$ rpki-client -vvf rpki.apnic.net/member_repository/A91E63E7/41B0C986887111EFA708D17DC4F9AE02/pZ9-4vonWTfz4cLbpbuPv2PTfDQ.mft File: pZ9-4vonWTfz4cLbpbuPv2PTfDQ.mft (raw, json) Hash identifier: lOMBefK1a7VlxDTMBanmfpj+ThYXjh727V3IpwCzhaA= Subject key identifier: D4:D0:54:5F:69:23:0B:04:C7:61:A1:E5:C7:B8:F3:63:34:18:47:07 Authority key identifier: A5:9F:7E:E2:FA:27:59:37:F3:E1:C2:DB:A5:BB:8F:BF:63:D3:7C:34 Certificate issuer: /CN=A91E63E7/serialNumber=A59F7EE2FA275937F3E1C2DBA5BB8FBF63D37C34 Certificate serial: 90 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pZ9-4vonWTfz4cLbpbuPv2PTfDQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E63E7/41B0C986887111EFA708D17DC4F9AE02/pZ9-4vonWTfz4cLbpbuPv2PTfDQ.mft Manifest number: 8C Signing time: Tue 01 Jul 2025 07:17:23 +0000 Manifest this update: Tue 01 Jul 2025 07:17:22 +0000 Manifest next update: Tue 08 Jul 2025 07:17:22 +0000 Files and hashes: 1: pZ9-4vonWTfz4cLbpbuPv2PTfDQ.crl (hash: TNGS6r7MryhLkM6Qu3VZgjqJF9x7Uql3yZUSAFanNUQ=) 2: A54B071C887211EFAC44513CC4F9AE02.roa (hash: xlW1WRvz7DCMXZZnV+rfb+Ls8+ewucJliDacTm3Al7M=) 3: 4694313A887211EF840E431CC4F9AE02.roa (hash: Sw+02xDE4zOVH8jJoCIIJ4Q+dPTGSSy4jLCilaWklfA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E63E7/41B0C986887111EFA708D17DC4F9AE02/pZ9-4vonWTfz4cLbpbuPv2PTfDQ.crl rsync://rpki.apnic.net/member_repository/A91E63E7/41B0C986887111EFA708D17DC4F9AE02/pZ9-4vonWTfz4cLbpbuPv2PTfDQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pZ9-4vonWTfz4cLbpbuPv2PTfDQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 07:17:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 144 (0x90) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E63E7, serialNumber=A59F7EE2FA275937F3E1C2DBA5BB8FBF63D37C34 Validity Not Before: Jul 1 07:17:22 2025 GMT Not After : Jul 8 07:17:22 2025 GMT Subject: CN=68638b83-aa5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:46:bc:f2:7a:7a:47:fa:9d:53:1f:3d:a6:dd: 88:b2:c8:a6:1e:b7:5e:4a:fe:c7:8a:26:f8:cf:d6: 06:dd:5a:eb:2d:91:0c:46:f8:ba:a6:cb:f0:16:59: 19:3d:bb:8c:9a:3f:08:2b:98:7b:d1:62:a2:a0:a5: 3e:3c:a4:85:98:00:81:a6:65:12:23:46:a0:40:d2: b8:fd:23:27:3d:08:a8:ec:df:36:4e:ae:b0:b7:a1: 43:f1:c0:e2:13:d8:32:7b:f3:62:e8:05:09:8d:f6: 0d:bf:46:af:15:62:bf:1e:2f:3c:83:2c:97:25:56: cb:c8:b5:1d:61:f7:39:4d:4f:60:d8:36:35:e1:3b: fd:6e:35:0e:e6:fb:ac:68:73:dc:81:3c:a2:29:59: 93:4f:0d:81:76:5a:34:66:6c:ce:f0:99:27:58:f7: c3:7b:f2:a0:c1:d2:51:ce:83:f6:a9:c9:56:a3:50: e2:34:fc:dd:10:cb:a7:1e:9e:b9:7b:3f:b2:97:df: ad:bb:bb:3d:a1:f8:e3:b9:2d:22:02:bf:45:16:47: 43:22:13:46:5a:b3:2c:97:70:00:20:aa:f5:3b:68: 86:b2:ee:08:c4:cb:03:99:8d:71:8b:1a:b0:26:d2: c4:60:55:94:5e:89:8f:c6:1b:ec:f6:36:e8:2d:16: 05:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:D0:54:5F:69:23:0B:04:C7:61:A1:E5:C7:B8:F3:63:34:18:47:07 X509v3 Authority Key