$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2364/040566A884CC11EF84EE3E50C4F9AE02/Rwzf1J9d_yEleN7F2iHyHaCz-tI.mft File: Rwzf1J9d_yEleN7F2iHyHaCz-tI.mft (raw, json) Hash identifier: Gr7dIOoaxtmkLMAN/9Zgs+vE518aQ/PhW9gLa+RnpXM= Subject key identifier: E9:DD:F8:5D:31:67:C5:33:01:98:57:17:3F:36:E6:9F:50:10:F5:F7 Authority key identifier: 47:0C:DF:D4:9F:5D:FF:21:25:78:DE:C5:DA:21:F2:1D:A0:B3:FA:D2 Certificate issuer: /CN=A91F2364/serialNumber=470CDFD49F5DFF212578DEC5DA21F21DA0B3FAD2 Certificate serial: 96 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rwzf1J9d_yEleN7F2iHyHaCz-tI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F2364/040566A884CC11EF84EE3E50C4F9AE02/Rwzf1J9d_yEleN7F2iHyHaCz-tI.mft Manifest number: 90 Signing time: Tue 01 Jul 2025 07:14:33 +0000 Manifest this update: Tue 01 Jul 2025 07:14:32 +0000 Manifest next update: Tue 08 Jul 2025 07:14:32 +0000 Files and hashes: 1: Rwzf1J9d_yEleN7F2iHyHaCz-tI.crl (hash: v3Ad3S3bWwoC7DIMN6U7Lrn3DXh8nKK3A/LXJBCS/p4=) 2: F696F52C8C7311EF995EA751C4F9AE02.roa (hash: IVAag2n39OgPxLOhqGGK4t8maSAxh28CoPmeH83pRE4=) 3: A227F4CC84CC11EFB2C53051C4F9AE02.roa (hash: xCL7VbACEpLGPMzJlAr4A4F4pPeHjMya8awCZyLgvNQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F2364/040566A884CC11EF84EE3E50C4F9AE02/Rwzf1J9d_yEleN7F2iHyHaCz-tI.crl rsync://rpki.apnic.net/member_repository/A91F2364/040566A884CC11EF84EE3E50C4F9AE02/Rwzf1J9d_yEleN7F2iHyHaCz-tI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rwzf1J9d_yEleN7F2iHyHaCz-tI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 07:14:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 150 (0x96) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F2364, serialNumber=470CDFD49F5DFF212578DEC5DA21F21DA0B3FAD2 Validity Not Before: Jul 1 07:14:32 2025 GMT Not After : Jul 8 07:14:32 2025 GMT Subject: CN=68638ad9-3494 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:4c:84:61:6a:2b:2a:8d:9c:fa:2e:7d:8e:ff: d7:6b:c1:8c:98:2b:6b:b3:af:e6:ea:07:bd:30:27: 5f:8f:51:b4:a0:66:8b:1d:bb:d3:90:8c:b3:9c:a6: 8a:1b:f2:04:8e:c3:1b:bf:ec:cb:37:ff:b2:88:f7: 2d:38:f9:f9:cb:da:10:98:70:a3:e6:4b:82:59:f8: 40:04:53:25:10:25:53:26:05:80:41:30:13:0a:8e: f8:41:78:5e:8b:d3:03:88:86:4d:6b:e7:f4:c9:94: 09:4c:e4:d1:33:e3:13:48:5d:6c:77:17:00:15:d7: 4d:92:7a:c9:cb:a6:9b:94:6a:c6:ad:8f:e0:b2:ea: 9e:d3:d7:03:dd:76:4d:b4:2c:48:dc:b6:ac:2e:17: cb:66:4e:31:66:2a:bf:3a:22:4d:b0:0d:85:19:27: bd:26:db:58:f6:aa:de:71:27:f1:ad:25:10:49:68: a5:08:05:94:b5:92:0a:ee:19:1e:ca:c6:89:2a:e5: 27:d0:90:23:87:ad:04:ea:6a:46:15:18:54:20:8f: d6:a4:f6:9f:4f:20:e6:31:92:6d:a8:ea:ff:e3:63: d2:00:4b:e8:80:85:b1:6f:66:b8:e6:b8:6f:00:d5: c0:38:fc:2d:0c:87:01:14:33:04:e9:72:57:e0:7c: 1c:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:DD:F8:5D:31:67:C5:33:01:98:57:17:3F:36:E6:9F:50:10:F5:F7 X509v3 Authority