$ rpki-client -vvf rpki.apnic.net/member_repository/A91AD705/BA1DB762FB7411EC96A5B430C4F9AE02/dHzHy9sivZpILTNRgJ3qm8FGAoQ.mft File: dHzHy9sivZpILTNRgJ3qm8FGAoQ.mft (raw, json) Hash identifier: C2sjwTdSTnKIItxGmMAx5j3nTDaLoAqZd/dDZC5SAfI= Subject key identifier: CC:9F:77:60:1E:C7:FF:F0:81:79:84:0B:FE:A1:D1:58:5F:D7:4F:4F Authority key identifier: 74:7C:C7:CB:DB:22:BD:9A:48:2D:33:51:80:9D:EA:9B:C1:46:02:84 Certificate issuer: /CN=A91AD705/serialNumber=747CC7CBDB22BD9A482D3351809DEA9BC1460284 Certificate serial: 02BB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dHzHy9sivZpILTNRgJ3qm8FGAoQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AD705/BA1DB762FB7411EC96A5B430C4F9AE02/dHzHy9sivZpILTNRgJ3qm8FGAoQ.mft Manifest number: 02B7 Signing time: Tue 01 Jul 2025 02:06:38 +0000 Manifest this update: Tue 01 Jul 2025 02:06:37 +0000 Manifest next update: Tue 08 Jul 2025 02:06:37 +0000 Files and hashes: 1: dHzHy9sivZpILTNRgJ3qm8FGAoQ.crl (hash: MVukLW5OXUz+HhNKkc08YdNt8uylVTav+FC4nYVQ75c=) 2: D628208AFB7611EC96592431C4F9AE02.roa (hash: tDCtD935JtRcgKFjdurBw3JcU/lSCjaGyyfEOwNOFIg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AD705/BA1DB762FB7411EC96A5B430C4F9AE02/dHzHy9sivZpILTNRgJ3qm8FGAoQ.crl rsync://rpki.apnic.net/member_repository/A91AD705/BA1DB762FB7411EC96A5B430C4F9AE02/dHzHy9sivZpILTNRgJ3qm8FGAoQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dHzHy9sivZpILTNRgJ3qm8FGAoQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 02:06:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 699 (0x2bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AD705, serialNumber=747CC7CBDB22BD9A482D3351809DEA9BC1460284 Validity Not Before: Jul 1 02:06:37 2025 GMT Not After : Jul 8 02:06:37 2025 GMT Subject: CN=686342ad-e375 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:5a:7f:82:2b:89:78:8b:9c:bf:f0:d9:91:de: 95:b0:40:cc:6d:d2:58:c3:5d:57:6a:fc:00:66:a7: d0:62:83:f4:80:29:d8:2f:db:fa:9a:06:ad:10:f7: 68:9d:54:a3:b1:c5:ab:53:e5:1f:d5:d4:67:74:6f: 79:6d:16:1f:ff:b0:7a:b6:2a:c2:22:cb:5f:4c:b9: 43:42:96:56:40:e8:bf:e5:39:c2:da:45:05:48:18: 2d:e1:9a:f9:2d:d1:1c:b6:62:b3:3c:27:c7:fe:33: f5:50:08:ef:72:c6:10:ac:97:e5:86:75:8a:93:99: fc:bc:1a:21:ba:34:3d:e6:0e:11:90:14:b0:80:bb: 28:1b:27:f9:21:5d:b0:b4:53:65:10:af:88:b8:94: 14:d1:12:aa:09:83:7b:bf:c6:bd:a8:c7:38:f8:43: 24:ce:05:57:b2:07:96:a0:dd:f5:98:eb:28:8b:9e: b1:c3:2e:9e:46:95:f0:41:7c:e7:0b:ab:9a:4d:a6: 10:07:5c:3c:71:54:e9:07:1f:b9:cd:65:6e:e9:6a: ea:24:71:a5:df:42:c2:6f:9b:d4:dd:a1:54:4e:5b: ed:85:d6:b2:57:a9:b3:52:64:40:ad:54:c0:59:3c: d4:86:e6:10:db:4d:3d:d5:e1:b9:4a:8f:6c:15:68: eb:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:9F:77:60:1E:C7:FF:F0:81:79:84:0B:FE:A1:D1:58:5F:D7:4F:4F X509v3 Authority Key Identifier: