$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE6D7/71A51574AEF211EEB293B480C4F9AE02/cM0CtmQkeah0RicVcG5qqaidosk.mft File: cM0CtmQkeah0RicVcG5qqaidosk.mft (raw, json) Hash identifier: zd9eswlkWsx+WDCfKY9V8XVc4s0/PgLUBwxJuWo1+tE= Subject key identifier: 39:89:28:92:EB:92:D0:BA:A3:30:99:1B:75:A8:A1:E5:6A:73:EA:01 Authority key identifier: 70:CD:02:B6:64:24:79:A8:74:46:27:15:70:6E:6A:A9:A8:9D:A2:C9 Certificate issuer: /CN=A91BE6D7/serialNumber=70CD02B6642479A874462715706E6AA9A89DA2C9 Certificate serial: 012D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cM0CtmQkeah0RicVcG5qqaidosk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BE6D7/71A51574AEF211EEB293B480C4F9AE02/cM0CtmQkeah0RicVcG5qqaidosk.mft Manifest number: 0122 Signing time: Thu 03 Jul 2025 05:01:01 +0000 Manifest this update: Thu 03 Jul 2025 05:01:01 +0000 Manifest next update: Thu 10 Jul 2025 05:01:01 +0000 Files and hashes: 1: cM0CtmQkeah0RicVcG5qqaidosk.crl (hash: t1rVKvsVX0ecWE4DQZKrvd0tBXoi6VlXwt8Vmfgowyw=) 2: 7251CC7C546211EF85988412C4F9AE02.roa (hash: MXnU/QcuEmDKktg0CnuwolgKiFkbHbMHOSWdEnSOv5c=) 3: 371059F4B8A311EEBDA30041C4F9AE02.roa (hash: S3mbIiQ1nO0L4Bz9sTuCjtwzB96XobjR5ufSof/xnsw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BE6D7/71A51574AEF211EEB293B480C4F9AE02/cM0CtmQkeah0RicVcG5qqaidosk.crl rsync://rpki.apnic.net/member_repository/A91BE6D7/71A51574AEF211EEB293B480C4F9AE02/cM0CtmQkeah0RicVcG5qqaidosk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cM0CtmQkeah0RicVcG5qqaidosk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 301 (0x12d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BE6D7, serialNumber=70CD02B6642479A874462715706E6AA9A89DA2C9 Validity Not Before: Jul 3 05:01:01 2025 GMT Not After : Jul 10 05:01:01 2025 GMT Subject: CN=68660e8d-c89b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:97:5a:94:e7:da:b0:4f:c8:67:02:e6:6e:aa: ee:0f:d4:00:08:bc:f3:90:b9:5b:09:74:41:bb:ed: 1a:6d:55:fb:15:40:70:bf:b1:3a:88:58:02:7b:34: c2:4f:88:c4:57:0f:20:d0:f6:ae:90:82:0a:09:4d: bc:cb:88:4b:4d:0b:2b:44:42:4c:e5:82:6c:d0:3c: e4:4e:28:25:d8:62:77:df:71:a3:df:15:a7:1b:83: 8c:30:e3:39:c1:90:c5:2a:2f:b8:d9:45:60:d9:18: ba:af:70:96:ee:e9:12:a9:97:05:9b:a3:0f:d4:e4: 55:8e:ee:02:dd:49:dd:ae:1f:52:d7:f8:b9:e2:a0: 48:9f:ce:6a:d7:0c:eb:d3:56:5a:89:fc:ba:74:65: fb:8f:bb:01:9f:2e:00:72:4f:89:f5:60:20:1c:72: 1b:f7:36:aa:f7:6b:4f:7d:a7:cf:b6:67:9b:2c:cd: bc:b4:cf:e4:14:61:1d:49:5b:6a:8c:14:8e:74:46: 64:a8:83:94:bc:14:85:61:90:23:3e:1b:6b:d4:25: 5b:b3:ac:f5:2c:33:88:f4:b3:79:99:1e:f1:84:8d: 5c:62:0a:e6:15:a0:86:af:53:f1:a8:dc:12:3b:ee: a2:f4:a8:55:5f:9c:07:b0:c2:04:b0:3c:9b:c2:d7: f8:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:89:28:92:EB:92:D0:BA:A3:30:99:1B:75:A8:A1:E5:6A:73:EA:01 X509v3 Authority Key Identifier: