$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3C11/5198FB968F7B11EA9ACB7E7FC4F9AE02/RPjRU7d7CSsR7fAKk-S7ZAkcJEc.mft File: RPjRU7d7CSsR7fAKk-S7ZAkcJEc.mft (raw, json) Hash identifier: BUXULMLrtGUayUmRhXfu2gOOoZTLyn89UhHwggvClRo= Subject key identifier: A7:CB:9A:F7:B6:BB:19:87:88:29:5E:37:7F:38:FB:F5:07:5A:26:AE Authority key identifier: 44:F8:D1:53:B7:7B:09:2B:11:ED:F0:0A:93:E4:BB:64:09:1C:24:47 Certificate issuer: /CN=A91F3C11/serialNumber=44F8D153B77B092B11EDF00A93E4BB64091C2447 Certificate serial: 0994 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RPjRU7d7CSsR7fAKk-S7ZAkcJEc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F3C11/5198FB968F7B11EA9ACB7E7FC4F9AE02/RPjRU7d7CSsR7fAKk-S7ZAkcJEc.mft Manifest number: 0994 Signing time: Mon 30 Jun 2025 15:03:10 +0000 Manifest this update: Mon 30 Jun 2025 15:03:10 +0000 Manifest next update: Mon 07 Jul 2025 15:03:10 +0000 Files and hashes: 1: RPjRU7d7CSsR7fAKk-S7ZAkcJEc.crl (hash: 9TsBTsosp+1z5xXhyh/U5SrlGPk9iS54hxpEUPH/KkA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F3C11/5198FB968F7B11EA9ACB7E7FC4F9AE02/RPjRU7d7CSsR7fAKk-S7ZAkcJEc.crl rsync://rpki.apnic.net/member_repository/A91F3C11/5198FB968F7B11EA9ACB7E7FC4F9AE02/RPjRU7d7CSsR7fAKk-S7ZAkcJEc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RPjRU7d7CSsR7fAKk-S7ZAkcJEc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 15:03:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2452 (0x994) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F3C11, serialNumber=44F8D153B77B092B11EDF00A93E4BB64091C2447 Validity Not Before: Jun 30 15:03:10 2025 GMT Not After : Jul 7 15:03:10 2025 GMT Subject: CN=6862a72e-2478 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:42:0a:c4:c9:22:24:62:c9:d7:b2:e6:09:82: 63:1b:bb:bc:a0:fc:7a:89:0a:11:07:18:9f:8d:75: d8:60:b6:1a:b3:e0:9f:aa:70:1e:8a:41:fe:80:18: 79:1d:43:20:c5:dd:d7:77:84:5d:b4:a3:ef:7c:e0: c9:cd:9b:44:01:69:4e:16:10:fa:70:c4:29:d6:8f: e8:a7:ec:cc:a9:f9:00:dd:59:61:05:72:4a:7a:4b: 51:eb:37:82:6e:f5:44:57:6c:5b:e6:a1:df:f0:c5: e9:73:bd:7f:1a:5a:a8:c3:96:1b:00:2b:83:0c:0f: e2:bd:34:ca:38:2f:3b:f0:0b:55:f8:05:5b:88:75: 8e:30:74:a6:33:b7:ef:ec:f9:d1:50:ed:80:27:12: aa:3a:5d:b4:ba:a0:b3:67:f3:ac:ce:2c:75:86:27: 62:83:8e:fa:5b:32:a9:59:83:16:86:c6:aa:9d:41: 7f:50:21:39:75:58:56:b5:f7:7d:2b:60:8e:11:b1: a5:a2:28:10:c5:b4:b9:19:86:b8:be:b7:6c:44:fc: 51:d7:18:02:ad:d4:6c:a5:08:83:f3:68:78:2f:c9: b4:93:74:e0:c8:0a:f9:70:d7:27:fa:66:37:8c:2f: 9a:ae:d2:c9:2d:2e:a5:32:1f:4a:79:1c:82:82:22: 92:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:CB:9A:F7:B6:BB:19:87:88:29:5E:37:7F:38:FB:F5:07:5A:26:AE X509v3 Authority Key Identifier: keyid:44:F8:D1:53:B7:7B:09:2B:11:ED:F0:0A:93:E4:BB:64:09:1C:24:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F3C11/5198FB968F7B11EA9ACB7E7FC4F9AE02/RPjRU7d7CSsR7fAKk-S7ZAkcJEc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RPjRU7d7CSsR7fAKk-S7ZAkcJEc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3C11/5198FB968F7B11EA9ACB7E7FC4F9AE02/RPjRU7d7CSsR7fAKk-S7ZAkcJEc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:15:0a:6d:45:22:0f:99:51:43:63:dc:09:5e:3c:64:27:5b: 36:98:a8:05:ed:87:f9:da:9b:64:e4:64:82:a6:20:79:c9:1a: 45:74:45:ff:3f:e0:c3:84:1b:0b:af:4d:d8:75:d5:78:a9:de: b3:df:cc:b8:fe:53:6e:92:ff:34:68:26:7d:56:e1:36:d8:8d: 3c:b3:29:f7:ee:d0:65:ba:39:4e:46:a6:d9:2c:87:d0:8a:83: 07:84:17:f8:f9:c0:a1:a8:08:f8:8d:fd:0e:4b:fb:4e:3a:9f: 0e:20:3a:2b:e2:11:bc:48:b5:8f:0f:a1:33:05:19:f3:eb:50: c2:58:f2:c8:e5:f1:07:1e:e7:8a:73:62:ec:8d:27:29:44:33: d8:c4:e7:01:f0:81:66:56:84:8a:e5:45:43:65:02:89:cd:fa: 5a:97:1b:da:46:e9:6f:36:e8:ce:72:34:c0:17:d4:cf:4c:f7: 03:7a:87:cb:d3:1f:27:87:8e:90:5e:ae:01:77:05:02:da:9d: 85:58:9d:e2:4f:1d:37:10:c9:18:f2:49:c4:9f:5a:b7:96:65: 8b:15:94:ae:e1:ab:33:80:41:70:4e:da:27:9a:d3:fc:e4:d5: 02:7b:50:72:a1:ef:8a:51:ba:d6:af:25:61:f9:ee:fe:38:eb: f9:35:17:93 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCZQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjNDMTExMTAvBgNVBAUTKDQ0RjhEMTUzQjc3QjA5MkIxMUVERjAwQTkzRTRCQjY0 MDkxQzI0NDcwHhcNMjUwNjMwMTUwMzEwWhcNMjUwNzA3MTUwMzEwWjAYMRYwFAYD VQQDEw02ODYyYTcyZS0yNDc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA50IKxMkiJGLJ17LmCYJjG7u8oPx6iQoRBxifjXXYYLYas+CfqnAeikH+gBh5 HUMgxd3Xd4RdtKPvfODJzZtEAWlOFhD6cMQp1o/op+zMqfkA3VlhBXJKektR6zeC bvVEV2xb5qHf8MXpc71/Glqow5YbACuDDA/ivTTKOC878AtV+AVbiHWOMHSmM7fv 7PnRUO2AJxKqOl20uqCzZ/Oszix1hidig476WzKpWYMWhsaqnUF/UCE5dVhWtfd9 K2COEbGloigQxbS5GYa4vrdsRPxR1xgCrdRspQiD82h4L8m0k3TgyAr5cNcn+mY3 jC+artLJLS6lMh9KeRyCgiKSywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKfLmve2 uxmHiCleN384+/UHWiauMB8GA1UdIwQYMBaAFET40VO3ewkrEe3wCpPku2QJHCRH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGM0MxMS81MTk4RkI5NjhG N0IxMUVBOUFDQjdFN0ZDNEY5QUUwMi9SUGpSVTdkN0NTc1I3ZkFLay1TN1pBa2NK RWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JQalJVN2Q3Q1NzUjdmQUtrLVM3WkFrY0pFYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG M0MxMS81MTk4RkI5NjhGN0IxMUVBOUFDQjdFN0ZDNEY5QUUwMi9SUGpSVTdkN0NT c1I3ZkFLay1TN1pBa2NKRWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCFFQptRSIPmVFDY9wJXjxkJ1s2mKgF7Yf52ptk5GSCpiB5yRpFdEX/ P+DDhBsLr03YddV4qd6z38y4/lNukv80aCZ9VuE22I08syn37tBlujlORqbZLIfQ ioMHhBf4+cChqAj4jf0OS/tOOp8OIDor4hG8SLWPD6EzBRnz61DCWPLI5fEHHueK c2LsjScpRDPYxOcB8IFmVoSK5UVDZQKJzfpalxvaRulvNujOcjTAF9TPTPcDeofL 0x8nh46QXq4BdwUC2p2FWJ3iTx03EMkY8knEn1q3lmWLFZSu4aszgEFwTtonmtP8 5NUCe1Byoe+KUbrWryVh+e7+OOv5NReT -----END CERTIFICATE-----Generated at Wed Jul 2 14:59:05 2025 by rpki-client