$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE500/49E6FE46C72D11EE9C7C351DC4F9AE02/cz1KHp8pnM0_jnJKteer9Ci7GV0.mft File: cz1KHp8pnM0_jnJKteer9Ci7GV0.mft (raw, json) Hash identifier: gmwQ28VFsZ2Zi9NUUEGoRlRCEfwW2XqGxQsrlZuD+d8= Subject key identifier: 96:AD:93:17:E4:11:FA:24:16:70:D1:2C:EB:E7:C6:4B:9A:45:2E:52 Authority key identifier: 73:3D:4A:1E:9F:29:9C:CD:3F:8E:72:4A:B5:E7:AB:F4:28:BB:19:5D Certificate issuer: /CN=A91DE500/serialNumber=733D4A1E9F299CCD3F8E724AB5E7ABF428BB195D Certificate serial: 010F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cz1KHp8pnM0_jnJKteer9Ci7GV0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE500/49E6FE46C72D11EE9C7C351DC4F9AE02/cz1KHp8pnM0_jnJKteer9Ci7GV0.mft Manifest number: 010C Signing time: Thu 03 Jul 2025 05:14:10 +0000 Manifest this update: Thu 03 Jul 2025 05:14:09 +0000 Manifest next update: Thu 10 Jul 2025 05:14:09 +0000 Files and hashes: 1: cz1KHp8pnM0_jnJKteer9Ci7GV0.crl (hash: gsiOjhXW+3POE5ijPhGKY/1lmavR+BiAGVCB8CCzf8A=) 2: 0C897F3EE84111EFA819A335C4F9AE02.roa (hash: 5gQHbtykFLXuasC1zPt+ul7Apydf3ObCnPPOkuixA6c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE500/49E6FE46C72D11EE9C7C351DC4F9AE02/cz1KHp8pnM0_jnJKteer9Ci7GV0.crl rsync://rpki.apnic.net/member_repository/A91DE500/49E6FE46C72D11EE9C7C351DC4F9AE02/cz1KHp8pnM0_jnJKteer9Ci7GV0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cz1KHp8pnM0_jnJKteer9Ci7GV0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 271 (0x10f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE500, serialNumber=733D4A1E9F299CCD3F8E724AB5E7ABF428BB195D Validity Not Before: Jul 3 05:14:09 2025 GMT Not After : Jul 10 05:14:09 2025 GMT Subject: CN=686611a1-7840 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:05:1d:5b:57:22:da:f8:3b:a6:c6:e7:fb:ef: 89:d9:fe:ce:2d:f2:af:e6:f4:ed:5f:de:35:ba:fb: db:a7:90:6e:c8:f7:29:2f:e4:4b:d8:d6:cd:f5:3e: 10:fc:7c:1c:ea:b1:88:d7:ac:dc:a3:a9:63:01:fa: 1e:af:e1:33:01:1a:27:19:16:7f:22:b3:ad:87:7a: b7:e3:66:af:c2:66:5b:23:1c:b8:9d:7c:18:f4:fc: 4c:77:59:0a:fc:6c:80:0d:4c:f6:dc:72:e4:46:91: 14:91:5d:e0:6b:53:67:51:60:b5:9a:33:6c:2c:13: 83:92:81:6e:36:4f:c3:68:41:52:8c:7f:96:bf:34: 03:44:b5:08:43:5f:ad:d0:39:32:a5:3b:fc:5b:7f: 25:ac:a2:8c:7b:f9:7a:67:5b:c0:83:9a:38:cb:bc: 50:07:ba:20:2a:d1:e6:a0:db:57:47:44:3d:86:f0: 00:4f:6f:78:92:7a:ec:36:83:fd:c5:72:33:65:86: 16:3f:70:a9:bf:3d:ec:b1:7a:44:14:e3:2e:da:63: b5:e4:3b:eb:4c:eb:53:36:0d:e3:82:48:1b:d3:79: 71:c7:f7:1b:8f:31:fa:f0:ea:4c:9f:ff:f2:8a:26: 6d:d6:5d:89:1b:06:51:c5:e7:ba:67:38:8a:52:f0: 16:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:AD:93:17:E4:11:FA:24:16:70:D1:2C:EB:E7:C6:4B:9A:45:2E:52 X509v3 Authority Key Identifier: keyid:73:3D:4A:1E:9F:29:9C:CD:3F:8E:72:4A:B5:E7:AB:F4:28:BB:19:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE500/49E6FE46C72D11EE9C7C351DC4F9AE02/cz1KHp8pnM0_jnJKteer9Ci7GV0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cz1KHp8pnM0_jnJKteer9Ci7GV0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE500/49E6FE46C72D11EE9C7C351DC4F9AE02/cz1KHp8pnM0_jnJKteer9Ci7GV0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:64:dc:30:8d:df:c5:89:14:de:2a:06:7d:0e:a5:92:6f:64: 9b:10:57:cc:66:8f:96:6b:8b:15:c2:64:2b:7b:ff:b2:9b:33: 53:41:7c:f3:64:38:c0:2d:85:c4:15:f9:6c:6f:d4:fb:a8:d0: 34:ad:a7:d8:19:43:31:39:47:61:7b:6d:bc:bd:83:23:6d:c7: f8:ff:6d:1a:08:48:c8:bf:54:04:6f:28:6e:32:e7:b2:e7:20: 5f:a5:e6:b0:26:7f:4e:1b:5e:47:a4:63:b4:3f:37:43:a0:d5: ed:5a:25:5d:68:cc:bf:cf:c4:21:62:f4:75:d0:93:01:0d:19: 38:3d:da:af:99:50:ff:21:f2:52:db:96:ea:66:35:01:58:d9: 01:19:fc:3f:19:24:e1:0a:aa:62:b4:0f:65:1f:9d:5b:60:9d: ab:bd:ae:48:c7:6b:9c:a2:17:05:53:86:32:d8:1a:69:54:a3: ed:fb:62:9f:e7:a9:8e:09:82:8e:02:d0:d1:68:b4:17:91:31: 4f:ae:ff:93:65:f2:9c:a0:f4:30:b6:5b:e2:74:51:4c:98:87: 43:ff:d4:4d:6d:9a:b6:c4:cb:84:18:e3:71:e5:a2:ca:0e:09: 06:7b:69:0a:91:e9:18:aa:55:da:55:24:59:28:b1:f7:85:c2: de:64:92:78 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REU1MDAxMTAvBgNVBAUTKDczM0Q0QTFFOUYyOTlDQ0QzRjhFNzI0QUI1RTdBQkY0 MjhCQjE5NUQwHhcNMjUwNzAzMDUxNDA5WhcNMjUwNzEwMDUxNDA5WjAYMRYwFAYD VQQDEw02ODY2MTFhMS03ODQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4wUdW1ci2vg7psbn+++J2f7OLfKv5vTtX941uvvbp5BuyPcpL+RL2NbN9T4Q /Hwc6rGI16zco6ljAfoer+EzARonGRZ/IrOth3q342avwmZbIxy4nXwY9PxMd1kK /GyADUz23HLkRpEUkV3ga1NnUWC1mjNsLBODkoFuNk/DaEFSjH+WvzQDRLUIQ1+t 0DkypTv8W38lrKKMe/l6Z1vAg5o4y7xQB7ogKtHmoNtXR0Q9hvAAT294knrsNoP9 xXIzZYYWP3Cpvz3ssXpEFOMu2mO15DvrTOtTNg3jgkgb03lxx/cbjzH68OpMn//y iiZt1l2JGwZRxee6ZziKUvAWuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJatkxfk EfokFnDRLOvnxkuaRS5SMB8GA1UdIwQYMBaAFHM9Sh6fKZzNP45ySrXnq/Qouxld MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERTUwMC80OUU2RkU0NkM3 MkQxMUVFOUM3QzM1MURDNEY5QUUwMi9jejFLSHA4cG5NMF9qbkpLdGVlcjlDaTdH VjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2N6MUtIcDhwbk0wX2puSkt0ZWVyOUNpN0dWMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RTUwMC80OUU2RkU0NkM3MkQxMUVFOUM3QzM1MURDNEY5QUUwMi9jejFLSHA4cG5N MF9qbkpLdGVlcjlDaTdHVjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC2ZNwwjd/FiRTeKgZ9DqWSb2SbEFfMZo+Wa4sVwmQre/+ymzNTQXzz ZDjALYXEFflsb9T7qNA0rafYGUMxOUdhe228vYMjbcf4/20aCEjIv1QEbyhuMuey 5yBfpeawJn9OG15HpGO0PzdDoNXtWiVdaMy/z8QhYvR10JMBDRk4PdqvmVD/IfJS 25bqZjUBWNkBGfw/GSThCqpitA9lH51bYJ2rva5Ix2ucohcFU4Yy2BppVKPt+2Kf 56mOCYKOAtDRaLQXkTFPrv+TZfKcoPQwtlvidFFMmIdD/9RNbZq2xMuEGONx5aLK DgkGe2kKkekYqlXaVSRZKLH3hcLeZJJ4 -----END CERTIFICATE-----Generated at Fri Jul 4 22:14:55 2025 by rpki-client