$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB055/4ABBC01CF55511EEACF1234BC4F9AE02/mZsvZTnCPq60aeZ1OfstyTPZgEA.mft File: mZsvZTnCPq60aeZ1OfstyTPZgEA.mft (raw, json) Hash identifier: kVkHxKpT8d397/HcIeGw1g68VCeRZpDAWPIuaCAAG88= Subject key identifier: EF:02:59:4C:4C:E9:BA:55:DE:69:23:CF:D7:61:6A:C8:D0:25:E5:3E Authority key identifier: 99:9B:2F:65:39:C2:3E:AE:B4:69:E6:75:39:FB:2D:C9:33:D9:80:40 Certificate issuer: /CN=A91AB055/serialNumber=999B2F6539C23EAEB469E67539FB2DC933D98040 Certificate serial: F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mZsvZTnCPq60aeZ1OfstyTPZgEA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB055/4ABBC01CF55511EEACF1234BC4F9AE02/mZsvZTnCPq60aeZ1OfstyTPZgEA.mft Manifest number: EF Signing time: Mon 21 Jul 2025 05:25:49 +0000 Manifest this update: Mon 21 Jul 2025 05:25:49 +0000 Manifest next update: Mon 28 Jul 2025 05:25:49 +0000 Files and hashes: 1: mZsvZTnCPq60aeZ1OfstyTPZgEA.crl (hash: JRqdckPtZ5+hP0h1srCto6m8gqtfUEXap3evxiRLzyY=) 2: 83CA613CF55611EE8CE6274DC4F9AE02.roa (hash: BonjniXMbmI4yDYc3ynOZLv8pgVSOdRZa/c5jpsq0Ug=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB055/4ABBC01CF55511EEACF1234BC4F9AE02/mZsvZTnCPq60aeZ1OfstyTPZgEA.crl rsync://rpki.apnic.net/member_repository/A91AB055/4ABBC01CF55511EEACF1234BC4F9AE02/mZsvZTnCPq60aeZ1OfstyTPZgEA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mZsvZTnCPq60aeZ1OfstyTPZgEA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 05:19:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 241 (0xf1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB055, serialNumber=999B2F6539C23EAEB469E67539FB2DC933D98040 Validity Not Before: Jul 21 05:25:49 2025 GMT Not After : Jul 28 05:25:49 2025 GMT Subject: CN=687dcf5d-19ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:88:d9:8c:64:47:77:46:ab:d4:d7:31:8d:01: b9:ad:76:b3:77:e3:86:2c:58:22:37:d6:2c:18:2d: 4d:21:df:a5:29:20:30:10:df:60:ab:b7:0a:3c:ed: 13:2f:cf:bf:12:25:40:ff:07:d2:1c:52:7c:12:cf: 90:00:84:8f:30:7b:d3:f8:5c:86:ae:54:5c:56:1c: f5:5a:c2:2a:30:94:6d:bb:20:b9:a4:9b:75:bd:84: 3d:81:97:da:44:13:2c:21:ef:15:5d:03:d0:fa:95: d5:2c:da:51:37:c8:78:00:53:87:25:92:dc:65:50: a3:71:1e:e1:0f:a8:5f:c8:ce:20:98:a8:7c:ea:95: 53:41:e4:32:f1:3e:64:ee:28:86:d2:23:ac:1c:25: 58:87:12:cf:91:0c:b2:7c:19:88:34:1b:c8:8d:b0: 3a:06:f1:ac:02:f6:84:7a:d2:00:21:37:b3:3f:ff: 04:48:16:92:f7:c5:bd:b6:db:f9:33:72:18:1b:65: 08:7e:b7:2e:19:7a:22:35:14:3b:29:0b:09:e3:00: ce:2e:35:93:a1:ad:5f:19:7c:24:9d:95:03:5a:9d: 3f:8a:7b:a7:d6:7d:6e:d6:ca:cf:d0:d2:14:5e:59: fe:b5:a5:f0:3d:da:b9:18:de:bb:e1:8a:5c:81:b5: 25:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:02:59:4C:4C:E9:BA:55:DE:69:23:CF:D7:61:6A:C8:D0:25:E5:3E X509v3 Authority Key Identifier: keyid:99:9B:2F:65:39:C2:3E:AE:B4:69:E6:75:39:FB:2D:C9:33:D9:80:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB055/4ABBC01CF55511EEACF1234BC4F9AE02/mZsvZTnCPq60aeZ1OfstyTPZgEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mZsvZTnCPq60aeZ1OfstyTPZgEA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB055/4ABBC01CF55511EEACF1234BC4F9AE02/mZsvZTnCPq60aeZ1OfstyTPZgEA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:6f:07:df:e3:22:0d:0e:19:55:2c:2f:46:db:de:14:df:dd: 31:ae:b9:54:52:4e:9d:35:ed:ef:f1:13:fe:b9:be:16:29:b1: af:1c:28:b2:32:ab:f7:91:b9:97:bb:33:e8:ec:6e:ec:4c:73: 11:57:ed:02:2f:27:d4:04:d1:49:7c:0b:89:17:97:7f:00:af: 3d:b7:57:68:9e:da:66:f9:75:1c:b5:4b:0d:80:af:2f:4f:e3: 06:31:5e:25:fc:c5:56:93:eb:a9:72:bd:aa:37:51:16:68:ee: d3:b2:57:3f:fd:f4:19:2c:1e:e6:cd:ec:e6:e7:46:60:fb:c5: 4d:89:da:b4:65:aa:59:44:c7:18:d9:93:b4:1f:73:8a:09:b1: c9:35:16:81:ff:61:d4:d4:df:b4:19:69:5b:51:bf:9f:7b:ee: 1c:71:b9:6a:9c:2e:be:fe:a6:dd:8d:bc:53:91:5b:85:56:7e: 77:2d:d5:e0:06:21:d1:b0:22:3a:3a:12:4a:65:dd:c7:24:15: e6:30:15:3c:96:4c:d2:41:fd:60:6b:b6:72:86:49:63:7a:08: 4a:f1:7b:35:3f:e2:c7:5e:2a:69:c4:3b:a1:99:5a:2e:ce:76: 78:cc:f6:12:39:cf:7d:f2:98:b8:96:e0:e3:c8:91:87:9a:77: ad:96:78:01 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUIwNTUxMTAvBgNVBAUTKDk5OUIyRjY1MzlDMjNFQUVCNDY5RTY3NTM5RkIyREM5 MzNEOTgwNDAwHhcNMjUwNzIxMDUyNTQ5WhcNMjUwNzI4MDUyNTQ5WjAYMRYwFAYD VQQDEw02ODdkY2Y1ZC0xOWVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnYjZjGRHd0ar1NcxjQG5rXazd+OGLFgiN9YsGC1NId+lKSAwEN9gq7cKPO0T L8+/EiVA/wfSHFJ8Es+QAISPMHvT+FyGrlRcVhz1WsIqMJRtuyC5pJt1vYQ9gZfa RBMsIe8VXQPQ+pXVLNpRN8h4AFOHJZLcZVCjcR7hD6hfyM4gmKh86pVTQeQy8T5k 7iiG0iOsHCVYhxLPkQyyfBmINBvIjbA6BvGsAvaEetIAITezP/8ESBaS98W9ttv5 M3IYG2UIfrcuGXoiNRQ7KQsJ4wDOLjWToa1fGXwknZUDWp0/inun1n1u1srP0NIU Xln+taXwPdq5GN674YpcgbUl0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO8CWUxM 6bpV3mkjz9dhasjQJeU+MB8GA1UdIwQYMBaAFJmbL2U5wj6utGnmdTn7Lckz2YBA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjA1NS80QUJCQzAxQ0Y1 NTUxMUVFQUNGMTIzNEJDNEY5QUUwMi9tWnN2WlRuQ1BxNjBhZVoxT2ZzdHlUUFpn RUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21ac3ZaVG5DUHE2MGFlWjFPZnN0eVRQWmdFQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QjA1NS80QUJCQzAxQ0Y1NTUxMUVFQUNGMTIzNEJDNEY5QUUwMi9tWnN2WlRuQ1Bx NjBhZVoxT2ZzdHlUUFpnRUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQANbwff4yINDhlVLC9G294U390xrrlUUk6dNe3v8RP+ub4WKbGvHCiy Mqv3kbmXuzPo7G7sTHMRV+0CLyfUBNFJfAuJF5d/AK89t1dontpm+XUctUsNgK8v T+MGMV4l/MVWk+upcr2qN1EWaO7Tslc//fQZLB7mzezm50Zg+8VNidq0ZapZRMcY 2ZO0H3OKCbHJNRaB/2HU1N+0GWlbUb+fe+4ccblqnC6+/qbdjbxTkVuFVn53LdXg BiHRsCI6OhJKZd3HJBXmMBU8lkzSQf1ga7ZyhkljeghK8Xs1P+LHXippxDuhmVou znZ4zPYSOc998pi4luDjyJGHmnetlngB -----END CERTIFICATE-----Generated at Mon Jul 21 07:01:27 2025 by rpki-client