$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE2DE/ABDEE87A37E611EDB51E1D45C4F9AE02/_D97sEVCVvMfJcoAhkvDpr11X5Y.mft File: _D97sEVCVvMfJcoAhkvDpr11X5Y.mft (raw, json) Hash identifier: aK4uktPqXQ9AUkHIzS2vBTZPVebBj8viE2GiYwrM624= Subject key identifier: F9:C8:DD:8C:92:EB:EA:8D:EC:5C:DD:83:F9:B1:B2:83:BE:B3:16:CF Authority key identifier: FC:3F:7B:B0:45:42:56:F3:1F:25:CA:00:86:4B:C3:A6:BD:75:5F:96 Certificate issuer: /CN=A91CE2DE/serialNumber=FC3F7BB0454256F31F25CA00864BC3A6BD755F96 Certificate serial: 0221 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_D97sEVCVvMfJcoAhkvDpr11X5Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE2DE/ABDEE87A37E611EDB51E1D45C4F9AE02/_D97sEVCVvMfJcoAhkvDpr11X5Y.mft Manifest number: 021D Signing time: Thu 03 Jul 2025 02:21:21 +0000 Manifest this update: Thu 03 Jul 2025 02:21:21 +0000 Manifest next update: Thu 10 Jul 2025 02:21:21 +0000 Files and hashes: 1: _D97sEVCVvMfJcoAhkvDpr11X5Y.crl (hash: IeUQjau7VAUNuwI3WSuy6t2ePmlLLTCR0/nG8vp687U=) 2: 97B4F5603B3D11ED822BB46CC4F9AE02.roa (hash: XDsE6Ddixa5A+mdde/4fTJzczS6XmbdyS2Na1+31tR8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE2DE/ABDEE87A37E611EDB51E1D45C4F9AE02/_D97sEVCVvMfJcoAhkvDpr11X5Y.crl rsync://rpki.apnic.net/member_repository/A91CE2DE/ABDEE87A37E611EDB51E1D45C4F9AE02/_D97sEVCVvMfJcoAhkvDpr11X5Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_D97sEVCVvMfJcoAhkvDpr11X5Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 02:21:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 545 (0x221) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE2DE, serialNumber=FC3F7BB0454256F31F25CA00864BC3A6BD755F96 Validity Not Before: Jul 3 02:21:21 2025 GMT Not After : Jul 10 02:21:21 2025 GMT Subject: CN=6865e921-1de7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:0a:43:0e:fd:63:08:56:f1:5f:71:85:ff:27: 86:c9:8e:1f:45:65:d5:7c:45:61:01:97:44:5e:e4: 1a:ba:53:33:7e:a9:70:8a:38:c0:dd:c2:2f:9c:d5: 8b:10:49:ac:6f:0c:5c:27:13:3a:04:c5:03:e5:e7: eb:1a:0c:32:5d:b5:e5:5b:67:67:7c:9a:44:01:49: 01:43:aa:8e:30:60:0a:6a:71:05:d4:53:fd:02:f5: 26:25:b1:88:39:f8:c5:ca:2b:eb:de:69:e2:ab:62: 1f:be:56:0c:51:2b:d6:38:c3:31:b0:50:24:3c:81: 89:a6:0f:f3:eb:e5:da:76:5c:56:60:b3:73:d3:b1: d8:d5:96:99:d4:57:dc:87:ef:3b:e1:bd:68:b7:4a: c1:64:a7:49:d7:8f:3f:00:15:37:6c:f6:8f:97:14: ba:a2:f1:39:a7:ad:40:4e:c0:d4:65:8d:fb:5c:c0: 76:18:10:dc:a3:9a:7e:ef:bc:2c:68:9b:d6:fa:9a: c8:66:75:19:25:7b:01:8b:79:0f:9f:c6:1f:03:52: cf:3a:12:83:3e:31:40:39:7c:4d:43:64:90:65:ba: 1a:a9:c1:38:e1:2c:82:14:74:b7:74:3e:ec:53:11: aa:cc:08:1f:80:2d:c7:ed:47:98:cb:1a:bf:44:b2: 3a:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:C8:DD:8C:92:EB:EA:8D:EC:5C:DD:83:F9:B1:B2:83:BE:B3:16:CF X509v3 Authority Key Identifier: