$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6419/FA6E36CC4ED311EDA5E53040C4F9AE02/iV-zzi-cLke5FLsqa2bHfVOXpAo.mft File: iV-zzi-cLke5FLsqa2bHfVOXpAo.mft (raw, json) Hash identifier: SSs/vevI45UYqi1ScNfd8qbnaZfQZ6HBi2gp+ChCJiE= Subject key identifier: 5A:05:97:BE:1E:ED:92:6A:6B:71:38:AB:EE:65:0D:64:A5:06:51:C7 Authority key identifier: 89:5F:B3:CE:2F:9C:2E:47:B9:14:BB:2A:6B:66:C7:7D:53:97:A4:0A Certificate issuer: /CN=A91E6419/serialNumber=895FB3CE2F9C2E47B914BB2A6B66C77D5397A40A Certificate serial: 01FF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iV-zzi-cLke5FLsqa2bHfVOXpAo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6419/FA6E36CC4ED311EDA5E53040C4F9AE02/iV-zzi-cLke5FLsqa2bHfVOXpAo.mft Manifest number: 01FA Signing time: Tue 01 Jul 2025 02:48:12 +0000 Manifest this update: Tue 01 Jul 2025 02:48:12 +0000 Manifest next update: Tue 08 Jul 2025 02:48:12 +0000 Files and hashes: 1: iV-zzi-cLke5FLsqa2bHfVOXpAo.crl (hash: ApZE7Ov4uzGwaCU9XilUuOGvxqPh2FFP8tTHN9UfhUg=) 2: 38DEC3C04ED611ED84336740C4F9AE02.roa (hash: GwA8WNqmVW1s9tawzkiqtYC7xFjjdtlbsl+Ur+WNSNc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6419/FA6E36CC4ED311EDA5E53040C4F9AE02/iV-zzi-cLke5FLsqa2bHfVOXpAo.crl rsync://rpki.apnic.net/member_repository/A91E6419/FA6E36CC4ED311EDA5E53040C4F9AE02/iV-zzi-cLke5FLsqa2bHfVOXpAo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iV-zzi-cLke5FLsqa2bHfVOXpAo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 02:48:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 511 (0x1ff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6419, serialNumber=895FB3CE2F9C2E47B914BB2A6B66C77D5397A40A Validity Not Before: Jul 1 02:48:12 2025 GMT Not After : Jul 8 02:48:12 2025 GMT Subject: CN=68634c6c-dedc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:ed:31:5e:2a:d1:ff:ca:b3:82:51:fe:c6:bf: 99:a6:5d:93:ff:3e:86:82:5d:62:1c:96:11:e0:68: c2:da:02:73:11:74:99:48:7e:25:f3:96:58:cd:75: a5:2b:c9:1f:b4:69:58:0a:0c:84:2d:f5:c6:03:31: e9:a5:80:31:be:44:72:02:61:b7:b5:75:a8:07:33: 9a:85:e4:79:05:4e:75:6b:dd:a3:d0:08:4d:ac:07: 91:02:f9:db:22:d6:f3:14:a5:48:bc:bd:6d:9d:5f: 2f:ec:1c:74:0e:fc:49:de:24:d8:f9:cf:9c:4c:71: 4b:66:42:1a:6a:3b:1f:a4:7d:e7:34:3f:6c:89:39: 0e:00:d7:ac:78:62:6f:0f:57:40:0e:b0:96:6a:f4: 39:21:b0:0a:4b:1a:63:69:8f:44:7a:77:fc:ae:bc: 16:ef:7a:94:eb:a7:82:fe:26:a4:c2:8e:da:7b:1d: 0d:d4:2d:5b:96:9d:41:4b:33:d2:60:8d:ce:53:ab: aa:f7:e6:69:55:99:dd:ef:ba:2b:78:f8:69:2e:28: dc:35:d9:52:60:41:c1:ad:f5:39:aa:65:75:8b:c4: 42:da:59:5f:ff:43:0f:07:81:73:c0:e2:96:2a:54: 6a:4c:72:33:cc:14:53:14:d4:0d:cb:13:90:1e:f3: ca:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:05:97:BE:1E:ED:92:6A:6B:71:38:AB:EE:65:0D:64:A5:06:51:C7 X509v3 Authority Key Identifier: keyid:89:5F:B3:CE:2F:9C:2E:47:B9:14:BB:2A:6B:66:C7:7D:53:97:A4:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6419/FA6E36CC4ED311EDA5E53040C4F9AE02/iV-zzi-cLke5FLsqa2bHfVOXpAo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iV-zzi-cLke5FLsqa2bHfVOXpAo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6419/FA6E36CC4ED311EDA5E53040C4F9AE02/iV-zzi-cLke5FLsqa2bHfVOXpAo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:2f:05:fc:d4:bb:fb:7d:cf:1a:e4:d2:6b:00:5c:e5:82:ef: 43:11:e2:77:4d:ad:53:5d:a5:47:bc:cd:ef:54:cf:6d:37:9c: d3:a1:b3:a5:10:dc:0b:84:ea:88:8a:cb:47:94:75:d7:10:ff: 6c:e0:4e:1f:5f:93:8d:90:f9:30:4e:4c:05:e5:d3:14:f0:30: be:1f:3e:1b:cc:25:5a:c1:46:be:be:84:d0:3c:fc:e2:c1:f6: db:75:49:ed:da:c9:f8:6e:86:1f:ff:95:8e:5f:66:cc:13:05: 0f:a6:e0:02:fb:f2:7d:a9:29:11:93:6f:20:5f:0e:b0:ea:61: ce:4f:7e:c8:de:69:5a:5e:08:f0:94:d7:a9:b9:f7:81:e9:e4: 86:7b:f8:05:c2:f3:24:62:12:c0:9b:11:ed:7d:45:28:89:d5: 40:f2:f8:39:31:b1:ed:ed:8a:d9:b4:e0:87:58:91:66:1f:d4: 61:08:33:a4:7e:1c:fd:5d:c1:5b:8a:36:a1:e7:ee:53:72:eb: f9:dc:de:d1:00:5d:9d:92:c8:87:a5:e9:54:53:a7:1e:bd:08: b4:3e:1a:67:31:f8:3d:9f:cf:ba:f0:ef:81:7a:97:92:5b:ee: c2:36:b6:6e:a2:0a:f0:28:3f:fe:dc:d8:0b:de:b3:dd:c6:52: 48:1d:17:98 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAf8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTY0MTkxMTAvBgNVBAUTKDg5NUZCM0NFMkY5QzJFNDdCOTE0QkIyQTZCNjZDNzdE NTM5N0E0MEEwHhcNMjUwNzAxMDI0ODEyWhcNMjUwNzA4MDI0ODEyWjAYMRYwFAYD VQQDEw02ODYzNGM2Yy1kZWRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5+0xXirR/8qzglH+xr+Zpl2T/z6Ggl1iHJYR4GjC2gJzEXSZSH4l85ZYzXWl K8kftGlYCgyELfXGAzHppYAxvkRyAmG3tXWoBzOaheR5BU51a92j0AhNrAeRAvnb ItbzFKVIvL1tnV8v7Bx0DvxJ3iTY+c+cTHFLZkIaajsfpH3nND9siTkOANeseGJv D1dADrCWavQ5IbAKSxpjaY9Eenf8rrwW73qU66eC/iakwo7aex0N1C1blp1BSzPS YI3OU6uq9+ZpVZnd77orePhpLijcNdlSYEHBrfU5qmV1i8RC2llf/0MPB4FzwOKW KlRqTHIzzBRTFNQNyxOQHvPK1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFoFl74e 7ZJqa3E4q+5lDWSlBlHHMB8GA1UdIwQYMBaAFIlfs84vnC5HuRS7Kmtmx31Tl6QK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjQxOS9GQTZFMzZDQzRF RDMxMUVEQTVFNTMwNDBDNEY5QUUwMi9pVi16emktY0xrZTVGTHNxYTJiSGZWT1hw QW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lWLXp6aS1jTGtlNUZMc3FhMmJIZlZPWHBBby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NjQxOS9GQTZFMzZDQzRFRDMxMUVEQTVFNTMwNDBDNEY5QUUwMi9pVi16emktY0xr ZTVGTHNxYTJiSGZWT1hwQW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBBLwX81Lv7fc8a5NJrAFzlgu9DEeJ3Ta1TXaVHvM3vVM9tN5zTobOl ENwLhOqIistHlHXXEP9s4E4fX5ONkPkwTkwF5dMU8DC+Hz4bzCVawUa+voTQPPzi wfbbdUnt2sn4boYf/5WOX2bMEwUPpuAC+/J9qSkRk28gXw6w6mHOT37I3mlaXgjw lNepufeB6eSGe/gFwvMkYhLAmxHtfUUoidVA8vg5MbHt7YrZtOCHWJFmH9RhCDOk fhz9XcFbijah5+5Tcuv53N7RAF2dksiHpelUU6cevQi0PhpnMfg9n8+68O+BepeS W+7CNrZuogrwKD/+3NgL3rPdxlJIHReY -----END CERTIFICATE-----Generated at Tue Jul 1 06:06:46 2025 by rpki-client