$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD309/1FD6A6EEFA6911E68EC12333C4F9AE02/inP7xm5uPo6rLV_CtomRCR8CHkU.mft File: inP7xm5uPo6rLV_CtomRCR8CHkU.mft (raw, json) Hash identifier: 3Nf/lJKlOpDvdeQ4lQur1Td3O8bEZ72vs9+m7A6LllQ= Subject key identifier: 26:C2:17:30:62:92:05:2C:F7:2F:1D:1E:E4:E3:60:10:9F:BD:EB:53 Authority key identifier: 8A:73:FB:C6:6E:6E:3E:8E:AB:2D:5F:C2:B6:89:91:09:1F:02:1E:45 Certificate issuer: /CN=A91DD309/serialNumber=8A73FBC66E6E3E8EAB2D5FC2B68991091F021E45 Certificate serial: 1C0F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/inP7xm5uPo6rLV_CtomRCR8CHkU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DD309/1FD6A6EEFA6911E68EC12333C4F9AE02/inP7xm5uPo6rLV_CtomRCR8CHkU.mft Manifest number: 1BF5 Signing time: Wed 02 Jul 2025 16:21:48 +0000 Manifest this update: Wed 02 Jul 2025 16:21:48 +0000 Manifest next update: Wed 09 Jul 2025 16:21:48 +0000 Files and hashes: 1: inP7xm5uPo6rLV_CtomRCR8CHkU.crl (hash: PL9g4NYhE5KNcCTgZ9F7XpqOJoFcGhW+iZUPYMuffyg=) 2: 5949B76C00DB11E8A9CA373DC4F9AE02.roa (hash: uYIH2Df820V7sq00NPl6eOckfu5/+u+T1sNhFFho9vo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DD309/1FD6A6EEFA6911E68EC12333C4F9AE02/inP7xm5uPo6rLV_CtomRCR8CHkU.crl rsync://rpki.apnic.net/member_repository/A91DD309/1FD6A6EEFA6911E68EC12333C4F9AE02/inP7xm5uPo6rLV_CtomRCR8CHkU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/inP7xm5uPo6rLV_CtomRCR8CHkU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 16:21:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7183 (0x1c0f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD309, serialNumber=8A73FBC66E6E3E8EAB2D5FC2B68991091F021E45 Validity Not Before: Jul 2 16:21:48 2025 GMT Not After : Jul 9 16:21:48 2025 GMT Subject: CN=68655c9c-6c2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:cb:60:ea:a4:ae:b6:c8:6d:57:46:51:ff:3a: ff:9b:dd:92:f7:c3:01:f2:29:ed:d4:39:58:48:0c: c3:65:b2:84:d2:c0:b5:0b:f4:ab:bc:d5:8c:cc:72: 1f:3b:da:33:58:a5:9f:d4:fc:90:bc:c0:89:9a:d6: 5b:f8:a1:19:91:35:5e:8f:44:9e:70:30:15:44:93: db:f8:43:34:04:da:5d:8c:8d:99:e7:3f:2b:7a:4d: ae:36:a6:4d:31:f6:fa:01:8b:a1:f4:75:19:12:de: ff:f1:e5:b4:55:d5:14:77:1d:f4:f0:35:42:5c:85: f3:ea:27:b6:98:ed:d4:fb:1d:bf:cc:9a:b3:0a:cc: 87:7e:de:98:b5:b7:a1:d1:41:ae:6e:bc:96:e0:09: 5c:61:cf:11:62:85:dc:41:0a:2f:44:39:ba:8b:09: f3:ea:9c:31:3b:a7:41:69:d6:e4:0f:6c:11:7b:62: 24:48:12:ac:8b:d9:bf:3f:e7:3b:6a:0b:0a:06:3a: 03:87:26:cb:19:6f:bb:5f:b9:cd:a7:13:ef:e3:5c: a1:ee:c6:30:94:88:ed:ea:6d:29:5e:bb:73:b7:27: 14:cf:5b:cd:25:e5:60:04:cb:15:d8:36:2b:79:b6: 14:30:c7:4c:3a:58:f4:86:16:c6:cd:a4:01:95:fb: 75:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:C2:17:30:62:92:05:2C:F7:2F:1D:1E:E4:E3:60:10:9F:BD:EB:53 X509v3 Authority Key Identifier: keyid:8A:73:FB:C6:6E:6E:3E:8E:AB:2D:5F:C2:B6:89:91:09:1F:02:1E:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DD309/1FD6A6EEFA6911E68EC12333C4F9AE02/inP7xm5uPo6rLV_CtomRCR8CHkU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/inP7xm5uPo6rLV_CtomRCR8CHkU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD309/1FD6A6EEFA6911E68EC12333C4F9AE02/inP7xm5uPo6rLV_CtomRCR8CHkU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:e5:7a:32:ec:30:e1:7e:14:0e:5a:a3:47:c0:81:6c:70:19: 01:a1:57:17:43:95:d1:79:cc:f2:c8:61:7b:d4:a0:1b:b6:f0: 3b:0a:5a:ec:67:af:48:3b:e8:e5:4b:bb:5c:8d:f5:86:7b:89: a6:0c:a6:13:31:93:0a:09:37:5d:72:cb:67:96:1a:8a:f9:6b: 39:29:d9:1b:9a:d2:1a:e8:96:b1:26:b1:99:de:d5:61:e3:91: 73:86:20:f5:dc:fc:24:25:b3:4a:cb:7f:72:ca:3d:6b:21:9f: 20:d0:fb:e1:ae:91:61:f6:89:2f:b0:54:0f:31:f8:32:0e:22: e2:18:f7:5b:25:30:b4:ef:99:4f:a4:37:a8:16:ec:9d:8c:a7: 96:61:14:79:b6:cb:1b:f9:63:98:48:49:36:cc:04:a2:55:9f: 57:97:49:8a:21:62:30:dd:e4:7e:66:53:7f:d6:d9:05:78:46: de:ea:8a:7d:47:26:69:c9:4e:f3:3f:62:87:73:32:7d:a7:49: e5:d7:f8:02:67:95:80:7c:ec:8b:1d:24:b6:42:bf:34:14:b5: 6e:0c:3e:71:45:c1:33:9e:01:8d:7c:93:ff:97:15:25:b5:b2: 82:63:ba:e2:c3:0b:25:a0:95:6e:f4:0f:60:fc:66:b5:c6:56: d2:d4:6f:47 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHA8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REQzMDkxMTAvBgNVBAUTKDhBNzNGQkM2NkU2RTNFOEVBQjJENUZDMkI2ODk5MTA5 MUYwMjFFNDUwHhcNMjUwNzAyMTYyMTQ4WhcNMjUwNzA5MTYyMTQ4WjAYMRYwFAYD VQQDEw02ODY1NWM5Yy02YzJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8Mtg6qSutshtV0ZR/zr/m92S98MB8int1DlYSAzDZbKE0sC1C/SrvNWMzHIf O9ozWKWf1PyQvMCJmtZb+KEZkTVej0SecDAVRJPb+EM0BNpdjI2Z5z8rek2uNqZN Mfb6AYuh9HUZEt7/8eW0VdUUdx308DVCXIXz6ie2mO3U+x2/zJqzCsyHft6Ytbeh 0UGubryW4AlcYc8RYoXcQQovRDm6iwnz6pwxO6dBadbkD2wRe2IkSBKsi9m/P+c7 agsKBjoDhybLGW+7X7nNpxPv41yh7sYwlIjt6m0pXrtztycUz1vNJeVgBMsV2DYr ebYUMMdMOlj0hhbGzaQBlft1+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCbCFzBi kgUs9y8dHuTjYBCfvetTMB8GA1UdIwQYMBaAFIpz+8Zubj6Oqy1fwraJkQkfAh5F MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERDMwOS8xRkQ2QTZFRUZB NjkxMUU2OEVDMTIzMzNDNEY5QUUwMi9pblA3eG01dVBvNnJMVl9DdG9tUkNSOENI a1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2luUDd4bTV1UG82ckxWX0N0b21SQ1I4Q0hrVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RDMwOS8xRkQ2QTZFRUZBNjkxMUU2OEVDMTIzMzNDNEY5QUUwMi9pblA3eG01dVBv NnJMVl9DdG9tUkNSOENIa1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCo5Xoy7DDhfhQOWqNHwIFscBkBoVcXQ5XReczyyGF71KAbtvA7Clrs Z69IO+jlS7tcjfWGe4mmDKYTMZMKCTddcstnlhqK+Ws5KdkbmtIa6JaxJrGZ3tVh 45FzhiD13PwkJbNKy39yyj1rIZ8g0PvhrpFh9okvsFQPMfgyDiLiGPdbJTC075lP pDeoFuydjKeWYRR5tssb+WOYSEk2zASiVZ9Xl0mKIWIw3eR+ZlN/1tkFeEbe6op9 RyZpyU7zP2KHczJ9p0nl1/gCZ5WAfOyLHSS2Qr80FLVuDD5xRcEzngGNfJP/lxUl tbKCY7riwwsloJVu9A9g/Ga1xlbS1G9H -----END CERTIFICATE-----Generated at Fri Jul 4 06:45:05 2025 by rpki-client