$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB39A/E1DD5D42B03911EC953BFB0DC4F9AE02/Znvt9oJs9x83Ba2x89T7FITwiBQ.mft File: Znvt9oJs9x83Ba2x89T7FITwiBQ.mft (raw, json) Hash identifier: j7sG8KYWlj+F558HjejwVz7jkWgP2aglmpGxfo8TYHM= Subject key identifier: 99:07:BC:33:FD:95:51:57:66:FC:D8:3E:D5:B9:BF:39:A7:49:14:54 Authority key identifier: 66:7B:ED:F6:82:6C:F7:1F:37:05:AD:B1:F3:D4:FB:14:84:F0:88:14 Certificate issuer: /CN=A91DB39A/serialNumber=667BEDF6826CF71F3705ADB1F3D4FB1484F08814 Certificate serial: 037D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Znvt9oJs9x83Ba2x89T7FITwiBQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB39A/E1DD5D42B03911EC953BFB0DC4F9AE02/Znvt9oJs9x83Ba2x89T7FITwiBQ.mft Manifest number: 0378 Signing time: Tue 01 Jul 2025 01:29:30 +0000 Manifest this update: Tue 01 Jul 2025 01:29:30 +0000 Manifest next update: Tue 08 Jul 2025 01:29:30 +0000 Files and hashes: 1: Znvt9oJs9x83Ba2x89T7FITwiBQ.crl (hash: CJy1IthuoqUh9AAPTmaz/Crbt1pcwYQjaN+yasIPLbc=) 2: 6108822AB03C11EC918CBA0EC4F9AE02.roa (hash: 1IbCI6SUsnpFHSypZmjM58SN3Uz6QJzWDA0ZH6CaOF8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB39A/E1DD5D42B03911EC953BFB0DC4F9AE02/Znvt9oJs9x83Ba2x89T7FITwiBQ.crl rsync://rpki.apnic.net/member_repository/A91DB39A/E1DD5D42B03911EC953BFB0DC4F9AE02/Znvt9oJs9x83Ba2x89T7FITwiBQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Znvt9oJs9x83Ba2x89T7FITwiBQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 01:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 893 (0x37d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB39A, serialNumber=667BEDF6826CF71F3705ADB1F3D4FB1484F08814 Validity Not Before: Jul 1 01:29:30 2025 GMT Not After : Jul 8 01:29:30 2025 GMT Subject: CN=686339fa-b497 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:72:f3:43:14:25:53:87:df:85:dc:6c:bf:d0: 46:4a:4d:84:1e:e8:9b:3a:f0:d0:4e:08:52:15:f0: 86:04:5a:95:21:8f:f5:d4:f9:4d:92:0f:6d:51:44: 46:ea:c0:45:ba:78:f2:38:d8:61:46:32:79:25:1a: 48:fb:13:cd:01:ef:10:9c:70:5d:aa:3d:81:8a:15: 20:c2:62:d5:15:3f:2a:72:4a:92:09:41:17:4f:e3: 91:39:24:44:78:34:f4:fb:14:b3:93:37:21:09:0d: f0:03:d4:cb:aa:a5:49:04:74:25:74:52:f2:4a:d2: e6:c0:8f:3c:2c:ae:22:d4:d4:a9:1a:c8:b3:60:e4: a6:20:36:03:91:4a:22:a0:88:59:68:07:54:c9:cc: a3:ab:b4:af:b9:57:7d:02:90:d3:7c:00:26:10:7e: 80:82:71:b9:86:fb:fe:88:1a:60:0a:d2:7a:a8:b4: 01:da:6e:0d:22:98:b3:f5:9a:e1:39:25:99:f6:81: 58:50:48:c2:02:8c:b4:36:31:22:24:87:5d:72:1f: 59:fb:96:4f:6e:a1:9c:c1:f8:1b:ac:2a:80:19:1d: 6c:d4:eb:70:f0:5a:60:ff:aa:65:1c:10:9f:8a:e4: 45:03:9a:eb:0a:cc:84:8a:5c:b2:09:da:01:76:d8: f2:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:07:BC:33:FD:95:51:57:66:FC:D8:3E:D5:B9:BF:39:A7:49:14:54 X509v3 Authority Key Identifier: