsync://rpki.apnic.net/member_repository/A91A78A7/104B19460CBD11EDAA77D12DC4F9AE02/RTN9xeSDnkmBkSneoqlGGwIc0ZA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RTN9xeSDnkmBkSneoqlGGwIc0ZA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 02:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 653 (0x28d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A78A7, serialNumber=45337DC5E4839E49819129DEA2A9461B021CD190 Validity Not Before: Jul 3 02:01:24 2025 GMT Not After : Jul 10 02:01:24 2025 GMT Subject: CN=6865e474-688d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:90:e1:b8:ab:96:57:62:16:eb:09:ee:ca:09: 72:97:a4:fe:7e:3c:94:c4:ee:ab:ac:e7:ed:ac:6d: 5c:e8:4e:78:25:89:d9:14:71:71:fe:3c:fa:e8:fb: 2a:c4:0a:88:37:57:e2:38:55:70:9d:57:21:dd:7c: 83:10:0e:fa:da:70:3c:16:f9:bd:9e:ae:e7:ad:6a: 7a:f4:03:cf:c5:40:15:f2:ae:60:3c:47:01:46:09: 8e:59:bd:65:36:16:31:40:6a:d1:73:6b:88:3d:6f: 34:ec:b4:93:91:2c:df:d5:74:44:19:cf:cc:65:d7: bb:6e:a4:76:a8:ea:2c:d3:80:bb:78:46:84:fb:88: be:b8:a3:0c:31:90:08:2d:b8:16:64:8a:59:b3:d8: cc:a5:15:6a:eb:08:1a:90:3b:32:fb:47:f5:6e:77: 09:a2:96:88:d5:7d:fe:0f:5a:e4:6f:fe:16:bd:91: f9:66:ec:66:0b:49:41:a6:57:6a:2e:6e:32:ad:9c: 73:50:b7:31:bb:2f:23:19:00:b4:24:5d:61:06:41: 0b:7d:b2:cd:cc:a7:db:15:d7:af:88:1c:05:76:54: 3a:93:e4:8f:b2:ac:59:77:f8:b1:e7:a8:c3:c1:80: 94:e2:18:17:de:5e:c2:ae:79:04:61:69:31:3c:4e: d1:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:62:27:EE:0E:4A:7F:7D:A9:F4:B8:DF:1E:01:9B:03:7E:C2:30:D8 X509v3 Authority Key Identifier: keyid:45:33:7D:C5:E4:83:9E:49:81:91:29:DE:A2:A9:46:1B:02:1C:D1:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A78A7/104B19460CBD11EDAA77D12DC4F9AE02/RTN9xeSDnkmBkSneoqlGGwIc0ZA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RTN9xeSDnkmBkSneoqlGGwIc0ZA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A78A7/104B19460CBD11EDAA77D12DC4F9AE02/RTN9xeSDnkmBkSneoqlGGwIc0ZA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:bd:84:e7:c0:b3:83:ba:f9:d4:ff:a2:52:06:a5:bb:cf:b0: 86:b3:93:5b:a2:2c:58:c9:7a:53:86:b4:29:f2:44:cb:09:4b: ad:a8:60:03:37:b2:9d:9d:cd:bd:6b:68:16:cf:8c:9a:ec:22: 28:58:76:17:2f:63:8e:b4:11:b3:ea:59:57:a5:36:37:6d:c2: 31:87:34:8e:09:4d:6b:e0:d9:38:bc:7c:c3:23:63:3c:8a:4c: d1:f2:67:e6:e6:c4:94:65:e0:67:06:8f:ed:58:3d:1e:48:07: fa:e2:d2:c4:e7:5d:0e:dd:70:64:cb:f2:f7:9d:47:a1:2a:b5: 69:63:59:72:e1:51:ff:48:f9:00:ad:3f:86:8c:28:f4:b9:dc: 7a:cb:f5:ba:05:cd:cf:26:22:dd:ed:98:ee:b5:65:82:bc:d5: 9c:c1:f4:36:09:8e:16:95:8c:7d:42:78:1a:b2:bc:40:33:89: a0:b1:80:0d:9f:76:cb:6e:94:92:08:7e:c2:52:80:a8:d4:be: b6:4f:ef:d3:ce:dd:a6:e4:36:43:e7:32:72:9e:91:d7:b7:b8: 79:44:4c:f0:d4:83:c0:42:fb:fb:14:49:da:13:63:9d:d1:bd: 98:9b:d3:89:46:85:2b:08:4d:fa:73:35:40:c5:df:b5:40:48: e0:5c:2f:ca -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAo0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTc4QTcxMTAvBgNVBAUTKDQ1MzM3REM1RTQ4MzlFNDk4MTkxMjlERUEyQTk0NjFC MDIxQ0QxOTAwHhcNMjUwNzAzMDIwMTI0WhcNMjUwNzEwMDIwMTI0WjAYMRYwFAYD VQQDEw02ODY1ZTQ3NC02ODhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAppDhuKuWV2IW6wnuyglyl6T+fjyUxO6rrOftrG1c6E54JYnZFHFx/jz66Psq xAqIN1fiOFVwnVch3XyDEA762nA8Fvm9nq7nrWp69APPxUAV8q5gPEcBRgmOWb1l NhYxQGrRc2uIPW807LSTkSzf1XREGc/MZde7bqR2qOos04C7eEaE+4i+uKMMMZAI LbgWZIpZs9jMpRVq6wgakDsy+0f1bncJopaI1X3+D1rkb/4WvZH5ZuxmC0lBpldq Lm4yrZxzULcxuy8jGQC0JF1hBkELfbLNzKfbFdeviBwFdlQ6k+SPsqxZd/ix56jD wYCU4hgX3l7CrnkEYWkxPE7RGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHliJ+4O Sn99qfS43x4BmwN+wjDYMB8GA1UdIwQYMBaAFEUzfcXkg55JgZEp3qKpRhsCHNGQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNzhBNy8xMDRCMTk0NjBD QkQxMUVEQUE3N0QxMkRDNEY5QUUwMi9SVE45eGVTRG5rbUJrU25lb3FsR0d3SWMw WkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JUTjl4ZVNEbmttQmtTbmVvcWxHR3dJYzBaQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NzhBNy8xMDRCMTk0NjBDQkQxMUVEQUE3N0QxMkRDNEY5QUUwMi9SVE45eGVTRG5r bUJrU25lb3FsR0d3SWMwWkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAzvYTnwLODuvnU/6JSBqW7z7CGs5NboixYyXpThrQp8kTLCUutqGAD N7Kdnc29a2gWz4ya7CIoWHYXL2OOtBGz6llXpTY3bcIxhzSOCU1r4Nk4vHzDI2M8 ikzR8mfm5sSUZeBnBo/tWD0eSAf64tLE510O3XBky/L3nUehKrVpY1ly4VH/SPkA rT+GjCj0udx6y/W6Bc3PJiLd7ZjutWWCvNWcwfQ2CY4WlYx9QngasrxAM4mgsYAN n3bLbpSSCH7CUoCo1L62T+/Tzt2m5DZD5zJynpHXt7h5REzw1IPAQvv7FEnaE2Od 0b2Ym9OJRoUrCE36czVAxd+1QEjgXC/K -----END CERTIFICATE-----Generated at Thu Jul 3 09:27:01 2025 by rpki-client