$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5A9F/021A960CF67811E9B5209625C4F9AE02/a-rAl7V48XydcRl3ez9RFPvglxs.mft File: a-rAl7V48XydcRl3ez9RFPvglxs.mft (raw, json) Hash identifier: e+5sjdQorg7SPzPa+j1nif1qogn3z5+w2EFtNEyPLuA= Subject key identifier: BC:4F:90:8E:98:93:0B:AD:59:F0:8A:38:2B:59:6C:4B:EA:50:CB:D6 Authority key identifier: 6B:EA:C0:97:B5:78:F1:7C:9D:71:19:77:7B:3F:51:14:FB:E0:97:1B Certificate issuer: /CN=A91C5A9F/serialNumber=6BEAC097B578F17C9D7119777B3F5114FBE0971B Certificate serial: 0CBE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a-rAl7V48XydcRl3ez9RFPvglxs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C5A9F/021A960CF67811E9B5209625C4F9AE02/a-rAl7V48XydcRl3ez9RFPvglxs.mft Manifest number: 0CA8 Signing time: Wed 02 Jul 2025 18:25:20 +0000 Manifest this update: Wed 02 Jul 2025 18:25:19 +0000 Manifest next update: Wed 09 Jul 2025 18:25:19 +0000 Files and hashes: 1: a-rAl7V48XydcRl3ez9RFPvglxs.crl (hash: 6n1Lw8lKQ/WulXCZ4iXnhLrgRvIOIyjDXRzyLjMQoEs=) 2: 498956B8FFC411EEB2369013C4F9AE02.roa (hash: w5Dpoxz9EcTss3nAI8ZMtrwKEHayowiUIHwPNhpEFMM=) 3: 48B3316EFFC411EEB2369013C4F9AE02.roa (hash: Fswv/F/vaivrwx2kQ/qe3AmxF+uS0o5WMUgISHj2Mxo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C5A9F/021A960CF67811E9B5209625C4F9AE02/a-rAl7V48XydcRl3ez9RFPvglxs.crl rsync://rpki.apnic.net/member_repository/A91C5A9F/021A960CF67811E9B5209625C4F9AE02/a-rAl7V48XydcRl3ez9RFPvglxs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a-rAl7V48XydcRl3ez9RFPvglxs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 18:25:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3262 (0xcbe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C5A9F, serialNumber=6BEAC097B578F17C9D7119777B3F5114FBE0971B Validity Not Before: Jul 2 18:25:19 2025 GMT Not After : Jul 9 18:25:19 2025 GMT Subject: CN=6865798f-c165 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:68:f1:05:c0:ca:ba:2f:4f:0a:c5:f5:03:94: f4:d3:47:e4:8d:af:41:8f:18:94:64:8d:64:e6:5b: 33:cc:c7:aa:c8:a5:35:27:6c:dc:1f:6d:97:86:aa: ca:af:46:d6:4d:c5:85:ed:ad:3d:7e:8f:6e:23:db: 3d:e9:79:32:28:ad:e3:6f:e2:5e:d5:c8:2d:67:93: c3:81:c6:96:68:a7:3c:b7:bf:35:a5:88:40:08:7e: 0b:24:9b:28:ba:fe:63:cc:c0:8e:3d:79:e5:40:06: f0:ed:c5:7c:62:3b:b8:9a:ae:49:6b:f0:cd:8f:00: 10:18:0d:1d:f3:0b:e2:68:93:8a:3a:56:e7:b5:3c: ea:60:76:b5:df:91:8e:93:5e:ca:ad:ca:41:54:b0: 3d:08:a1:1d:78:99:5a:7a:23:ef:c0:4b:a4:61:97: f5:7a:a8:5f:21:25:5d:7a:fd:a4:c6:6a:e6:02:89: 28:4b:18:3a:a8:26:42:89:aa:f1:6d:ad:8c:dd:0c: 17:90:9d:bf:25:ce:33:2b:3b:c3:0d:81:ee:a8:23: 71:77:b4:98:19:79:72:d4:2b:91:26:9e:00:d3:fc: 07:f1:8e:2c:b0:85:d3:63:bc:7d:22:ce:48:54:1b: 09:02:8a:cc:e5:9e:7b:95:a7:d2:6b:3d:c0:49:ab: 92:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:4F:90:8E:98:93:0B:AD:59:F0:8A:38:2B:59:6C:4B:EA:50:CB:D6 X509v3 Authority Key Identifier: