$ rpki-client -vvf rpki.apnic.net/member_repository/A91C05AD/95BE3BD61D3311ED96A10A60C4F9AE02/9RKtZjpjMmNVyo2OkQCzzqs8ufs.mft File: 9RKtZjpjMmNVyo2OkQCzzqs8ufs.mft (raw, json) Hash identifier: maz6CWiN3B2F9VjxQN5y9B3G+09Llg8hbI+xEP4RFwU= Subject key identifier: E7:07:F6:99:7E:11:16:8C:98:A2:EE:6E:76:BC:B8:10:1C:5C:14:1C Authority key identifier: F5:12:AD:66:3A:63:32:63:55:CA:8D:8E:91:00:B3:CE:AB:3C:B9:FB Certificate issuer: /CN=A91C05AD/serialNumber=F512AD663A63326355CA8D8E9100B3CEAB3CB9FB Certificate serial: 0274 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9RKtZjpjMmNVyo2OkQCzzqs8ufs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C05AD/95BE3BD61D3311ED96A10A60C4F9AE02/9RKtZjpjMmNVyo2OkQCzzqs8ufs.mft Manifest number: 026A Signing time: Tue 01 Jul 2025 02:29:33 +0000 Manifest this update: Tue 01 Jul 2025 02:29:32 +0000 Manifest next update: Tue 08 Jul 2025 02:29:32 +0000 Files and hashes: 1: 9RKtZjpjMmNVyo2OkQCzzqs8ufs.crl (hash: 8bWlJQwc7omLojlI275uhtmPiLYp8BtzWd11mo1ou3I=) 2: 58C8DF8E1D3711ED9E2D8867C4F9AE02.roa (hash: FSYr699megaB2rJpIagzzWfYpNq6JBYAS+eCRbgyO2c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C05AD/95BE3BD61D3311ED96A10A60C4F9AE02/9RKtZjpjMmNVyo2OkQCzzqs8ufs.crl rsync://rpki.apnic.net/member_repository/A91C05AD/95BE3BD61D3311ED96A10A60C4F9AE02/9RKtZjpjMmNVyo2OkQCzzqs8ufs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9RKtZjpjMmNVyo2OkQCzzqs8ufs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 02:29:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 628 (0x274) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C05AD, serialNumber=F512AD663A63326355CA8D8E9100B3CEAB3CB9FB Validity Not Before: Jul 1 02:29:32 2025 GMT Not After : Jul 8 02:29:32 2025 GMT Subject: CN=6863480c-e5cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:0a:4a:1b:99:b2:9c:bc:d9:ae:b4:a0:95:71: 96:58:0d:0f:00:9e:5b:06:d7:f1:c0:5e:fb:37:a5: 36:c9:59:d7:d1:b5:39:db:b7:d9:3f:d2:90:70:fa: cd:94:40:b6:32:bd:ba:24:5a:db:e5:d5:1c:b5:dd: 30:5f:cc:be:23:a4:cd:ee:83:71:2c:86:e0:b1:d7: b3:5c:af:66:c0:39:fd:53:a5:9c:4f:42:69:0d:94: 09:f1:40:2f:a0:bc:5b:f2:a8:05:35:96:3c:4a:94: bf:c8:1a:8d:07:54:81:1c:b1:b0:c6:15:01:c3:dd: 8d:cd:fd:14:dd:44:dc:d1:fb:d9:ec:e2:1d:5f:2a: 01:c6:2e:73:17:64:f3:3f:56:c3:82:4c:f1:17:5d: 28:7b:00:33:7b:9a:d4:69:76:c8:6e:d3:88:67:76: 2f:1a:af:e3:49:4a:6d:49:a2:a7:52:3c:a4:fc:53: 5c:e7:06:e4:0f:4f:a8:25:27:46:58:1e:04:ed:4a: 85:e0:ad:c7:64:68:57:6e:28:2e:bd:4d:4a:71:16: 71:d8:7f:68:5d:b8:6c:6d:e8:07:ce:29:19:63:0d: 83:ad:65:17:29:ff:77:b3:ef:1f:53:76:52:f2:fb: 78:2c:27:58:4b:7e:04:4a:d8:18:5b:7c:3f:1b:79: 31:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:07:F6:99:7E:11:16:8C:98:A2:EE:6E:76:BC:B8:10:1C:5C:14:1C X509v3 Authority Key Identifier: keyid:F5:12:AD:66:3A:63:32:63:55:CA:8D:8E:91:00:B3:CE:AB:3C:B9:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C05AD/95BE3BD61D3311ED96A10A60C4F9AE02/9RKtZjpjMmNVyo2OkQCzzqs8ufs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9RKtZjpjMmNVyo2OkQCzzqs8ufs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C05AD/95BE3BD61D3311ED96A10A60C4F9AE02/9RKtZjpjMmNVyo2OkQCzzqs8ufs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:7d:bd:d6:96:58:02:2c:12:31:89:b1:27:10:50:73:c9:b3: 5c:83:bf:64:81:d1:28:b4:e4:c1:39:62:54:5c:f7:68:7e:eb: 07:a9:7c:4b:e8:07:13:c6:1a:c5:ab:6d:7d:20:f7:be:de:5b: 04:66:a5:91:81:44:a9:41:01:92:43:80:26:bd:2e:fc:ab:62: 8e:b2:06:5d:a1:32:86:de:d5:83:47:ac:1b:d4:1c:b6:d6:4a: 7e:2d:28:d3:ea:86:61:1b:02:72:48:d8:48:e0:7c:d4:2f:41: 9e:a5:ea:ff:ac:99:68:f9:4d:d1:f4:d8:13:5d:22:6c:44:b3: 55:3b:d7:d3:08:53:c5:12:2b:b0:01:b2:ad:fc:e4:09:e4:90: 15:e8:bf:26:a1:e0:73:b2:89:85:a9:17:26:b2:25:ea:eb:87: af:f6:31:0e:37:4e:35:bd:bf:73:2f:1d:a3:66:3c:e4:d0:5c: cf:36:87:c9:2d:08:7d:47:bf:70:ec:4f:29:4d:b2:12:a0:5d: cb:d3:47:ee:5f:5b:66:cc:6b:18:c4:dc:ff:b3:81:50:3a:c8: 7e:54:fb:14:fa:4a:36:6e:0a:6d:c2:ab:9d:0d:5c:13:67:17: bb:e2:e9:0a:eb:30:5e:eb:02:43:7c:cf:06:58:84:4c:a7:cc: ed:b4:51:86 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAnQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzA1QUQxMTAvBgNVBAUTKEY1MTJBRDY2M0E2MzMyNjM1NUNBOEQ4RTkxMDBCM0NF QUIzQ0I5RkIwHhcNMjUwNzAxMDIyOTMyWhcNMjUwNzA4MDIyOTMyWjAYMRYwFAYD VQQDEw02ODYzNDgwYy1lNWNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvwpKG5mynLzZrrSglXGWWA0PAJ5bBtfxwF77N6U2yVnX0bU527fZP9KQcPrN lEC2Mr26JFrb5dUctd0wX8y+I6TN7oNxLIbgsdezXK9mwDn9U6WcT0JpDZQJ8UAv oLxb8qgFNZY8SpS/yBqNB1SBHLGwxhUBw92Nzf0U3UTc0fvZ7OIdXyoBxi5zF2Tz P1bDgkzxF10oewAze5rUaXbIbtOIZ3YvGq/jSUptSaKnUjyk/FNc5wbkD0+oJSdG WB4E7UqF4K3HZGhXbiguvU1KcRZx2H9oXbhsbegHzikZYw2DrWUXKf93s+8fU3ZS 8vt4LCdYS34EStgYW3w/G3kxbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOcH9pl+ ERaMmKLubna8uBAcXBQcMB8GA1UdIwQYMBaAFPUSrWY6YzJjVcqNjpEAs86rPLn7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMDVBRC85NUJFM0JENjFE MzMxMUVEOTZBMTBBNjBDNEY5QUUwMi85Ukt0Wmpwak1tTlZ5bzJPa1FDenpxczh1 ZnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlSS3RaanBqTW1OVnlvMk9rUUN6enFzOHVmcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MDVBRC85NUJFM0JENjFEMzMxMUVEOTZBMTBBNjBDNEY5QUUwMi85Ukt0Wmpwak1t TlZ5bzJPa1FDenpxczh1ZnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB8fb3WllgCLBIxibEnEFBzybNcg79kgdEotOTBOWJUXPdofusHqXxL 6AcTxhrFq219IPe+3lsEZqWRgUSpQQGSQ4AmvS78q2KOsgZdoTKG3tWDR6wb1By2 1kp+LSjT6oZhGwJySNhI4HzUL0Geper/rJlo+U3R9NgTXSJsRLNVO9fTCFPFEiuw AbKt/OQJ5JAV6L8moeBzsomFqRcmsiXq64ev9jEON041vb9zLx2jZjzk0FzPNofJ LQh9R79w7E8pTbISoF3L00fuX1tmzGsYxNz/s4FQOsh+VPsU+ko2bgptwqudDVwT Zxe74ukK6zBe6wJDfM8GWIRMp8zttFGG -----END CERTIFICATE-----Generated at Thu Jul 3 02:06:59 2025 by rpki-client