$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9945/BC00C8F2F09E11ECAEE73E19C4F9AE02/ho7LZCXagzKIkuV7sN9kThrrc7M.mft File: ho7LZCXagzKIkuV7sN9kThrrc7M.mft (raw, json) Hash identifier: YQfjjsRoNp5BfCWZQiMPTuoMii5pPP11P/BjWYCvdds= Subject key identifier: 88:3E:15:30:A0:4E:0A:16:0A:9D:74:43:6C:AA:AF:09:CE:F1:D8:A8 Authority key identifier: 86:8E:CB:64:25:DA:83:32:88:92:E5:7B:B0:DF:64:4E:1A:EB:73:B3 Certificate issuer: /CN=A91C9945/serialNumber=868ECB6425DA83328892E57BB0DF644E1AEB73B3 Certificate serial: 030F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ho7LZCXagzKIkuV7sN9kThrrc7M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9945/BC00C8F2F09E11ECAEE73E19C4F9AE02/ho7LZCXagzKIkuV7sN9kThrrc7M.mft Manifest number: 02EA Signing time: Tue 01 Jul 2025 02:08:29 +0000 Manifest this update: Tue 01 Jul 2025 02:08:28 +0000 Manifest next update: Tue 08 Jul 2025 02:08:28 +0000 Files and hashes: 1: ho7LZCXagzKIkuV7sN9kThrrc7M.crl (hash: bhQUjg6lP/fEWTeZsT1YrgbdPdmqpwsj8gi7EK3sz6o=) 2: 5C7085CA929811ED9C3F4163C4F9AE02.roa (hash: n1usrOSAiqPPh6QVH101wxyixxXVokFjjpTCh03UzYI=) 3: 2E73B40089CA11EF9D45F344C4F9AE02.roa (hash: yLUp5ssNL8jRCU8pwv3KHHNqOfo0vVixndIFRXexYhU=) 4: D40753E8F6C411EEAFF62079C4F9AE02.roa (hash: TJhzWTZSa5k8Gql/1DKmw/NfXVCNcWBU1ddvojpFVGI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9945/BC00C8F2F09E11ECAEE73E19C4F9AE02/ho7LZCXagzKIkuV7sN9kThrrc7M.crl rsync://rpki.apnic.net/member_repository/A91C9945/BC00C8F2F09E11ECAEE73E19C4F9AE02/ho7LZCXagzKIkuV7sN9kThrrc7M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ho7LZCXagzKIkuV7sN9kThrrc7M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 02:08:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 783 (0x30f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9945, serialNumber=868ECB6425DA83328892E57BB0DF644E1AEB73B3 Validity Not Before: Jul 1 02:08:28 2025 GMT Not After : Jul 8 02:08:28 2025 GMT Subject: CN=6863431d-94e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:ff:ac:ad:db:8a:9c:b4:90:28:01:d3:96:a0: 60:c9:45:a5:0f:2b:0a:ba:03:e1:fd:04:0e:25:ef: ef:70:68:5a:31:5d:20:80:a1:2e:b3:44:75:42:2c: c4:2b:1f:93:bc:05:3f:5b:1b:74:97:9a:47:ef:d8: b7:4b:bd:82:af:ba:ca:a8:71:7b:7b:a9:19:fe:de: 0a:78:c0:dc:18:05:96:4d:0f:3b:fe:82:1f:11:49: 03:12:8f:67:c3:33:cd:f2:be:21:71:15:6c:d1:1d: 0b:d7:e8:93:2f:61:43:43:ff:1f:84:49:84:9b:40: f8:3e:5c:b1:6a:78:bc:5b:3a:f4:c6:05:c7:fa:8f: 33:77:85:c3:bd:4a:58:8c:3e:81:a4:1f:b6:4b:12: 15:a4:b1:80:ab:bb:64:60:f1:78:4f:f5:8c:84:d2: bf:4b:3e:a7:0f:dc:a3:29:b4:f1:1b:d6:e1:7d:ac: 1e:fd:c2:d6:4a:30:9a:4f:91:d6:27:dc:2b:db:da: f3:fd:6b:81:92:78:7c:78:8b:5c:28:86:b6:ad:f8: 4e:2f:38:8a:f4:bc:83:d8:1c:66:ed:c0:f8:1f:cb: 53:c2:3a:c9:5e:39:df:69:03:17:6c:f0:a4:e5:b7: 67:62:98:c2:d0:bd:8e:f6:2e:ab:07:a2:11:7e:8b: c1:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:3E:15:30:A0:4E:0A:16:0A:9D:74:43:6C:AA:AF:09:CE:F1:D8:A8 