$ rpki-client -vvf rpki.apnic.net/member_repository/A91F83DC/A397A3E426ED11EFB4C9BA28C4F9AE02/CcNrxl3nKgQUf51yIL26jVJdFWQ.mft File: CcNrxl3nKgQUf51yIL26jVJdFWQ.mft (raw, json) Hash identifier: NjABzGcGx5DPAqqAfWzY8JbZSMOV5eehNJQFhWz0qYU= Subject key identifier: 4A:FF:61:90:30:54:F8:26:17:74:DC:59:B2:E8:99:29:83:CF:41:D1 Authority key identifier: 09:C3:6B:C6:5D:E7:2A:04:14:7F:9D:72:20:BD:BA:8D:52:5D:15:64 Certificate issuer: /CN=A91F83DC/serialNumber=09C36BC65DE72A04147F9D7220BDBA8D525D1564 Certificate serial: CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CcNrxl3nKgQUf51yIL26jVJdFWQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F83DC/A397A3E426ED11EFB4C9BA28C4F9AE02/CcNrxl3nKgQUf51yIL26jVJdFWQ.mft Manifest number: CA Signing time: Thu 03 Jul 2025 05:55:51 +0000 Manifest this update: Thu 03 Jul 2025 05:55:51 +0000 Manifest next update: Thu 10 Jul 2025 05:55:51 +0000 Files and hashes: 1: CcNrxl3nKgQUf51yIL26jVJdFWQ.crl (hash: Bvv4D5Z5MLm6t+UZfLwmsnbkHqgDYPinhGp+d1BKkow=) 2: 24AB7D08271F11EF81086430C4F9AE02.roa (hash: 2wSZlJkEVODTCB+anJmD5JlJEQTA220xHKcLvDnH+18=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F83DC/A397A3E426ED11EFB4C9BA28C4F9AE02/CcNrxl3nKgQUf51yIL26jVJdFWQ.crl rsync://rpki.apnic.net/member_repository/A91F83DC/A397A3E426ED11EFB4C9BA28C4F9AE02/CcNrxl3nKgQUf51yIL26jVJdFWQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CcNrxl3nKgQUf51yIL26jVJdFWQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 205 (0xcd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F83DC, serialNumber=09C36BC65DE72A04147F9D7220BDBA8D525D1564 Validity Not Before: Jul 3 05:55:51 2025 GMT Not After : Jul 10 05:55:51 2025 GMT Subject: CN=68661b67-db28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:1c:59:d0:c2:f3:71:60:cb:56:02:04:dc:3c: 40:8e:20:da:dc:17:89:28:60:58:76:da:01:ba:b6: b4:e3:8d:0c:0f:9e:53:fe:ad:9b:e8:42:f6:c0:fd: 91:36:6c:47:ff:ed:8e:71:b9:d3:99:a8:e2:0a:f0: 34:0b:9a:25:3b:95:c5:a8:ab:36:a8:bb:99:d6:af: a8:b7:dd:ec:f7:59:22:ed:e6:23:25:8c:60:79:48: da:9c:d1:2c:af:68:7a:ca:29:4a:ee:09:41:d5:07: 5f:57:d1:0e:e1:b0:f9:83:f5:ee:96:a2:2e:7e:fb: da:24:11:9c:f1:de:ba:9c:d9:16:8c:ed:74:b2:39: e6:3c:8e:a8:e7:27:a6:09:9f:46:7f:c5:45:b3:58: 0c:af:1e:63:96:ca:ba:6b:30:ef:74:81:8d:eb:3e: 06:6b:0f:8e:ac:0e:9a:4c:b6:52:5e:e1:5c:6c:d6: 8f:25:b7:cd:62:1f:3c:e1:74:c8:43:ec:8a:8b:ed: 4b:20:59:8f:e7:9e:e4:74:d4:39:6d:12:ca:95:ba: 5b:2e:ba:52:fe:31:8c:f0:41:93:12:fb:ba:07:c5: 59:b9:a5:9e:d3:f7:de:6f:60:a3:bd:0f:4d:a0:00: 54:b7:8d:a5:0e:cf:67:e9:b0:84:35:f5:1e:23:90: ed:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:FF:61:90:30:54:F8:26:17:74:DC:59:B2:E8:99:29:83:CF:41:D1 X509v3 Authority Key Identifier: keyid:09:C3:6B:C6:5D:E7:2A:04:14:7F:9D:72:20:BD:BA:8D:52:5D:15:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F83DC/A397A3E426ED11EFB4C9BA28C4F9AE02/CcNrxl3nKgQUf51yIL26jVJdFWQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CcNrxl3nKgQUf51yIL26jVJdFWQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F83DC/A397A3E426ED11EFB4C9BA28C4F9AE02/CcNrxl3nKgQUf51yIL26jVJdFWQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:35:f3:68:71:06:85:58:b2:80:a3:5b:8b:1f:bf:5f:ab:9c: cc:b1:81:35:a5:9a:02:16:a5:e9:46:32:7c:fd:7f:9e:52:6c: 2a:40:9f:7f:46:f6:ee:84:53:f6:7d:12:80:56:de:18:5e:e1: 58:62:e4:bc:e7:49:cc:89:ec:36:60:5a:31:db:f6:c0:a8:59: 12:4f:3d:1f:25:35:ee:32:5a:c4:a8:79:da:eb:ed:f1:5a:fa: 71:ff:2a:01:ae:b4:5f:7e:0e:70:66:ca:92:89:2d:6d:10:ce: ee:05:af:62:75:b5:43:27:1e:9b:93:c2:57:65:5c:f6:80:c2: ba:f4:31:a9:76:d9:f8:5a:89:a3:14:1d:e1:a2:e8:d7:a8:d4: 8b:f6:c2:9d:35:12:2a:60:2a:6f:da:ea:e4:d0:56:50:d3:ce: a0:7a:8e:a3:ed:01:30:f2:15:13:de:59:f1:24:90:05:71:21: 3a:64:db:8d:83:0d:c1:2c:6f:d5:72:43:5d:ef:b6:e9:7f:de: c9:b9:cc:99:ff:ea:86:89:da:61:0e:f2:f5:b0:80:4f:ec:97: be:fd:17:d3:d2:c9:c9:f1:7f:3b:68:a8:24:94:09:ff:b0:75: b9:1d:81:1b:a6:52:70:3e:5e:88:65:1a:3c:e2:b3:d0:d5:5f: 99:38:ca:2a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAM0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjgzREMxMTAvBgNVBAUTKDA5QzM2QkM2NURFNzJBMDQxNDdGOUQ3MjIwQkRCQThE NTI1RDE1NjQwHhcNMjUwNzAzMDU1NTUxWhcNMjUwNzEwMDU1NTUxWjAYMRYwFAYD VQQDEw02ODY2MWI2Ny1kYjI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqhxZ0MLzcWDLVgIE3DxAjiDa3BeJKGBYdtoBura0440MD55T/q2b6EL2wP2R NmxH/+2OcbnTmajiCvA0C5olO5XFqKs2qLuZ1q+ot93s91ki7eYjJYxgeUjanNEs r2h6yilK7glB1QdfV9EO4bD5g/XulqIufvvaJBGc8d66nNkWjO10sjnmPI6o5yem CZ9Gf8VFs1gMrx5jlsq6azDvdIGN6z4Gaw+OrA6aTLZSXuFcbNaPJbfNYh884XTI Q+yKi+1LIFmP557kdNQ5bRLKlbpbLrpS/jGM8EGTEvu6B8VZuaWe0/feb2CjvQ9N oABUt42lDs9n6bCENfUeI5Dt1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEr/YZAw VPgmF3TcWbLomSmDz0HRMB8GA1UdIwQYMBaAFAnDa8Zd5yoEFH+dciC9uo1SXRVk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODNEQy9BMzk3QTNFNDI2 RUQxMUVGQjRDOUJBMjhDNEY5QUUwMi9DY05yeGwzbktnUVVmNTF5SUwyNmpWSmRG V1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NjTnJ4bDNuS2dRVWY1MXlJTDI2alZKZEZXUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODNEQy9BMzk3QTNFNDI2RUQxMUVGQjRDOUJBMjhDNEY5QUUwMi9DY05yeGwzbktn UVVmNTF5SUwyNmpWSmRGV1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBINfNocQaFWLKAo1uLH79fq5zMsYE1pZoCFqXpRjJ8/X+eUmwqQJ9/ RvbuhFP2fRKAVt4YXuFYYuS850nMiew2YFox2/bAqFkSTz0fJTXuMlrEqHna6+3x Wvpx/yoBrrRffg5wZsqSiS1tEM7uBa9idbVDJx6bk8JXZVz2gMK69DGpdtn4Womj FB3houjXqNSL9sKdNRIqYCpv2urk0FZQ086geo6j7QEw8hUT3lnxJJAFcSE6ZNuN gw3BLG/VckNd77bpf97JucyZ/+qGidphDvL1sIBP7Je+/RfT0snJ8X87aKgklAn/ sHW5HYEbplJwPl6IZRo84rPQ1V+ZOMoq -----END CERTIFICATE-----Generated at Thu Jul 3 08:04:47 2025 by rpki-client