$ rpki-client -vvf rpki.apnic.net/member_repository/A91C91A6/BA4CCE0ED72B11EA8C1BBD4DC4F9AE02/zF1c4NwYIQkMvHU417txI3GQguc.mft File: zF1c4NwYIQkMvHU417txI3GQguc.mft (raw, json) Hash identifier: C7c9zw6N2CaxsnQI68PaKyWaM5rTs2LkHR1WnOki5L8= Subject key identifier: 18:52:3A:19:C5:45:C2:22:AB:C8:22:36:8D:16:DA:1B:EA:8C:39:05 Authority key identifier: CC:5D:5C:E0:DC:18:21:09:0C:BC:75:38:D7:BB:71:23:71:90:82:E7 Certificate issuer: /CN=A91C91A6/serialNumber=CC5D5CE0DC1821090CBC7538D7BB7123719082E7 Certificate serial: 0830 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zF1c4NwYIQkMvHU417txI3GQguc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C91A6/BA4CCE0ED72B11EA8C1BBD4DC4F9AE02/zF1c4NwYIQkMvHU417txI3GQguc.mft Manifest number: 0825 Signing time: Wed 02 Jul 2025 21:03:23 +0000 Manifest this update: Wed 02 Jul 2025 21:03:22 +0000 Manifest next update: Wed 09 Jul 2025 21:03:22 +0000 Files and hashes: 1: zF1c4NwYIQkMvHU417txI3GQguc.crl (hash: Dm2gy05/vlcSXV0/APUDZiNemd8H7piXO3ERBDsrFNg=) 2: 5A020E1229E011EB80A2FF13C4F9AE02.roa (hash: cqbI01oJRPBEH+/wJOlpiaUkORzn2kWmqx1uTWAfIc8=) 3: 5B1534BE29E011EB80A2FF13C4F9AE02.roa (hash: 1CIYo//bwjYUMyQBStYQUQ8rbC/A2KlKjD1S8BvGyiU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C91A6/BA4CCE0ED72B11EA8C1BBD4DC4F9AE02/zF1c4NwYIQkMvHU417txI3GQguc.crl rsync://rpki.apnic.net/member_repository/A91C91A6/BA4CCE0ED72B11EA8C1BBD4DC4F9AE02/zF1c4NwYIQkMvHU417txI3GQguc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zF1c4NwYIQkMvHU417txI3GQguc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 21:03:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2096 (0x830) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C91A6, serialNumber=CC5D5CE0DC1821090CBC7538D7BB7123719082E7 Validity Not Before: Jul 2 21:03:22 2025 GMT Not After : Jul 9 21:03:22 2025 GMT Subject: CN=68659e9b-e2ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:79:6b:04:02:76:2e:de:25:c7:0b:6e:0f:3a: 0e:fd:6a:83:a2:72:53:c5:e3:6e:3c:99:69:d7:6f: 06:7c:7a:5d:7e:37:60:16:38:2b:9d:aa:d8:1a:0b: 4e:b3:5b:b3:fd:07:ce:52:ae:30:af:d9:98:48:6e: 41:11:3b:d0:b4:0e:59:5e:c7:a2:66:c0:f2:11:88: c8:a7:5d:09:46:e4:94:b4:b8:2a:c7:05:cc:54:48: 77:2b:04:88:e7:1e:0a:6a:8b:e2:6c:31:af:de:ae: 87:2f:37:32:0d:32:06:14:f7:d3:06:f4:0e:a4:09: 08:e7:48:62:c2:84:9d:8d:7a:6f:3f:cb:15:4d:aa: b9:95:a5:7f:17:63:10:17:8d:5f:7d:bc:d3:54:63: 23:e8:21:c2:64:e5:1f:1f:db:43:b4:4f:54:4d:d5: 49:a6:3e:5c:00:d1:9e:0f:36:45:a4:33:c8:af:e2: 5d:40:2b:6b:2a:af:d3:9f:a3:24:1d:12:86:3c:92: b4:ce:a0:5e:73:95:c8:da:4f:c8:bd:16:31:a2:8a: 24:5c:a6:e7:69:4b:d8:3f:71:80:c8:8b:3e:a0:4b: 4d:58:8e:02:9d:5a:70:13:8f:da:ff:7d:3f:2d:dd: db:c1:5f:cd:d5:d7:39:33:46:64:1b:ed:9f:20:3b: 59:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:52:3A:19:C5:45:C2:22:AB:C8:22:36:8D:16:DA:1B:EA:8C:39:05 X509v3 Authority Key Identifier: