$ rpki-client -vvf rpki.apnic.net/member_repository/A91C278B/06B0B62A0A4811ECBC573D5FC4F9AE02/PEM7ZOZMRt_VjmPBFShEhYFSMf8.mft File: PEM7ZOZMRt_VjmPBFShEhYFSMf8.mft (raw, json) Hash identifier: U6cdzX84ZyXdYItimRslUauYo5P2GNftWRo8g9KfoTs= Subject key identifier: 61:7A:6D:2D:00:1F:6E:64:9A:D1:F9:7B:73:3C:DA:2E:D9:2B:1C:FB Authority key identifier: 3C:43:3B:64:E6:4C:46:DF:D5:8E:63:C1:15:28:44:85:81:52:31:FF Certificate issuer: /CN=A91C278B/serialNumber=3C433B64E64C46DFD58E63C115284485815231FF Certificate serial: 0531 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PEM7ZOZMRt_VjmPBFShEhYFSMf8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C278B/06B0B62A0A4811ECBC573D5FC4F9AE02/PEM7ZOZMRt_VjmPBFShEhYFSMf8.mft Manifest number: 0521 Signing time: Sat 28 Jun 2025 23:10:24 +0000 Manifest this update: Sat 28 Jun 2025 23:10:24 +0000 Manifest next update: Sat 05 Jul 2025 23:10:24 +0000 Files and hashes: 1: PEM7ZOZMRt_VjmPBFShEhYFSMf8.crl (hash: 2kd4WrKks3llaczPc+BBvP0UfzxjMATGXkNyVzQaruk=) 2: 9D752204479111ECA77ED34DC4F9AE02.roa (hash: XDKnImKrROyw/ip89561zvYG5bmwAM7xctdHrkfLbGA=) 3: 9BB673AA479111ECA77ED34DC4F9AE02.roa (hash: /DuM5c/5hK0oho9BwTuJNF7dRpHoa2sPJXkyJddg5oQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C278B/06B0B62A0A4811ECBC573D5FC4F9AE02/PEM7ZOZMRt_VjmPBFShEhYFSMf8.crl rsync://rpki.apnic.net/member_repository/A91C278B/06B0B62A0A4811ECBC573D5FC4F9AE02/PEM7ZOZMRt_VjmPBFShEhYFSMf8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PEM7ZOZMRt_VjmPBFShEhYFSMf8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 23:10:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1329 (0x531) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C278B, serialNumber=3C433B64E64C46DFD58E63C115284485815231FF Validity Not Before: Jun 28 23:10:24 2025 GMT Not After : Jul 5 23:10:24 2025 GMT Subject: CN=68607660-4b14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:2d:ae:45:e4:3c:e7:f8:68:93:a0:55:46:c2: ea:bf:7c:cb:40:09:c1:71:b2:61:48:0e:9f:59:04: d1:08:b1:b7:32:6f:8a:11:11:fd:a9:29:6e:d5:f8: 83:37:07:7b:74:a8:22:27:f2:dc:63:1e:f8:2d:f9: 71:a3:a2:43:d3:3e:9e:1d:ef:f7:ff:41:b2:fb:36: db:89:b5:01:4e:f4:be:76:f9:7d:80:27:19:f0:38: 2d:eb:c6:06:ab:13:4f:4d:a3:3e:cb:1c:a3:57:5c: 19:80:b2:bf:82:7e:4b:cb:71:52:1c:aa:71:dd:73: 89:7b:a1:7d:3b:b2:94:f4:8a:85:77:55:ee:bf:f0: a8:bf:e6:10:3f:a4:93:4b:37:37:8e:7e:9e:bc:6e: 93:25:57:e4:c4:a3:7a:6a:d7:e2:36:5b:95:60:f2: 42:df:15:ea:38:14:e1:c5:c5:f0:e2:c0:4b:86:ad: cf:25:c0:78:b7:75:28:e6:bb:03:a1:b8:fb:11:e0: 7c:6b:c0:94:91:72:20:dd:57:ae:96:23:ef:a8:bb: 85:78:26:6a:e2:e4:cd:a9:7f:26:05:59:ee:7b:9b: 1d:04:4b:da:ba:9a:63:b2:19:1f:66:de:80:90:d9: 47:d9:10:91:e6:01:b2:2c:3b:89:b3:0d:d1:81:28: 1b:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:7A:6D:2D:00:1F:6E:64:9A:D1:F9:7B:73:3C:DA:2E:D9:2B:1C:FB X509v3 Authority Key Identifier: