$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/msuAZmP7D89uvEPAELk14FIU_J8.mft File: msuAZmP7D89uvEPAELk14FIU_J8.mft (raw, json) Hash identifier: JEFhN3R89N9XQkWYBCwCLV4k2CL0ly/drdzO8RK3nXo= Subject key identifier: E4:EA:C4:84:1A:72:99:33:36:CF:C0:D6:1D:B8:A5:D8:7F:89:F4:B5 Authority key identifier: 9A:CB:80:66:63:FB:0F:CF:6E:BC:43:C0:10:B9:35:E0:52:14:FC:9F Certificate issuer: /CN=A91C7B68/serialNumber=9ACB806663FB0FCF6EBC43C010B935E05214FC9F Certificate serial: 0108 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/msuAZmP7D89uvEPAELk14FIU_J8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/msuAZmP7D89uvEPAELk14FIU_J8.mft Manifest number: 09FC Signing time: Wed 02 Jul 2025 20:39:33 +0000 Manifest this update: Wed 02 Jul 2025 20:39:32 +0000 Manifest next update: Wed 09 Jul 2025 20:39:32 +0000 Files and hashes: 1: msuAZmP7D89uvEPAELk14FIU_J8.crl (hash: XhyKJBH6gbFMnt0SRfqEkJk+6xDaHDC+sEXfqGXgNbo=) 2: 2EC10CF4071C11EFAD19C863C4F9AE02.roa (hash: AouPneIWQOQT+MiZ1EFTYVEBe2qBFNyX5KIDaJtu+qM=) 3: C4DB3710B0BC11EFA44BCA7DC4F9AE02.roa (hash: BXig7jt+N7fBjNwAkzGpIGTBV5qbb0dfgi5McDSf5Co=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/msuAZmP7D89uvEPAELk14FIU_J8.crl rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/msuAZmP7D89uvEPAELk14FIU_J8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/msuAZmP7D89uvEPAELk14FIU_J8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 20:39:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 264 (0x108) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7B68, serialNumber=9ACB806663FB0FCF6EBC43C010B935E05214FC9F Validity Not Before: Jul 2 20:39:32 2025 GMT Not After : Jul 9 20:39:32 2025 GMT Subject: CN=68659905-bd9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:47:5b:39:ab:7d:c4:88:a9:f5:ef:66:23:9a: ae:10:60:54:1c:eb:4d:dc:5a:7e:60:99:5c:55:48: 2f:bd:43:de:c8:e1:f9:2e:05:90:fa:87:a7:9b:d5: 4e:af:f3:64:1d:7c:b2:57:ea:ae:aa:b8:dd:ec:9f: e0:a3:79:06:86:51:9d:8f:f0:be:2e:79:ae:14:b7: a3:1f:ed:87:bd:97:29:d6:21:4d:0e:1b:00:d4:ad: 81:f0:5f:3b:1f:e3:6d:7d:87:b3:a1:6d:b5:b9:b3: 7b:1c:c3:17:ba:0d:f0:1f:db:7b:7c:d4:6a:01:95: 81:f6:7e:b7:11:a4:4b:3a:9f:81:30:d8:92:02:4d: cb:ad:01:3a:f3:ca:16:3d:71:1b:83:5c:29:8e:d5: 9f:1f:7b:10:6c:71:2c:29:6e:9b:02:02:96:96:18: 12:c4:ca:5e:54:cd:2f:03:f1:67:e0:de:7b:86:d6: 36:bf:28:eb:e1:83:0d:e6:66:09:8d:fb:4b:71:1b: 3b:b5:42:37:80:94:41:ee:cf:fb:d0:1c:eb:53:99: b6:a7:2e:35:df:ac:47:54:58:f4:69:8f:3a:82:d3: f3:e0:ef:dd:a5:24:45:33:de:a6:ab:38:0d:ec:94: 59:54:26:35:e8:53:77:48:85:2b:98:84:b6:7e:b8: d2:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:EA:C4:84:1A:72:99:33:36:CF:C0:D6:1D:B8:A5:D8:7F:89:F4:B5 X509v3 Authority Key Identifier: keyid:9A:CB:80:66:63:FB:0F:CF:6E:BC:43:C0:10:B9:35:E0:52:14:FC:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/msuAZmP7D89uvEPAELk14FIU_J8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/msuAZmP7D89uvEPAELk14FIU_J8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/msuAZmP7D89uvEPAELk14FIU_J8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:f0:be:aa:e8:c8:07:98:95:7a:15:4f:0f:c3:68:f4:3b:cb: bd:47:86:70:14:08:09:ca:c2:83:d5:41:48:da:60:cd:eb:e1: 1f:57:ea:58:22:7c:96:62:6e:9a:58:70:5a:a8:e1:80:d3:f6: 6e:25:d0:fc:c7:e0:5c:74:41:f5:c5:12:52:35:58:20:6d:aa: d6:be:f6:b6:27:f1:c2:6a:6d:eb:89:19:85:18:33:14:4a:27: e8:09:29:cc:16:27:a8:95:da:19:0a:cb:68:bd:f3:06:2c:a5: f9:17:8a:82:a3:54:31:1f:cc:46:24:93:5a:2d:56:9b:aa:9b: e6:c9:9f:62:9f:f2:4b:c6:5d:99:c6:eb:9c:d1:be:ae:39:cf: 8b:64:6f:d7:9c:d9:5e:38:ac:1f:6f:d3:b9:2e:12:b0:5b:47: a6:af:13:a2:ce:f2:6f:1d:5a:d9:c9:31:40:d4:35:ea:51:95: b1:b3:eb:9d:91:aa:30:71:75:ec:f0:ec:b9:e3:a1:fa:2a:55: c6:b9:e3:50:b2:55:09:5f:14:b1:e9:f2:87:3e:7f:36:ea:82: 5a:03:7c:c9:38:13:7f:9c:32:93:8a:68:1f:97:67:b2:6c:14: 7c:e6:7d:9d:c3:1d:46:84:a5:1c:a9:22:65:80:c5:9e:57:10: 1c:7e:94:d2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzdCNjgxMTAvBgNVBAUTKDlBQ0I4MDY2NjNGQjBGQ0Y2RUJDNDNDMDEwQjkzNUUw NTIxNEZDOUYwHhcNMjUwNzAyMjAzOTMyWhcNMjUwNzA5MjAzOTMyWjAYMRYwFAYD VQQDEw02ODY1OTkwNS1iZDlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtUdbOat9xIip9e9mI5quEGBUHOtN3Fp+YJlcVUgvvUPeyOH5LgWQ+oenm9VO r/NkHXyyV+quqrjd7J/go3kGhlGdj/C+LnmuFLejH+2HvZcp1iFNDhsA1K2B8F87 H+NtfYezoW21ubN7HMMXug3wH9t7fNRqAZWB9n63EaRLOp+BMNiSAk3LrQE688oW PXEbg1wpjtWfH3sQbHEsKW6bAgKWlhgSxMpeVM0vA/Fn4N57htY2vyjr4YMN5mYJ jftLcRs7tUI3gJRB7s/70BzrU5m2py4136xHVFj0aY86gtPz4O/dpSRFM96mqzgN 7JRZVCY16FN3SIUrmIS2frjS3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOTqxIQa cpkzNs/A1h24pdh/ifS1MB8GA1UdIwQYMBaAFJrLgGZj+w/PbrxDwBC5NeBSFPyf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDN0I2OC81M0E3QjkyQ0Iw QTUxMUVBOEY5MkVEMTdDNEY5QUUwMi9tc3VBWm1QN0Q4OXV2RVBBRUxrMTRGSVVf SjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21zdUFabVA3RDg5dXZFUEFFTGsxNEZJVV9KOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD N0I2OC81M0E3QjkyQ0IwQTUxMUVBOEY5MkVEMTdDNEY5QUUwMi9tc3VBWm1QN0Q4 OXV2RVBBRUxrMTRGSVVfSjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCD8L6q6MgHmJV6FU8Pw2j0O8u9R4ZwFAgJysKD1UFI2mDN6+EfV+pY InyWYm6aWHBaqOGA0/ZuJdD8x+BcdEH1xRJSNVggbarWvva2J/HCam3riRmFGDMU SifoCSnMFieoldoZCstovfMGLKX5F4qCo1QxH8xGJJNaLVabqpvmyZ9in/JLxl2Z xuuc0b6uOc+LZG/XnNleOKwfb9O5LhKwW0emrxOizvJvHVrZyTFA1DXqUZWxs+ud kaowcXXs8Oy546H6KlXGueNQslUJXxSx6fKHPn826oJaA3zJOBN/nDKTimgfl2ey bBR85n2dwx1GhKUcqSJlgMWeVxAcfpTS -----END CERTIFICATE-----Generated at Fri Jul 4 00:20:13 2025 by rpki-client