keyid:CC:5D:5C:E0:DC:18:21:09:0C:BC:75:38:D7:BB:71:23:71:90:82:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C91A6/BA4CCE0ED72B11EA8C1BBD4DC4F9AE02/zF1c4NwYIQkMvHU417txI3GQguc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zF1c4NwYIQkMvHU417txI3GQguc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C91A6/BA4CCE0ED72B11EA8C1BBD4DC4F9AE02/zF1c4NwYIQkMvHU417txI3GQguc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:b4:69:6d:2d:73:e3:ed:b8:0d:7a:60:75:b3:5c:08:54:24: 31:ab:c4:d1:48:2a:3c:83:86:62:ee:b7:9f:ca:25:de:46:c9: 01:ea:db:e4:51:ee:78:0b:fe:83:b7:8f:a1:23:19:be:ac:a0: 84:db:31:f9:08:54:b0:e6:63:27:ca:18:1b:73:ec:2a:20:aa: fc:a9:b3:72:e4:ea:fe:1f:97:37:1e:db:ac:46:ab:5a:f1:56: 04:e8:49:78:f9:5d:67:18:85:fc:00:3b:f0:17:90:77:54:70: 3b:8c:30:f2:da:b2:4a:e5:33:13:35:27:41:ec:ab:ea:8f:49: 68:24:33:1d:e1:4b:a4:08:e7:e0:a6:23:8d:79:cb:f2:33:4a: 4d:34:56:3c:15:66:3e:94:95:c0:d3:ff:81:85:92:20:c4:f1: 4e:6d:09:e7:7a:09:06:87:29:08:6d:9a:d0:26:35:fc:f7:11: c9:83:32:57:9f:e2:93:3b:a9:c9:09:b8:9a:ab:cc:35:62:96: 69:43:f5:2e:98:32:2a:0b:f0:f2:d8:47:5d:6e:7d:94:63:84: c5:07:6f:0c:00:b2:4c:9d:c6:ef:16:92:9b:12:3a:cd:6f:1e: 19:59:f4:6e:24:62:9c:04:6f:63:6c:5e:29:17:0b:2d:97:06: 91:55:c1:05 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCDAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzkxQTYxMTAvBgNVBAUTKENDNUQ1Q0UwREMxODIxMDkwQ0JDNzUzOEQ3QkI3MTIz NzE5MDgyRTcwHhcNMjUwNzAyMjEwMzIyWhcNMjUwNzA5MjEwMzIyWjAYMRYwFAYD VQQDEw02ODY1OWU5Yi1lMmVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt3lrBAJ2Lt4lxwtuDzoO/WqDonJTxeNuPJlp128GfHpdfjdgFjgrnarYGgtO s1uz/QfOUq4wr9mYSG5BETvQtA5ZXseiZsDyEYjIp10JRuSUtLgqxwXMVEh3KwSI 5x4KaovibDGv3q6HLzcyDTIGFPfTBvQOpAkI50hiwoSdjXpvP8sVTaq5laV/F2MQ F41ffbzTVGMj6CHCZOUfH9tDtE9UTdVJpj5cANGeDzZFpDPIr+JdQCtrKq/Tn6Mk HRKGPJK0zqBec5XI2k/IvRYxoookXKbnaUvYP3GAyIs+oEtNWI4CnVpwE4/a/30/ Ld3bwV/N1dc5M0ZkG+2fIDtZkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBhSOhnF RcIiq8giNo0W2hvqjDkFMB8GA1UdIwQYMBaAFMxdXODcGCEJDLx1ONe7cSNxkILn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTFBNi9CQTRDQ0UwRUQ3 MkIxMUVBOEMxQkJENERDNEY5QUUwMi96RjFjNE53WUlRa012SFU0MTd0eEkzR1Fn dWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pGMWM0TndZSVFrTXZIVTQxN3R4STNHUWd1Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTFBNi9CQTRDQ0UwRUQ3MkIxMUVBOEMxQkJENERDNEY5QUUwMi96RjFjNE53WUlR a012SFU0MTd0eEkzR1FndWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAMtGltLXPj7bgNemB1s1wIVCQxq8TRSCo8g4Zi7refyiXeRskB6tvk Ue54C/6Dt4+hIxm+rKCE2zH5CFSw5mMnyhgbc+wqIKr8qbNy5Or+H5c3HtusRqta 8VYE6El4+V1nGIX8ADvwF5B3VHA7jDDy2rJK5TMTNSdB7Kvqj0loJDMd4UukCOfg piONecvyM0pNNFY8FWY+lJXA0/+BhZIgxPFObQnnegkGhykIbZrQJjX89xHJgzJX n+KTO6nJCbiaq8w1YpZpQ/UumDIqC/Dy2Eddbn2UY4TFB28MALJMncbvFpKbEjrN bx4ZWfRuJGKcBG9jbF4pFwstlwaRVcEF -----END CERTIFICATE-----Generated at Thu Jul 3 06:09:04 2025 by rpki-client