$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB227/D5A553985D2D11EEA3E39F57C4F9AE02/c1jmvCkIxoFAvzuKgV9pXcsqiks.mft File: c1jmvCkIxoFAvzuKgV9pXcsqiks.mft (raw, json) Hash identifier: 7gw8m/73rZaz5MaW67p9XWWqvD0cc2xPX0Y2XXwEGek= Subject key identifier: 24:CE:CE:A6:65:49:16:9F:0F:7A:52:1D:C3:B8:59:74:A9:98:19:36 Authority key identifier: 73:58:E6:BC:29:08:C6:81:40:BF:3B:8A:81:5F:69:5D:CB:2A:8A:4B Certificate issuer: /CN=A91BB227/serialNumber=7358E6BC2908C68140BF3B8A815F695DCB2A8A4B Certificate serial: 0150 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c1jmvCkIxoFAvzuKgV9pXcsqiks.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB227/D5A553985D2D11EEA3E39F57C4F9AE02/c1jmvCkIxoFAvzuKgV9pXcsqiks.mft Manifest number: 014B Signing time: Tue 01 Jul 2025 04:43:22 +0000 Manifest this update: Tue 01 Jul 2025 04:43:22 +0000 Manifest next update: Tue 08 Jul 2025 04:43:22 +0000 Files and hashes: 1: c1jmvCkIxoFAvzuKgV9pXcsqiks.crl (hash: Dwd3l9/kx++FB0DmDnilvq+x1DLy3gGMwGsvWv8yVS4=) 2: 71014290D87411EE97234F5CC4F9AE02.roa (hash: UriYheink9mBFpQsL32JX0ce8LUKE4XsmIwp1611QqI=) 3: C01378B2D87411EE85EACB5CC4F9AE02.roa (hash: jh0oO56JyhcPYhu6/Q/RMYfmAkOnoy1yyTgFcYp5ApY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB227/D5A553985D2D11EEA3E39F57C4F9AE02/c1jmvCkIxoFAvzuKgV9pXcsqiks.crl rsync://rpki.apnic.net/member_repository/A91BB227/D5A553985D2D11EEA3E39F57C4F9AE02/c1jmvCkIxoFAvzuKgV9pXcsqiks.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c1jmvCkIxoFAvzuKgV9pXcsqiks.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 04:43:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 336 (0x150) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB227, serialNumber=7358E6BC2908C68140BF3B8A815F695DCB2A8A4B Validity Not Before: Jul 1 04:43:22 2025 GMT Not After : Jul 8 04:43:22 2025 GMT Subject: CN=6863676a-ba8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:44:5b:8c:e6:eb:ac:54:21:28:96:20:c6:37: b2:23:13:d2:a4:0c:0c:d4:89:05:63:9d:0f:23:9b: 74:f0:23:cb:21:52:4a:11:9f:8c:f8:c4:c3:57:bf: fe:73:ef:8a:9d:7e:0f:a5:16:52:a3:a1:fe:c1:8a: 87:b9:a6:cc:a7:0f:1f:a9:a8:4d:1e:ab:0b:65:cf: 55:52:64:13:33:8b:65:e6:f3:40:e7:83:2d:a2:17: f9:f4:2d:95:34:c3:dc:b1:95:c7:a7:96:a2:51:71: 2f:87:f8:13:21:b5:8b:09:94:64:c7:f8:11:5a:9f: ba:c1:97:0c:cb:40:89:26:0d:83:75:26:e3:48:b3: f1:bb:ee:d5:1d:21:4a:e6:db:05:08:89:72:71:54: 8b:d8:4c:eb:58:8f:5d:32:ac:de:21:9f:9b:fd:85: bf:0d:00:5b:e0:21:46:f2:26:34:a6:fc:4b:d6:87: 44:12:a7:d7:91:73:61:4f:e6:1a:b1:e6:e0:e4:5f: 31:6d:58:76:ee:39:9c:d5:e7:a0:ef:bf:2a:da:92: 52:36:05:c6:fc:5b:75:46:af:1f:57:39:a3:9a:39: ed:0f:9a:a1:e2:f6:ef:b5:ac:a3:63:18:71:3b:33: af:d0:62:eb:51:60:6d:0e:90:80:88:f0:73:66:0b: 4d:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:CE:CE:A6:65:49:16:9F:0F:7A:52:1D:C3:B8:59:74:A9:98:19:36 X509v3 Authority Key Identifier: keyid:73:58:E6:BC:29:08:C6:81:40:BF:3B:8A:81:5F:69:5D:CB:2A:8A:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB227/D5A553985D2D11EEA3E39F57C4F9AE02/c1jmvCkIxoFAvzuKgV9pXcsqiks.