$ rpki-client -vvf rpki.apnic.net/member_repository/A91FCF44/94110604602C11EF97D73C5FC4F9AE02/aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.mft File: aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.mft (raw, json) Hash identifier: miQMkBt8xUuf+CuNivF8ZhK3C1IfHNAYG5W9zstVcgs= Subject key identifier: 5E:95:6E:61:06:89:5D:38:5F:27:12:57:B2:10:39:18:CE:1A:6A:F6 Authority key identifier: 69:98:D9:B5:32:7B:BF:89:4E:D5:61:97:C4:7E:C8:96:FA:E5:9E:34 Certificate issuer: /CN=A91FCF44/serialNumber=6998D9B5327BBF894ED56197C47EC896FAE59E34 Certificate serial: BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FCF44/94110604602C11EF97D73C5FC4F9AE02/aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.mft Manifest number: B4 Signing time: Thu 03 Jul 2025 06:24:57 +0000 Manifest this update: Thu 03 Jul 2025 06:24:57 +0000 Manifest next update: Thu 10 Jul 2025 06:24:57 +0000 Files and hashes: 1: aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.crl (hash: f5Tcf8N7KZ364Wk88Tn2egY89NnW9eZV8gmoOkGpkq4=) 2: B2A0074EAD4F11EF93ECF282C4F9AE02.roa (hash: Vji2bwj5pG0AmszlyVBCPumUcxu21MvYnK8Tx2Nah1A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FCF44/94110604602C11EF97D73C5FC4F9AE02/aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.crl rsync://rpki.apnic.net/member_repository/A91FCF44/94110604602C11EF97D73C5FC4F9AE02/aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 190 (0xbe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FCF44, serialNumber=6998D9B5327BBF894ED56197C47EC896FAE59E34 Validity Not Before: Jul 3 06:24:57 2025 GMT Not After : Jul 10 06:24:57 2025 GMT Subject: CN=68662239-5340 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:94:9a:51:d8:fe:0a:7e:db:45:53:ba:ba:b9: d1:f0:bf:2a:ed:e5:dd:de:1b:6c:8f:20:35:d2:f2: 77:c7:8e:10:7a:78:6c:3c:9d:d5:46:cc:3a:ea:7a: ce:a5:91:06:a5:d6:f0:6d:ff:ec:6d:6a:0d:0f:e7: ca:28:dd:31:c3:c1:67:32:1f:2d:89:ca:e4:fd:c0: 4b:24:de:46:07:1c:eb:62:d3:42:b0:bd:40:38:7d: 61:d5:1a:dd:79:b9:f7:49:8d:df:c1:1e:b5:7a:09: 1f:b9:58:1d:66:d2:ed:02:46:62:ec:56:7d:21:07: 9f:88:90:fb:d4:35:95:4d:cc:41:96:5f:53:1e:38: 95:40:13:cd:0d:ea:32:b8:4a:84:ef:0e:c9:4c:08: 5c:4e:b0:88:1b:67:57:b9:03:52:9b:42:ba:7b:0e: c5:e6:89:85:48:4d:91:16:f6:42:f9:ab:00:7c:14: 03:04:72:47:8d:08:a1:48:66:ce:f7:1a:c9:46:92: a2:89:23:de:ca:b4:b7:fc:0f:4c:25:77:db:3c:7d: 41:c2:35:9e:aa:6e:8e:18:75:e5:f9:34:81:25:03: 80:f7:e9:cb:01:c2:45:15:53:9d:84:c4:3b:55:b9: 42:37:76:9d:5f:7b:af:23:7f:09:72:19:d0:52:e9: b3:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:95:6E:61:06:89:5D:38:5F:27:12:57:B2:10:39:18:CE:1A:6A:F6 X509v3 Authority Key Identifier: