$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/FsZicm9KAJEz1lkWZCOeAMaBoAQ.mft File: FsZicm9KAJEz1lkWZCOeAMaBoAQ.mft (raw, json) Hash identifier: U+3u4Xu9qwNITbxHrXpcw+p6SfAdd6lx2xsvt5V5yN4= Subject key identifier: 5F:57:50:20:6A:C2:AB:2B:EA:1C:EE:8A:3D:F9:AE:89:54:96:86:66 Authority key identifier: 16:C6:62:72:6F:4A:00:91:33:D6:59:16:64:23:9E:00:C6:81:A0:04 Certificate issuer: /CN=A91CB14D/serialNumber=16C662726F4A009133D6591664239E00C681A004 Certificate serial: 010C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FsZicm9KAJEz1lkWZCOeAMaBoAQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/FsZicm9KAJEz1lkWZCOeAMaBoAQ.mft Manifest number: 0986 Signing time: Wed 02 Jul 2025 20:54:14 +0000 Manifest this update: Wed 02 Jul 2025 20:54:13 +0000 Manifest next update: Wed 09 Jul 2025 20:54:13 +0000 Files and hashes: 1: FsZicm9KAJEz1lkWZCOeAMaBoAQ.crl (hash: dhObCsDQGnDyRGJRE/UVWD1yOTkXbZho8WdtLnYLZf4=) 2: C483C80CDE4011EFB4A11D5CC4F9AE02.roa (hash: AnxZMWG1/qyOSRCk3a+YCfaArWrcp/mUCUyzTLKhm8g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/FsZicm9KAJEz1lkWZCOeAMaBoAQ.crl rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/FsZicm9KAJEz1lkWZCOeAMaBoAQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FsZicm9KAJEz1lkWZCOeAMaBoAQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 20:54:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 268 (0x10c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB14D, serialNumber=16C662726F4A009133D6591664239E00C681A004 Validity Not Before: Jul 2 20:54:13 2025 GMT Not After : Jul 9 20:54:13 2025 GMT Subject: CN=68659c75-bc0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:07:ad:0d:dc:08:b7:93:7a:98:21:ff:a4:40: 1e:9d:43:59:76:56:86:4b:af:20:84:73:0a:e8:c5: f1:22:1a:9e:71:33:1d:b9:fb:73:3b:c2:59:b5:0d: 51:07:d3:c4:33:1d:33:0c:4c:fd:4a:17:66:7a:ff: 10:cb:8c:fc:59:b5:2d:b2:20:d6:12:5e:31:a6:09: a9:fd:5f:67:00:35:a6:69:d8:35:fa:ad:30:c4:70: 0c:e1:c7:bf:72:cc:18:e9:73:4c:33:4d:c2:4a:8e: ae:37:29:d5:cf:ae:c5:f9:29:25:73:c7:48:9a:2f: b2:9d:46:1d:58:ec:2e:69:b9:c7:35:5f:69:12:8f: 5b:49:74:46:9f:4f:32:9d:36:e5:21:c5:6a:32:a9: e7:5e:90:77:35:90:7b:ea:06:41:73:3e:31:66:ec: e3:2e:48:bf:12:17:57:e0:61:20:0c:ad:f4:a6:2c: e7:fa:b6:28:c7:05:fa:8c:09:e6:19:e2:60:93:2a: 3b:bc:74:a7:a3:5c:ab:42:9d:66:3e:3b:d4:4e:64: 42:93:b6:09:eb:57:10:d8:b5:24:fb:c4:35:ad:84: 68:cf:fe:61:99:1a:e3:d8:6d:57:c9:dd:de:d0:22: 8b:68:e5:f3:c5:10:d1:34:1f:91:74:6b:6c:38:62: 19:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:57:50:20:6A:C2:AB:2B:EA:1C:EE:8A:3D:F9:AE:89:54:96:86:66 X509v3 Authority Key Identifier: keyid:16:C6:62:72:6F:4A:00:91:33:D6:59:16:64:23:9E:00:C6:81:A0:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/FsZicm9KAJEz1lkWZCOeAMaBoAQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FsZicm9KAJEz1lkWZCOeAMaBoAQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/FsZicm9KAJEz1lkWZCOeAMaBoAQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:e4:40:5a:17:f7:6f:0c:23:c8:81:c8:5c:43:df:e2:c5:7f: a9:3a:3a:a6:96:5d:c4:96:31:23:e7:8f:e6:0a:4d:23:c4:5a: 29:06:2f:90:97:05:20:b5:46:84:7f:26:02:e8:db:c6:c9:81: 3c:49:86:e7:9d:5e:b7:e3:f9:7c:1d:72:e9:8e:7d:9b:26:9c: d2:a6:a5:63:5e:05:1a:82:a0:23:62:d6:81:0e:44:4e:36:b0: 43:f1:37:b0:9c:4e:fa:eb:2f:8f:d2:8b:1a:f4:7f:e3:17:80: bf:7b:a1:b4:0a:f5:7f:26:9e:8d:69:dd:e6:72:77:ad:62:f3: 13:bb:ef:b0:a7:34:59:72:8e:18:da:90:d0:2e:17:c2:ea:ca: c9:a1:0b:36:0e:db:29:4b:eb:2d:9c:91:9c:6f:de:42:b9:f2: aa:75:66:ba:db:f2:b3:dc:6c:06:c1:a5:33:07:dc:31:5a:0d: 07:7a:bc:1e:0c:db:02:0d:6c:dc:b2:90:f0:b3:43:03:59:59: 6e:28:90:ea:a0:d3:c4:0f:56:ae:f4:71:34:1b:c4:50:e0:aa: 41:0f:68:3a:62:a4:d0:86:2d:5f:de:4a:ea:8d:a0:f8:43:91: 21:d4:39:61:c5:00:5c:2c:ef:0a:d7:b4:f5:22:8f:29:b3:03: ee:86:14:70 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0IxNEQxMTAvBgNVBAUTKDE2QzY2MjcyNkY0QTAwOTEzM0Q2NTkxNjY0MjM5RTAw QzY4MUEwMDQwHhcNMjUwNzAyMjA1NDEzWhcNMjUwNzA5MjA1NDEzWjAYMRYwFAYD VQQDEw02ODY1OWM3NS1iYzBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0QetDdwIt5N6mCH/pEAenUNZdlaGS68ghHMK6MXxIhqecTMduftzO8JZtQ1R B9PEMx0zDEz9Shdmev8Qy4z8WbUtsiDWEl4xpgmp/V9nADWmadg1+q0wxHAM4ce/ cswY6XNMM03CSo6uNynVz67F+Sklc8dImi+ynUYdWOwuabnHNV9pEo9bSXRGn08y nTblIcVqMqnnXpB3NZB76gZBcz4xZuzjLki/EhdX4GEgDK30pizn+rYoxwX6jAnm GeJgkyo7vHSno1yrQp1mPjvUTmRCk7YJ61cQ2LUk+8Q1rYRoz/5hmRrj2G1Xyd3e 0CKLaOXzxRDRNB+RdGtsOGIZDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF9XUCBq wqsr6hzuij35rolUloZmMB8GA1UdIwQYMBaAFBbGYnJvSgCRM9ZZFmQjngDGgaAE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjE0RC8zMEZFMEFGRUM0 QzYxMUVBQThENUJFNjZDNEY5QUUwMi9Gc1ppY205S0FKRXoxbGtXWkNPZUFNYUJv QVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZzWmljbTlLQUpFejFsa1daQ09lQU1hQm9BUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QjE0RC8zMEZFMEFGRUM0QzYxMUVBQThENUJFNjZDNEY5QUUwMi9Gc1ppY205S0FK RXoxbGtXWkNPZUFNYUJvQVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBI5EBaF/dvDCPIgchcQ9/ixX+pOjqmll3EljEj54/mCk0jxFopBi+Q lwUgtUaEfyYC6NvGyYE8SYbnnV634/l8HXLpjn2bJpzSpqVjXgUagqAjYtaBDkRO NrBD8TewnE766y+P0osa9H/jF4C/e6G0CvV/Jp6Nad3mcnetYvMTu++wpzRZco4Y 2pDQLhfC6srJoQs2DtspS+stnJGcb95CufKqdWa62/Kz3GwGwaUzB9wxWg0Herwe DNsCDWzcspDws0MDWVluKJDqoNPED1au9HE0G8RQ4KpBD2g6YqTQhi1f3krqjaD4 Q5Eh1DlhxQBcLO8K17T1Io8pswPuhhRw -----END CERTIFICATE-----Generated at Fri Jul 4 00:04:04 2025 by rpki-client