$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF175/0460AA18FBFB11EEA1EEAF1FC4F9AE02/7F7zNU5M1TSrhiW5m3MS1vTkixU.mft File: 7F7zNU5M1TSrhiW5m3MS1vTkixU.mft (raw, json) Hash identifier: eFRuRxcybj6PPdo/qyCjy3RUA2ZyYGt3TLTwVBPxQT0= Subject key identifier: 92:DE:F8:E4:5B:E2:D5:21:2B:90:F4:D9:60:1B:03:94:CD:57:CF:19 Authority key identifier: EC:5E:F3:35:4E:4C:D5:34:AB:86:25:B9:9B:73:12:D6:F4:E4:8B:15 Certificate issuer: /CN=A91EF175/serialNumber=EC5EF3354E4CD534AB8625B99B7312D6F4E48B15 Certificate serial: E6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7F7zNU5M1TSrhiW5m3MS1vTkixU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF175/0460AA18FBFB11EEA1EEAF1FC4F9AE02/7F7zNU5M1TSrhiW5m3MS1vTkixU.mft Manifest number: E2 Signing time: Sun 29 Jun 2025 04:31:37 +0000 Manifest this update: Sun 29 Jun 2025 04:31:37 +0000 Manifest next update: Sun 06 Jul 2025 04:31:37 +0000 Files and hashes: 1: 7F7zNU5M1TSrhiW5m3MS1vTkixU.crl (hash: b5srSdXStVbF8JAljDF9ZdCt2f6D6l0vYMXcf3Fr1po=) 2: 2636C6C6FBFC11EE85221046C4F9AE02.roa (hash: NQkxPngv0JrH8cspg2pDqvSp/RuMqfTf6Ox9XHDfB5k=) 3: A7EACE02FBFB11EE8DCAC620C4F9AE02.roa (hash: k1Tx0d7v2/DVXjcDjxa6UxUVJhpfspXydcHWpQGiFkY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF175/0460AA18FBFB11EEA1EEAF1FC4F9AE02/7F7zNU5M1TSrhiW5m3MS1vTkixU.crl rsync://rpki.apnic.net/member_repository/A91EF175/0460AA18FBFB11EEA1EEAF1FC4F9AE02/7F7zNU5M1TSrhiW5m3MS1vTkixU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7F7zNU5M1TSrhiW5m3MS1vTkixU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 04:31:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 230 (0xe6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF175, serialNumber=EC5EF3354E4CD534AB8625B99B7312D6F4E48B15 Validity Not Before: Jun 29 04:31:37 2025 GMT Not After : Jul 6 04:31:37 2025 GMT Subject: CN=6860c1a9-419e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:53:1d:37:23:bd:a3:ee:63:12:0a:6c:6c:b5: 8d:49:1f:aa:55:46:de:4f:26:5a:40:05:33:6c:c4: 2e:0c:32:70:3e:23:d9:3f:0e:37:f8:d2:c9:9c:7f: 6c:9a:8c:52:14:31:58:20:f0:f7:3f:83:c9:2a:f5: 17:bf:b8:19:e9:80:be:a7:73:95:aa:7f:58:c1:15: d2:dd:1c:29:9d:b2:7f:35:c6:a4:b5:e2:af:fc:d7: 89:4d:85:0f:d4:2d:a2:35:5f:28:8b:d1:63:9c:05: a6:90:e7:e1:8a:2a:b7:b0:1e:b4:5a:6c:f2:22:8b: 72:26:16:86:f7:ef:2c:74:4f:d9:de:fd:b5:db:9a: c2:f6:26:21:11:9b:0b:e5:ec:47:af:f8:f4:93:d1: 5e:43:26:b6:4e:80:81:0f:f8:64:5c:06:88:17:f0: b9:5d:c1:ca:4d:9f:72:0a:d9:8f:d7:b2:8c:cb:c6: 20:16:af:b2:c0:00:aa:87:85:69:a1:d7:3d:78:1e: 82:a4:71:36:16:14:30:21:32:73:d1:cc:56:68:01: c7:b6:d8:64:d2:61:11:4c:28:10:ea:8f:0d:2b:00: 21:19:42:e3:62:77:b6:3e:b9:71:c1:af:a8:43:ee: 8f:9e:ef:19:3c:53:ef:d6:b4:df:af:fb:3b:55:38: b6:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:DE:F8:E4:5B:E2:D5:21:2B:90:F4:D9:60:1B:03:94:CD:57:CF:19 X509v3 Authority Key