$ rpki-client -vvf rpki.apnic.net/member_repository/A91D536E/A6D748FA29FA11EBBC65AF7DC4F9AE02/9zQzO1u1T7qIKyMv0lMlLn6gu8A.mft File: 9zQzO1u1T7qIKyMv0lMlLn6gu8A.mft (raw, json) Hash identifier: mHj8P5bdRkgWbx73wwFCOq0hAYOoHkuTv7Qd4H2wBpw= Subject key identifier: CB:3D:E2:7D:2E:05:F7:26:28:77:C0:CA:FB:90:D1:D7:DC:E4:90:C9 Authority key identifier: F7:34:33:3B:5B:B5:4F:BA:88:2B:23:2F:D2:53:25:2E:7E:A0:BB:C0 Certificate issuer: /CN=A91D536E/serialNumber=F734333B5BB54FBA882B232FD253252E7EA0BBC0 Certificate serial: 0757 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9zQzO1u1T7qIKyMv0lMlLn6gu8A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D536E/A6D748FA29FA11EBBC65AF7DC4F9AE02/9zQzO1u1T7qIKyMv0lMlLn6gu8A.mft Manifest number: 0752 Signing time: Wed 02 Jul 2025 21:55:30 +0000 Manifest this update: Wed 02 Jul 2025 21:55:29 +0000 Manifest next update: Wed 09 Jul 2025 21:55:29 +0000 Files and hashes: 1: 9zQzO1u1T7qIKyMv0lMlLn6gu8A.crl (hash: C3vIWd60J/lMqQ8ZSvdXW/VmvKYSdtDZo+V7bB9RT8A=) 2: 6091D05229FC11EB861CCA7FC4F9AE02.roa (hash: oXfgRMCkFYhKUKORBUUeo77MRVn7Mx2xxFkJ1oK4WsM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D536E/A6D748FA29FA11EBBC65AF7DC4F9AE02/9zQzO1u1T7qIKyMv0lMlLn6gu8A.crl rsync://rpki.apnic.net/member_repository/A91D536E/A6D748FA29FA11EBBC65AF7DC4F9AE02/9zQzO1u1T7qIKyMv0lMlLn6gu8A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9zQzO1u1T7qIKyMv0lMlLn6gu8A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 21:55:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1879 (0x757) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D536E, serialNumber=F734333B5BB54FBA882B232FD253252E7EA0BBC0 Validity Not Before: Jul 2 21:55:29 2025 GMT Not After : Jul 9 21:55:29 2025 GMT Subject: CN=6865aad2-8c32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:66:ed:6e:c9:b5:b3:7a:07:0f:59:1b:ac:b0: 59:53:57:70:12:8f:82:b8:c8:c0:e8:d1:a8:2b:37: 6d:a4:25:99:e4:1e:98:33:01:1f:d4:91:48:46:0a: ec:47:92:b4:6e:9e:57:51:54:51:54:aa:7a:d0:22: 4c:68:4c:2d:40:a1:ca:05:29:cb:10:68:29:f8:7e: d0:0f:b5:eb:b8:78:c1:45:28:ec:a5:1d:d5:aa:f2: 76:fe:81:c9:9d:cf:61:a9:62:90:56:d4:b2:c9:e6: 8d:45:df:26:a7:c2:9f:d2:9f:2a:9c:67:f7:a9:46: 12:1f:c9:cc:ba:b7:11:50:42:b3:66:83:ef:68:21: 48:3c:98:e4:13:96:0a:b9:bc:94:6d:6d:67:82:3f: f8:f6:be:56:29:63:74:a1:c2:9b:8e:32:eb:06:b3: a2:e2:06:6e:b8:45:d2:db:21:42:53:43:52:e5:a4: 65:5f:ed:d1:74:f6:b7:30:74:bd:6b:cd:96:11:2b: 62:f5:59:22:28:16:11:2a:dc:66:7a:2d:95:50:b8: 74:81:6e:00:c7:f5:fa:61:38:76:c4:fe:f7:02:e2: 2f:d8:1d:5a:fb:e4:f6:ca:a0:79:6b:e5:0a:19:ac: 71:a2:d0:14:52:a6:c0:47:2f:dc:c8:2e:a8:4e:7d: ce:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:3D:E2:7D:2E:05:F7:26:28:77:C0:CA:FB:90:D1:D7:DC:E4:90:C9 X509v3 Authority Key Identifier: keyid:F7:34:33:3B:5B:B5:4F:BA:88:2B:23:2F:D2:53:25:2E:7E:A0:BB:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D536E/A6D748FA29FA11EBBC65AF7DC4F9AE02/9zQzO1u1T7qIKyMv0lMlLn6gu8A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9zQzO1u1T7qIKyMv0lMlLn6gu8A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D536E/A6D748FA29FA11EBBC65AF7DC4F9AE02/9zQzO1u1T7qIKyMv0lMlLn6gu8A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:5e:32:0b:21:35:f3:f2:b6:6f:41:01:7a:3d:a8:05:d0:07: 30:33:b5:4c:e3:db:f1:7d:08:74:62:b3:17:77:d2:b7:08:f2: 28:cd:fd:7a:65:96:b6:8f:e7:8e:cc:8f:ed:55:bc:37:ef:35: be:8f:82:3c:3d:a2:b1:39:6a:79:30:da:db:a2:da:6d:25:a3: d5:8f:c5:6c:2f:29:3c:7e:5d:8b:04:e4:f7:d8:2b:bb:5b:3f: cc:8b:3e:41:c6:04:75:be:b6:dc:7c:6d:18:a5:62:d7:a6:32: 1c:e6:d3:ce:4e:c8:a8:db:6e:87:dd:3b:70:6d:4d:fa:90:ab: 78:c3:6a:54:6c:75:31:53:54:d1:70:f9:73:f7:dd:ad:4c:e8: be:c0:be:82:6e:ca:45:b8:5c:cd:9f:5c:07:44:3f:27:ef:5f: 93:9e:c7:6d:59:c1:94:71:e6:53:4b:1c:87:a2:14:60:72:fe: c6:49:52:76:4d:bf:d9:96:4c:91:5a:c4:78:99:8b:00:1f:67: aa:45:24:2c:fb:b2:98:aa:2a:dd:dc:ea:f2:56:98:9c:76:fa: 76:6f:ae:b1:84:7e:e1:7e:24:42:55:bc:db:4f:8c:61:57:88: 01:1d:7a:98:7c:32:69:48:f9:a2:7e:5c:67:d8:88:aa:98:c4: 60:cb:e1:0d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB1cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDUzNkUxMTAvBgNVBAUTKEY3MzQzMzNCNUJCNTRGQkE4ODJCMjMyRkQyNTMyNTJF N0VBMEJCQzAwHhcNMjUwNzAyMjE1NTI5WhcNMjUwNzA5MjE1NTI5WjAYMRYwFAYD VQQDEw02ODY1YWFkMi04YzMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtmbtbsm1s3oHD1kbrLBZU1dwEo+CuMjA6NGoKzdtpCWZ5B6YMwEf1JFIRgrs R5K0bp5XUVRRVKp60CJMaEwtQKHKBSnLEGgp+H7QD7XruHjBRSjspR3VqvJ2/oHJ nc9hqWKQVtSyyeaNRd8mp8Kf0p8qnGf3qUYSH8nMurcRUEKzZoPvaCFIPJjkE5YK ubyUbW1ngj/49r5WKWN0ocKbjjLrBrOi4gZuuEXS2yFCU0NS5aRlX+3RdPa3MHS9 a82WESti9VkiKBYRKtxmei2VULh0gW4Ax/X6YTh2xP73AuIv2B1a++T2yqB5a+UK GaxxotAUUqbARy/cyC6oTn3OowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMs94n0u BfcmKHfAyvuQ0dfc5JDJMB8GA1UdIwQYMBaAFPc0MztbtU+6iCsjL9JTJS5+oLvA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENTM2RS9BNkQ3NDhGQTI5 RkExMUVCQkM2NUFGN0RDNEY5QUUwMi85elF6TzF1MVQ3cUlLeU12MGxNbExuNmd1 OEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzl6UXpPMXUxVDdxSUt5TXYwbE1sTG42Z3U4QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NTM2RS9BNkQ3NDhGQTI5RkExMUVCQkM2NUFGN0RDNEY5QUUwMi85elF6TzF1MVQ3 cUlLeU12MGxNbExuNmd1OEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQApXjILITXz8rZvQQF6PagF0AcwM7VM49vxfQh0YrMXd9K3CPIozf16 ZZa2j+eOzI/tVbw37zW+j4I8PaKxOWp5MNrbotptJaPVj8VsLyk8fl2LBOT32Cu7 Wz/Miz5BxgR1vrbcfG0YpWLXpjIc5tPOTsio226H3TtwbU36kKt4w2pUbHUxU1TR cPlz992tTOi+wL6CbspFuFzNn1wHRD8n71+TnsdtWcGUceZTSxyHohRgcv7GSVJ2 Tb/ZlkyRWsR4mYsAH2eqRSQs+7KYqird3OryVpicdvp2b66xhH7hfiRCVbzbT4xh V4gBHXqYfDJpSPmiflxn2IiqmMRgy+EN -----END CERTIFICATE-----Generated at Thu Jul 3 10:09:39 2025 by rpki-client