$ rpki-client -vvf rpki.apnic.net/member_repository/A91FC43D/EDB28E7EA48011E583378886C4F9AE02/rI34tAewexNnm3HFASus3eJQHnE.mft File: rI34tAewexNnm3HFASus3eJQHnE.mft (raw, json) Hash identifier: Np4S3K6np6iIqIByFW7D6pac6JqRM7UBZ9VR4M9AOQs= Subject key identifier: 7A:F0:15:53:8A:AD:B2:EE:79:14:64:14:59:0A:D1:E1:29:71:61:F8 Authority key identifier: AC:8D:F8:B4:07:B0:7B:13:67:9B:71:C5:01:2B:AC:DD:E2:50:1E:71 Certificate issuer: /CN=A91FC43D/serialNumber=AC8DF8B407B07B13679B71C5012BACDDE2501E71 Certificate serial: 22BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rI34tAewexNnm3HFASus3eJQHnE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FC43D/EDB28E7EA48011E583378886C4F9AE02/rI34tAewexNnm3HFASus3eJQHnE.mft Manifest number: 22AD Signing time: Fri 04 Jul 2025 16:04:43 +0000 Manifest this update: Fri 04 Jul 2025 16:04:43 +0000 Manifest next update: Fri 11 Jul 2025 16:04:43 +0000 Files and hashes: 1: rI34tAewexNnm3HFASus3eJQHnE.crl (hash: 5NLtF6GQKlHKEGlRr2R2knxvZur/1R1gnpOnuX7Ih80=) 2: 2D55F42CB0F611E5B464E359C4F9AE02.roa (hash: +yqS5ARpGMGBWr2MyFGiajoFZUJV/KOEs+STzodgJKg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FC43D/EDB28E7EA48011E583378886C4F9AE02/rI34tAewexNnm3HFASus3eJQHnE.crl rsync://rpki.apnic.net/member_repository/A91FC43D/EDB28E7EA48011E583378886C4F9AE02/rI34tAewexNnm3HFASus3eJQHnE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rI34tAewexNnm3HFASus3eJQHnE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8892 (0x22bc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FC43D, serialNumber=AC8DF8B407B07B13679B71C5012BACDDE2501E71 Validity Not Before: Jul 4 16:04:43 2025 GMT Not After : Jul 11 16:04:43 2025 GMT Subject: CN=6867fb9b-5dd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:1e:0c:5c:1a:34:93:a7:20:92:83:8f:ea:d1: c0:b5:1e:42:f5:b0:70:67:34:72:a5:17:24:7a:79: da:24:47:08:aa:c7:1f:39:01:91:b0:59:0f:e5:d7: aa:02:b2:3e:28:1e:1c:07:e8:dc:55:c3:0d:c7:fb: 8c:4b:4f:81:3f:9b:45:3a:77:9b:c9:0d:0f:0b:ca: 2c:94:31:7b:bf:83:a9:a5:3b:67:6c:9a:aa:69:99: 46:9c:29:bb:61:e9:1a:13:9e:3e:04:be:1a:87:d3: 2b:e5:35:b0:71:2b:19:1b:50:1d:25:ce:e8:d1:13: d4:c4:19:7d:85:84:e2:f9:52:7f:ef:d1:d0:64:b2: 45:c0:51:ec:0d:84:fb:4a:d5:16:a5:4e:90:88:f9: e4:93:30:9f:11:9e:aa:6b:4b:4d:73:c3:9b:37:2c: 0c:16:c3:2c:f0:d2:54:27:80:1e:58:0c:42:5d:ef: e8:1b:00:a9:a8:fd:7a:e6:ed:c1:cd:15:46:1f:96: fb:8f:32:30:07:ff:68:58:58:e4:fb:42:a8:7c:65: d2:e3:44:61:8d:88:bb:7b:db:69:bb:d3:c4:ac:b6: ed:ec:c8:68:55:d8:be:c6:de:4e:cb:91:3f:1c:54: 6b:fa:ff:df:6f:25:1f:f1:e0:33:9a:26:65:9f:0e: aa:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:F0:15:53:8A:AD:B2:EE:79:14:64:14:59:0A:D1:E1:29:71:61:F8 X509v3 Authority Key Identifier: