$ rpki-client -vvf rpki.apnic.net/member_repository/A91C278B/06B0B62A0A4811ECBC573D5FC4F9AE02/PEM7ZOZMRt_VjmPBFShEhYFSMf8.mft File: PEM7ZOZMRt_VjmPBFShEhYFSMf8.mft (raw, json) Hash identifier: fvLkIjBcOr554VkXBVx2DARt3jxFmfmxI8vNnoD/3NU= Subject key identifier: 69:1B:97:53:19:77:C5:7D:A6:85:D0:6A:04:96:59:49:2E:AE:1C:81 Authority key identifier: 3C:43:3B:64:E6:4C:46:DF:D5:8E:63:C1:15:28:44:85:81:52:31:FF Certificate issuer: /CN=A91C278B/serialNumber=3C433B64E64C46DFD58E63C115284485815231FF Certificate serial: 0532 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PEM7ZOZMRt_VjmPBFShEhYFSMf8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C278B/06B0B62A0A4811ECBC573D5FC4F9AE02/PEM7ZOZMRt_VjmPBFShEhYFSMf8.mft Manifest number: 0522 Signing time: Tue 01 Jul 2025 00:01:08 +0000 Manifest this update: Tue 01 Jul 2025 00:01:07 +0000 Manifest next update: Tue 08 Jul 2025 00:01:07 +0000 Files and hashes: 1: PEM7ZOZMRt_VjmPBFShEhYFSMf8.crl (hash: VB1UERRAanA5yJGxgregN5k7bUxw5yGTXNV4noEdTkw=) 2: 9D752204479111ECA77ED34DC4F9AE02.roa (hash: XDKnImKrROyw/ip89561zvYG5bmwAM7xctdHrkfLbGA=) 3: 9BB673AA479111ECA77ED34DC4F9AE02.roa (hash: /DuM5c/5hK0oho9BwTuJNF7dRpHoa2sPJXkyJddg5oQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C278B/06B0B62A0A4811ECBC573D5FC4F9AE02/PEM7ZOZMRt_VjmPBFShEhYFSMf8.crl rsync://rpki.apnic.net/member_repository/A91C278B/06B0B62A0A4811ECBC573D5FC4F9AE02/PEM7ZOZMRt_VjmPBFShEhYFSMf8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PEM7ZOZMRt_VjmPBFShEhYFSMf8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 00:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1330 (0x532) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C278B, serialNumber=3C433B64E64C46DFD58E63C115284485815231FF Validity Not Before: Jul 1 00:01:07 2025 GMT Not After : Jul 8 00:01:07 2025 GMT Subject: CN=68632543-c9fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:4b:3d:e3:7a:a6:d1:4a:ba:5e:a2:21:1a:5a: 9f:7d:1d:47:82:91:0c:b6:33:3d:1e:49:ef:ee:47: 5c:ca:50:1a:3d:63:7c:a9:bc:d5:ce:f6:93:79:88: 65:8f:8a:2c:6a:00:73:e8:24:02:11:28:22:66:e7: f1:25:cc:d2:f8:d0:d7:8b:5d:6f:47:1f:a8:6e:a9: 3f:fe:04:dd:33:9e:ea:83:ba:ed:6e:3a:61:54:71: 02:bc:ab:6f:ff:0f:65:c3:03:50:18:33:ba:1d:0a: 79:51:1f:97:00:f7:91:7d:97:82:75:3b:ca:cd:fb: d0:41:81:29:f6:7b:60:22:53:4e:fa:82:b1:92:11: 3c:9a:ea:49:8a:5d:66:d8:50:84:88:2e:47:85:1f: 75:2e:31:77:f2:a8:98:14:05:3f:8e:fe:80:eb:bf: 2b:5b:2b:52:8d:37:f9:68:13:e6:9b:08:65:2a:b4: 8b:14:1f:b5:eb:cf:d2:fa:f0:b8:fd:54:73:65:29: 05:c8:7c:c7:16:a6:4f:03:a6:d7:e0:12:71:ec:cd: 29:c5:53:e4:d6:da:3f:31:f3:bd:6e:75:b8:89:15: 90:01:08:9b:9e:78:06:f8:b3:3b:28:dc:f1:f2:5c: 97:4f:98:8e:26:b8:22:e7:63:31:da:cf:c0:9c:72: 0c:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:1B:97:53:19:77:C5:7D:A6:85:D0:6A:04:96:59:49:2E:AE:1C:81 X509v3 Authority Key Identifier: keyid:3C:43:3B:64:E6:4C:46:DF:D5:8E:63:C1:15:28:44:85:81:52:31:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C278B/06B0B62A0A4811ECBC573D5FC4F9AE02/PEM7ZOZMRt_VjmPBFShEhYFSMf8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PEM7ZOZMRt_VjmPBFShEhYFSMf8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C278B/06B0B62A0A4811ECBC573D5FC4F9AE02/PEM7ZOZMRt_VjmPBFShEhYFSMf8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:65:4e:c8:aa:31:e8:85:4d:3f:bf:c8:91:34:27:97:ba:55: bd:ac:a6:8f:d9:f8:c4:15:2f:49:17:db:ff:8f:31:d1:df:4b: 81:b1:dd:60:37:4d:46:47:72:ec:2b:08:c2:c4:76:99:a2:17: e1:f0:d0:68:7a:52:5e:fc:7b:57:69:cd:f2:82:c5:6a:36:be: 61:76:ff:84:be:a2:23:b1:3f:85:3a:ee:b4:5b:7a:d4:91:91: 3d:d4:c2:c4:af:00:12:d4:37:31:8a:5a:5a:47:fe:36:4f:14: de:b5:5e:18:59:a8:44:b8:ec:5b:e1:07:38:76:cd:48:ad:99: aa:e4:89:9c:cb:1b:6e:d5:87:f1:d7:42:bc:59:e1:3c:46:d5: 19:4d:ad:13:5c:fa:0e:bf:a3:d9:d7:f8:74:fd:f0:4d:53:52: 2e:2b:ca:89:b8:e2:a6:91:69:ae:a6:00:b8:01:b1:fd:96:66: 5f:78:a4:28:76:13:45:df:8b:23:10:b3:28:f1:2d:0b:f4:61: 22:c5:b2:3d:4c:60:05:00:e0:60:97:bb:1c:69:c0:07:48:e6: b3:db:3e:a3:83:18:e0:0d:a7:71:62:b8:7e:14:40:de:74:e5: 90:0e:da:e3:f0:21:62:12:9e:76:6a:d8:d9:5a:97:b4:fa:5d: f9:a6:7e:fd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBTIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzI3OEIxMTAvBgNVBAUTKDNDNDMzQjY0RTY0QzQ2REZENThFNjNDMTE1Mjg0NDg1 ODE1MjMxRkYwHhcNMjUwNzAxMDAwMTA3WhcNMjUwNzA4MDAwMTA3WjAYMRYwFAYD VQQDEw02ODYzMjU0My1jOWZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0ks943qm0Uq6XqIhGlqffR1HgpEMtjM9Hknv7kdcylAaPWN8qbzVzvaTeYhl j4osagBz6CQCESgiZufxJczS+NDXi11vRx+obqk//gTdM57qg7rtbjphVHECvKtv /w9lwwNQGDO6HQp5UR+XAPeRfZeCdTvKzfvQQYEp9ntgIlNO+oKxkhE8mupJil1m 2FCEiC5HhR91LjF38qiYFAU/jv6A678rWytSjTf5aBPmmwhlKrSLFB+168/S+vC4 /VRzZSkFyHzHFqZPA6bX4BJx7M0pxVPk1to/MfO9bnW4iRWQAQibnngG+LM7KNzx 8lyXT5iOJrgi52Mx2s/AnHIMCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGkbl1MZ d8V9poXQagSWWUkurhyBMB8GA1UdIwQYMBaAFDxDO2TmTEbf1Y5jwRUoRIWBUjH/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMjc4Qi8wNkIwQjYyQTBB NDgxMUVDQkM1NzNENUZDNEY5QUUwMi9QRU03Wk9aTVJ0X1ZqbVBCRlNoRWhZRlNN ZjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BFTTdaT1pNUnRfVmptUEJGU2hFaFlGU01mOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Mjc4Qi8wNkIwQjYyQTBBNDgxMUVDQkM1NzNENUZDNEY5QUUwMi9QRU03Wk9aTVJ0 X1ZqbVBCRlNoRWhZRlNNZjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCqZU7IqjHohU0/v8iRNCeXulW9rKaP2fjEFS9JF9v/jzHR30uBsd1g N01GR3LsKwjCxHaZohfh8NBoelJe/HtXac3ygsVqNr5hdv+EvqIjsT+FOu60W3rU kZE91MLErwAS1DcxilpaR/42TxTetV4YWahEuOxb4Qc4ds1IrZmq5Imcyxtu1Yfx 10K8WeE8RtUZTa0TXPoOv6PZ1/h0/fBNU1IuK8qJuOKmkWmupgC4AbH9lmZfeKQo dhNF34sjELMo8S0L9GEixbI9TGAFAOBgl7scacAHSOaz2z6jgxjgDadxYrh+FEDe dOWQDtrj8CFiEp52atjZWpe0+l35pn79 -----END CERTIFICATE-----Generated at Tue Jul 1 08:38:17 2025 by rpki-client