$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED571/ECD2DF96CE6F11E9A0D86D51C4F9AE02/9PFcZ17ZpcLRmVsn-1P_YP8CSeA.mft File: 9PFcZ17ZpcLRmVsn-1P_YP8CSeA.mft (raw, json) Hash identifier: Bt+QiyxSBfzUIZIOZ5mdUB7aJN972d9wF5jP7/Dp37g= Subject key identifier: 12:72:59:B4:AC:CB:61:6E:AF:F4:CA:26:6D:DE:1A:43:D4:44:DA:8E Authority key identifier: F4:F1:5C:67:5E:D9:A5:C2:D1:99:5B:27:FB:53:FF:60:FF:02:49:E0 Certificate issuer: /CN=A91ED571/serialNumber=F4F15C675ED9A5C2D1995B27FB53FF60FF0249E0 Certificate serial: 0D6E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9PFcZ17ZpcLRmVsn-1P_YP8CSeA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ED571/ECD2DF96CE6F11E9A0D86D51C4F9AE02/9PFcZ17ZpcLRmVsn-1P_YP8CSeA.mft Manifest number: 0D67 Signing time: Mon 30 Jun 2025 18:10:49 +0000 Manifest this update: Mon 30 Jun 2025 18:10:48 +0000 Manifest next update: Mon 07 Jul 2025 18:10:48 +0000 Files and hashes: 1: 9PFcZ17ZpcLRmVsn-1P_YP8CSeA.crl (hash: b7pFBOuhr2koyPy1czxSD0MeXqIT5hJMfa0+oT7a2xE=) 2: C9819022CE7011E98E86DD52C4F9AE02.roa (hash: EM624Ee5dZvup/p2NN7lZAjAZv2Q+/2EJL827rz91tU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ED571/ECD2DF96CE6F11E9A0D86D51C4F9AE02/9PFcZ17ZpcLRmVsn-1P_YP8CSeA.crl rsync://rpki.apnic.net/member_repository/A91ED571/ECD2DF96CE6F11E9A0D86D51C4F9AE02/9PFcZ17ZpcLRmVsn-1P_YP8CSeA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9PFcZ17ZpcLRmVsn-1P_YP8CSeA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 18:10:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3438 (0xd6e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ED571, serialNumber=F4F15C675ED9A5C2D1995B27FB53FF60FF0249E0 Validity Not Before: Jun 30 18:10:48 2025 GMT Not After : Jul 7 18:10:48 2025 GMT Subject: CN=6862d329-e656 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:32:8a:b1:f6:ca:ca:94:1b:1f:6c:9b:9d:cb: 60:dc:1f:84:12:54:30:a1:15:16:f6:6f:72:ea:05: 26:6e:86:57:4b:b7:31:5e:f9:a7:be:90:6b:ad:c6: 48:77:8c:b0:b3:b7:58:ed:22:16:bb:cf:97:58:fc: ed:52:db:e5:ef:88:51:73:23:3d:8b:ef:d9:85:0b: 2a:fd:97:75:b3:2c:7e:da:f2:d6:a3:62:b4:ad:0c: e7:82:ef:f6:6d:d9:1f:75:8a:fd:d6:99:2e:bf:21: 10:d1:ff:ef:25:af:20:64:d5:32:a5:fd:83:f4:51: 88:c0:7a:9e:b1:1a:10:9e:44:c7:bd:bd:51:b0:f0: d6:08:6b:71:8f:1f:88:46:c8:b3:a6:bd:5e:ad:a2: 01:1b:1a:b0:2e:94:15:1e:e7:85:89:b4:db:a7:fe: a5:ef:ba:26:3c:c3:e4:98:43:38:b1:50:52:80:b4: 40:27:3d:19:1b:1b:8c:f0:b4:a7:69:f2:42:3e:2f: a7:b1:e8:43:2f:ca:76:29:13:fd:bc:96:43:94:18: 05:a9:f3:21:ed:10:2c:db:32:a5:64:53:c5:26:c0: 50:d5:f9:7b:a9:23:d0:4e:5f:e9:31:c6:d1:e6:df: c0:13:73:01:30:bb:8c:80:4b:31:a1:b8:bf:81:7d: c6:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:72:59:B4:AC:CB:61:6E:AF:F4:CA:26:6D:DE:1A:43:D4:44:DA:8E X509v3 Authority Key Identifier: