$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE1B5/8B405E5E003B11EF911B8F68C4F9AE02/7sDpmYfcHqnUAviE_NqX4DFFpKA.mft File: 7sDpmYfcHqnUAviE_NqX4DFFpKA.mft (raw, json) Hash identifier: y99EliXFdIsFxQQy1cd14sZ0cCxIZpOT4vw4mWK4GCs= Subject key identifier: 8C:E1:4E:D0:D8:EC:C8:50:86:02:85:1F:FB:EF:58:39:BD:3A:67:49 Authority key identifier: EE:C0:E9:99:87:DC:1E:A9:D4:02:F8:84:FC:DA:97:E0:31:45:A4:A0 Certificate issuer: /CN=A91AE1B5/serialNumber=EEC0E99987DC1EA9D402F884FCDA97E03145A4A0 Certificate serial: E3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7sDpmYfcHqnUAviE_NqX4DFFpKA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AE1B5/8B405E5E003B11EF911B8F68C4F9AE02/7sDpmYfcHqnUAviE_NqX4DFFpKA.mft Manifest number: E0 Signing time: Sun 29 Jun 2025 04:33:22 +0000 Manifest this update: Sun 29 Jun 2025 04:33:21 +0000 Manifest next update: Sun 06 Jul 2025 04:33:21 +0000 Files and hashes: 1: 7sDpmYfcHqnUAviE_NqX4DFFpKA.crl (hash: mozhO0pF9uSGgSwMGdySy+VTzDhGtKD/WsbSmaeHg+k=) 2: D2A2FF4A003B11EFA6658D0DC4F9AE02.roa (hash: clTuA98QXCvhi5mCW68DYLjtbFWaH5Tnj/x9STwbSAY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AE1B5/8B405E5E003B11EF911B8F68C4F9AE02/7sDpmYfcHqnUAviE_NqX4DFFpKA.crl rsync://rpki.apnic.net/member_repository/A91AE1B5/8B405E5E003B11EF911B8F68C4F9AE02/7sDpmYfcHqnUAviE_NqX4DFFpKA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7sDpmYfcHqnUAviE_NqX4DFFpKA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 04:33:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 227 (0xe3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AE1B5, serialNumber=EEC0E99987DC1EA9D402F884FCDA97E03145A4A0 Validity Not Before: Jun 29 04:33:21 2025 GMT Not After : Jul 6 04:33:21 2025 GMT Subject: CN=6860c211-a132 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:99:e1:d4:4e:b1:fd:ec:91:ff:51:9a:88:60: 2a:1b:68:1d:74:be:be:79:10:8e:63:64:ad:37:ea: d6:4c:c9:5a:32:e9:9b:64:f3:15:9c:d5:72:96:54: 56:0a:13:46:29:e1:86:ec:b5:ec:b1:14:c8:b2:2a: ed:96:e2:87:8a:16:34:54:59:a3:97:5d:e4:ec:15: 5e:b2:76:f0:70:a7:96:2f:9e:fa:fa:91:e7:c2:0d: ef:25:1f:01:11:6e:d1:9d:5a:d5:11:48:88:c2:f4: 13:f4:5d:27:fb:1f:d3:77:84:26:94:7c:55:47:19: c4:58:ad:df:e5:6d:8c:3a:8c:72:51:a6:ff:68:e7: db:2d:af:3c:b0:e3:45:db:34:52:88:4f:97:3a:67: 23:84:cb:57:ac:71:43:ba:00:5e:0e:44:f6:3c:f3: 46:b5:23:7f:ca:45:d0:e0:2b:77:36:0c:dc:bd:ce: 61:26:3c:0e:72:2f:5d:c6:1b:ae:72:c5:40:ee:15: 3c:e0:1f:43:de:ef:9b:49:5f:5d:01:2f:8e:f0:a7: 65:3a:c6:c8:ec:5f:1a:00:0d:68:6f:3a:0a:92:11: 2f:ae:3f:21:e4:60:b8:47:3b:66:2d:81:9a:15:df: bf:6d:d0:76:2b:89:1d:cb:f9:d1:30:fa:60:e9:02: de:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:E1:4E:D0:D8:EC:C8:50:86:02:85:1F:FB:EF:58:39:BD:3A:67:49 X509v3 Authority Key Identifier: