$ rpki-client -vvf rpki.apnic.net/member_repository/A91F81AD/4CCB00902CBE11ED99824B4CC4F9AE02/pM0-Z9GyJPMlBH6fXkhKzcT2Y-w.mft File: pM0-Z9GyJPMlBH6fXkhKzcT2Y-w.mft (raw, json) Hash identifier: 9yYILbm0Uy1YUtZwRtU5mLz24a4IyqdOLRcqkUngSFQ= Subject key identifier: 74:DC:15:96:EA:7B:AD:D5:33:E6:F9:94:DC:9C:46:50:2D:C8:2D:F0 Authority key identifier: A4:CD:3E:67:D1:B2:24:F3:25:04:7E:9F:5E:48:4A:CD:C4:F6:63:EC Certificate issuer: /CN=A91F81AD/serialNumber=A4CD3E67D1B224F325047E9F5E484ACDC4F663EC Certificate serial: 023D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pM0-Z9GyJPMlBH6fXkhKzcT2Y-w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F81AD/4CCB00902CBE11ED99824B4CC4F9AE02/pM0-Z9GyJPMlBH6fXkhKzcT2Y-w.mft Manifest number: 0237 Signing time: Tue 01 Jul 2025 02:35:17 +0000 Manifest this update: Tue 01 Jul 2025 02:35:16 +0000 Manifest next update: Tue 08 Jul 2025 02:35:16 +0000 Files and hashes: 1: pM0-Z9GyJPMlBH6fXkhKzcT2Y-w.crl (hash: BnQy4wBsjEfQY1t6cRF+38g3W31M1P0waVsXsWjfDK4=) 2: FA957D0A80FA11ED9B35954DC4F9AE02.roa (hash: cB+yZz7NXLEFl+NAyUDxFvEYEWhBfd/lLd6SEh+qscM=) 3: F9F81E3480FA11ED9B35954DC4F9AE02.roa (hash: uF//tcko2WVqVVcNN8K7d2s/1bV6GiNlBkTpEaTcZJA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F81AD/4CCB00902CBE11ED99824B4CC4F9AE02/pM0-Z9GyJPMlBH6fXkhKzcT2Y-w.crl rsync://rpki.apnic.net/member_repository/A91F81AD/4CCB00902CBE11ED99824B4CC4F9AE02/pM0-Z9GyJPMlBH6fXkhKzcT2Y-w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pM0-Z9GyJPMlBH6fXkhKzcT2Y-w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 02:35:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 573 (0x23d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F81AD, serialNumber=A4CD3E67D1B224F325047E9F5E484ACDC4F663EC Validity Not Before: Jul 1 02:35:16 2025 GMT Not After : Jul 8 02:35:16 2025 GMT Subject: CN=68634964-6d76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:cc:51:17:24:13:74:f6:a9:8e:a2:d6:04:ff: d3:ff:bd:12:e1:20:6b:38:07:b8:bc:a0:11:72:07: 10:2a:72:93:06:6b:68:90:bc:9a:d1:41:9b:e8:6a: e4:95:71:42:aa:43:7b:c7:c9:a2:9b:87:8e:ce:90: 81:a5:f3:84:be:2b:7e:66:e1:89:4d:72:db:dd:2e: 2c:2c:c2:54:76:6e:f8:50:d8:7e:89:ad:83:e9:b6: 69:8d:61:2c:ce:d6:2f:92:a0:af:e9:d1:e7:e2:e6: 76:2c:96:ff:29:7e:58:65:6a:a9:63:02:c3:a3:24: c6:7c:21:31:c8:a0:ea:4c:54:da:3b:08:d5:9b:d5: ae:c5:38:d2:ca:d8:48:7e:a9:77:1e:b8:27:ba:62: 1c:08:90:b0:94:18:cd:ba:b8:f0:87:f0:16:96:da: 63:55:71:7b:35:aa:48:49:b5:81:58:40:94:1c:dc: c1:0c:5b:c9:52:3c:78:1e:26:d3:c9:26:74:1a:db: 19:9d:18:67:7b:2d:8d:e8:c1:a1:d3:c8:67:47:e8: 0d:df:1a:b0:9a:8f:ee:9f:79:68:96:eb:cb:73:30: 9f:6e:55:bc:df:76:80:b1:2b:36:06:8f:66:d7:62: 02:86:e9:29:41:55:08:fa:64:79:68:58:0c:82:ce: 87:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:DC:15:96:EA:7B:AD:D5:33:E6:F9:94:DC:9C:46:50:2D:C8:2D:F0 X509v3 Authority Key Identifier: