$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB0D0/93FB7F4EDBF611EC8B42F475C4F9AE02/SzxpVrBEkAEAhYwN5Q65pGKwjMc.mft File: SzxpVrBEkAEAhYwN5Q65pGKwjMc.mft (raw, json) Hash identifier: gwyWWxjREgQiqamS129M9mr4yCp4ofvbDXdjFGyD1mA= Subject key identifier: EC:2F:74:54:AB:81:DF:12:18:6F:66:26:02:89:5D:F4:5F:E1:D1:5C Authority key identifier: 4B:3C:69:56:B0:44:90:01:00:85:8C:0D:E5:0E:B9:A4:62:B0:8C:C7 Certificate issuer: /CN=A91FB0D0/serialNumber=4B3C6956B044900100858C0DE50EB9A462B08CC7 Certificate serial: 030B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SzxpVrBEkAEAhYwN5Q65pGKwjMc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FB0D0/93FB7F4EDBF611EC8B42F475C4F9AE02/SzxpVrBEkAEAhYwN5Q65pGKwjMc.mft Manifest number: 0307 Signing time: Thu 03 Jul 2025 01:36:50 +0000 Manifest this update: Thu 03 Jul 2025 01:36:49 +0000 Manifest next update: Thu 10 Jul 2025 01:36:49 +0000 Files and hashes: 1: SzxpVrBEkAEAhYwN5Q65pGKwjMc.crl (hash: GCXTGzG4WmVhq0TsKmMfLtAcLwek+gkUHM+BMypSa6I=) 2: D9EEB222DBFC11EC82E85E69C4F9AE02.roa (hash: ScBhfI+tDJwM84UfKu4S2Ej+l19uK9BKKc4lKatvgAY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FB0D0/93FB7F4EDBF611EC8B42F475C4F9AE02/SzxpVrBEkAEAhYwN5Q65pGKwjMc.crl rsync://rpki.apnic.net/member_repository/A91FB0D0/93FB7F4EDBF611EC8B42F475C4F9AE02/SzxpVrBEkAEAhYwN5Q65pGKwjMc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SzxpVrBEkAEAhYwN5Q65pGKwjMc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 01:36:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 779 (0x30b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FB0D0, serialNumber=4B3C6956B044900100858C0DE50EB9A462B08CC7 Validity Not Before: Jul 3 01:36:49 2025 GMT Not After : Jul 10 01:36:49 2025 GMT Subject: CN=6865deb1-af3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:94:e1:51:df:75:55:13:50:55:28:d9:85:65: 83:57:30:92:bb:d2:42:56:a0:20:b8:3a:bd:52:aa: 8b:68:fd:8d:3d:6a:fc:76:7a:1b:4c:4f:57:7f:54: 84:d8:0b:27:98:8e:33:79:e3:29:f6:23:38:66:4c: c5:f0:d5:c0:bc:73:7b:32:47:97:11:34:33:f8:0e: 58:cc:b2:43:7d:4e:ab:5a:31:9a:79:2f:42:dd:9f: 75:73:61:7d:cc:ff:e3:7a:6f:96:08:7d:6a:ee:ce: b6:64:3b:2c:3c:2e:a6:e3:f1:f6:76:99:a2:db:3d: 32:3d:06:fd:46:49:36:c0:42:52:b8:84:7b:ec:67: 6e:5a:d6:86:cc:12:8c:8b:e9:83:db:1d:b7:cd:5f: 04:58:7d:5c:f0:0d:b9:82:74:aa:55:28:76:d8:67: 6c:04:a6:10:c0:0d:05:9f:12:b2:a8:42:19:bd:37: 47:48:45:06:14:51:03:72:71:91:68:fc:d1:9b:96: df:76:f4:be:ad:9e:6e:4e:8b:fd:c0:b1:12:5e:f6: c8:ba:7a:f4:4c:a6:fb:f5:11:50:86:30:61:12:eb: 4c:56:7c:e3:4b:dd:60:5b:f4:eb:2b:65:f0:31:41: 10:64:f8:9e:96:50:85:32:d9:da:80:22:bc:5f:17: 56:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:2F:74:54:AB:81:DF:12:18:6F:66:26:02:89:5D:F4:5F:E1:D1:5C X509v3 Authority Key Identifier: keyid:4B:3C:69:56:B0:44:90:01:00:85:8C:0D:E5:0E:B9:A4:62:B0:8C:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FB0D0/93FB7F4EDBF611EC8B42F475C4F9AE02/SzxpVrBEkAEAhYwN5Q65pGKwjMc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SzxpVrBEkAEAhYwN5Q65pGKwjMc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB0D0/93FB7F4EDBF611EC8B42F475C4F9AE02/SzxpVrBEkAEAhYwN5Q65pGKwjMc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:b3:8f:e6:34:e5:a4:9e:2b:43:da:2e:41:23:18:df:fa:77: 96:93:ab:d0:e1:3b:0d:dd:3d:33:14:03:d3:6d:81:f1:3f:4e: 13:28:0d:9f:ac:e9:b8:e2:09:ea:81:28:3a:c5:a8:cc:e9:3f: 25:f8:f7:b0:aa:7a:09:2d:1d:e5:96:d3:52:ef:c0:5a:32:07: 14:64:e0:47:b6:f1:38:3e:ad:c0:37:a1:ef:87:15:1d:b5:f6: f5:2b:f9:d1:64:7c:b6:79:e7:9a:a3:9f:45:9b:a7:8d:ca:3b: e4:3f:b4:42:05:be:a9:9d:8d:9c:bd:73:74:04:65:bf:50:69: a0:6f:52:14:7c:3e:31:ac:b4:3b:39:ff:8a:9e:f0:a2:6e:f0: 6c:1e:88:e3:6a:f1:34:a0:44:8e:81:24:54:f4:a5:14:d8:79: c4:6c:65:67:10:ae:fb:f7:a0:6e:f7:94:d0:04:cc:c0:32:99: 8d:98:05:16:f3:a5:c1:8b:45:0b:bc:94:ad:28:2e:00:bb:02: d6:49:c6:80:17:d1:77:55:1b:80:78:b8:ad:18:4d:0c:2d:98: bf:fd:e1:0f:9a:e7:42:f9:04:8c:d9:6b:17:8b:ae:3e:80:75: 2a:68:11:1e:fb:e1:c8:50:63:47:bd:e2:3f:c0:72:6e:87:ca: ed:9b:49:c5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAwswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkIwRDAxMTAvBgNVBAUTKDRCM0M2OTU2QjA0NDkwMDEwMDg1OEMwREU1MEVCOUE0 NjJCMDhDQzcwHhcNMjUwNzAzMDEzNjQ5WhcNMjUwNzEwMDEzNjQ5WjAYMRYwFAYD VQQDEw02ODY1ZGViMS1hZjNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA35ThUd91VRNQVSjZhWWDVzCSu9JCVqAguDq9UqqLaP2NPWr8dnobTE9Xf1SE 2AsnmI4zeeMp9iM4ZkzF8NXAvHN7MkeXETQz+A5YzLJDfU6rWjGaeS9C3Z91c2F9 zP/jem+WCH1q7s62ZDssPC6m4/H2dpmi2z0yPQb9Rkk2wEJSuIR77GduWtaGzBKM i+mD2x23zV8EWH1c8A25gnSqVSh22GdsBKYQwA0FnxKyqEIZvTdHSEUGFFEDcnGR aPzRm5bfdvS+rZ5uTov9wLESXvbIunr0TKb79RFQhjBhEutMVnzjS91gW/TrK2Xw MUEQZPiellCFMtnagCK8XxdWnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOwvdFSr gd8SGG9mJgKJXfRf4dFcMB8GA1UdIwQYMBaAFEs8aVawRJABAIWMDeUOuaRisIzH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQjBEMC85M0ZCN0Y0RURC RjYxMUVDOEI0MkY0NzVDNEY5QUUwMi9TenhwVnJCRWtBRUFoWXdONVE2NXBHS3dq TWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1N6eHBWckJFa0FFQWhZd041UTY1cEdLd2pNYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QjBEMC85M0ZCN0Y0RURCRjYxMUVDOEI0MkY0NzVDNEY5QUUwMi9TenhwVnJCRWtB RUFoWXdONVE2NXBHS3dqTWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAms4/mNOWknitD2i5BIxjf+neWk6vQ4TsN3T0zFAPTbYHxP04TKA2f rOm44gnqgSg6xajM6T8l+PewqnoJLR3lltNS78BaMgcUZOBHtvE4Pq3AN6HvhxUd tfb1K/nRZHy2eeeao59Fm6eNyjvkP7RCBb6pnY2cvXN0BGW/UGmgb1IUfD4xrLQ7 Of+KnvCibvBsHojjavE0oESOgSRU9KUU2HnEbGVnEK7796Bu95TQBMzAMpmNmAUW 86XBi0ULvJStKC4AuwLWScaAF9F3VRuAeLitGE0MLZi//eEPmudC+QSM2WsXi64+ gHUqaBEe++HIUGNHveI/wHJuh8rtm0nF -----END CERTIFICATE-----Generated at Thu Jul 3 06:09:29 2025 by rpki-client