$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9F5A/0898B23A11BA11EBBC1A584CC4F9AE02/67tHPRcLa4MG0eFsi5UjNK3UDxA.mft File: 67tHPRcLa4MG0eFsi5UjNK3UDxA.mft (raw, json) Hash identifier: x2rdsPDElcHO102AVZUVihxwzEn5jn9TipEiCmfbinA= Subject key identifier: 97:4E:B8:CB:A3:A3:44:75:B1:80:E1:2D:CF:3F:7E:48:1D:C8:1F:55 Authority key identifier: EB:BB:47:3D:17:0B:6B:83:06:D1:E1:6C:8B:95:23:34:AD:D4:0F:10 Certificate issuer: /CN=A91D9F5A/serialNumber=EBBB473D170B6B8306D1E16C8B952334ADD40F10 Certificate serial: 07A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67tHPRcLa4MG0eFsi5UjNK3UDxA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D9F5A/0898B23A11BA11EBBC1A584CC4F9AE02/67tHPRcLa4MG0eFsi5UjNK3UDxA.mft Manifest number: 0794 Signing time: Wed 02 Jul 2025 22:01:55 +0000 Manifest this update: Wed 02 Jul 2025 22:01:55 +0000 Manifest next update: Wed 09 Jul 2025 22:01:55 +0000 Files and hashes: 1: 67tHPRcLa4MG0eFsi5UjNK3UDxA.crl (hash: FJYIH0DSiJyn/XLCzSgXzzLMqrdxumEMmgvG7F/mLhw=) 2: 1ACA9A7011BC11EBA0759F52C4F9AE02.roa (hash: zjlq2ekKMTnUOjERgfYF5liArI/9QWMkqCcAkQ/TQ2E=) 3: 1A0FD01411BC11EBA0759F52C4F9AE02.roa (hash: 4Z5gn4hcl2+wGGJV3uouKZcrvOpeWjAHkkCHO7ludR0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D9F5A/0898B23A11BA11EBBC1A584CC4F9AE02/67tHPRcLa4MG0eFsi5UjNK3UDxA.crl rsync://rpki.apnic.net/member_repository/A91D9F5A/0898B23A11BA11EBBC1A584CC4F9AE02/67tHPRcLa4MG0eFsi5UjNK3UDxA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67tHPRcLa4MG0eFsi5UjNK3UDxA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 22:01:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1954 (0x7a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D9F5A, serialNumber=EBBB473D170B6B8306D1E16C8B952334ADD40F10 Validity Not Before: Jul 2 22:01:55 2025 GMT Not After : Jul 9 22:01:55 2025 GMT Subject: CN=6865ac53-c6c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:21:a4:3b:84:1f:64:a3:f1:0a:e3:7c:23:cb: 1d:9a:d1:91:51:06:76:47:46:35:c0:fd:8b:54:91: a8:10:d7:2a:49:24:a1:0f:1b:70:5c:fa:b6:94:ef: 76:5d:f3:e1:a0:c8:8b:02:a2:20:dc:8d:7f:ae:62: 88:a7:2b:3c:ac:e1:a4:cc:fc:23:1d:ff:34:0c:56: ef:ce:79:85:52:72:bb:79:48:42:3b:b5:7e:e3:96: 28:d7:56:38:d5:e2:e2:a9:72:66:7a:81:8c:46:8e: 6f:a1:03:2a:27:5a:6c:fb:fe:66:3d:ad:b7:d1:bf: 8c:8c:c8:e4:f2:78:6e:09:19:df:7b:b0:b8:57:b0: 58:53:41:67:9f:dd:21:20:18:88:e6:11:5d:e5:f3: 72:9e:5f:db:a6:dd:72:76:7d:e2:df:c4:78:15:35: a4:a5:cb:89:2b:7a:32:12:98:28:40:e4:4c:26:01: cf:38:2c:89:38:cd:44:db:58:2a:31:63:ec:da:45: 6e:dd:a0:7c:f6:af:a4:96:cf:66:63:1a:b1:f6:e6: 77:e4:28:51:7b:88:75:eb:f7:20:0b:f6:7f:24:1d: 6c:01:a6:8f:be:b3:e4:17:37:cf:a3:89:e1:27:98: 46:65:3c:5d:3f:53:c6:1e:f0:5c:75:3e:ff:7d:f2: 90:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:4E:B8:CB:A3:A3:44:75:B1:80:E1:2D:CF:3F:7E:48:1D:C8:1F:55 X509v3 Authority Key Identifier: