$ rpki-client -vvf rpki.apnic.net/member_repository/A91D404F/D5D0FEB4CBF711EF869C904FC4F9AE02/_nzI0SyMuUDQbq7bWwrUPQUDYvE.mft File: _nzI0SyMuUDQbq7bWwrUPQUDYvE.mft (raw, json) Hash identifier: FfxZN7osHxvhUT6bCE2FsQZ+UuPABmAHPe3eda7RSEs= Subject key identifier: 8F:C8:00:6A:8A:62:66:EB:3C:E8:E2:A0:51:77:E4:97:7B:C5:E9:57 Authority key identifier: FE:7C:C8:D1:2C:8C:B9:40:D0:6E:AE:DB:5B:0A:D4:3D:05:03:62:F1 Certificate issuer: /CN=A91D404F/serialNumber=FE7CC8D12C8CB940D06EAEDB5B0AD43D050362F1 Certificate serial: 5B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_nzI0SyMuUDQbq7bWwrUPQUDYvE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D404F/D5D0FEB4CBF711EF869C904FC4F9AE02/_nzI0SyMuUDQbq7bWwrUPQUDYvE.mft Manifest number: 5A Signing time: Sun 29 Jun 2025 06:09:44 +0000 Manifest this update: Sun 29 Jun 2025 06:09:43 +0000 Manifest next update: Sun 06 Jul 2025 06:09:43 +0000 Files and hashes: 1: _nzI0SyMuUDQbq7bWwrUPQUDYvE.crl (hash: fhB/L/rZSKOy//HBOm3RFNmqzzBR1xljbx7VCzbj8p0=) 2: F943DF74CBF711EFB86EC74FC4F9AE02.roa (hash: OQsiNqk/6UEhG+WoM7b9x1Qk45e1mg8EolKiz0N5DwU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D404F/D5D0FEB4CBF711EF869C904FC4F9AE02/_nzI0SyMuUDQbq7bWwrUPQUDYvE.crl rsync://rpki.apnic.net/member_repository/A91D404F/D5D0FEB4CBF711EF869C904FC4F9AE02/_nzI0SyMuUDQbq7bWwrUPQUDYvE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_nzI0SyMuUDQbq7bWwrUPQUDYvE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 06:09:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 91 (0x5b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D404F, serialNumber=FE7CC8D12C8CB940D06EAEDB5B0AD43D050362F1 Validity Not Before: Jun 29 06:09:43 2025 GMT Not After : Jul 6 06:09:43 2025 GMT Subject: CN=6860d8a8-05c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:a3:e9:89:2c:fe:6e:80:20:e5:78:df:19:3b: 3e:bc:5a:32:67:5c:0d:b5:c2:80:be:ea:60:c2:02: 53:ca:fe:a4:e4:af:39:f8:74:c2:d2:6e:68:c5:a4: 22:7a:de:56:9d:80:6b:b9:ec:95:7c:00:7b:c6:eb: f8:e5:b0:fd:13:f9:b6:d7:d3:0f:75:64:43:e5:a8: f2:ed:22:1c:f4:a9:86:66:69:c9:75:ed:9d:0f:58: 55:ac:38:5f:38:f7:04:4f:16:e6:29:62:03:c2:79: 12:02:31:c7:72:62:e1:96:51:9b:7c:76:91:9e:b5: fa:fc:17:52:02:3d:f3:1a:d3:d2:9c:34:8c:27:49: 75:7c:c8:8b:f3:ab:63:49:b9:63:fd:16:d7:8a:ac: 4b:c5:be:9b:8d:06:c4:e1:70:b5:b8:4d:b6:ca:bb: 5c:b2:d6:82:b0:d7:f0:a3:08:67:77:59:75:61:d3: 91:6a:cb:32:e3:ae:d6:37:f7:91:0e:51:31:d6:09: b6:82:33:95:e5:52:03:71:d8:f8:af:1c:31:62:d4: 31:05:33:a0:a0:5e:6d:62:70:21:8f:b8:0d:84:41: f8:7e:e8:6d:56:3b:66:38:3e:04:36:f1:2a:b1:3e: ea:ef:42:1b:36:e4:7f:48:cd:82:c6:48:1c:2b:1e: 6f:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:C8:00:6A:8A:62:66:EB:3C:E8:E2:A0:51:77:E4:97:7B:C5:E9:57 X509v3 Authority Key Identifier: keyid:FE:7C:C8:D1:2C:8C:B9:40:D0:6E:AE:DB:5B:0A:D4:3D:05:03:62:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D404F/D5D0FEB4CBF711EF869C904FC4F9AE02/_nzI0SyMuUDQbq7bWwrUPQUDYvE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_nzI0SyMuUDQbq7bWwrUPQUDYvE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D404F/D5D0FEB4CBF711EF869C904FC4F9AE02/_nzI0SyMuUDQbq7bWwrUPQUDYvE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:95:7e:fa:4e:e0:aa:2f:c2:7c:e8:ff:37:9a:8a:5c:d3:bb: 61:b6:3a:b5:1b:77:a1:e5:43:49:e9:48:3f:9b:e4:df:c2:66: b1:5b:45:53:ec:5f:a0:82:dc:81:2c:28:1e:59:9b:0b:ac:ca: d2:93:25:b2:31:21:0a:43:3b:be:71:31:b7:6a:aa:05:e6:d6: 0a:9a:47:51:d1:25:4f:c2:39:ed:dc:c6:f9:2c:ff:a9:31:6e: cf:e0:fe:50:80:c7:03:94:24:55:fe:01:61:2a:1f:7b:ce:10: 48:88:a5:fd:18:29:df:14:99:91:f3:43:2e:19:1b:10:5a:51: d1:40:e8:97:d8:f7:d5:9d:f3:63:77:7e:1c:ea:c9:ec:e0:3d: 12:67:4f:32:bd:c1:1f:e9:0d:f0:d7:3c:53:a2:1d:fe:b8:fa: fe:4d:c2:c6:e7:ff:52:80:28:43:b9:7a:8e:16:dc:cd:41:b4: 83:60:ab:b6:02:88:a6:09:a2:a7:ba:c5:70:5b:83:6f:bf:06: 49:2b:c0:7f:b4:f3:51:0a:cd:2a:8e:68:58:2c:58:d8:07:06: 65:41:fe:0a:6d:56:de:a8:d8:23:47:15:e2:4d:0b:26:a3:98: ed:63:bb:c3:07:32:01:ca:c9:0c:a7:0b:a1:46:fa:87:66:06: 0d:ce:c6:9c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBWzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE NDA0RjExMC8GA1UEBRMoRkU3Q0M4RDEyQzhDQjk0MEQwNkVBRURCNUIwQUQ0M0Qw NTAzNjJGMTAeFw0yNTA2MjkwNjA5NDNaFw0yNTA3MDYwNjA5NDNaMBgxFjAUBgNV BAMTDTY4NjBkOGE4LTA1YzcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQClo+mJLP5ugCDleN8ZOz68WjJnXA21woC+6mDCAlPK/qTkrzn4dMLSbmjFpCJ6 3ladgGu57JV8AHvG6/jlsP0T+bbX0w91ZEPlqPLtIhz0qYZmacl17Z0PWFWsOF84 9wRPFuYpYgPCeRICMcdyYuGWUZt8dpGetfr8F1ICPfMa09KcNIwnSXV8yIvzq2NJ uWP9FteKrEvFvpuNBsThcLW4TbbKu1yy1oKw1/CjCGd3WXVh05FqyzLjrtY395EO UTHWCbaCM5XlUgNx2PivHDFi1DEFM6CgXm1icCGPuA2EQfh+6G1WO2Y4PgQ28Sqx PurvQhs25H9IzYLGSBwrHm9zAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUj8gAaopi Zus86OKgUXfkl3vF6VcwHwYDVR0jBBgwFoAU/nzI0SyMuUDQbq7bWwrUPQUDYvEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ0MDRGL0Q1RDBGRUI0Q0JG NzExRUY4NjlDOTA0RkM0RjlBRTAyL19uekkwU3lNdVVEUWJxN2JXd3JVUFFVRFl2 RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvX256STBTeU11VURRYnE3Yld3clVQUVVEWXZFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ0 MDRGL0Q1RDBGRUI0Q0JGNzExRUY4NjlDOTA0RkM0RjlBRTAyL19uekkwU3lNdVVE UWJxN2JXd3JVUFFVRFl2RS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABuVfvpO4Kovwnzo/zeailzTu2G2OrUbd6HlQ0npSD+b5N/CZrFbRVPs X6CC3IEsKB5ZmwusytKTJbIxIQpDO75xMbdqqgXm1gqaR1HRJU/COe3cxvks/6kx bs/g/lCAxwOUJFX+AWEqH3vOEEiIpf0YKd8UmZHzQy4ZGxBaUdFA6JfY99Wd82N3 fhzqyezgPRJnTzK9wR/pDfDXPFOiHf64+v5Nwsbn/1KAKEO5eo4W3M1BtINgq7YC iKYJoqe6xXBbg2+/BkkrwH+081EKzSqOaFgsWNgHBmVB/gptVt6o2CNHFeJNCyaj mO1ju8MHMgHKyQynC6FG+odmBg3Oxpw= -----END CERTIFICATE-----Generated at Mon Jun 30 22:31:22 2025 by rpki-client