keyid:A4:CD:3E:67:D1:B2:24:F3:25:04:7E:9F:5E:48:4A:CD:C4:F6:63:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F81AD/4CCB00902CBE11ED99824B4CC4F9AE02/pM0-Z9GyJPMlBH6fXkhKzcT2Y-w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pM0-Z9GyJPMlBH6fXkhKzcT2Y-w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F81AD/4CCB00902CBE11ED99824B4CC4F9AE02/pM0-Z9GyJPMlBH6fXkhKzcT2Y-w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:fa:82:55:9b:be:0f:80:7a:4e:8f:8a:c4:c7:4a:30:9c:12: f8:bd:59:9c:f0:1a:0b:e7:b2:7d:a2:a2:ba:ef:a4:c8:06:8b: 37:37:e8:9d:9f:f3:7a:b6:ea:b5:0d:09:2c:04:f3:2f:77:7f: 81:5d:97:f4:30:85:4b:e0:db:5f:77:b9:2f:2e:7f:e7:76:1a: cc:e3:d9:8e:a9:ff:0a:fc:eb:26:52:6d:70:4e:bc:57:9e:2b: c1:46:ff:61:7a:db:5e:ab:66:a7:1f:8d:64:cf:9e:05:eb:d1: a7:45:f2:30:0d:7f:90:8d:62:e2:50:5d:93:66:7f:ed:b1:3c: 42:1a:91:2c:38:17:2a:b7:7c:e4:bb:3e:78:5d:30:36:20:57: 2d:01:e8:d2:ec:b6:93:a1:c4:a5:34:c0:3e:1c:69:32:4d:27: f6:38:fd:f1:4c:70:89:f1:57:75:da:11:b8:2a:39:a6:eb:cd: 33:f3:e2:a3:f8:b1:cb:05:3c:f8:16:43:ad:6b:0a:ec:ce:05: 6b:75:e2:8f:79:e4:d3:b6:91:6c:8e:aa:0a:a5:2a:f0:ab:5a: c1:3e:fa:11:8e:d1:36:67:46:3e:f6:a1:29:4e:f3:cd:fd:b5: 56:28:1c:fe:6f:b8:76:db:8c:5e:13:6f:62:e5:e3:b5:b5:7d: 6c:65:d8:39 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAj0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjgxQUQxMTAvBgNVBAUTKEE0Q0QzRTY3RDFCMjI0RjMyNTA0N0U5RjVFNDg0QUNE QzRGNjYzRUMwHhcNMjUwNzAxMDIzNTE2WhcNMjUwNzA4MDIzNTE2WjAYMRYwFAYD VQQDEw02ODYzNDk2NC02ZDc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAocxRFyQTdPapjqLWBP/T/70S4SBrOAe4vKARcgcQKnKTBmtokLya0UGb6Grk lXFCqkN7x8mim4eOzpCBpfOEvit+ZuGJTXLb3S4sLMJUdm74UNh+ia2D6bZpjWEs ztYvkqCv6dHn4uZ2LJb/KX5YZWqpYwLDoyTGfCExyKDqTFTaOwjVm9WuxTjSythI fql3HrgnumIcCJCwlBjNurjwh/AWltpjVXF7NapISbWBWECUHNzBDFvJUjx4HibT ySZ0GtsZnRhney2N6MGh08hnR+gN3xqwmo/un3loluvLczCfblW833aAsSs2Bo9m 12IChukpQVUI+mR5aFgMgs6HbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHTcFZbq e63VM+b5lNycRlAtyC3wMB8GA1UdIwQYMBaAFKTNPmfRsiTzJQR+n15ISs3E9mPs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODFBRC80Q0NCMDA5MDJD QkUxMUVEOTk4MjRCNENDNEY5QUUwMi9wTTAtWjlHeUpQTWxCSDZmWGtoS3pjVDJZ LXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BNMC1aOUd5SlBNbEJINmZYa2hLemNUMlktdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODFBRC80Q0NCMDA5MDJDQkUxMUVEOTk4MjRCNENDNEY5QUUwMi9wTTAtWjlHeUpQ TWxCSDZmWGtoS3pjVDJZLXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAa+oJVm74PgHpOj4rEx0ownBL4vVmc8BoL57J9oqK676TIBos3N+id n/N6tuq1DQksBPMvd3+BXZf0MIVL4Ntfd7kvLn/ndhrM49mOqf8K/OsmUm1wTrxX nivBRv9hetteq2anH41kz54F69GnRfIwDX+QjWLiUF2TZn/tsTxCGpEsOBcqt3zk uz54XTA2IFctAejS7LaTocSlNMA+HGkyTSf2OP3xTHCJ8Vd12hG4Kjmm680z8+Kj +LHLBTz4FkOtawrszgVrdeKPeeTTtpFsjqoKpSrwq1rBPvoRjtE2Z0Y+9qEpTvPN /bVWKBz+b7h224xeE29i5eO1tX1sZdg5 -----END CERTIFICATE-----Generated at Wed Jul 2 15:25:48 2025 by rpki-client