X509v3 Authority Key Identifier: keyid:86:8E:CB:64:25:DA:83:32:88:92:E5:7B:B0:DF:64:4E:1A:EB:73:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9945/BC00C8F2F09E11ECAEE73E19C4F9AE02/ho7LZCXagzKIkuV7sN9kThrrc7M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ho7LZCXagzKIkuV7sN9kThrrc7M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9945/BC00C8F2F09E11ECAEE73E19C4F9AE02/ho7LZCXagzKIkuV7sN9kThrrc7M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:4e:b9:47:b7:e0:5b:b1:78:39:b3:fa:c4:6a:29:e9:9c:a1: 83:cf:ea:85:ef:be:44:7a:c3:be:ff:3f:92:a5:8c:d0:b2:9f: 8b:ee:02:c8:9c:a3:cd:d1:d9:b5:4f:11:b7:a3:f5:96:2e:4a: 91:11:2d:7c:71:a3:cb:b6:1e:be:6c:46:82:b4:24:b1:b6:cd: 44:74:f2:4a:88:ca:b0:5f:97:97:0c:fd:25:aa:3f:ce:a6:b4: ba:2f:90:6d:c1:1a:4e:81:63:a0:68:7f:57:0a:85:d4:88:ae: 52:a2:cc:61:e0:bf:f8:7a:aa:87:ea:d1:eb:fd:7c:de:d8:83: 83:e2:d5:61:04:7b:3c:43:97:ac:3c:d1:0e:42:c4:fd:30:1d: 73:1b:01:78:ac:fd:cc:da:6f:ac:94:2c:e9:0e:9f:e5:c6:f6: 4e:1f:2f:94:6d:ad:24:5c:85:b1:5e:7d:42:6c:10:a4:a7:70: 5a:b7:c5:99:b7:cf:2f:e8:2a:87:c6:7c:8f:8d:22:d7:64:e0: 1c:7b:22:c4:73:44:cc:b0:89:4c:80:22:19:2e:d6:93:c5:04: 47:30:23:31:fb:8c:99:53:71:ee:c8:77:b2:4b:9e:a6:2d:e1: 8c:46:0e:9e:d5:2f:ad:e6:2e:ed:52:5d:61:ff:e9:0c:4b:c6: 71:44:80:c5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAw8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzk5NDUxMTAvBgNVBAUTKDg2OEVDQjY0MjVEQTgzMzI4ODkyRTU3QkIwREY2NDRF MUFFQjczQjMwHhcNMjUwNzAxMDIwODI4WhcNMjUwNzA4MDIwODI4WjAYMRYwFAYD VQQDEw02ODYzNDMxZC05NGU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9/+srduKnLSQKAHTlqBgyUWlDysKugPh/QQOJe/vcGhaMV0ggKEus0R1QizE Kx+TvAU/Wxt0l5pH79i3S72Cr7rKqHF7e6kZ/t4KeMDcGAWWTQ87/oIfEUkDEo9n wzPN8r4hcRVs0R0L1+iTL2FDQ/8fhEmEm0D4Plyxani8Wzr0xgXH+o8zd4XDvUpY jD6BpB+2SxIVpLGAq7tkYPF4T/WMhNK/Sz6nD9yjKbTxG9bhfawe/cLWSjCaT5HW J9wr29rz/WuBknh8eItcKIa2rfhOLziK9LyD2Bxm7cD4H8tTwjrJXjnfaQMXbPCk 5bdnYpjC0L2O9i6rB6IRfovBzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIg+FTCg TgoWCp10Q2yqrwnO8dioMB8GA1UdIwQYMBaAFIaOy2Ql2oMyiJLle7DfZE4a63Oz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTk0NS9CQzAwQzhGMkYw OUUxMUVDQUVFNzNFMTlDNEY5QUUwMi9obzdMWkNYYWd6S0lrdVY3c045a1RocnJj N00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hvN0xaQ1hhZ3pLSWt1VjdzTjlrVGhycmM3TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTk0NS9CQzAwQzhGMkYwOUUxMUVDQUVFNzNFMTlDNEY5QUUwMi9obzdMWkNYYWd6 S0lrdVY3c045a1RocnJjN00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA2TrlHt+BbsXg5s/rEainpnKGDz+qF775EesO+/z+SpYzQsp+L7gLI nKPN0dm1TxG3o/WWLkqRES18caPLth6+bEaCtCSxts1EdPJKiMqwX5eXDP0lqj/O prS6L5BtwRpOgWOgaH9XCoXUiK5Sosxh4L/4eqqH6tHr/Xze2IOD4tVhBHs8Q5es PNEOQsT9MB1zGwF4rP3M2m+slCzpDp/lxvZOHy+Uba0kXIWxXn1CbBCkp3Bat8WZ t88v6CqHxnyPjSLXZOAceyLEc0TMsIlMgCIZLtaTxQRHMCMx+4yZU3HuyHeyS56m LeGMRg6e1S+t5i7tUl1h/+kMS8ZxRIDF -----END CERTIFICATE-----Generated at Wed Jul 2 23:36:45 2025 by rpki-client