keyid:6B:EA:C0:97:B5:78:F1:7C:9D:71:19:77:7B:3F:51:14:FB:E0:97:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C5A9F/021A960CF67811E9B5209625C4F9AE02/a-rAl7V48XydcRl3ez9RFPvglxs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a-rAl7V48XydcRl3ez9RFPvglxs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5A9F/021A960CF67811E9B5209625C4F9AE02/a-rAl7V48XydcRl3ez9RFPvglxs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:c6:db:a1:bc:c8:ab:e8:7a:31:b5:9f:5c:85:a7:b4:9c:b2: 9b:a1:70:26:00:ab:83:21:f0:73:e7:20:5a:ec:b9:c0:a6:43: fd:a6:f9:f1:a9:77:24:50:2c:b1:d9:b9:85:67:c6:3a:70:4a: ce:9f:7a:22:2e:58:ba:ab:bc:07:6e:8b:00:a9:5a:7e:f6:f4: 0b:f2:65:ae:c4:b2:30:48:f1:51:9e:dd:b3:6c:5e:9f:a4:98: b1:58:a8:97:6d:f1:9b:1f:37:e6:33:80:55:a0:3e:bf:96:9b: 34:c0:c1:aa:97:fc:25:28:80:4c:87:10:8c:64:ca:6e:a1:4d: 32:de:e2:fd:18:0a:e0:19:80:4a:28:22:70:5a:fd:44:d8:2d: 2e:a4:71:a4:65:95:c9:c8:f0:43:05:e7:38:7e:6a:99:54:a5: 6c:a7:c1:1c:43:39:07:99:05:08:55:fe:fb:b9:82:7b:06:ff: bb:08:c9:94:a6:66:3a:c5:92:73:eb:d1:d1:fe:a3:08:74:70: b5:86:5a:e5:88:73:f1:e3:49:38:40:e5:7c:2c:11:c3:02:db: af:90:43:da:84:37:60:9f:fc:0d:03:ae:c0:62:b0:b0:55:91: 97:e0:d1:bc:d4:eb:0f:f9:dd:02:58:86:12:a7:72:72:d1:8c: 08:2d:e5:34 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDL4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzVBOUYxMTAvBgNVBAUTKDZCRUFDMDk3QjU3OEYxN0M5RDcxMTk3NzdCM0Y1MTE0 RkJFMDk3MUIwHhcNMjUwNzAyMTgyNTE5WhcNMjUwNzA5MTgyNTE5WjAYMRYwFAYD VQQDEw02ODY1Nzk4Zi1jMTY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyWjxBcDKui9PCsX1A5T000fkja9BjxiUZI1k5lszzMeqyKU1J2zcH22XhqrK r0bWTcWF7a09fo9uI9s96XkyKK3jb+Je1cgtZ5PDgcaWaKc8t781pYhACH4LJJso uv5jzMCOPXnlQAbw7cV8Yju4mq5Ja/DNjwAQGA0d8wviaJOKOlbntTzqYHa135GO k17KrcpBVLA9CKEdeJlaeiPvwEukYZf1eqhfISVdev2kxmrmAokoSxg6qCZCiarx ba2M3QwXkJ2/Jc4zKzvDDYHuqCNxd7SYGXly1CuRJp4A0/wH8Y4ssIXTY7x9Is5I VBsJAorM5Z57lafSaz3ASauSfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLxPkI6Y kwutWfCKOCtZbEvqUMvWMB8GA1UdIwQYMBaAFGvqwJe1ePF8nXEZd3s/URT74Jcb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNUE5Ri8wMjFBOTYwQ0Y2 NzgxMUU5QjUyMDk2MjVDNEY5QUUwMi9hLXJBbDdWNDhYeWRjUmwzZXo5UkZQdmds eHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2EtckFsN1Y0OFh5ZGNSbDNlejlSRlB2Z2x4cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NUE5Ri8wMjFBOTYwQ0Y2NzgxMUU5QjUyMDk2MjVDNEY5QUUwMi9hLXJBbDdWNDhY eWRjUmwzZXo5UkZQdmdseHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBCxtuhvMir6HoxtZ9chae0nLKboXAmAKuDIfBz5yBa7LnApkP9pvnx qXckUCyx2bmFZ8Y6cErOn3oiLli6q7wHbosAqVp+9vQL8mWuxLIwSPFRnt2zbF6f pJixWKiXbfGbHzfmM4BVoD6/lps0wMGql/wlKIBMhxCMZMpuoU0y3uL9GArgGYBK KCJwWv1E2C0upHGkZZXJyPBDBec4fmqZVKVsp8EcQzkHmQUIVf77uYJ7Bv+7CMmU pmY6xZJz69HR/qMIdHC1hlrliHPx40k4QOV8LBHDAtuvkEPahDdgn/wNA67AYrCw VZGX4NG81OsP+d0CWIYSp3Jy0YwILeU0 -----END CERTIFICATE-----Generated at Thu Jul 3 11:25:36 2025 by rpki-client