Identifier: keyid:A5:9F:7E:E2:FA:27:59:37:F3:E1:C2:DB:A5:BB:8F:BF:63:D3:7C:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E63E7/41B0C986887111EFA708D17DC4F9AE02/pZ9-4vonWTfz4cLbpbuPv2PTfDQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pZ9-4vonWTfz4cLbpbuPv2PTfDQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E63E7/41B0C986887111EFA708D17DC4F9AE02/pZ9-4vonWTfz4cLbpbuPv2PTfDQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:b4:fe:54:a6:fd:2d:71:90:8a:be:96:f7:7d:ce:51:18:c3: 9a:36:9b:5c:22:9e:ed:ae:bf:1a:73:f4:92:51:e3:15:77:c3: c4:3c:0a:c0:61:60:6a:7e:c2:59:05:b9:f5:1c:7c:9a:1e:a5: 3e:0c:38:27:2e:2b:03:b7:53:af:a1:b8:68:52:00:de:13:c5: 4e:84:e3:3a:97:80:f3:c3:ce:0f:38:c0:ad:b5:c6:50:91:93: 1f:42:43:5c:45:38:ce:f1:cf:3a:cf:e5:a3:04:a1:ae:97:76: 07:ad:96:2f:f4:db:69:a2:ba:40:53:bb:b7:b1:f4:f5:3e:7b: c0:24:df:ce:8c:c8:11:aa:1b:e5:24:83:94:7a:9b:07:94:9a: b7:e9:78:80:af:70:7b:7e:47:d2:09:86:b0:f4:d0:c0:b8:8f: 63:28:26:42:e4:48:95:7a:19:ee:b5:8c:f2:a1:ba:ae:ed:08: 7b:a6:25:4d:f4:e3:50:50:7b:92:1e:5e:da:17:7c:1f:8e:4a: 94:de:e3:06:c7:8f:1a:a8:76:c7:be:f8:93:7e:f1:64:ee:93: c7:9f:c8:dc:7a:1f:3e:30:ea:39:71:0f:93:e9:6e:ca:b1:a9: 87:d7:29:9d:b4:33:40:1a:29:9a:df:82:23:bd:53:54:02:62: 74:ca:26:76 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTYzRTcxMTAvBgNVBAUTKEE1OUY3RUUyRkEyNzU5MzdGM0UxQzJEQkE1QkI4RkJG NjNEMzdDMzQwHhcNMjUwNzAxMDcxNzIyWhcNMjUwNzA4MDcxNzIyWjAYMRYwFAYD VQQDEw02ODYzOGI4My1hYTViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw0a88np6R/qdUx89pt2IssimHrdeSv7Hiib4z9YG3VrrLZEMRvi6psvwFlkZ PbuMmj8IK5h70WKioKU+PKSFmACBpmUSI0agQNK4/SMnPQio7N82Tq6wt6FD8cDi E9gye/Ni6AUJjfYNv0avFWK/Hi88gyyXJVbLyLUdYfc5TU9g2DY14Tv9bjUO5vus aHPcgTyiKVmTTw2Bdlo0ZmzO8JknWPfDe/KgwdJRzoP2qclWo1DiNPzdEMunHp65 ez+yl9+tu7s9ofjjuS0iAr9FFkdDIhNGWrMsl3AAIKr1O2iGsu4IxMsDmY1xixqw JtLEYFWUXomPxhvs9jboLRYF8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNTQVF9p IwsEx2Gh5ce482M0GEcHMB8GA1UdIwQYMBaAFKWffuL6J1k38+HC26W7j79j03w0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjNFNy80MUIwQzk4Njg4 NzExMUVGQTcwOEQxN0RDNEY5QUUwMi9wWjktNHZvbldUZno0Y0xicGJ1UHYyUFRm RFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3BaOS00dm9uV1RmejRjTGJwYnVQdjJQVGZEUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NjNFNy80MUIwQzk4Njg4NzExMUVGQTcwOEQxN0RDNEY5QUUwMi9wWjktNHZvbldU Zno0Y0xicGJ1UHYyUFRmRFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCbtP5Upv0tcZCKvpb3fc5RGMOaNptcIp7trr8ac/SSUeMVd8PEPArA YWBqfsJZBbn1HHyaHqU+DDgnLisDt1OvobhoUgDeE8VOhOM6l4Dzw84POMCttcZQ kZMfQkNcRTjO8c86z+WjBKGul3YHrZYv9NtporpAU7u3sfT1PnvAJN/OjMgRqhvl JIOUepsHlJq36XiAr3B7fkfSCYaw9NDAuI9jKCZC5EiVehnutYzyobqu7Qh7piVN 9ONQUHuSHl7aF3wfjkqU3uMGx48aqHbHvviTfvFk7pPHn8jceh8+MOo5cQ+T6W7K samH1ymdtDNAGima34IjvVNUAmJ0yiZ2 -----END CERTIFICATE-----Generated at Thu Jul 3 03:51:05 2025 by rpki-client