$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA0AA/82BBB552003D11EE9608F147C4F9AE02/7Y9dbJv8FI96u3CMUpHThHgcYf0.mft File: 7Y9dbJv8FI96u3CMUpHThHgcYf0.mft (raw, json) Hash identifier: P0F+WBV2KJ1Yp9vLii4ImUJFpBCA9S9oFp5MAkl348c= Subject key identifier: 36:B4:23:30:FE:16:22:B2:DD:44:8E:C5:7F:DA:5C:54:BA:CA:77:3A Authority key identifier: ED:8F:5D:6C:9B:FC:14:8F:7A:BB:70:8C:52:91:D3:84:78:1C:61:FD Certificate issuer: /CN=A91DA0AA/serialNumber=ED8F5D6C9BFC148F7ABB708C5291D384781C61FD Certificate serial: 01AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Y9dbJv8FI96u3CMUpHThHgcYf0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DA0AA/82BBB552003D11EE9608F147C4F9AE02/7Y9dbJv8FI96u3CMUpHThHgcYf0.mft Manifest number: 019B Signing time: Tue 01 Jul 2025 03:59:47 +0000 Manifest this update: Tue 01 Jul 2025 03:59:47 +0000 Manifest next update: Tue 08 Jul 2025 03:59:47 +0000 Files and hashes: 1: 7Y9dbJv8FI96u3CMUpHThHgcYf0.crl (hash: 7HA+5OlLGmglemktT58E3P0rKCfnTTHp5Uz4XD/Jb/4=) 2: E7B6C4DA685E11EFB77BDE0CC4F9AE02.roa (hash: f3W0EO7G/sw19nHYB9WoUdeY7Xp6AsIu+GDLxRyq8hw=) 3: C5AFD098167311F0916F5435C4F9AE02.roa (hash: T/t95RGiv+MhA6WaLbxmQnLnySE9uteSKwYbrk4jpmc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DA0AA/82BBB552003D11EE9608F147C4F9AE02/7Y9dbJv8FI96u3CMUpHThHgcYf0.crl rsync://rpki.apnic.net/member_repository/A91DA0AA/82BBB552003D11EE9608F147C4F9AE02/7Y9dbJv8FI96u3CMUpHThHgcYf0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Y9dbJv8FI96u3CMUpHThHgcYf0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 03:59:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 428 (0x1ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DA0AA, serialNumber=ED8F5D6C9BFC148F7ABB708C5291D384781C61FD Validity Not Before: Jul 1 03:59:47 2025 GMT Not After : Jul 8 03:59:47 2025 GMT Subject: CN=68635d33-f0cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:4b:75:70:f2:09:67:8e:4a:23:9f:d3:3f:9c: ba:85:e2:51:99:70:27:1b:ba:2f:44:ff:bd:a4:4d: e3:17:68:ea:8b:3f:07:cb:c8:c5:fe:49:32:98:45: 93:d1:e7:e0:8b:d7:d6:6c:2f:bc:2d:35:f8:22:10: 11:81:be:d1:0c:9e:f0:c0:5b:9e:ed:c6:ff:e0:36: 34:88:93:e1:45:b8:df:9f:9a:5c:43:ed:4e:e1:91: 0a:63:a0:15:3f:7e:ec:ef:e3:0b:cc:51:08:2a:78: 82:14:0c:27:58:bd:87:ee:ec:81:2a:92:6b:f0:90: 33:58:06:42:d9:5f:a9:1c:e3:73:3a:a8:8b:84:a6: bd:81:90:56:5a:8a:b4:69:98:51:a0:5d:8c:8c:60: 4e:47:7e:e9:af:a7:33:f4:8e:81:18:b0:7a:aa:b5: 96:9d:08:8f:c4:53:4f:7f:8b:fb:ba:c8:b9:48:0a: 9c:06:e0:89:4d:f4:51:e3:49:a0:d1:5e:7a:bb:25: 60:da:5b:03:ed:8f:37:0a:93:17:d6:85:03:03:04: 0e:d1:c3:0f:b7:6e:ff:2f:ec:68:bb:33:7f:b9:12: 9e:78:17:a0:ea:dc:c0:58:cf:82:bf:dc:8a:f7:b9: 1e:91:34:89:51:3b:89:7e:dd:4d:bd:7f:76:48:6a: d3:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:B4:23:30:FE:16:22:B2:DD:44:8E:C5:7F:DA:5C:54:BA:CA:77:3A X509v3 Authority Key Identifier: keyid:ED:8F:5D:6C:9B:FC:14:8F:7A:BB:70:8C:52:91:D3:84:78:1C:61:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DA0AA/82BBB552003D11EE9608F147C4F9AE02/7Y9dbJv8FI96u3CMUpHThHgcYf0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Y9dbJv8FI96u3CMUpHThHgcYf0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA0AA/82BBB552003D11EE9608F147C4F9AE02/7Y9dbJv8FI96u3CMUpHThHgcYf0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:fa:c6:f1:23:32:22:91:fe:9e:90:48:b7:8e:8a:4e:36:c0: 6d:61:a8:2d:0b:11:64:c5:f9:5b:95:db:03:15:34:9a:79:f6: 9a:d2:eb:15:7b:43:a9:0a:e9:55:56:ac:4d:1d:00:5d:17:2b: 93:a1:8f:78:f8:18:39:a2:c3:2f:63:f3:18:f6:0c:9c:60:b4: 55:25:27:a7:cd:e1:32:00:42:1e:27:4c:c9:a9:1e:c6:e2:2e: 45:b0:24:d2:7d:d2:e8:cb:78:aa:b1:64:3b:f1:34:71:c7:b7: 2f:2a:2c:30:4c:02:4a:ef:8c:c6:16:75:46:2d:d0:ee:c0:bf: e9:10:37:77:69:97:78:8b:43:33:fa:a4:b5:77:6a:7a:1e:a2: 8f:64:50:42:1e:8a:a1:5d:ac:3b:e4:c8:23:c9:4c:51:cb:10: 3c:e0:49:1b:4e:7f:cf:4e:0f:77:92:fa:d1:1f:58:56:c6:c1: 5a:ce:c7:14:d9:3e:d4:b5:87:dd:ff:95:ec:f8:a3:59:f8:cb: ee:5b:be:6b:0f:4b:3a:f3:ea:ae:7d:fa:8f:79:22:bd:f4:25: 4d:ca:ad:09:1a:4e:a0:fc:f3:30:d7:26:f9:f2:aa:1d:9f:b8: 11:74:73:34:fb:e9:04:b2:32:02:f2:ab:5c:9e:22:b0:80:8e: 7e:6c:f1:75 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAawwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REEwQUExMTAvBgNVBAUTKEVEOEY1RDZDOUJGQzE0OEY3QUJCNzA4QzUyOTFEMzg0 NzgxQzYxRkQwHhcNMjUwNzAxMDM1OTQ3WhcNMjUwNzA4MDM1OTQ3WjAYMRYwFAYD VQQDEw02ODYzNWQzMy1mMGNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3Ut1cPIJZ45KI5/TP5y6heJRmXAnG7ovRP+9pE3jF2jqiz8Hy8jF/kkymEWT 0efgi9fWbC+8LTX4IhARgb7RDJ7wwFue7cb/4DY0iJPhRbjfn5pcQ+1O4ZEKY6AV P37s7+MLzFEIKniCFAwnWL2H7uyBKpJr8JAzWAZC2V+pHONzOqiLhKa9gZBWWoq0 aZhRoF2MjGBOR37pr6cz9I6BGLB6qrWWnQiPxFNPf4v7usi5SAqcBuCJTfRR40mg 0V56uyVg2lsD7Y83CpMX1oUDAwQO0cMPt27/L+xouzN/uRKeeBeg6tzAWM+Cv9yK 97kekTSJUTuJft1NvX92SGrTlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDa0IzD+ FiKy3USOxX/aXFS6ync6MB8GA1UdIwQYMBaAFO2PXWyb/BSPertwjFKR04R4HGH9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQTBBQS84MkJCQjU1MjAw M0QxMUVFOTYwOEYxNDdDNEY5QUUwMi83WTlkYkp2OEZJOTZ1M0NNVXBIVGhIZ2NZ ZjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdZOWRiSnY4Rkk5NnUzQ01VcEhUaEhnY1lmMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QTBBQS84MkJCQjU1MjAwM0QxMUVFOTYwOEYxNDdDNEY5QUUwMi83WTlkYkp2OEZJ OTZ1M0NNVXBIVGhIZ2NZZjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCi+sbxIzIikf6ekEi3jopONsBtYagtCxFkxflbldsDFTSaefaa0usV e0OpCulVVqxNHQBdFyuToY94+Bg5osMvY/MY9gycYLRVJSenzeEyAEIeJ0zJqR7G 4i5FsCTSfdLoy3iqsWQ78TRxx7cvKiwwTAJK74zGFnVGLdDuwL/pEDd3aZd4i0Mz +qS1d2p6HqKPZFBCHoqhXaw75MgjyUxRyxA84EkbTn/PTg93kvrRH1hWxsFazscU 2T7UtYfd/5Xs+KNZ+MvuW75rD0s68+quffqPeSK99CVNyq0JGk6g/PMw1yb58qod n7gRdHM0++kEsjIC8qtcniKwgI5+bPF1 -----END CERTIFICATE-----Generated at Tue Jul 1 20:35:15 2025 by rpki-client