keyid:3C:43:3B:64:E6:4C:46:DF:D5:8E:63:C1:15:28:44:85:81:52:31:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C278B/06B0B62A0A4811ECBC573D5FC4F9AE02/PEM7ZOZMRt_VjmPBFShEhYFSMf8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PEM7ZOZMRt_VjmPBFShEhYFSMf8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C278B/06B0B62A0A4811ECBC573D5FC4F9AE02/PEM7ZOZMRt_VjmPBFShEhYFSMf8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:d4:77:87:c1:39:d9:55:17:c0:ae:cb:0a:36:8c:2e:17:53: ee:f6:24:11:04:c7:a5:ae:95:1d:1f:be:4c:84:ef:02:24:f1: 0c:22:07:ec:c5:be:03:0e:85:65:c7:3c:9b:d2:97:09:33:27: 85:4f:47:b0:20:6e:77:9a:16:51:9c:17:82:12:d1:9f:31:e4: d7:a6:60:3f:07:4c:e3:e9:f1:bc:8a:e9:dc:2f:c9:3c:3f:91: 9f:e2:2f:ea:91:c9:f8:79:e6:66:24:29:df:55:80:d2:a5:b0: 49:64:ec:12:28:4b:fb:5b:cc:26:78:a0:4a:77:c7:65:e5:05: 75:6d:1b:7f:25:41:8a:3b:3c:ad:50:5b:7a:f0:b4:22:38:1d: ec:b4:0f:9b:58:93:24:41:be:ca:57:0c:e5:fc:79:eb:c3:4d: bf:8f:17:8f:fb:6e:37:04:4c:4b:83:dd:6c:39:34:b8:d4:bd: 54:e0:d5:6e:71:d8:2b:ac:a2:25:83:c9:e7:3e:eb:c3:df:74: b6:34:fc:da:08:b4:81:58:80:06:89:1c:f0:71:ee:95:dd:e7: 19:95:61:b5:f7:fc:d8:fc:30:9f:98:87:45:18:6a:12:ed:7f: 0f:76:20:0a:31:ba:5f:54:fa:39:85:b0:15:cd:cc:c2:e8:c5: 3e:45:91:2a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBTEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzI3OEIxMTAvBgNVBAUTKDNDNDMzQjY0RTY0QzQ2REZENThFNjNDMTE1Mjg0NDg1 ODE1MjMxRkYwHhcNMjUwNjI4MjMxMDI0WhcNMjUwNzA1MjMxMDI0WjAYMRYwFAYD VQQDEw02ODYwNzY2MC00YjE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsC2uReQ85/hok6BVRsLqv3zLQAnBcbJhSA6fWQTRCLG3Mm+KERH9qSlu1fiD Nwd7dKgiJ/LcYx74Lflxo6JD0z6eHe/3/0Gy+zbbibUBTvS+dvl9gCcZ8Dgt68YG qxNPTaM+yxyjV1wZgLK/gn5Ly3FSHKpx3XOJe6F9O7KU9IqFd1Xuv/Cov+YQP6ST Szc3jn6evG6TJVfkxKN6atfiNluVYPJC3xXqOBThxcXw4sBLhq3PJcB4t3Uo5rsD obj7EeB8a8CUkXIg3VeuliPvqLuFeCZq4uTNqX8mBVnue5sdBEvauppjshkfZt6A kNlH2RCR5gGyLDuJsw3RgSgbxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGF6bS0A H25kmtH5e3M82i7ZKxz7MB8GA1UdIwQYMBaAFDxDO2TmTEbf1Y5jwRUoRIWBUjH/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMjc4Qi8wNkIwQjYyQTBB NDgxMUVDQkM1NzNENUZDNEY5QUUwMi9QRU03Wk9aTVJ0X1ZqbVBCRlNoRWhZRlNN ZjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BFTTdaT1pNUnRfVmptUEJGU2hFaFlGU01mOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Mjc4Qi8wNkIwQjYyQTBBNDgxMUVDQkM1NzNENUZDNEY5QUUwMi9QRU03Wk9aTVJ0 X1ZqbVBCRlNoRWhZRlNNZjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBj1HeHwTnZVRfArssKNowuF1Pu9iQRBMelrpUdH75MhO8CJPEMIgfs xb4DDoVlxzyb0pcJMyeFT0ewIG53mhZRnBeCEtGfMeTXpmA/B0zj6fG8iuncL8k8 P5Gf4i/qkcn4eeZmJCnfVYDSpbBJZOwSKEv7W8wmeKBKd8dl5QV1bRt/JUGKOzyt UFt68LQiOB3stA+bWJMkQb7KVwzl/Hnrw02/jxeP+243BExLg91sOTS41L1U4NVu cdgrrKIlg8nnPuvD33S2NPzaCLSBWIAGiRzwce6V3ecZlWG19/zY/DCfmIdFGGoS 7X8PdiAKMbpfVPo5hbAVzczC6MU+RZEq -----END CERTIFICATE-----Generated at Mon Jun 30 00:23:41 2025 by rpki-client