keyid:EE:C0:E9:99:87:DC:1E:A9:D4:02:F8:84:FC:DA:97:E0:31:45:A4:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AE1B5/8B405E5E003B11EF911B8F68C4F9AE02/7sDpmYfcHqnUAviE_NqX4DFFpKA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7sDpmYfcHqnUAviE_NqX4DFFpKA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE1B5/8B405E5E003B11EF911B8F68C4F9AE02/7sDpmYfcHqnUAviE_NqX4DFFpKA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:5a:e7:39:04:c7:44:dd:9c:b9:25:e7:6e:4c:b6:f5:02:00: 1b:7c:bd:4a:3d:61:e4:3c:86:f3:db:4e:5b:ee:22:ac:00:e8: ad:59:6d:c8:53:1c:4b:64:9f:d5:bc:88:c9:ea:53:8c:dd:a7: f2:b4:2b:f0:c5:e8:6f:fc:be:7b:96:6c:f1:65:f8:ac:3c:5b: 05:35:c0:6b:42:5f:cf:1f:5d:18:23:83:70:c7:03:98:90:15: c2:9d:76:cd:0f:97:88:a6:34:e9:59:b7:09:77:af:79:dc:31: 1d:fa:05:48:c5:31:6b:90:99:fe:f0:b1:e8:bb:76:72:d5:d8: 55:a9:ca:b1:eb:df:6a:8c:b5:b9:7e:ad:4f:02:ad:a6:f2:3c: 3d:79:af:f6:d9:c4:68:68:33:0e:39:df:82:a1:39:fb:97:d1: 66:8d:c4:2c:ad:6f:a3:24:cf:af:76:f1:41:a7:7a:84:4a:fb: dd:8a:dc:b3:56:da:9b:ab:57:40:0c:d1:b3:9a:b1:66:9c:e6: d8:be:54:cf:70:9f:a9:71:f9:af:ff:46:41:85:f5:1a:68:d3: c0:43:37:ab:66:e2:46:e7:c0:25:eb:7f:b4:10:62:08:c3:7e: ac:b2:a1:de:89:7b:12:31:eb:67:ae:8e:ed:b6:c4:3c:37:f5: 55:2a:7b:fa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUUxQjUxMTAvBgNVBAUTKEVFQzBFOTk5ODdEQzFFQTlENDAyRjg4NEZDREE5N0Uw MzE0NUE0QTAwHhcNMjUwNjI5MDQzMzIxWhcNMjUwNzA2MDQzMzIxWjAYMRYwFAYD VQQDEw02ODYwYzIxMS1hMTMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuJnh1E6x/eyR/1GaiGAqG2gddL6+eRCOY2StN+rWTMlaMumbZPMVnNVyllRW ChNGKeGG7LXssRTIsirtluKHihY0VFmjl13k7BVesnbwcKeWL576+pHnwg3vJR8B EW7RnVrVEUiIwvQT9F0n+x/Td4QmlHxVRxnEWK3f5W2MOoxyUab/aOfbLa88sONF 2zRSiE+XOmcjhMtXrHFDugBeDkT2PPNGtSN/ykXQ4Ct3Ngzcvc5hJjwOci9dxhuu csVA7hU84B9D3u+bSV9dAS+O8KdlOsbI7F8aAA1obzoKkhEvrj8h5GC4RztmLYGa Fd+/bdB2K4kdy/nRMPpg6QLeFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIzhTtDY 7MhQhgKFH/vvWDm9OmdJMB8GA1UdIwQYMBaAFO7A6ZmH3B6p1AL4hPzal+AxRaSg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRTFCNS84QjQwNUU1RTAw M0IxMUVGOTExQjhGNjhDNEY5QUUwMi83c0RwbVlmY0hxblVBdmlFX05xWDRERkZw S0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdzRHBtWWZjSHFuVUF2aUVfTnFYNERGRnBLQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RTFCNS84QjQwNUU1RTAwM0IxMUVGOTExQjhGNjhDNEY5QUUwMi83c0RwbVlmY0hx blVBdmlFX05xWDRERkZwS0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCmWuc5BMdE3Zy5JeduTLb1AgAbfL1KPWHkPIbz205b7iKsAOitWW3I UxxLZJ/VvIjJ6lOM3afytCvwxehv/L57lmzxZfisPFsFNcBrQl/PH10YI4NwxwOY kBXCnXbND5eIpjTpWbcJd6953DEd+gVIxTFrkJn+8LHou3Zy1dhVqcqx699qjLW5 fq1PAq2m8jw9ea/22cRoaDMOOd+CoTn7l9FmjcQsrW+jJM+vdvFBp3qESvvdityz Vtqbq1dADNGzmrFmnObYvlTPcJ+pcfmv/0ZBhfUaaNPAQzerZuJG58Al63+0EGII w36ssqHeiXsSMetnro7ttsQ8N/VVKnv6 -----END CERTIFICATE-----Generated at Mon Jun 30 22:12:50 2025 by rpki-client