$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9AB9/C76F92C06E8411EFA3CD983FC4F9AE02/-c1w52K-aV9LpJAqoguUD3cKBjg.mft File: -c1w52K-aV9LpJAqoguUD3cKBjg.mft (raw, json) Hash identifier: jRHPwD4Ez8DJS+sihrLAkSFLKmu3JHBJBrD40o9at9A= Subject key identifier: 38:B8:84:5A:E9:28:E4:19:21:E3:CB:3F:C9:34:6D:33:DC:52:F4:0C Authority key identifier: F9:CD:70:E7:62:BE:69:5F:4B:A4:90:2A:A2:0B:94:0F:77:0A:06:38 Certificate issuer: /CN=A91B9AB9/serialNumber=F9CD70E762BE695F4BA4902AA20B940F770A0638 Certificate serial: 98 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-c1w52K-aV9LpJAqoguUD3cKBjg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B9AB9/C76F92C06E8411EFA3CD983FC4F9AE02/-c1w52K-aV9LpJAqoguUD3cKBjg.mft Manifest number: 97 Signing time: Tue 01 Jul 2025 07:04:49 +0000 Manifest this update: Tue 01 Jul 2025 07:04:48 +0000 Manifest next update: Tue 08 Jul 2025 07:04:48 +0000 Files and hashes: 1: -c1w52K-aV9LpJAqoguUD3cKBjg.crl (hash: RJ0ArQECXH4cu+hce+xp03aHxDc+WhvVXgo8KFe21Zc=) 2: 723EACFE6E8511EF83048D43C4F9AE02.roa (hash: SORlAdQ9FssMHlMIfPwfvKAJ6kXMG+aUvNMZPsDTNq4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B9AB9/C76F92C06E8411EFA3CD983FC4F9AE02/-c1w52K-aV9LpJAqoguUD3cKBjg.crl rsync://rpki.apnic.net/member_repository/A91B9AB9/C76F92C06E8411EFA3CD983FC4F9AE02/-c1w52K-aV9LpJAqoguUD3cKBjg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-c1w52K-aV9LpJAqoguUD3cKBjg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 07:04:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 152 (0x98) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B9AB9, serialNumber=F9CD70E762BE695F4BA4902AA20B940F770A0638 Validity Not Before: Jul 1 07:04:48 2025 GMT Not After : Jul 8 07:04:48 2025 GMT Subject: CN=68638890-549d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:13:88:5a:5f:17:01:a3:c4:89:50:d9:0b:67: 23:e0:a7:b7:01:5b:98:99:b3:9a:31:a1:61:5a:25: 0c:6f:b9:44:87:5e:05:9f:b9:16:78:59:e2:e1:1c: 20:72:07:17:d8:01:f3:f2:e6:21:f9:bb:17:0d:3f: 4c:14:21:81:45:78:e6:cd:dc:54:4e:5e:b3:80:ee: 13:0f:6b:b9:94:4b:94:9f:3e:5a:95:65:4d:c5:5d: ec:f5:2f:b2:90:18:09:79:dc:2d:f5:a8:e6:0e:aa: 1a:02:5e:13:51:fb:8f:18:cc:1d:b5:d9:e8:1d:6e: 34:4d:00:96:b7:fb:26:ba:3a:a9:e7:fe:4c:41:d6: 5f:0f:82:68:bd:65:65:55:d6:e7:c0:73:02:fa:f2: 46:16:c1:05:d0:af:1a:14:c7:bf:31:87:f5:18:ca: 41:2e:e9:a7:44:21:4e:dc:15:bf:f1:95:7c:f9:c6: 3f:26:13:38:48:65:f9:b9:03:ee:fa:3c:ce:8a:b1: 21:66:9d:37:6d:43:4e:21:e8:67:ab:fd:08:f5:7f: 1f:fa:03:d2:26:58:44:de:b1:99:84:84:cd:d8:03: 42:e9:10:42:34:67:a8:83:45:57:5a:7b:02:5d:28: d9:fc:a7:89:19:31:0f:d4:a4:2f:8a:c2:c1:8c:e0: 09:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:B8:84:5A:E9:28:E4:19:21:E3:CB:3F:C9:34:6D:33:DC:52:F4:0C X509v3 Authority Key Identifier: keyid:F9:CD:70:E7:62:BE:69:5F:4B:A4:90:2A:A2:0B:94:0F:77:0A:06:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B9AB9/C76F92C06E8411EFA3CD983FC4F9AE02/-c1w52K-aV9LpJAqoguUD3cKBjg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-c1w52K-aV9LpJAqoguUD3cKBjg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9AB9/C76F92C06E8411EFA3CD983FC4F9AE02/-c1w52K-aV9LpJAqoguUD3cKBjg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:ac:11:b9:f2:3e:18:a0:05:91:a9:2b:88:97:35:2d:05:90: 97:df:78:88:6a:07:dd:90:c1:cc:1a:a2:d3:94:73:fb:fb:14: ec:29:90:46:14:ca:ef:15:11:c9:cd:d9:61:3a:0d:99:91:b0: d1:7f:07:9f:8a:c4:fa:fd:23:27:f6:44:ee:db:32:22:96:06: 88:3f:27:fb:1d:dd:15:20:a0:57:65:f9:23:c1:c2:a4:7b:b0: 3e:84:77:17:73:60:b4:ed:cf:a7:7c:6c:c9:11:d9:1d:d8:9a: c3:9c:2d:b5:04:40:6d:01:16:92:ed:4e:89:4d:d0:cf:46:1d: 44:1b:be:06:4c:62:57:11:11:1d:c3:be:d7:c6:d8:4e:25:21: bb:49:4c:e4:e1:18:85:e1:89:40:76:5c:99:24:b6:6f:e5:c2: 3f:b6:34:88:ec:0c:f0:b5:28:0d:5f:3a:6c:34:b0:d5:4c:24: fe:bf:d4:6f:35:68:70:31:8c:a2:ea:8c:29:05:b8:0f:34:77: e2:13:7b:5c:20:4b:81:b9:fe:dc:36:03:4e:c9:d7:da:47:4a: 32:fb:1e:52:60:17:d9:94:b0:a5:0d:cb:93:c4:bc:11:fa:8c: b8:fb:fa:63:d5:30:e2:21:4d:52:ed:61:38:f9:9d:60:5d:fc: 02:dd:4a:c6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjlBQjkxMTAvBgNVBAUTKEY5Q0Q3MEU3NjJCRTY5NUY0QkE0OTAyQUEyMEI5NDBG NzcwQTA2MzgwHhcNMjUwNzAxMDcwNDQ4WhcNMjUwNzA4MDcwNDQ4WjAYMRYwFAYD VQQDEw02ODYzODg5MC01NDlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5hOIWl8XAaPEiVDZC2cj4Ke3AVuYmbOaMaFhWiUMb7lEh14Fn7kWeFni4Rwg cgcX2AHz8uYh+bsXDT9MFCGBRXjmzdxUTl6zgO4TD2u5lEuUnz5alWVNxV3s9S+y kBgJedwt9ajmDqoaAl4TUfuPGMwdtdnoHW40TQCWt/smujqp5/5MQdZfD4JovWVl VdbnwHMC+vJGFsEF0K8aFMe/MYf1GMpBLumnRCFO3BW/8ZV8+cY/JhM4SGX5uQPu +jzOirEhZp03bUNOIehnq/0I9X8f+gPSJlhE3rGZhITN2ANC6RBCNGeog0VXWnsC XSjZ/KeJGTEP1KQvisLBjOAJFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDi4hFrp KOQZIePLP8k0bTPcUvQMMB8GA1UdIwQYMBaAFPnNcOdivmlfS6SQKqILlA93CgY4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOUFCOS9DNzZGOTJDMDZF ODQxMUVGQTNDRDk4M0ZDNEY5QUUwMi8tYzF3NTJLLWFWOUxwSkFxb2d1VUQzY0tC amcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLy1jMXc1MkstYVY5THBKQXFvZ3VVRDNjS0JqZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OUFCOS9DNzZGOTJDMDZFODQxMUVGQTNDRDk4M0ZDNEY5QUUwMi8tYzF3NTJLLWFW OUxwSkFxb2d1VUQzY0tCamcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCGrBG58j4YoAWRqSuIlzUtBZCX33iIagfdkMHMGqLTlHP7+xTsKZBG FMrvFRHJzdlhOg2ZkbDRfwefisT6/SMn9kTu2zIilgaIPyf7Hd0VIKBXZfkjwcKk e7A+hHcXc2C07c+nfGzJEdkd2JrDnC21BEBtARaS7U6JTdDPRh1EG74GTGJXEREd w77XxthOJSG7SUzk4RiF4YlAdlyZJLZv5cI/tjSI7AzwtSgNXzpsNLDVTCT+v9Rv NWhwMYyi6owpBbgPNHfiE3tcIEuBuf7cNgNOydfaR0oy+x5SYBfZlLClDcuTxLwR +oy4+/pj1TDiIU1S7WE4+Z1gXfwC3UrG -----END CERTIFICATE-----Generated at Wed Jul 2 12:34:17 2025 by rpki-client