keyid:AC:8D:F8:B4:07:B0:7B:13:67:9B:71:C5:01:2B:AC:DD:E2:50:1E:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FC43D/EDB28E7EA48011E583378886C4F9AE02/rI34tAewexNnm3HFASus3eJQHnE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rI34tAewexNnm3HFASus3eJQHnE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC43D/EDB28E7EA48011E583378886C4F9AE02/rI34tAewexNnm3HFASus3eJQHnE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:ef:fc:70:eb:6e:ea:f8:a4:3d:48:68:0b:d5:fb:65:43:d4: 09:67:2c:9d:09:18:b5:c8:95:04:2d:66:6e:d9:67:15:c2:ea: c9:1a:68:1a:3c:36:30:26:21:35:65:56:ab:f0:7d:d5:95:19: 4b:54:4c:7e:eb:df:77:9f:29:01:fe:30:ff:67:d4:14:ea:55: a0:a9:08:e1:15:3c:aa:32:b5:b8:45:70:ab:ec:42:3e:46:d0: c9:f6:2a:46:79:d4:ac:54:f1:6b:38:0d:56:98:3b:7f:7a:43: 8f:4a:db:23:36:8d:d7:e9:3f:37:c5:c1:7a:e9:f8:47:7c:80: c5:0d:2d:43:14:5e:95:08:f0:3c:63:a5:c2:aa:37:fd:be:d3: 15:1d:2a:35:b3:5e:15:87:3c:e2:ba:22:59:cb:03:44:ad:f1: da:1d:8f:d5:d3:ab:b4:20:b5:8f:7f:1b:01:c0:3c:af:13:ee: 80:25:d8:e1:ab:bb:2c:e0:80:da:d1:fa:9e:94:fb:7d:3a:d7: 0c:c5:20:9d:54:64:10:03:c2:88:f7:63:89:1f:d7:44:b6:47: 05:9b:3e:10:b2:f5:e1:c3:af:16:21:d0:78:83:62:7f:8c:67: f2:5c:29:83:67:be:d0:e3:e9:67:09:4b:5a:0e:50:62:f6:4f: 33:cf:0a:37 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIrwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkM0M0QxMTAvBgNVBAUTKEFDOERGOEI0MDdCMDdCMTM2NzlCNzFDNTAxMkJBQ0RE RTI1MDFFNzEwHhcNMjUwNzA0MTYwNDQzWhcNMjUwNzExMTYwNDQzWjAYMRYwFAYD VQQDEw02ODY3ZmI5Yi01ZGQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1h4MXBo0k6cgkoOP6tHAtR5C9bBwZzRypRckennaJEcIqscfOQGRsFkP5deq ArI+KB4cB+jcVcMNx/uMS0+BP5tFOnebyQ0PC8oslDF7v4OppTtnbJqqaZlGnCm7 YekaE54+BL4ah9Mr5TWwcSsZG1AdJc7o0RPUxBl9hYTi+VJ/79HQZLJFwFHsDYT7 StUWpU6QiPnkkzCfEZ6qa0tNc8ObNywMFsMs8NJUJ4AeWAxCXe/oGwCpqP165u3B zRVGH5b7jzIwB/9oWFjk+0KofGXS40RhjYi7e9tpu9PErLbt7MhoVdi+xt5Oy5E/ HFRr+v/fbyUf8eAzmiZlnw6qLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHrwFVOK rbLueRRkFFkK0eEpcWH4MB8GA1UdIwQYMBaAFKyN+LQHsHsTZ5txxQErrN3iUB5x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQzQzRC9FREIyOEU3RUE0 ODAxMUU1ODMzNzg4ODZDNEY5QUUwMi9ySTM0dEFld2V4Tm5tM0hGQVN1czNlSlFI bkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JJMzR0QWV3ZXhObm0zSEZBU3VzM2VKUUhuRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QzQzRC9FREIyOEU3RUE0ODAxMUU1ODMzNzg4ODZDNEY5QUUwMi9ySTM0dEFld2V4 Tm5tM0hGQVN1czNlSlFIbkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCL7/xw627q+KQ9SGgL1ftlQ9QJZyydCRi1yJUELWZu2WcVwurJGmga PDYwJiE1ZVar8H3VlRlLVEx+6993nykB/jD/Z9QU6lWgqQjhFTyqMrW4RXCr7EI+ RtDJ9ipGedSsVPFrOA1WmDt/ekOPStsjNo3X6T83xcF66fhHfIDFDS1DFF6VCPA8 Y6XCqjf9vtMVHSo1s14VhzziuiJZywNErfHaHY/V06u0ILWPfxsBwDyvE+6AJdjh q7ss4IDa0fqelPt9OtcMxSCdVGQQA8KI92OJH9dEtkcFmz4QsvXhw68WIdB4g2J/ jGfyXCmDZ77Q4+lnCUtaDlBi9k8zzwo3 -----END CERTIFICATE-----Generated at Sun Jul 6 00:41:12 2025 by rpki-client