$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5590/A895249EF7C511EA871C000CC4F9AE02/cZYTj9n8jHj-hDolPLBICtzFfw0.mft File: cZYTj9n8jHj-hDolPLBICtzFfw0.mft (raw, json) Hash identifier: LvMPFdJ8C7mai4kEoEic+F9lrsrH26jliHM1o5kDlZ4= Subject key identifier: 86:78:A8:62:7A:CF:E0:CA:E5:B1:54:6D:E2:11:9B:95:59:A7:79:6D Authority key identifier: 71:96:13:8F:D9:FC:8C:78:FE:84:3A:25:3C:B0:48:0A:DC:C5:7F:0D Certificate issuer: /CN=A91D5590/serialNumber=7196138FD9FC8C78FE843A253CB0480ADCC57F0D Certificate serial: 07E5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cZYTj9n8jHj-hDolPLBICtzFfw0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D5590/A895249EF7C511EA871C000CC4F9AE02/cZYTj9n8jHj-hDolPLBICtzFfw0.mft Manifest number: 07DB Signing time: Tue 22 Jul 2025 21:18:24 +0000 Manifest this update: Tue 22 Jul 2025 21:18:23 +0000 Manifest next update: Tue 29 Jul 2025 21:18:23 +0000 Files and hashes: 1: cZYTj9n8jHj-hDolPLBICtzFfw0.crl (hash: +EzXwl2MdlYLB5mXmb2ho9fHfxc26aF2TSen6lltRgY=) 2: 986F0854F7C611EA8B23C30CC4F9AE02.roa (hash: F2B6eTQtjw4DMTGhIIRc21e5xRW7fmJOpub38olCp9w=) 3: 9920D2E6F7C611EA8B23C30CC4F9AE02.roa (hash: d0oN/FUNzNpOKmQI6ds/0v5d1ZE90v5NzlRPE14knFk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D5590/A895249EF7C511EA871C000CC4F9AE02/cZYTj9n8jHj-hDolPLBICtzFfw0.crl rsync://rpki.apnic.net/member_repository/A91D5590/A895249EF7C511EA871C000CC4F9AE02/cZYTj9n8jHj-hDolPLBICtzFfw0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cZYTj9n8jHj-hDolPLBICtzFfw0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Jul 2025 21:18:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2021 (0x7e5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D5590, serialNumber=7196138FD9FC8C78FE843A253CB0480ADCC57F0D Validity Not Before: Jul 22 21:18:23 2025 GMT Not After : Jul 29 21:18:23 2025 GMT Subject: CN=6880001f-9a9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:00:9d:4b:e7:17:1d:bf:23:32:f4:1b:f4:81: 45:c0:48:8e:e7:db:3a:fa:c0:94:03:4b:72:76:21: 98:1d:a6:4f:a8:f2:26:a1:3e:59:4a:2f:2b:bc:68: fb:b9:1c:d9:5d:5e:6f:9b:2b:3e:7c:d6:3e:ea:d1: 0c:f7:c0:57:35:4c:95:a6:63:aa:f5:32:14:cb:62: 87:42:82:78:65:cf:09:49:a6:37:ed:3a:aa:88:b4: 10:7e:bb:55:40:80:1b:ef:a1:a7:78:3b:fd:90:a4: 2c:b6:38:f8:9c:72:a6:c6:28:c1:2b:c5:b7:ef:73: e0:57:78:f6:78:dc:3f:bb:4f:4c:21:27:3e:f9:80: f5:51:82:40:3d:48:fc:dc:08:8e:21:a2:7b:86:84: 0d:1c:48:3e:d2:52:54:77:fa:65:38:87:92:a6:9a: d4:90:27:7e:2a:9b:b1:18:4f:60:5b:e2:34:c0:86: c0:04:3d:87:36:3b:19:b7:a9:75:24:2a:3f:6f:b7: 6f:cc:44:70:3c:8f:fe:e8:f3:d9:2b:e6:17:6b:94: f4:cd:58:d5:64:97:a4:b8:ab:8f:d4:93:05:24:ba: 97:36:2f:80:33:51:04:a5:4a:5f:85:7d:a9:e0:68: 75:95:14:53:7e:0a:38:ba:da:ae:ec:e6:b8:64:c2: dd:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:78:A8:62:7A:CF:E0:CA:E5:B1:54:6D:E2:11:9B:95:59:A7:79:6D X509v3 Authority Key Identifier: keyid:71:96:13:8F:D9:FC:8C:78:FE:84:3A:25:3C:B0:48:0A:DC:C5:7F:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D5590/A895249EF7C511EA871C000CC4F9AE02/cZYTj9n8jHj-hDolPLBICtzFfw0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cZYTj9n8jHj-hDolPLBICtzFfw0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5590/A895249EF7C511EA871C000CC4F9AE02/cZYTj9n8jHj-hDolPLBICtzFfw0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:34:c4:ef:18:f0:92:f4:1f:86:dd:35:56:99:15:32:73:d3: 16:37:80:41:9e:5f:71:d2:a4:01:41:f3:37:13:01:5f:3f:3b: ee:77:39:33:5e:5c:0f:b0:14:59:e0:54:1b:ce:58:49:29:1f: ac:f0:d0:c1:f7:4b:22:ca:b0:12:95:4a:bf:f0:88:53:4c:16: 47:07:16:87:59:82:ea:91:d0:ee:e9:40:da:d3:3c:06:56:36: 02:cd:b9:0d:cb:83:28:ea:02:45:3d:6c:03:31:70:96:fe:dd: 34:2e:a2:91:1a:08:83:31:4e:63:cf:b8:a7:96:cb:fe:b4:15: ce:0b:23:5d:94:e3:f5:5a:08:39:ef:35:6e:3b:ea:40:ec:d1: 3d:5a:a7:a0:08:4d:15:c0:8e:49:79:ed:b1:b4:f5:10:fd:e2: 5a:8b:05:87:42:1b:8a:fc:f1:41:95:96:7c:bf:d5:ef:a3:64: 9e:83:4e:f8:48:4d:a1:44:2f:b5:cf:ba:60:c9:9b:57:67:82: e3:7c:49:89:10:3a:b1:b4:e6:2a:28:26:fa:b0:cf:9d:3e:a4: 3d:a1:45:20:9b:eb:88:f3:9d:3e:ea:85:ed:da:db:18:06:2f: 79:88:aa:f6:80:21:b3:55:e1:84:0c:ae:8f:dc:4e:5c:47:f9: cc:94:4d:1c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB+UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDU1OTAxMTAvBgNVBAUTKDcxOTYxMzhGRDlGQzhDNzhGRTg0M0EyNTNDQjA0ODBB RENDNTdGMEQwHhcNMjUwNzIyMjExODIzWhcNMjUwNzI5MjExODIzWjAYMRYwFAYD VQQDEw02ODgwMDAxZi05YTllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsgCdS+cXHb8jMvQb9IFFwEiO59s6+sCUA0tydiGYHaZPqPImoT5ZSi8rvGj7 uRzZXV5vmys+fNY+6tEM98BXNUyVpmOq9TIUy2KHQoJ4Zc8JSaY37TqqiLQQfrtV QIAb76GneDv9kKQstjj4nHKmxijBK8W373PgV3j2eNw/u09MISc++YD1UYJAPUj8 3AiOIaJ7hoQNHEg+0lJUd/plOIeSpprUkCd+KpuxGE9gW+I0wIbABD2HNjsZt6l1 JCo/b7dvzERwPI/+6PPZK+YXa5T0zVjVZJekuKuP1JMFJLqXNi+AM1EEpUpfhX2p 4Gh1lRRTfgo4utqu7Oa4ZMLdFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIZ4qGJ6 z+DK5bFUbeIRm5VZp3ltMB8GA1UdIwQYMBaAFHGWE4/Z/Ix4/oQ6JTywSArcxX8N MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENTU5MC9BODk1MjQ5RUY3 QzUxMUVBODcxQzAwMENDNEY5QUUwMi9jWllUajluOGpIai1oRG9sUExCSUN0ekZm dzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NaWVRqOW44akhqLWhEb2xQTEJJQ3R6RmZ3MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NTU5MC9BODk1MjQ5RUY3QzUxMUVBODcxQzAwMENDNEY5QUUwMi9jWllUajluOGpI ai1oRG9sUExCSUN0ekZmdzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAINMTvGPCS9B+G3TVWmRUyc9MWN4BBnl9x0qQBQfM3EwFfPzvudzkz XlwPsBRZ4FQbzlhJKR+s8NDB90siyrASlUq/8IhTTBZHBxaHWYLqkdDu6UDa0zwG VjYCzbkNy4Mo6gJFPWwDMXCW/t00LqKRGgiDMU5jz7inlsv+tBXOCyNdlOP1Wgg5 7zVuO+pA7NE9WqegCE0VwI5Jee2xtPUQ/eJaiwWHQhuK/PFBlZZ8v9Xvo2Seg074 SE2hRC+1z7pgyZtXZ4LjfEmJEDqxtOYqKCb6sM+dPqQ9oUUgm+uI850+6oXt2tsY Bi95iKr2gCGzVeGEDK6P3E5cR/nMlE0c -----END CERTIFICATE-----Generated at Wed Jul 23 12:15:36 2025 by rpki-client