keyid:FC:3F:7B:B0:45:42:56:F3:1F:25:CA:00:86:4B:C3:A6:BD:75:5F:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE2DE/ABDEE87A37E611EDB51E1D45C4F9AE02/_D97sEVCVvMfJcoAhkvDpr11X5Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_D97sEVCVvMfJcoAhkvDpr11X5Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE2DE/ABDEE87A37E611EDB51E1D45C4F9AE02/_D97sEVCVvMfJcoAhkvDpr11X5Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:22:81:16:4c:0b:77:7b:17:97:af:56:0d:c7:dc:97:0f:c8: 33:ef:ff:f6:2b:59:bc:bb:9c:d1:66:67:e4:10:fc:54:47:74: 10:33:23:5d:a0:3b:31:7e:71:de:c1:85:04:78:07:53:d0:17: 1d:60:a6:a2:01:d6:de:c0:6f:97:c7:f7:10:79:60:f3:bc:91: 8a:cd:89:19:b9:b4:62:d6:42:25:5a:b4:0f:c8:41:ce:80:07: 76:fb:1b:16:a9:ef:8a:2c:ac:58:b4:96:38:59:aa:35:dd:14: 98:64:90:87:13:ba:c2:1a:43:55:15:3a:0e:e2:65:2a:36:4b: 2b:5b:22:51:bb:98:cc:5f:4d:56:39:bd:c1:25:59:c0:55:be: f5:c2:7f:b5:31:5f:f1:8a:24:14:0e:29:c8:eb:a3:f0:d3:66: 2c:ec:ea:d2:85:85:1f:62:a7:ea:7f:5c:1f:b7:11:87:f3:cb: c2:5a:98:2f:cf:4d:e9:56:01:c9:b6:b1:1a:fc:30:4a:1c:05: fb:ea:e5:d0:85:e7:0e:18:b6:90:df:93:45:14:ea:08:4e:e0: aa:33:86:fa:d2:51:00:48:5b:63:4f:f3:39:5c:3f:e9:d7:52: 7b:f6:cd:db:d4:00:fa:2e:10:37:9e:87:c5:e5:16:51:42:d7: 97:0a:38:c2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAiEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0UyREUxMTAvBgNVBAUTKEZDM0Y3QkIwNDU0MjU2RjMxRjI1Q0EwMDg2NEJDM0E2 QkQ3NTVGOTYwHhcNMjUwNzAzMDIyMTIxWhcNMjUwNzEwMDIyMTIxWjAYMRYwFAYD VQQDEw02ODY1ZTkyMS0xZGU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAswpDDv1jCFbxX3GF/yeGyY4fRWXVfEVhAZdEXuQaulMzfqlwijjA3cIvnNWL EEmsbwxcJxM6BMUD5efrGgwyXbXlW2dnfJpEAUkBQ6qOMGAKanEF1FP9AvUmJbGI OfjFyivr3mniq2IfvlYMUSvWOMMxsFAkPIGJpg/z6+XadlxWYLNz07HY1ZaZ1Ffc h+874b1ot0rBZKdJ148/ABU3bPaPlxS6ovE5p61ATsDUZY37XMB2GBDco5p+77ws aJvW+prIZnUZJXsBi3kPn8YfA1LPOhKDPjFAOXxNQ2SQZboaqcE44SyCFHS3dD7s UxGqzAgfgC3H7UeYyxq/RLI6cwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPnI3YyS 6+qN7Fzdg/mxsoO+sxbPMB8GA1UdIwQYMBaAFPw/e7BFQlbzHyXKAIZLw6a9dV+W MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTJERS9BQkRFRTg3QTM3 RTYxMUVEQjUxRTFENDVDNEY5QUUwMi9fRDk3c0VWQ1Z2TWZKY29BaGt2RHByMTFY NVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19EOTdzRVZDVnZNZkpjb0Foa3ZEcHIxMVg1WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTJERS9BQkRFRTg3QTM3RTYxMUVEQjUxRTFENDVDNEY5QUUwMi9fRDk3c0VWQ1Z2 TWZKY29BaGt2RHByMTFYNVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCaIoEWTAt3exeXr1YNx9yXD8gz7//2K1m8u5zRZmfkEPxUR3QQMyNd oDsxfnHewYUEeAdT0BcdYKaiAdbewG+Xx/cQeWDzvJGKzYkZubRi1kIlWrQPyEHO gAd2+xsWqe+KLKxYtJY4Wao13RSYZJCHE7rCGkNVFToO4mUqNksrWyJRu5jMX01W Ob3BJVnAVb71wn+1MV/xiiQUDinI66Pw02Ys7OrShYUfYqfqf1wftxGH88vCWpgv z03pVgHJtrEa/DBKHAX76uXQhecOGLaQ35NFFOoITuCqM4b60lEASFtjT/M5XD/p 11J79s3b1AD6LhA3nofF5RZRQteXCjjC -----END CERTIFICATE-----Generated at Thu Jul 3 10:37:48 2025 by rpki-client