Key Identifier: keyid:47:0C:DF:D4:9F:5D:FF:21:25:78:DE:C5:DA:21:F2:1D:A0:B3:FA:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F2364/040566A884CC11EF84EE3E50C4F9AE02/Rwzf1J9d_yEleN7F2iHyHaCz-tI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rwzf1J9d_yEleN7F2iHyHaCz-tI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2364/040566A884CC11EF84EE3E50C4F9AE02/Rwzf1J9d_yEleN7F2iHyHaCz-tI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:0f:8e:05:33:b7:31:e7:7d:5e:94:31:7b:81:c2:8b:26:db: 0f:f0:53:f4:75:09:93:a8:3d:e5:06:e9:e5:34:7e:c5:27:0d: 04:bc:17:b0:8e:9a:d3:47:fa:dc:13:99:b0:51:b7:a2:82:17: f9:9b:b6:82:f8:d2:38:53:f6:03:46:ad:34:6a:59:5f:59:ed: bb:2d:9f:a0:41:e2:5c:08:9b:fc:66:15:ac:e5:4a:6c:ea:3e: 9d:39:1e:64:cd:a0:dc:d0:26:dd:c3:22:70:a6:ea:a5:70:49: 8c:63:27:2d:21:7f:38:99:3b:46:47:d0:5c:47:2d:37:be:b5: 96:0f:6f:01:05:9e:ec:45:84:74:72:60:a5:fe:57:3b:26:b8: 11:c5:50:95:7a:1a:4c:40:69:3d:44:ba:61:4a:82:93:74:d7: a8:82:40:ea:78:6f:e3:aa:4a:20:f7:56:10:5c:1d:04:9f:a8: d2:72:5d:9f:b4:52:31:b6:6e:3d:e9:ca:65:61:02:bd:fc:0d: 5d:3b:2e:0c:30:92:11:98:65:e7:d2:4e:03:14:61:24:74:9b: ae:f7:5f:ea:e4:26:52:74:3b:ee:03:30:34:d8:85:db:e7:47: 3a:8f:a1:c4:e3:15:7c:d5:88:ed:6d:f2:39:1b:17:ae:8b:51: 46:f4:cf:80 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjIzNjQxMTAvBgNVBAUTKDQ3MENERkQ0OUY1REZGMjEyNTc4REVDNURBMjFGMjFE QTBCM0ZBRDIwHhcNMjUwNzAxMDcxNDMyWhcNMjUwNzA4MDcxNDMyWjAYMRYwFAYD VQQDEw02ODYzOGFkOS0zNDk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx0yEYWorKo2c+i59jv/Xa8GMmCtrs6/m6ge9MCdfj1G0oGaLHbvTkIyznKaK G/IEjsMbv+zLN/+yiPctOPn5y9oQmHCj5kuCWfhABFMlECVTJgWAQTATCo74QXhe i9MDiIZNa+f0yZQJTOTRM+MTSF1sdxcAFddNknrJy6ablGrGrY/gsuqe09cD3XZN tCxI3LasLhfLZk4xZiq/OiJNsA2FGSe9JttY9qrecSfxrSUQSWilCAWUtZIK7hke ysaJKuUn0JAjh60E6mpGFRhUII/WpPafTyDmMZJtqOr/42PSAEvogIWxb2a45rhv ANXAOPwtDIcBFDME6XJX4HwcZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOnd+F0x Z8UzAZhXFz825p9QEPX3MB8GA1UdIwQYMBaAFEcM39SfXf8hJXjexdoh8h2gs/rS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMjM2NC8wNDA1NjZBODg0 Q0MxMUVGODRFRTNFNTBDNEY5QUUwMi9Sd3pmMUo5ZF95RWxlTjdGMmlIeUhhQ3ot dEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1J3emYxSjlkX3lFbGVON0YyaUh5SGFDei10SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MjM2NC8wNDA1NjZBODg0Q0MxMUVGODRFRTNFNTBDNEY5QUUwMi9Sd3pmMUo5ZF95 RWxlTjdGMmlIeUhhQ3otdEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+D44FM7cx531elDF7gcKLJtsP8FP0dQmTqD3lBunlNH7FJw0EvBew jprTR/rcE5mwUbeighf5m7aC+NI4U/YDRq00allfWe27LZ+gQeJcCJv8ZhWs5Ups 6j6dOR5kzaDc0CbdwyJwpuqlcEmMYyctIX84mTtGR9BcRy03vrWWD28BBZ7sRYR0 cmCl/lc7JrgRxVCVehpMQGk9RLphSoKTdNeogkDqeG/jqkog91YQXB0En6jScl2f tFIxtm496cplYQK9/A1dOy4MMJIRmGXn0k4DFGEkdJuu91/q5CZSdDvuAzA02IXb 50c6j6HE4xV81YjtbfI5Gxeui1FG9M+A -----END CERTIFICATE-----Generated at Tue Jul 1 20:46:03 2025 by rpki-client