keyid:66:7B:ED:F6:82:6C:F7:1F:37:05:AD:B1:F3:D4:FB:14:84:F0:88:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB39A/E1DD5D42B03911EC953BFB0DC4F9AE02/Znvt9oJs9x83Ba2x89T7FITwiBQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Znvt9oJs9x83Ba2x89T7FITwiBQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB39A/E1DD5D42B03911EC953BFB0DC4F9AE02/Znvt9oJs9x83Ba2x89T7FITwiBQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:17:e1:b8:65:dd:b9:f6:6c:86:6e:4d:97:c2:6e:93:f0:5a: cf:bf:35:a6:69:15:fd:fd:e5:12:6e:e6:05:22:ed:33:14:b5: c3:1a:01:7c:fc:ef:1d:fb:21:1c:94:1d:0a:42:29:f9:89:4d: 5e:37:41:26:90:07:b0:f7:4e:c2:da:85:c9:5f:99:93:1a:66: 83:4b:33:b2:42:55:c0:fb:76:e8:79:dd:08:68:7b:86:f4:4e: 4e:db:a9:c9:ff:0d:97:1f:fd:26:b0:ee:16:b4:32:e5:62:66: cf:7f:13:7e:d1:e6:27:b0:6a:f0:f1:37:cf:73:83:c4:86:db: 57:56:f8:05:97:17:b1:37:a6:ae:5d:ff:43:c6:c1:bf:52:4a: 26:00:e3:d3:22:2d:80:36:16:76:c3:91:ba:ef:00:d3:da:6a: e7:58:61:e0:37:ce:bc:b2:b7:c0:8d:2f:70:d7:63:6b:67:11: ff:34:1b:86:ef:21:ce:d2:45:50:8d:1c:58:a8:d5:5e:5c:97: be:0a:86:b5:cd:b8:af:5c:e1:ec:c9:80:38:6c:de:6b:fd:2e: 38:7f:49:55:f4:f9:88:67:9c:4f:d6:1b:e0:a6:73:5a:73:6d: b9:46:73:34:cf:ae:38:7b:4f:b2:a9:bb:de:df:1c:19:4a:c2: 8d:f1:a3:0a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA30wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REIzOUExMTAvBgNVBAUTKDY2N0JFREY2ODI2Q0Y3MUYzNzA1QURCMUYzRDRGQjE0 ODRGMDg4MTQwHhcNMjUwNzAxMDEyOTMwWhcNMjUwNzA4MDEyOTMwWjAYMRYwFAYD VQQDEw02ODYzMzlmYS1iNDk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3HLzQxQlU4ffhdxsv9BGSk2EHuibOvDQTghSFfCGBFqVIY/11PlNkg9tUURG 6sBFunjyONhhRjJ5JRpI+xPNAe8QnHBdqj2BihUgwmLVFT8qckqSCUEXT+OROSRE eDT0+xSzkzchCQ3wA9TLqqVJBHQldFLyStLmwI88LK4i1NSpGsizYOSmIDYDkUoi oIhZaAdUycyjq7SvuVd9ApDTfAAmEH6AgnG5hvv+iBpgCtJ6qLQB2m4NIpiz9Zrh OSWZ9oFYUEjCAoy0NjEiJIddch9Z+5ZPbqGcwfgbrCqAGR1s1Otw8Fpg/6plHBCf iuRFA5rrCsyEilyyCdoBdtjy6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJkHvDP9 lVFXZvzYPtW5vzmnSRRUMB8GA1UdIwQYMBaAFGZ77faCbPcfNwWtsfPU+xSE8IgU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjM5QS9FMURENUQ0MkIw MzkxMUVDOTUzQkZCMERDNEY5QUUwMi9abnZ0OW9Kczl4ODNCYTJ4ODlUN0ZJVHdp QlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pudnQ5b0pzOXg4M0JhMng4OVQ3RklUd2lCUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QjM5QS9FMURENUQ0MkIwMzkxMUVDOTUzQkZCMERDNEY5QUUwMi9abnZ0OW9Kczl4 ODNCYTJ4ODlUN0ZJVHdpQlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAbF+G4Zd259myGbk2Xwm6T8FrPvzWmaRX9/eUSbuYFIu0zFLXDGgF8 /O8d+yEclB0KQin5iU1eN0EmkAew907C2oXJX5mTGmaDSzOyQlXA+3boed0IaHuG 9E5O26nJ/w2XH/0msO4WtDLlYmbPfxN+0eYnsGrw8TfPc4PEhttXVvgFlxexN6au Xf9DxsG/UkomAOPTIi2ANhZ2w5G67wDT2mrnWGHgN868srfAjS9w12NrZxH/NBuG 7yHO0kVQjRxYqNVeXJe+Coa1zbivXOHsyYA4bN5r/S44f0lV9PmIZ5xP1hvgpnNa c225RnM0z644e0+yqbve3xwZSsKN8aMK -----END CERTIFICATE-----Generated at Tue Jul 1 15:58:59 2025 by rpki-client