keyid:74:7C:C7:CB:DB:22:BD:9A:48:2D:33:51:80:9D:EA:9B:C1:46:02:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AD705/BA1DB762FB7411EC96A5B430C4F9AE02/dHzHy9sivZpILTNRgJ3qm8FGAoQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dHzHy9sivZpILTNRgJ3qm8FGAoQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AD705/BA1DB762FB7411EC96A5B430C4F9AE02/dHzHy9sivZpILTNRgJ3qm8FGAoQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:90:28:65:6a:54:61:30:b9:4a:a8:c0:f7:40:ac:a3:35:f3: 87:e8:56:42:5f:ec:7d:d7:68:ce:51:b5:80:4e:ae:1c:e2:4a: 37:54:4c:a9:ab:b1:52:30:82:6b:66:2f:0e:0f:c9:e9:01:8b: 68:80:80:6e:b3:21:d6:13:46:2e:c4:cb:ac:54:90:3e:48:c8: ae:3c:e7:90:7c:21:6c:53:42:74:15:72:cd:e1:73:46:89:18: 31:c6:f7:72:ca:be:b4:13:4c:fe:00:40:dd:2e:b1:22:fa:4e: 5e:51:27:f9:39:71:2f:3f:75:bb:f5:72:2c:61:4d:14:a3:59: fa:9d:f4:ba:5f:e9:29:50:37:8b:ad:e9:aa:7c:48:65:62:e6: 79:df:d9:35:80:6a:a5:fa:95:24:29:b6:01:f2:ea:50:6e:5a: bb:e1:1d:5d:ab:e2:0a:37:ff:8a:ab:6b:c0:18:a1:c0:de:19: 34:20:73:e7:2d:aa:a8:cf:d2:f0:31:df:0f:b8:b5:69:29:30: 52:5b:c7:95:a2:0e:f2:3e:4d:14:c8:8a:ed:e8:02:27:15:ca: 0d:f4:2f:9b:74:17:f2:17:18:71:78:58:9a:49:da:c3:c7:f7: 4f:4a:8e:f1:ce:d2:01:fa:3c:e5:1f:c0:2d:6c:ce:a3:6f:41: b3:b8:50:cb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICArswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUQ3MDUxMTAvBgNVBAUTKDc0N0NDN0NCREIyMkJEOUE0ODJEMzM1MTgwOURFQTlC QzE0NjAyODQwHhcNMjUwNzAxMDIwNjM3WhcNMjUwNzA4MDIwNjM3WjAYMRYwFAYD VQQDEw02ODYzNDJhZC1lMzc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqFp/giuJeIucv/DZkd6VsEDMbdJYw11XavwAZqfQYoP0gCnYL9v6mgatEPdo nVSjscWrU+Uf1dRndG95bRYf/7B6tirCIstfTLlDQpZWQOi/5TnC2kUFSBgt4Zr5 LdEctmKzPCfH/jP1UAjvcsYQrJflhnWKk5n8vBohujQ95g4RkBSwgLsoGyf5IV2w tFNlEK+IuJQU0RKqCYN7v8a9qMc4+EMkzgVXsgeWoN31mOsoi56xwy6eRpXwQXzn C6uaTaYQB1w8cVTpBx+5zWVu6WrqJHGl30LCb5vU3aFUTlvthdayV6mzUmRArVTA WTzUhuYQ20091eG5So9sFWjrrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMyfd2Ae x//wgXmEC/6h0Vhf109PMB8GA1UdIwQYMBaAFHR8x8vbIr2aSC0zUYCd6pvBRgKE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRDcwNS9CQTFEQjc2MkZC NzQxMUVDOTZBNUI0MzBDNEY5QUUwMi9kSHpIeTlzaXZacElMVE5SZ0ozcW04RkdB b1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RIekh5OXNpdlpwSUxUTlJnSjNxbThGR0FvUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RDcwNS9CQTFEQjc2MkZCNzQxMUVDOTZBNUI0MzBDNEY5QUUwMi9kSHpIeTlzaXZa cElMVE5SZ0ozcW04RkdBb1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQkChlalRhMLlKqMD3QKyjNfOH6FZCX+x912jOUbWATq4c4ko3VEyp q7FSMIJrZi8OD8npAYtogIBusyHWE0YuxMusVJA+SMiuPOeQfCFsU0J0FXLN4XNG iRgxxvdyyr60E0z+AEDdLrEi+k5eUSf5OXEvP3W79XIsYU0Uo1n6nfS6X+kpUDeL remqfEhlYuZ539k1gGql+pUkKbYB8upQblq74R1dq+IKN/+Kq2vAGKHA3hk0IHPn Laqoz9LwMd8PuLVpKTBSW8eVog7yPk0UyIrt6AInFcoN9C+bdBfyFxhxeFiaSdrD x/dPSo7xztIB+jzlH8AtbM6jb0GzuFDL -----END CERTIFICATE-----Generated at Wed Jul 2 20:04:04 2025 by rpki-client