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c1jmvCkIxoFAvzuKgV9pXcsqiks.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB227/D5A553985D2D11EEA3E39F57C4F9AE02/c1jmvCkIxoFAvzuKgV9pXcsqiks.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:59:40:96:26:73:7e:6e:d0:46:04:f5:37:28:9a:0c:e8:1f: f9:07:54:51:b7:80:9f:78:1c:f8:cb:2b:8b:4e:31:54:bc:91: 8e:e8:fe:30:58:f6:35:58:1d:16:0b:95:a6:90:d2:1d:42:54: 2a:19:97:84:39:70:c9:77:7e:7d:e0:4d:ee:e4:fe:6a:a2:a1: 7b:d9:a6:bd:95:ae:33:ea:3d:22:5e:e3:87:4b:3a:77:31:28: a4:ac:01:2d:54:25:79:ba:f3:78:43:1a:47:94:24:b7:eb:fc: f4:34:d8:56:3e:72:6a:19:d3:c2:fb:ce:93:56:63:cf:e6:34: 43:50:3b:7f:3a:82:8d:13:9b:7f:17:ba:61:e1:d5:b7:7e:41: 11:fa:c7:d2:ce:02:93:02:d1:9b:8f:6d:a1:78:c9:c5:e7:e4: e3:a2:4d:e8:1d:df:59:3d:b9:11:c6:e0:2b:37:f0:b7:a1:c3: d2:bc:4c:12:d9:41:9a:35:bb:ec:6a:c0:e2:1d:9d:a6:54:62: bb:a9:bc:ea:cf:53:d1:c9:d6:7f:aa:31:33:65:29:e1:ee:ec: d8:bd:d6:70:b9:4a:e4:91:9c:15:28:7d:ad:39:4e:f9:4d:d9: 68:ca:84:47:c4:89:0a:2d:ab:d9:12:1b:37:50:18:53:97:46: b0:7d:bd:2f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkIyMjcxMTAvBgNVBAUTKDczNThFNkJDMjkwOEM2ODE0MEJGM0I4QTgxNUY2OTVE Q0IyQThBNEIwHhcNMjUwNzAxMDQ0MzIyWhcNMjUwNzA4MDQ0MzIyWjAYMRYwFAYD VQQDEw02ODYzNjc2YS1iYThmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr0RbjObrrFQhKJYgxjeyIxPSpAwM1IkFY50PI5t08CPLIVJKEZ+M+MTDV7/+ c++KnX4PpRZSo6H+wYqHuabMpw8fqahNHqsLZc9VUmQTM4tl5vNA54Mtohf59C2V NMPcsZXHp5aiUXEvh/gTIbWLCZRkx/gRWp+6wZcMy0CJJg2DdSbjSLPxu+7VHSFK 5tsFCIlycVSL2EzrWI9dMqzeIZ+b/YW/DQBb4CFG8iY0pvxL1odEEqfXkXNhT+Ya sebg5F8xbVh27jmc1eeg778q2pJSNgXG/Ft1Rq8fVzmjmjntD5qh4vbvtayjYxhx OzOv0GLrUWBtDpCAiPBzZgtNwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCTOzqZl SRafD3pSHcO4WXSpmBk2MB8GA1UdIwQYMBaAFHNY5rwpCMaBQL87ioFfaV3LKopL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjIyNy9ENUE1NTM5ODVE MkQxMUVFQTNFMzlGNTdDNEY5QUUwMi9jMWptdkNrSXhvRkF2enVLZ1Y5cFhjc3Fp a3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Mxam12Q2tJeG9GQXZ6dUtnVjlwWGNzcWlrcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QjIyNy9ENUE1NTM5ODVEMkQxMUVFQTNFMzlGNTdDNEY5QUUwMi9jMWptdkNrSXhv RkF2enVLZ1Y5cFhjc3Fpa3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAxWUCWJnN+btBGBPU3KJoM6B/5B1RRt4CfeBz4yyuLTjFUvJGO6P4w WPY1WB0WC5WmkNIdQlQqGZeEOXDJd3594E3u5P5qoqF72aa9la4z6j0iXuOHSzp3 MSikrAEtVCV5uvN4QxpHlCS36/z0NNhWPnJqGdPC+86TVmPP5jRDUDt/OoKNE5t/ F7ph4dW3fkER+sfSzgKTAtGbj22heMnF5+Tjok3oHd9ZPbkRxuArN/C3ocPSvEwS 2UGaNbvsasDiHZ2mVGK7qbzqz1PRydZ/qjEzZSnh7uzYvdZwuUrkkZwVKH2tOU75 TdloyoRHxIkKLavZEhs3UBhTl0awfb0v -----END CERTIFICATE-----Generated at Wed Jul 2 21:22:03 2025 by rpki-client