Identifier: keyid:EC:5E:F3:35:4E:4C:D5:34:AB:86:25:B9:9B:73:12:D6:F4:E4:8B:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF175/0460AA18FBFB11EEA1EEAF1FC4F9AE02/7F7zNU5M1TSrhiW5m3MS1vTkixU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7F7zNU5M1TSrhiW5m3MS1vTkixU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF175/0460AA18FBFB11EEA1EEAF1FC4F9AE02/7F7zNU5M1TSrhiW5m3MS1vTkixU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:e4:6b:9e:5e:5f:7c:67:67:a6:2c:ae:7b:12:db:0f:f5:1d: 17:a4:d6:be:49:e0:9c:50:0a:4e:b4:1f:27:12:b1:23:4d:40: ba:bc:47:76:51:89:82:48:a7:ca:69:1e:03:03:9e:ad:60:d2: 4a:ab:a4:d2:04:b5:ff:81:25:cc:f5:f9:92:64:37:14:7a:6e: be:75:fa:1f:95:64:48:7e:8d:9b:60:48:e4:fb:79:97:72:41: 17:78:ad:7a:35:51:fc:8e:7e:05:a2:a8:f2:a6:1f:1c:11:bf: 99:62:08:0b:53:bf:fe:e5:28:9f:be:b1:59:c9:5a:25:20:40: 60:ca:95:6f:be:ba:22:32:03:a6:be:38:6b:a5:9d:9c:17:ab: 33:ae:7e:1f:27:1a:81:ba:ce:b4:73:79:81:d1:59:4f:09:19: 0b:ca:de:7a:2c:7b:c2:15:65:e0:d3:08:50:5b:2b:70:a1:c7: 84:f5:8c:89:e5:a1:e5:fa:86:ee:06:d4:9b:76:d3:36:42:1b: d2:ee:83:3e:03:60:95:67:99:c9:fd:a4:1a:56:a6:98:c7:e3: 09:02:83:f3:5f:e0:c9:8b:03:b8:21:d2:9e:bd:53:5b:b7:d1: bf:ca:bb:da:ac:f5:3a:56:02:51:03:2f:54:30:d9:72:a6:48: 55:af:e7:66 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUYxNzUxMTAvBgNVBAUTKEVDNUVGMzM1NEU0Q0Q1MzRBQjg2MjVCOTlCNzMxMkQ2 RjRFNDhCMTUwHhcNMjUwNjI5MDQzMTM3WhcNMjUwNzA2MDQzMTM3WjAYMRYwFAYD VQQDEw02ODYwYzFhOS00MTllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtlMdNyO9o+5jEgpsbLWNSR+qVUbeTyZaQAUzbMQuDDJwPiPZPw43+NLJnH9s moxSFDFYIPD3P4PJKvUXv7gZ6YC+p3OVqn9YwRXS3RwpnbJ/NcakteKv/NeJTYUP 1C2iNV8oi9FjnAWmkOfhiiq3sB60WmzyIotyJhaG9+8sdE/Z3v2125rC9iYhEZsL 5exHr/j0k9FeQya2ToCBD/hkXAaIF/C5XcHKTZ9yCtmP17KMy8YgFq+ywACqh4Vp odc9eB6CpHE2FhQwITJz0cxWaAHHtthk0mERTCgQ6o8NKwAhGULjYne2Prlxwa+o Q+6Pnu8ZPFPv1rTfr/s7VTi2AQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJLe+ORb 4tUhK5D02WAbA5TNV88ZMB8GA1UdIwQYMBaAFOxe8zVOTNU0q4YluZtzEtb05IsV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjE3NS8wNDYwQUExOEZC RkIxMUVFQTFFRUFGMUZDNEY5QUUwMi83Rjd6TlU1TTFUU3JoaVc1bTNNUzF2VGtp eFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdGN3pOVTVNMVRTcmhpVzVtM01TMXZUa2l4VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RjE3NS8wNDYwQUExOEZCRkIxMUVFQTFFRUFGMUZDNEY5QUUwMi83Rjd6TlU1TTFU U3JoaVc1bTNNUzF2VGtpeFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBL5GueXl98Z2emLK57EtsP9R0XpNa+SeCcUApOtB8nErEjTUC6vEd2 UYmCSKfKaR4DA56tYNJKq6TSBLX/gSXM9fmSZDcUem6+dfoflWRIfo2bYEjk+3mX ckEXeK16NVH8jn4Foqjyph8cEb+ZYggLU7/+5SifvrFZyVolIEBgypVvvroiMgOm vjhrpZ2cF6szrn4fJxqBus60c3mB0VlPCRkLyt56LHvCFWXg0whQWytwoceE9YyJ 5aHl+obuBtSbdtM2QhvS7oM+A2CVZ5nJ/aQaVqaYx+MJAoPzX+DJiwO4IdKevVNb t9G/yrvarPU6VgJRAy9UMNlypkhVr+dm -----END CERTIFICATE-----Generated at Sun Jun 29 19:02:13 2025 by rpki-client