$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE7DB/B951E28C3DCA11EA81B9D352C4F9AE02/rroZtvzB0hrnExdw57HaPhR17JA.mft File: rroZtvzB0hrnExdw57HaPhR17JA.mft (raw, json) Hash identifier: KkAQ+eKSKDrDWx3urEcZzhin7tkkrxxFE8lrhORUvVA= Subject key identifier: 21:91:3E:26:5A:35:43:94:B3:7D:55:AD:D9:3F:18:BE:8A:2F:F8:DC Authority key identifier: AE:BA:19:B6:FC:C1:D2:1A:E7:13:17:70:E7:B1:DA:3E:14:75:EC:90 Certificate issuer: /CN=A91FE7DB/serialNumber=AEBA19B6FCC1D21AE7131770E7B1DA3E1475EC90 Certificate serial: 0B35 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rroZtvzB0hrnExdw57HaPhR17JA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FE7DB/B951E28C3DCA11EA81B9D352C4F9AE02/rroZtvzB0hrnExdw57HaPhR17JA.mft Manifest number: 0B2E Signing time: Wed 02 Jul 2025 19:24:56 +0000 Manifest this update: Wed 02 Jul 2025 19:24:56 +0000 Manifest next update: Wed 09 Jul 2025 19:24:56 +0000 Files and hashes: 1: rroZtvzB0hrnExdw57HaPhR17JA.crl (hash: kAp9pJD8eykjZ2QwmQizwLYvcrKPA+YMk9hXaI6V3p4=) 2: 078AE946642A11EAA019224CC4F9AE02.roa (hash: mTWsYywMPiMfrhBIpNOsBljvGA4XjVbx+hSty7byGCw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FE7DB/B951E28C3DCA11EA81B9D352C4F9AE02/rroZtvzB0hrnExdw57HaPhR17JA.crl rsync://rpki.apnic.net/member_repository/A91FE7DB/B951E28C3DCA11EA81B9D352C4F9AE02/rroZtvzB0hrnExdw57HaPhR17JA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rroZtvzB0hrnExdw57HaPhR17JA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 19:24:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2869 (0xb35) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FE7DB, serialNumber=AEBA19B6FCC1D21AE7131770E7B1DA3E1475EC90 Validity Not Before: Jul 2 19:24:56 2025 GMT Not After : Jul 9 19:24:56 2025 GMT Subject: CN=68658788-a612 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:6e:bc:06:21:33:17:d1:a0:21:61:c6:4a:06: 89:1f:44:b0:b7:dd:11:d9:a5:71:73:77:b9:ad:c4: 9b:93:07:9c:d7:72:8e:71:29:40:32:56:10:91:19: eb:b0:38:b4:79:25:15:c1:5f:97:3c:c5:6d:5b:39: 28:55:e0:4f:0d:0c:b6:b3:f6:d1:d3:72:b1:11:45: f1:c8:58:38:ca:ba:be:04:bd:fa:0e:51:bd:24:57: 24:4c:88:07:68:55:93:a9:1c:fb:99:df:04:28:86: f1:a1:2b:5a:30:d5:99:7c:9d:aa:a1:40:7c:67:af: a8:a0:19:4c:4d:b8:c3:c4:0d:15:32:ff:f3:20:f9: f6:ba:b8:16:f4:01:53:42:ef:c5:f2:41:ec:69:b4: e7:85:3d:03:f3:e8:e7:eb:9c:31:66:3f:d7:07:ea: 8b:23:c0:73:c6:52:e8:c0:2c:2c:82:ad:3b:99:3e: 44:37:6a:99:6a:0c:cd:b6:58:af:b3:4e:1e:e2:20: e5:8e:fe:68:0f:87:50:8d:d1:b5:71:b2:64:8d:66: 1e:38:a6:3c:01:e3:e5:a9:0b:16:0d:cb:fe:72:14: 03:79:3c:26:94:63:27:b8:11:a7:1d:6b:c1:4f:5f: d5:ce:fa:97:d4:b8:6d:2f:9c:88:9c:39:c6:be:77: 38:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:91:3E:26:5A:35:43:94:B3:7D:55:AD:D9:3F:18:BE:8A:2F:F8:DC X509v3 Authority Key Identifier: keyid:AE:BA:19:B6:FC:C1:D2:1A:E7:13:17:70:E7:B1:DA:3E:14:75:EC:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FE7DB/B951E28C3DCA11EA81B9D352C4F9AE02/rroZtvzB0hrnExdw57HaPhR17JA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rroZtvzB0hrnExdw57HaPhR17JA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE7DB/B951E28C3DCA11EA81B9D352C4F9AE02/rroZtvzB0hrnExdw57HaPhR17JA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:cd:a2:0f:95:5c:72:96:98:e6:36:b5:7c:f2:45:87:c9:f9: c3:49:dd:49:c4:92:16:11:67:4b:26:3d:99:ad:d1:70:73:e3: ad:fa:3a:ad:90:11:51:16:11:dd:85:82:a7:8f:9f:a1:d9:f8: 59:f8:29:09:f1:58:64:cc:07:01:1c:25:4a:90:77:ef:4f:32: 99:fa:f8:e4:fa:8e:12:d8:59:ca:af:e7:75:dc:6f:4c:58:52: 3a:9a:13:4b:f8:47:57:4e:41:9b:50:66:62:44:98:d0:7f:3b: 7a:9e:b3:4e:f5:99:5e:04:f4:5d:3e:23:d4:23:a0:23:ee:9a: 6d:5a:24:13:b5:32:b4:41:76:bf:d2:49:07:19:97:0f:e8:52: ef:da:03:19:9e:8e:f9:3a:bc:54:d8:55:1c:41:ab:1e:ca:e7: 52:35:d6:82:32:ce:6d:b8:34:e2:16:07:d2:82:e0:d8:23:5d: ac:e4:3a:57:6e:bd:23:12:fb:1b:f6:83:fb:72:fe:0d:05:be: 65:da:3e:97:5c:c9:5d:21:ec:e8:8e:18:b3:8a:5c:91:87:30: 32:12:df:40:42:82:31:f3:4b:40:52:91:a6:20:7e:5b:b7:e7: fa:84:d2:f6:9c:c3:28:48:30:d8:ba:ff:0a:3b:4a:0d:84:69: 4a:f0:44:25 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCzUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkU3REIxMTAvBgNVBAUTKEFFQkExOUI2RkNDMUQyMUFFNzEzMTc3MEU3QjFEQTNF MTQ3NUVDOTAwHhcNMjUwNzAyMTkyNDU2WhcNMjUwNzA5MTkyNDU2WjAYMRYwFAYD VQQDEw02ODY1ODc4OC1hNjEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApm68BiEzF9GgIWHGSgaJH0Swt90R2aVxc3e5rcSbkwec13KOcSlAMlYQkRnr sDi0eSUVwV+XPMVtWzkoVeBPDQy2s/bR03KxEUXxyFg4yrq+BL36DlG9JFckTIgH aFWTqRz7md8EKIbxoStaMNWZfJ2qoUB8Z6+ooBlMTbjDxA0VMv/zIPn2urgW9AFT Qu/F8kHsabTnhT0D8+jn65wxZj/XB+qLI8BzxlLowCwsgq07mT5EN2qZagzNtliv s04e4iDljv5oD4dQjdG1cbJkjWYeOKY8AePlqQsWDcv+chQDeTwmlGMnuBGnHWvB T1/VzvqX1LhtL5yInDnGvnc4VQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCGRPiZa NUOUs31Vrdk/GL6KL/jcMB8GA1UdIwQYMBaAFK66Gbb8wdIa5xMXcOex2j4UdeyQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRTdEQi9COTUxRTI4QzNE Q0ExMUVBODFCOUQzNTJDNEY5QUUwMi9ycm9adHZ6QjBocm5FeGR3NTdIYVBoUjE3 SkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Jyb1p0dnpCMGhybkV4ZHc1N0hhUGhSMTdKQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RTdEQi9COTUxRTI4QzNEQ0ExMUVBODFCOUQzNTJDNEY5QUUwMi9ycm9adHZ6QjBo cm5FeGR3NTdIYVBoUjE3SkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC1zaIPlVxylpjmNrV88kWHyfnDSd1JxJIWEWdLJj2ZrdFwc+Ot+jqt kBFRFhHdhYKnj5+h2fhZ+CkJ8VhkzAcBHCVKkHfvTzKZ+vjk+o4S2FnKr+d13G9M WFI6mhNL+EdXTkGbUGZiRJjQfzt6nrNO9ZleBPRdPiPUI6Aj7pptWiQTtTK0QXa/ 0kkHGZcP6FLv2gMZno75OrxU2FUcQaseyudSNdaCMs5tuDTiFgfSguDYI12s5DpX br0jEvsb9oP7cv4NBb5l2j6XXMldIezojhizilyRhzAyEt9AQoIx80tAUpGmIH5b t+f6hNL2nMMoSDDYuv8KO0oNhGlK8EQl -----END CERTIFICATE-----Generated at Thu Jul 3 07:14:59 2025 by rpki-client