$ rpki-client -vvf rpki.apnic.net/member_repository/A91B53AF/1F49325C1DB811EB91D04319C4F9AE02/n60jAjoVW9JbIkKAY6wZeHznwr4.mft File: n60jAjoVW9JbIkKAY6wZeHznwr4.mft (raw, json) Hash identifier: 9w0WRTtyh85JZWCac7Ot8iOwt9Ffbz0YjD/DmGJB98E= Subject key identifier: 93:07:F0:BC:41:57:24:23:FC:14:B1:BB:07:E2:12:66:85:BE:DB:7C Authority key identifier: 9F:AD:23:02:3A:15:5B:D2:5B:22:42:80:63:AC:19:78:7C:E7:C2:BE Certificate issuer: /CN=A91B53AF/serialNumber=9FAD23023A155BD25B22428063AC19787CE7C2BE Certificate serial: 0778 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n60jAjoVW9JbIkKAY6wZeHznwr4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B53AF/1F49325C1DB811EB91D04319C4F9AE02/n60jAjoVW9JbIkKAY6wZeHznwr4.mft Manifest number: 0772 Signing time: Wed 02 Jul 2025 21:49:18 +0000 Manifest this update: Wed 02 Jul 2025 21:49:17 +0000 Manifest next update: Wed 09 Jul 2025 21:49:17 +0000 Files and hashes: 1: n60jAjoVW9JbIkKAY6wZeHznwr4.crl (hash: 4CwGh9T/7A0vj7u0YGdoNzNSC9A7aDrOdOwXu7bSjeA=) 2: 5E802AC41DB911EB90A5461AC4F9AE02.roa (hash: 41aqCCC0CIJrASUZjn/UMATRac/pjiORpElfAzdM3kk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B53AF/1F49325C1DB811EB91D04319C4F9AE02/n60jAjoVW9JbIkKAY6wZeHznwr4.crl rsync://rpki.apnic.net/member_repository/A91B53AF/1F49325C1DB811EB91D04319C4F9AE02/n60jAjoVW9JbIkKAY6wZeHznwr4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n60jAjoVW9JbIkKAY6wZeHznwr4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 21:49:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1912 (0x778) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B53AF, serialNumber=9FAD23023A155BD25B22428063AC19787CE7C2BE Validity Not Before: Jul 2 21:49:17 2025 GMT Not After : Jul 9 21:49:17 2025 GMT Subject: CN=6865a95d-4be4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:09:de:ff:4b:c7:c7:8d:3b:6e:8d:31:05:57: 62:cc:a8:08:1b:a1:07:51:31:23:f9:28:d5:ac:86: 16:70:84:56:a7:c6:6a:1b:6d:e8:05:46:91:fc:4c: 86:dc:f9:3f:b3:f8:18:1a:a9:13:1b:5f:ab:7b:5c: b2:2c:42:c6:65:a9:97:70:e3:c3:53:6e:9f:44:f6: 4d:a5:fe:18:35:ad:90:32:d7:5d:ac:11:1e:54:5d: 1a:f6:3a:38:19:d9:63:3d:6f:ba:fb:92:ac:a3:48: ed:95:6a:42:af:06:ca:a1:04:6e:6f:22:39:62:4d: e1:03:6f:ce:ad:ae:e1:3c:a5:02:98:4f:c1:51:5f: 5b:5c:11:5f:ef:e8:7d:11:52:0e:ed:b1:47:d9:3e: f4:cd:03:aa:76:3b:6b:fa:29:af:26:c4:b8:a3:da: 49:82:6d:c7:0f:d0:b8:94:5a:82:e5:15:ad:8c:67: 6a:ad:a0:33:db:b9:1f:1e:fd:1c:7f:b4:46:ba:43: 89:66:a7:00:f6:1f:6f:7f:41:c6:da:1f:2c:69:73: 8b:7d:ce:30:13:8d:50:17:1f:0d:58:5e:d8:53:36: 33:02:04:b1:62:56:94:69:64:6f:bc:72:f4:05:dd: 27:f2:df:55:dd:23:7f:8a:22:b1:08:5f:84:cb:46: 55:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:07:F0:BC:41:57:24:23:FC:14:B1:BB:07:E2:12:66:85:BE:DB:7C X509v3 Authority Key Identifier: keyid:9F:AD:23:02:3A:15:5B:D2:5B:22:42:80:63:AC:19:78:7C:E7:C2:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B53AF/1F49325C1DB811EB91D04319C4F9AE02/n60jAjoVW9JbIkKAY6wZeHznwr4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n60jAjoVW9JbIkKAY6wZeHznwr4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B53AF/1F49325C1DB811EB91D04319C4F9AE02/n60jAjoVW9JbIkKAY6wZeHznwr4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ca:d0:d1:9d:af:20:f4:77:cc:0e:3e:92:a4:91:7b:cd:e7:6e: 83:4c:39:cb:68:2d:d0:d3:2d:12:25:23:bf:2d:47:94:b2:12: 27:fc:6a:d3:63:de:67:5e:57:85:27:f4:5a:6a:b1:cf:50:b8: b4:3c:17:3b:77:80:d5:f3:e2:43:6d:20:49:c3:0a:16:30:82: 68:10:27:a9:7b:06:a5:bb:c7:e5:92:24:4d:7e:51:bd:9f:dc: 1d:3a:0e:8d:57:10:84:fe:75:cc:9e:95:9e:7a:2d:a1:cb:09: 51:cb:60:1e:25:80:66:d6:bd:8a:1b:a9:05:dc:0d:14:97:02: 2f:36:c7:4a:3e:15:1a:c8:c9:05:00:f8:b6:cb:1e:12:28:f5: d4:fb:20:d1:0a:ab:ea:7b:5c:b3:ac:cf:ae:25:dd:1b:22:84: 81:87:dc:59:99:ee:c1:88:5c:fb:04:ff:1c:55:07:8b:89:b9: 82:66:9b:c2:f3:11:22:78:18:34:2f:7d:03:c5:1c:e4:9b:fe: 1c:07:86:84:25:ce:5c:1d:43:69:b2:9e:aa:1c:f3:0e:5c:99: 28:5b:12:97:bd:2e:f8:4e:b6:1e:8c:32:fc:ae:52:07:c2:10: 93:88:93:5d:2b:7f:8c:a4:d5:c3:3c:ed:d8:84:58:93:05:e3: 77:45:df:d7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB3gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjUzQUYxMTAvBgNVBAUTKDlGQUQyMzAyM0ExNTVCRDI1QjIyNDI4MDYzQUMxOTc4 N0NFN0MyQkUwHhcNMjUwNzAyMjE0OTE3WhcNMjUwNzA5MjE0OTE3WjAYMRYwFAYD VQQDEw02ODY1YTk1ZC00YmU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtQne/0vHx407bo0xBVdizKgIG6EHUTEj+SjVrIYWcIRWp8ZqG23oBUaR/EyG 3Pk/s/gYGqkTG1+re1yyLELGZamXcOPDU26fRPZNpf4YNa2QMtddrBEeVF0a9jo4 GdljPW+6+5Kso0jtlWpCrwbKoQRubyI5Yk3hA2/Ora7hPKUCmE/BUV9bXBFf7+h9 EVIO7bFH2T70zQOqdjtr+imvJsS4o9pJgm3HD9C4lFqC5RWtjGdqraAz27kfHv0c f7RGukOJZqcA9h9vf0HG2h8saXOLfc4wE41QFx8NWF7YUzYzAgSxYlaUaWRvvHL0 Bd0n8t9V3SN/iiKxCF+Ey0ZVRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJMH8LxB VyQj/BSxuwfiEmaFvtt8MB8GA1UdIwQYMBaAFJ+tIwI6FVvSWyJCgGOsGXh858K+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNTNBRi8xRjQ5MzI1QzFE QjgxMUVCOTFEMDQzMTlDNEY5QUUwMi9uNjBqQWpvVlc5SmJJa0tBWTZ3WmVIem53 cjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL242MGpBam9WVzlKYklrS0FZNndaZUh6bndyNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NTNBRi8xRjQ5MzI1QzFEQjgxMUVCOTFEMDQzMTlDNEY5QUUwMi9uNjBqQWpvVlc5 SmJJa0tBWTZ3WmVIem53cjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDK0NGdryD0d8wOPpKkkXvN526DTDnLaC3Q0y0SJSO/LUeUshIn/GrT Y95nXleFJ/RaarHPULi0PBc7d4DV8+JDbSBJwwoWMIJoECepewalu8flkiRNflG9 n9wdOg6NVxCE/nXMnpWeei2hywlRy2AeJYBm1r2KG6kF3A0UlwIvNsdKPhUayMkF APi2yx4SKPXU+yDRCqvqe1yzrM+uJd0bIoSBh9xZme7BiFz7BP8cVQeLibmCZpvC 8xEieBg0L30DxRzkm/4cB4aEJc5cHUNpsp6qHPMOXJkoWxKXvS74TrYejDL8rlIH whCTiJNdK3+MpNXDPO3YhFiTBeN3Rd/X -----END CERTIFICATE-----Generated at Thu Jul 3 08:09:03 2025 by rpki-client