$ rpki-client -vvf rpki.apnic.net/member_repository/A91F05B5/475012062AB311EE8FAE7214C4F9AE02/CV9sa7OHxpMv2gHAv6Ym9qrHuwA.mft File: CV9sa7OHxpMv2gHAv6Ym9qrHuwA.mft (raw, json) Hash identifier: 6VmjN1P3V55Ek9FK1125scuKL4OYgaVvf4NwksM4rEs= Subject key identifier: 61:93:01:E2:E7:D9:6C:7A:C2:8F:AC:D5:B4:1B:C2:3C:96:0C:B8:67 Authority key identifier: 09:5F:6C:6B:B3:87:C6:93:2F:DA:01:C0:BF:A6:26:F6:AA:C7:BB:00 Certificate issuer: /CN=A91F05B5/serialNumber=095F6C6BB387C6932FDA01C0BFA626F6AAC7BB00 Certificate serial: 0172 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CV9sa7OHxpMv2gHAv6Ym9qrHuwA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F05B5/475012062AB311EE8FAE7214C4F9AE02/CV9sa7OHxpMv2gHAv6Ym9qrHuwA.mft Manifest number: 016E Signing time: Thu 03 Jul 2025 03:55:48 +0000 Manifest this update: Thu 03 Jul 2025 03:55:48 +0000 Manifest next update: Thu 10 Jul 2025 03:55:48 +0000 Files and hashes: 1: CV9sa7OHxpMv2gHAv6Ym9qrHuwA.crl (hash: vWwjM01qqK2AEkBSebrxhJOLU+OOrVMx3cITAd+yC+A=) 2: E0A69DBC2AB311EE9CA5E515C4F9AE02.roa (hash: ZqsBefU5j7GUz5qH7o82aafqjpUX9O/Biz1HkkL6OG4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F05B5/475012062AB311EE8FAE7214C4F9AE02/CV9sa7OHxpMv2gHAv6Ym9qrHuwA.crl rsync://rpki.apnic.net/member_repository/A91F05B5/475012062AB311EE8FAE7214C4F9AE02/CV9sa7OHxpMv2gHAv6Ym9qrHuwA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CV9sa7OHxpMv2gHAv6Ym9qrHuwA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 370 (0x172) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F05B5, serialNumber=095F6C6BB387C6932FDA01C0BFA626F6AAC7BB00 Validity Not Before: Jul 3 03:55:48 2025 GMT Not After : Jul 10 03:55:48 2025 GMT Subject: CN=6865ff44-d987 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:6f:71:6e:a6:91:bf:3a:aa:36:8d:30:d9:0d: c8:7e:20:bb:b5:9d:5e:cd:fd:09:20:e8:d8:3d:67: 0a:85:b4:05:bf:74:3b:2d:61:5e:b8:9d:f7:58:4d: e4:b3:d2:8b:25:f3:95:3c:2f:9e:e4:ca:b6:e5:6d: fd:22:3d:36:56:62:fd:74:78:e1:b2:1d:3f:53:6a: f2:62:18:19:ed:46:77:dc:31:a5:0f:4a:fe:09:b9: 80:88:25:2a:ee:85:97:c2:1e:c1:21:e8:0d:a8:23: c3:ea:38:e7:36:33:e5:c4:b5:6d:58:5a:f2:b4:ed: a1:b3:70:78:f6:87:4c:83:35:b1:83:99:d1:c7:d7: 0e:eb:a1:d3:1d:a4:1d:43:86:71:a4:6e:e9:dd:56: 5d:0d:3d:0e:3e:3c:7f:fb:63:2b:f9:53:a9:d4:f8: 6f:28:7c:ea:a0:8b:4e:e5:a3:dd:76:a1:a3:53:ae: e7:f1:cf:49:a7:4b:0e:c1:8f:f3:f9:6e:78:7d:eb: 2c:e3:3b:61:bf:64:00:3f:5e:de:80:dd:39:17:1c: 36:2c:f3:7e:e5:70:f0:70:b8:d7:63:5c:fe:49:0f: 24:aa:e8:95:f1:7d:57:9d:da:69:98:54:05:ff:d4: 03:12:37:be:95:4a:86:39:6b:27:15:f5:d5:c6:e1: 32:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:93:01:E2:E7:D9:6C:7A:C2:8F:AC:D5:B4:1B:C2:3C:96:0C:B8:67 X509v3 Authority Key Identifier: keyid:09:5F:6C:6B:B3:87:C6:93:2F:DA:01:C0:BF:A6:26:F6:AA:C7:BB:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F05B5/475012062AB311EE8FAE7214C4F9AE02/CV9sa7OHxpMv2gHAv6Ym9qrHuwA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CV9sa7OHxpMv2gHAv6Ym9qrHuwA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F05B5/475012062AB311EE8FAE7214C4F9AE02/CV9sa7OHxpMv2gHAv6Ym9qrHuwA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:31:22:75:b0:59:88:7f:c3:af:37:f0:8c:fe:ec:38:0e:e3: 79:39:64:d2:39:ab:aa:c3:84:fa:d1:b0:f9:a4:a8:4f:16:81: a4:7e:b0:a5:b3:f1:e5:6b:22:a9:46:23:b7:6d:d6:d5:db:55: f4:f0:20:a5:d3:36:82:53:5e:d5:e4:ac:eb:53:34:13:28:86: 7b:07:f4:6b:55:07:7f:f7:03:75:a4:c1:8f:45:4b:d2:e3:42: 2c:85:19:97:39:e7:f6:bf:4f:2d:89:af:ee:31:1b:63:59:22: f9:01:ec:ce:a2:07:91:3b:bd:12:14:b9:6b:a4:ba:f7:53:91: 7a:75:75:fd:a6:16:2f:ec:b3:4e:70:99:a0:e5:5a:cf:a2:85: 93:cc:c3:91:4d:45:2e:c7:99:36:28:ab:8e:b1:be:14:34:32: d9:b8:01:7e:a9:54:f4:55:d4:b2:57:20:f1:10:07:8e:5c:5a: 74:22:8b:9b:72:bb:e4:e9:de:6b:74:df:09:d0:2e:3e:44:6e: 2c:5d:00:fa:be:da:a4:dc:73:5c:94:d4:a3:32:26:07:54:77: 5a:73:d1:c6:61:61:05:a3:87:e4:b4:5d:bc:05:f8:bf:f6:2f: 4d:40:52:26:02:65:68:cd:5e:63:fc:b3:fb:f3:77:76:8a:e5: a7:57:0a:54 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjA1QjUxMTAvBgNVBAUTKDA5NUY2QzZCQjM4N0M2OTMyRkRBMDFDMEJGQTYyNkY2 QUFDN0JCMDAwHhcNMjUwNzAzMDM1NTQ4WhcNMjUwNzEwMDM1NTQ4WjAYMRYwFAYD VQQDEw02ODY1ZmY0NC1kOTg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq29xbqaRvzqqNo0w2Q3IfiC7tZ1ezf0JIOjYPWcKhbQFv3Q7LWFeuJ33WE3k s9KLJfOVPC+e5Mq25W39Ij02VmL9dHjhsh0/U2ryYhgZ7UZ33DGlD0r+CbmAiCUq 7oWXwh7BIegNqCPD6jjnNjPlxLVtWFrytO2hs3B49odMgzWxg5nRx9cO66HTHaQd Q4ZxpG7p3VZdDT0OPjx/+2Mr+VOp1PhvKHzqoItO5aPddqGjU67n8c9Jp0sOwY/z +W54fess4zthv2QAP17egN05Fxw2LPN+5XDwcLjXY1z+SQ8kquiV8X1XndppmFQF /9QDEje+lUqGOWsnFfXVxuEyrwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGGTAeLn 2Wx6wo+s1bQbwjyWDLhnMB8GA1UdIwQYMBaAFAlfbGuzh8aTL9oBwL+mJvaqx7sA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMDVCNS80NzUwMTIwNjJB QjMxMUVFOEZBRTcyMTRDNEY5QUUwMi9DVjlzYTdPSHhwTXYyZ0hBdjZZbTlxckh1 d0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NWOXNhN09IeHBNdjJnSEF2NlltOXFySHV3QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MDVCNS80NzUwMTIwNjJBQjMxMUVFOEZBRTcyMTRDNEY5QUUwMi9DVjlzYTdPSHhw TXYyZ0hBdjZZbTlxckh1d0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAbMSJ1sFmIf8OvN/CM/uw4DuN5OWTSOauqw4T60bD5pKhPFoGkfrCl s/HlayKpRiO3bdbV21X08CCl0zaCU17V5KzrUzQTKIZ7B/RrVQd/9wN1pMGPRUvS 40IshRmXOef2v08tia/uMRtjWSL5AezOogeRO70SFLlrpLr3U5F6dXX9phYv7LNO cJmg5VrPooWTzMORTUUux5k2KKuOsb4UNDLZuAF+qVT0VdSyVyDxEAeOXFp0Ioub crvk6d5rdN8J0C4+RG4sXQD6vtqk3HNclNSjMiYHVHdac9HGYWEFo4fktF28Bfi/ 9i9NQFImAmVozV5j/LP783d2iuWnVwpU -----END CERTIFICATE-----Generated at Thu Jul 3 05:54:07 2025 by rpki-client