keyid:F4:F1:5C:67:5E:D9:A5:C2:D1:99:5B:27:FB:53:FF:60:FF:02:49:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ED571/ECD2DF96CE6F11E9A0D86D51C4F9AE02/9PFcZ17ZpcLRmVsn-1P_YP8CSeA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9PFcZ17ZpcLRmVsn-1P_YP8CSeA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED571/ECD2DF96CE6F11E9A0D86D51C4F9AE02/9PFcZ17ZpcLRmVsn-1P_YP8CSeA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:41:3f:47:b4:92:dd:8d:1a:ea:c7:18:22:be:2c:2b:a2:9a: 8f:6c:3b:b0:36:00:a8:55:1e:25:9f:6f:bf:de:23:91:26:59: 7d:72:aa:0d:4c:7e:48:1f:ea:4a:38:25:e5:eb:86:fc:df:53: 19:37:86:6a:e2:5e:04:19:e3:6b:14:ad:1b:c7:93:f4:34:ed: ce:3e:37:f7:df:6f:a6:5b:f8:ee:c9:50:3d:c6:cc:0a:dd:ea: 79:5b:3a:18:86:7b:b6:70:f6:4a:6c:4f:eb:5b:95:e5:e9:25: 2c:9f:b0:d8:a6:61:bf:ef:91:a6:c6:86:e9:07:1c:9f:eb:d6: e6:20:5e:5b:32:6c:a6:b3:b6:7c:2a:eb:21:23:85:b1:34:5f: 02:be:f5:6b:00:15:49:42:5e:47:b1:ef:e1:8f:ce:1a:f2:15: 4a:d7:6a:bc:df:c9:47:52:28:c4:4a:02:82:ee:35:d8:43:8b: 75:7c:4c:d2:81:48:a3:6e:da:49:c6:b5:2e:21:ca:91:e7:4d: 73:c3:f8:de:41:4c:29:aa:9d:08:40:11:5b:37:20:8a:5b:54: 0e:22:eb:33:8e:f8:b0:e4:a5:11:e3:41:01:1e:ad:c4:57:43: d0:57:80:c8:91:b4:f4:b2:1a:25:dc:e7:12:f7:95:6d:4d:9f: a0:f2:e7:99 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDW4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUQ1NzExMTAvBgNVBAUTKEY0RjE1QzY3NUVEOUE1QzJEMTk5NUIyN0ZCNTNGRjYw RkYwMjQ5RTAwHhcNMjUwNjMwMTgxMDQ4WhcNMjUwNzA3MTgxMDQ4WjAYMRYwFAYD VQQDEw02ODYyZDMyOS1lNjU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvjKKsfbKypQbH2ybnctg3B+EElQwoRUW9m9y6gUmboZXS7cxXvmnvpBrrcZI d4yws7dY7SIWu8+XWPztUtvl74hRcyM9i+/ZhQsq/Zd1syx+2vLWo2K0rQzngu/2 bdkfdYr91pkuvyEQ0f/vJa8gZNUypf2D9FGIwHqesRoQnkTHvb1RsPDWCGtxjx+I Rsizpr1eraIBGxqwLpQVHueFibTbp/6l77omPMPkmEM4sVBSgLRAJz0ZGxuM8LSn afJCPi+nsehDL8p2KRP9vJZDlBgFqfMh7RAs2zKlZFPFJsBQ1fl7qSPQTl/pMcbR 5t/AE3MBMLuMgEsxobi/gX3GHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBJyWbSs y2Fur/TKJm3eGkPURNqOMB8GA1UdIwQYMBaAFPTxXGde2aXC0ZlbJ/tT/2D/Akng MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRDU3MS9FQ0QyREY5NkNF NkYxMUU5QTBEODZENTFDNEY5QUUwMi85UEZjWjE3WnBjTFJtVnNuLTFQX1lQOENT ZUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlQRmNaMTdacGNMUm1Wc24tMVBfWVA4Q1NlQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RDU3MS9FQ0QyREY5NkNFNkYxMUU5QTBEODZENTFDNEY5QUUwMi85UEZjWjE3WnBj TFJtVnNuLTFQX1lQOENTZUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAuQT9HtJLdjRrqxxgiviwropqPbDuwNgCoVR4ln2+/3iORJll9cqoN TH5IH+pKOCXl64b831MZN4Zq4l4EGeNrFK0bx5P0NO3OPjf332+mW/juyVA9xswK 3ep5WzoYhnu2cPZKbE/rW5Xl6SUsn7DYpmG/75GmxobpBxyf69bmIF5bMmyms7Z8 KushI4WxNF8CvvVrABVJQl5Hse/hj84a8hVK12q838lHUijESgKC7jXYQ4t1fEzS gUijbtpJxrUuIcqR501zw/jeQUwpqp0IQBFbNyCKW1QOIuszjviw5KUR40EBHq3E V0PQV4DIkbT0shol3OcS95VtTZ+g8ueZ -----END CERTIFICATE-----Generated at Tue Jul 1 20:36:51 2025 by rpki-client