keyid:70:CD:02:B6:64:24:79:A8:74:46:27:15:70:6E:6A:A9:A8:9D:A2:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BE6D7/71A51574AEF211EEB293B480C4F9AE02/cM0CtmQkeah0RicVcG5qqaidosk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cM0CtmQkeah0RicVcG5qqaidosk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE6D7/71A51574AEF211EEB293B480C4F9AE02/cM0CtmQkeah0RicVcG5qqaidosk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:b3:95:e3:b5:b6:ca:20:dd:95:a7:0b:88:0f:ec:7a:2f:04: 6c:35:7a:be:c4:02:09:63:19:35:d5:68:c0:14:1d:7e:f3:85: 04:5b:ab:ae:2f:ce:5f:e0:c4:8e:38:0a:65:35:55:1d:8a:48: 9a:dc:e2:ad:ed:2c:fd:ef:70:b8:60:2c:fc:3f:8d:b1:38:dd: 61:9a:8b:ea:02:11:4c:92:22:4e:9b:c8:b9:4e:1d:57:9a:e4: 8f:53:e3:0f:9b:98:6c:79:8a:93:da:43:4a:8c:c6:98:72:76: 71:13:0a:ab:9d:a9:b5:5e:ef:46:53:1b:10:20:cc:a7:9b:e6: 4f:33:7f:de:8f:07:d0:82:b2:bf:e3:be:f4:ee:71:87:ae:c7: 94:bb:b5:c5:5f:be:00:a5:84:4e:f9:cb:e1:4f:bc:0c:66:4e: 38:34:d5:89:71:00:cc:12:ac:c7:dc:d9:68:83:a1:10:38:05: 47:0a:66:01:53:48:87:e4:0a:83:5a:b6:2c:5d:cd:6a:3e:12: 6b:a3:04:22:e6:71:11:a3:fb:2d:ef:59:db:ec:96:a3:49:e4: 5c:e7:cf:46:46:c7:ab:55:e7:50:88:bf:50:a3:e8:a1:b9:c2: 95:d9:ca:84:52:75:f1:6d:09:3f:21:93:a2:d1:83:97:73:3d: 6e:a7:16:72 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAS0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkU2RDcxMTAvBgNVBAUTKDcwQ0QwMkI2NjQyNDc5QTg3NDQ2MjcxNTcwNkU2QUE5 QTg5REEyQzkwHhcNMjUwNzAzMDUwMTAxWhcNMjUwNzEwMDUwMTAxWjAYMRYwFAYD VQQDEw02ODY2MGU4ZC1jODliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwZdalOfasE/IZwLmbqruD9QACLzzkLlbCXRBu+0abVX7FUBwv7E6iFgCezTC T4jEVw8g0PaukIIKCU28y4hLTQsrREJM5YJs0DzkTigl2GJ333Gj3xWnG4OMMOM5 wZDFKi+42UVg2Ri6r3CW7ukSqZcFm6MP1ORVju4C3Undrh9S1/i54qBIn85q1wzr 01Zaify6dGX7j7sBny4Ack+J9WAgHHIb9zaq92tPfafPtmebLM28tM/kFGEdSVtq jBSOdEZkqIOUvBSFYZAjPhtr1CVbs6z1LDOI9LN5mR7xhI1cYgrmFaCGr1PxqNwS O+6i9KhVX5wHsMIEsDybwtf42wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDmJKJLr ktC6ozCZG3WooeVqc+oBMB8GA1UdIwQYMBaAFHDNArZkJHmodEYnFXBuaqmonaLJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRTZENy83MUE1MTU3NEFF RjIxMUVFQjI5M0I0ODBDNEY5QUUwMi9jTTBDdG1Ra2VhaDBSaWNWY0c1cXFhaWRv c2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NNMEN0bVFrZWFoMFJpY1ZjRzVxcWFpZG9zay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RTZENy83MUE1MTU3NEFFRjIxMUVFQjI5M0I0ODBDNEY5QUUwMi9jTTBDdG1Ra2Vh aDBSaWNWY0c1cXFhaWRvc2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA6s5XjtbbKIN2VpwuID+x6LwRsNXq+xAIJYxk11WjAFB1+84UEW6uu L85f4MSOOAplNVUdikia3OKt7Sz973C4YCz8P42xON1hmovqAhFMkiJOm8i5Th1X muSPU+MPm5hseYqT2kNKjMaYcnZxEwqrnam1Xu9GUxsQIMynm+ZPM3/ejwfQgrK/ 47707nGHrseUu7XFX74ApYRO+cvhT7wMZk44NNWJcQDMEqzH3Nlog6EQOAVHCmYB U0iH5AqDWrYsXc1qPhJrowQi5nERo/st71nb7JajSeRc589GRserVedQiL9Qo+ih ucKV2cqEUnXxbQk/IZOi0YOXcz1upxZy -----END CERTIFICATE-----Generated at Fri Jul 4 10:59:25 2025 by rpki-client