keyid:69:98:D9:B5:32:7B:BF:89:4E:D5:61:97:C4:7E:C8:96:FA:E5:9E:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FCF44/94110604602C11EF97D73C5FC4F9AE02/aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCF44/94110604602C11EF97D73C5FC4F9AE02/aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:d6:a7:c4:1d:85:a9:b6:38:43:77:af:18:74:03:f1:bd:d1: 20:84:e1:ec:bd:40:d7:84:bf:3b:09:13:3d:3a:4d:df:4e:c2: 45:8d:f4:4b:44:0d:a3:e3:68:8b:67:05:07:0f:ec:30:62:61: 47:cc:0a:69:52:fb:1b:f0:52:2f:3d:ff:bc:20:58:a8:ef:00: 6e:8a:5f:73:be:3b:34:61:95:2d:eb:c9:12:0e:55:56:a6:8e: 5a:63:51:4c:27:fe:c0:3a:f6:3b:14:2a:20:27:31:37:31:0a: 4d:24:c9:f7:e3:fd:41:1d:ab:be:23:04:eb:44:a1:43:6e:56: 0d:5c:9f:c2:9d:48:ad:6e:c7:fa:a2:ce:79:fc:2f:55:92:f9: 01:1c:09:08:75:fb:46:e3:1b:12:b5:30:97:36:45:ea:22:42: 18:14:6f:da:3f:06:0f:52:b3:25:67:3e:3f:f3:d5:8a:02:2f: 62:71:f2:1e:14:7a:bf:1d:7b:d2:37:7b:54:a2:13:33:00:45: a5:44:01:5c:d8:fc:77:97:4e:97:e2:98:d5:0e:f8:a6:58:ca: cf:53:84:7c:33:ef:cf:79:f5:e4:19:3d:09:6e:ab:94:73:16: 4f:f9:5e:44:96:b9:d2:75:ea:91:f9:72:fb:e7:f4:21:be:e0: c5:c6:c5:79 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAL4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkNGNDQxMTAvBgNVBAUTKDY5OThEOUI1MzI3QkJGODk0RUQ1NjE5N0M0N0VDODk2 RkFFNTlFMzQwHhcNMjUwNzAzMDYyNDU3WhcNMjUwNzEwMDYyNDU3WjAYMRYwFAYD VQQDEw02ODY2MjIzOS01MzQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4pSaUdj+Cn7bRVO6urnR8L8q7eXd3htsjyA10vJ3x44QenhsPJ3VRsw66nrO pZEGpdbwbf/sbWoND+fKKN0xw8FnMh8ticrk/cBLJN5GBxzrYtNCsL1AOH1h1Rrd ebn3SY3fwR61egkfuVgdZtLtAkZi7FZ9IQefiJD71DWVTcxBll9THjiVQBPNDeoy uEqE7w7JTAhcTrCIG2dXuQNSm0K6ew7F5omFSE2RFvZC+asAfBQDBHJHjQihSGbO 9xrJRpKiiSPeyrS3/A9MJXfbPH1BwjWeqm6OGHXl+TSBJQOA9+nLAcJFFVOdhMQ7 VblCN3adX3uvI38JchnQUumzAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF6VbmEG iV04XycSV7IQORjOGmr2MB8GA1UdIwQYMBaAFGmY2bUye7+JTtVhl8R+yJb65Z40 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQ0Y0NC85NDExMDYwNDYw MkMxMUVGOTdENzNDNUZDNEY5QUUwMi9hWmpadFRKN3Y0bE8xV0dYeEg3SWx2cmxu alEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Faalp0VEo3djRsTzFXR1h4SDdJbHZybG5qUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG Q0Y0NC85NDExMDYwNDYwMkMxMUVGOTdENzNDNUZDNEY5QUUwMi9hWmpadFRKN3Y0 bE8xV0dYeEg3SWx2cmxualEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBR1qfEHYWptjhDd68YdAPxvdEghOHsvUDXhL87CRM9Ok3fTsJFjfRL RA2j42iLZwUHD+wwYmFHzAppUvsb8FIvPf+8IFio7wBuil9zvjs0YZUt68kSDlVW po5aY1FMJ/7AOvY7FCogJzE3MQpNJMn34/1BHau+IwTrRKFDblYNXJ/CnUitbsf6 os55/C9VkvkBHAkIdftG4xsStTCXNkXqIkIYFG/aPwYPUrMlZz4/89WKAi9icfIe FHq/HXvSN3tUohMzAEWlRAFc2Px3l06X4pjVDvimWMrPU4R8M+/PefXkGT0JbquU cxZP+V5ElrnSdeqR+XL75/QhvuDFxsV5 -----END CERTIFICATE-----Generated at Thu Jul 3 08:04:45 2025 by rpki-client