$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4288/A93AA880A27211E6B8BC996AC4F9AE02/MU9VrlJExM2xD3hN_xXQItOJaEg.mft File: MU9VrlJExM2xD3hN_xXQItOJaEg.mft (raw, json) Hash identifier: zipvfc2MWLyBW1Y1Agv/FupKZt85Fb0i2yUDEYYoc+E= Subject key identifier: 73:65:4D:31:0D:42:6F:C9:3A:C8:FC:90:CE:D5:C4:6D:C9:0F:D8:5A Authority key identifier: 31:4F:55:AE:52:44:C4:CD:B1:0F:78:4D:FF:15:D0:22:D3:89:68:48 Certificate issuer: /CN=A91F4288/serialNumber=314F55AE5244C4CDB10F784DFF15D022D3896848 Certificate serial: 1DCA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MU9VrlJExM2xD3hN_xXQItOJaEg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4288/A93AA880A27211E6B8BC996AC4F9AE02/MU9VrlJExM2xD3hN_xXQItOJaEg.mft Manifest number: 1DA7 Signing time: Mon 30 Jun 2025 16:16:47 +0000 Manifest this update: Mon 30 Jun 2025 16:16:46 +0000 Manifest next update: Mon 07 Jul 2025 16:16:46 +0000 Files and hashes: 1: MU9VrlJExM2xD3hN_xXQItOJaEg.crl (hash: yz7yDqoUMGidAFXU0fiFIKRX5lc5Tbwc8oHwJRlOgCE=) 2: 30C10672A27411E68C8EC670C4F9AE02.roa (hash: akkWYjfaWEhqYJZrRKjxCpGXnYxAkiIziyHvD0Tsd7w=) 3: 2445BC6A6FCE11E9AA5D2439C4F9AE02.roa (hash: 7TEbSw3PqWXAumkD/6WCBubmNiQ54mZObTiNmT20Qfk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4288/A93AA880A27211E6B8BC996AC4F9AE02/MU9VrlJExM2xD3hN_xXQItOJaEg.crl rsync://rpki.apnic.net/member_repository/A91F4288/A93AA880A27211E6B8BC996AC4F9AE02/MU9VrlJExM2xD3hN_xXQItOJaEg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MU9VrlJExM2xD3hN_xXQItOJaEg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 16:16:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7626 (0x1dca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4288, serialNumber=314F55AE5244C4CDB10F784DFF15D022D3896848 Validity Not Before: Jun 30 16:16:46 2025 GMT Not After : Jul 7 16:16:46 2025 GMT Subject: CN=6862b86f-f4fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:bf:86:25:1c:35:96:3c:a6:76:65:fe:3e:30: f6:ca:e6:55:61:ba:68:35:d0:82:50:a0:ea:8a:3a: 13:7e:71:41:c2:ba:22:52:a4:34:ae:b8:c2:3b:7b: 98:d0:85:94:c4:1b:ee:0b:e7:28:d6:9a:bc:4b:ca: 5b:11:b2:3f:b9:53:39:92:61:3e:3b:23:5c:00:52: 2e:f2:b5:e7:d8:f8:92:3e:98:48:4f:ec:3e:1a:c2: 45:b1:1b:0c:ce:cb:a7:d2:d3:9c:17:f6:bb:43:d2: f0:88:3c:fd:75:5c:2b:47:e4:84:14:b4:0f:8f:98: 01:74:0f:1c:d1:7d:12:82:78:95:34:8e:6b:16:79: 72:67:5b:55:b0:58:7d:02:82:43:92:46:69:9b:6f: 3e:92:cb:07:32:ed:02:5b:d3:42:92:4b:b1:b9:7a: fa:e6:58:04:d0:12:00:53:fe:cd:30:79:69:2a:47: 36:80:c6:04:02:ee:b2:06:13:49:bd:45:a7:d3:52: ab:d1:b5:4e:75:ce:40:9e:27:18:f9:eb:31:c6:1e: 02:d6:62:e7:5c:95:38:50:45:0b:c9:7e:27:6a:3f: 47:17:0b:7d:42:8c:bd:eb:5d:2b:9c:fa:be:be:f0: 76:c4:7a:e6:97:bf:a2:0d:d8:7a:33:c7:2b:cc:cc: af:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:65:4D:31:0D:42:6F:C9:3A:C8:FC:90:CE:D5:C4:6D:C9:0F:D8:5A X509v3 Authority Key Identifier: keyid:31:4F:55:AE:52:44:C4:CD:B1:0F:78:4D:FF:15:D0:22:D3:89:68:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4288/A93AA880A27211E6B8BC996AC4F9AE02/MU9VrlJExM2xD3hN_xXQItOJaEg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MU9VrlJExM2xD3hN_xXQItOJaEg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4288/A93AA880A27211E6B8BC996AC4F9AE02/MU9VrlJExM2xD3hN_xXQItOJaEg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:76:1c:01:98:b8:6f:a0:fd:05:b9:4e:32:62:4a:bd:ef:69: 3d:4a:a0:aa:b8:07:50:f6:3b:60:b6:42:db:a0:16:5f:de:46: 32:95:ea:76:a3:5d:10:a7:e1:ac:a4:3e:ad:02:f2:5d:54:35: 64:0a:53:7e:05:e2:cb:96:86:38:29:8f:c7:3d:f3:92:b7:c4: 34:88:8c:47:c0:a3:07:33:07:fc:6d:1c:42:d8:ba:44:4e:b8: e0:67:ca:1e:72:fc:09:67:70:54:78:2b:8b:0b:69:87:5c:73: cf:73:64:be:a1:e7:cf:7d:a2:95:aa:35:9d:eb:e4:3e:b0:c1: 22:08:bd:1a:ba:c7:f7:a1:6a:ef:d4:eb:25:b5:ab:81:25:7e: b0:e3:48:8a:0b:2f:91:ae:39:8b:56:80:6d:3f:1a:49:a5:55: ec:7f:fa:db:c9:cc:43:de:ec:2b:57:4e:13:e7:bd:d4:13:a9: 98:f1:9b:7f:e7:ef:a6:fe:b9:09:6f:f9:f9:c6:9c:9f:60:53: a2:e6:8c:40:0c:36:74:0e:11:6e:5f:af:92:7d:4d:ac:b0:ac: 1f:0c:df:1d:a0:28:22:52:ed:df:86:d5:e0:e8:cd:af:69:61: 3b:e2:2e:08:f6:36:08:f4:2b:72:cc:dc:8f:27:90:34:28:38: 7a:5e:98:62 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHcowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjQyODgxMTAvBgNVBAUTKDMxNEY1NUFFNTI0NEM0Q0RCMTBGNzg0REZGMTVEMDIy RDM4OTY4NDgwHhcNMjUwNjMwMTYxNjQ2WhcNMjUwNzA3MTYxNjQ2WjAYMRYwFAYD VQQDEw02ODYyYjg2Zi1mNGZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy7+GJRw1ljymdmX+PjD2yuZVYbpoNdCCUKDqijoTfnFBwroiUqQ0rrjCO3uY 0IWUxBvuC+co1pq8S8pbEbI/uVM5kmE+OyNcAFIu8rXn2PiSPphIT+w+GsJFsRsM zsun0tOcF/a7Q9LwiDz9dVwrR+SEFLQPj5gBdA8c0X0SgniVNI5rFnlyZ1tVsFh9 AoJDkkZpm28+kssHMu0CW9NCkkuxuXr65lgE0BIAU/7NMHlpKkc2gMYEAu6yBhNJ vUWn01Kr0bVOdc5AnicY+esxxh4C1mLnXJU4UEULyX4naj9HFwt9Qoy9610rnPq+ vvB2xHrml7+iDdh6M8crzMyvlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHNlTTEN Qm/JOsj8kM7VxG3JD9haMB8GA1UdIwQYMBaAFDFPVa5SRMTNsQ94Tf8V0CLTiWhI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDI4OC9BOTNBQTg4MEEy NzIxMUU2QjhCQzk5NkFDNEY5QUUwMi9NVTlWcmxKRXhNMnhEM2hOX3hYUUl0T0ph RWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01VOVZybEpFeE0yeEQzaE5feFhRSXRPSmFFZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NDI4OC9BOTNBQTg4MEEyNzIxMUU2QjhCQzk5NkFDNEY5QUUwMi9NVTlWcmxKRXhN MnhEM2hOX3hYUUl0T0phRWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAJdhwBmLhvoP0FuU4yYkq972k9SqCquAdQ9jtgtkLboBZf3kYylep2 o10Qp+GspD6tAvJdVDVkClN+BeLLloY4KY/HPfOSt8Q0iIxHwKMHMwf8bRxC2LpE TrjgZ8oecvwJZ3BUeCuLC2mHXHPPc2S+oefPfaKVqjWd6+Q+sMEiCL0ausf3oWrv 1OsltauBJX6w40iKCy+RrjmLVoBtPxpJpVXsf/rbycxD3uwrV04T573UE6mY8Zt/ 5++m/rkJb/n5xpyfYFOi5oxADDZ0DhFuX6+SfU2ssKwfDN8doCgiUu3fhtXg6M2v aWE74i4I9jYI9CtyzNyPJ5A0KDh6Xphi -----END CERTIFICATE-----Generated at Wed Jul 2 15:24:43 2025 by rpki-client