$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7FEA/1EE3AEEC604811EA8C690B38C4F9AE02/_g28w89QoeDrA9MSluOfuogMGQU.mft File: _g28w89QoeDrA9MSluOfuogMGQU.mft (raw, json) Hash identifier: QKR+wQoTZh+agjD1UPH4uqXFjRxqfkMzaSziMFX9AZs= Subject key identifier: 20:AF:3C:8F:19:B3:D9:D7:07:6A:23:FA:14:A1:D8:BC:40:9F:AD:D6 Authority key identifier: FE:0D:BC:C3:CF:50:A1:E0:EB:03:D3:12:96:E3:9F:BA:88:0C:19:05 Certificate issuer: /CN=A91F7FEA/serialNumber=FE0DBCC3CF50A1E0EB03D31296E39FBA880C1905 Certificate serial: 0A9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_g28w89QoeDrA9MSluOfuogMGQU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F7FEA/1EE3AEEC604811EA8C690B38C4F9AE02/_g28w89QoeDrA9MSluOfuogMGQU.mft Manifest number: 0A90 Signing time: Wed 02 Jul 2025 19:49:19 +0000 Manifest this update: Wed 02 Jul 2025 19:49:19 +0000 Manifest next update: Wed 09 Jul 2025 19:49:19 +0000 Files and hashes: 1: _g28w89QoeDrA9MSluOfuogMGQU.crl (hash: WzJD3XMhb8t1uUvwwKXvmB4pUhrJlZEkGiFWjLT1GTo=) 2: AF5AC6B69E3F11EEA6B6CB0DC4F9AE02.roa (hash: aO7ZzsxjyqFcAzfGikfamjQffULd11X020Rl4PUmMgc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F7FEA/1EE3AEEC604811EA8C690B38C4F9AE02/_g28w89QoeDrA9MSluOfuogMGQU.crl rsync://rpki.apnic.net/member_repository/A91F7FEA/1EE3AEEC604811EA8C690B38C4F9AE02/_g28w89QoeDrA9MSluOfuogMGQU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_g28w89QoeDrA9MSluOfuogMGQU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 19:49:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2718 (0xa9e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F7FEA, serialNumber=FE0DBCC3CF50A1E0EB03D31296E39FBA880C1905 Validity Not Before: Jul 2 19:49:19 2025 GMT Not After : Jul 9 19:49:19 2025 GMT Subject: CN=68658d3f-e03e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:5c:dc:51:7b:0d:97:9d:93:e1:28:21:eb:9f: 82:fb:5d:f1:61:45:b9:94:cc:4d:f3:8b:c5:58:84: 80:99:79:8f:b0:ed:2f:91:a2:62:22:a2:f5:29:ac: e6:09:9f:3d:0b:b9:7f:d6:6c:7b:ce:3b:14:f4:a8: 83:76:dd:ae:cd:27:1c:62:45:c2:83:92:39:bf:98: 56:7a:e8:35:10:a2:fd:08:d7:69:9f:21:34:b8:97: 67:a7:8f:c1:63:4d:14:6d:92:67:6c:d1:90:35:2c: a6:a7:94:68:f1:ef:63:ba:35:cf:80:55:ad:f3:0f: 59:00:a7:0d:e5:13:c8:21:72:6f:54:96:62:10:15: 61:b5:0e:7b:bd:d9:da:bf:e5:79:a0:81:41:74:ac: 2d:cc:e4:26:aa:ba:6b:40:33:d4:37:4d:b5:54:ce: 24:19:ed:08:6e:90:8f:68:9c:0c:4d:7b:26:7e:aa: 9d:fe:a6:17:af:76:43:37:03:4d:61:76:3e:c4:3f: 2d:00:60:fc:21:71:3d:93:f6:8e:5f:64:41:34:a5: f2:f9:57:5e:83:d2:72:b5:3e:98:a9:1d:c0:15:74: 89:70:01:59:1f:fe:2d:7a:c6:81:1d:5a:ed:c6:cf: 02:66:6f:b1:68:b7:a1:0c:75:57:09:c0:39:20:3c: 5d:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:AF:3C:8F:19:B3:D9:D7:07:6A:23:FA:14:A1:D8:BC:40:9F:AD:D6 X509v3 Authority Key Identifier: keyid:FE:0D:BC:C3:CF:50:A1:E0:EB:03:D3:12:96:E3:9F:BA:88:0C:19:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F7FEA/1EE3AEEC604811EA8C690B38C4F9AE02/_g28w89QoeDrA9MSluOfuogMGQU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_g28w89QoeDrA9MSluOfuogMGQU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7FEA/1EE3AEEC604811EA8C690B38C4F9AE02/_g28w89QoeDrA9MSluOfuogMGQU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:12:fc:62:ae:59:f2:8b:09:65:05:13:24:eb:9d:00:63:0f: 27:2e:a4:85:49:8b:e0:a6:9a:93:93:b2:bb:16:36:9e:41:6a: f8:0f:f2:40:0f:33:ca:1f:4f:d0:fa:ee:50:85:b9:22:22:8f: 2c:80:5e:2a:78:2c:81:82:26:30:10:40:2d:4a:b1:9c:7a:a7: d5:0d:d7:03:0a:c5:4c:f0:45:1c:f2:a2:91:74:34:ae:42:9e: 0d:18:74:d7:24:31:9d:a0:7e:44:fd:7a:bb:d0:a2:17:12:25: ae:e7:7d:ef:b8:6a:b4:89:bd:02:4a:a4:8d:c0:dc:ef:2b:9d: 99:9d:30:37:03:18:18:9f:7b:8a:77:a8:17:fd:57:e9:c5:f3: 3c:95:4f:a9:c3:ba:87:dd:a6:b3:e4:21:d6:d7:91:0d:67:15: 89:51:16:a9:c0:f2:0c:42:92:c9:22:15:8f:d2:06:d1:61:93: 1a:b6:5c:a4:fa:38:00:4d:7a:32:30:68:47:3e:c6:30:5a:85: f2:11:8d:da:b7:40:62:c9:f6:88:90:45:f7:7d:22:9f:df:d7: 57:4d:d6:c4:21:32:61:8b:6a:be:5f:21:70:26:59:10:d0:46: a1:5d:a8:e2:b6:05:b6:7f:dd:9f:6a:83:bb:77:d2:12:bf:00: c7:cd:e3:4c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCp4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjdGRUExMTAvBgNVBAUTKEZFMERCQ0MzQ0Y1MEExRTBFQjAzRDMxMjk2RTM5RkJB ODgwQzE5MDUwHhcNMjUwNzAyMTk0OTE5WhcNMjUwNzA5MTk0OTE5WjAYMRYwFAYD VQQDEw02ODY1OGQzZi1lMDNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA01zcUXsNl52T4Sgh65+C+13xYUW5lMxN84vFWISAmXmPsO0vkaJiIqL1Kazm CZ89C7l/1mx7zjsU9KiDdt2uzSccYkXCg5I5v5hWeug1EKL9CNdpnyE0uJdnp4/B Y00UbZJnbNGQNSymp5Ro8e9jujXPgFWt8w9ZAKcN5RPIIXJvVJZiEBVhtQ57vdna v+V5oIFBdKwtzOQmqrprQDPUN021VM4kGe0IbpCPaJwMTXsmfqqd/qYXr3ZDNwNN YXY+xD8tAGD8IXE9k/aOX2RBNKXy+Vdeg9JytT6YqR3AFXSJcAFZH/4tesaBHVrt xs8CZm+xaLehDHVXCcA5IDxdkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCCvPI8Z s9nXB2oj+hSh2LxAn63WMB8GA1UdIwQYMBaAFP4NvMPPUKHg6wPTEpbjn7qIDBkF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGN0ZFQS8xRUUzQUVFQzYw NDgxMUVBOEM2OTBCMzhDNEY5QUUwMi9fZzI4dzg5UW9lRHJBOU1TbHVPZnVvZ01H UVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19nMjh3ODlRb2VEckE5TVNsdU9mdW9nTUdRVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG N0ZFQS8xRUUzQUVFQzYwNDgxMUVBOEM2OTBCMzhDNEY5QUUwMi9fZzI4dzg5UW9l RHJBOU1TbHVPZnVvZ01HUVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBnEvxirlnyiwllBRMk650AYw8nLqSFSYvgppqTk7K7FjaeQWr4D/JA DzPKH0/Q+u5QhbkiIo8sgF4qeCyBgiYwEEAtSrGceqfVDdcDCsVM8EUc8qKRdDSu Qp4NGHTXJDGdoH5E/Xq70KIXEiWu533vuGq0ib0CSqSNwNzvK52ZnTA3AxgYn3uK d6gX/VfpxfM8lU+pw7qH3aaz5CHW15ENZxWJURapwPIMQpLJIhWP0gbRYZMatlyk +jgATXoyMGhHPsYwWoXyEY3at0BiyfaIkEX3fSKf39dXTdbEITJhi2q+XyFwJlkQ 0EahXajitgW2f92faoO7d9ISvwDHzeNM -----END CERTIFICATE-----Generated at Thu Jul 3 14:12:43 2025 by rpki-client