keyid:EB:BB:47:3D:17:0B:6B:83:06:D1:E1:6C:8B:95:23:34:AD:D4:0F:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D9F5A/0898B23A11BA11EBBC1A584CC4F9AE02/67tHPRcLa4MG0eFsi5UjNK3UDxA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67tHPRcLa4MG0eFsi5UjNK3UDxA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9F5A/0898B23A11BA11EBBC1A584CC4F9AE02/67tHPRcLa4MG0eFsi5UjNK3UDxA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d6:30:ae:42:0c:d7:36:3c:01:b9:37:bc:2b:c9:d5:08:8b:9c: c5:e3:0c:94:ba:41:01:11:a1:78:6a:b2:52:4b:d1:21:f3:d3: 6d:1a:a9:cc:54:e9:68:1a:b1:3d:ad:c0:70:9e:9a:df:35:2c: 18:09:eb:87:79:c6:43:0d:6c:9b:4e:3c:be:03:91:c2:70:9a: 68:e7:11:4a:36:d9:c5:8f:58:e7:3d:ca:d0:72:ae:9e:39:63: 19:96:78:39:ad:99:0f:05:29:23:21:ec:cf:32:b6:f0:85:6d: c5:b1:a7:e9:b9:32:f5:35:df:f4:46:22:2d:72:c6:bd:3b:ed: e5:ab:25:bf:c1:71:26:40:1a:46:a8:15:97:89:d6:2d:c3:1e: d4:93:09:36:fc:b3:f3:1f:ea:3c:13:7e:3e:0d:dc:2e:ff:40: 8e:21:0d:f1:c8:82:02:ac:9d:c7:8b:8c:72:d0:9c:bf:7c:ec: d3:ad:0c:21:ab:3a:4b:00:23:04:6c:a5:a7:5d:91:8d:d8:de: 24:7f:0a:56:36:83:0e:23:7f:6b:4a:13:c5:e6:af:29:c6:03: 36:18:c6:14:c5:67:d3:2e:97:b7:12:47:ac:8d:de:56:f4:f1: ce:0e:ad:a6:d0:63:44:0e:e4:6b:ed:ee:0b:36:b6:c3:ec:a5: dd:14:77:a2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB6IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDlGNUExMTAvBgNVBAUTKEVCQkI0NzNEMTcwQjZCODMwNkQxRTE2QzhCOTUyMzM0 QURENDBGMTAwHhcNMjUwNzAyMjIwMTU1WhcNMjUwNzA5MjIwMTU1WjAYMRYwFAYD VQQDEw02ODY1YWM1My1jNmM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7CGkO4QfZKPxCuN8I8sdmtGRUQZ2R0Y1wP2LVJGoENcqSSShDxtwXPq2lO92 XfPhoMiLAqIg3I1/rmKIpys8rOGkzPwjHf80DFbvznmFUnK7eUhCO7V+45Yo11Y4 1eLiqXJmeoGMRo5voQMqJ1ps+/5mPa230b+MjMjk8nhuCRnfe7C4V7BYU0Fnn90h IBiI5hFd5fNynl/bpt1ydn3i38R4FTWkpcuJK3oyEpgoQORMJgHPOCyJOM1E21gq MWPs2kVu3aB89q+kls9mYxqx9uZ35ChRe4h16/cgC/Z/JB1sAaaPvrPkFzfPo4nh J5hGZTxdP1PGHvBcdT7/ffKQLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJdOuMuj o0R1sYDhLc8/fkgdyB9VMB8GA1UdIwQYMBaAFOu7Rz0XC2uDBtHhbIuVIzSt1A8Q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOUY1QS8wODk4QjIzQTEx QkExMUVCQkMxQTU4NENDNEY5QUUwMi82N3RIUFJjTGE0TUcwZUZzaTVVak5LM1VE eEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzY3dEhQUmNMYTRNRzBlRnNpNVVqTkszVUR4QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OUY1QS8wODk4QjIzQTExQkExMUVCQkMxQTU4NENDNEY5QUUwMi82N3RIUFJjTGE0 TUcwZUZzaTVVak5LM1VEeEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDWMK5CDNc2PAG5N7wrydUIi5zF4wyUukEBEaF4arJSS9Eh89NtGqnM VOloGrE9rcBwnprfNSwYCeuHecZDDWybTjy+A5HCcJpo5xFKNtnFj1jnPcrQcq6e OWMZlng5rZkPBSkjIezPMrbwhW3FsafpuTL1Nd/0RiItcsa9O+3lqyW/wXEmQBpG qBWXidYtwx7Ukwk2/LPzH+o8E34+Ddwu/0COIQ3xyIICrJ3Hi4xy0Jy/fOzTrQwh qzpLACMEbKWnXZGN2N4kfwpWNoMOI39rShPF5q8pxgM2GMYUxWfTLpe3Ekesjd5W 9PHODq2m0GNEDuRr7e4LNrbD7KXdFHei -----END CERTIFICATE-----Generated at Thu Jul 3 06:53:11 2025 by rpki-client