$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB39A/E1DD5D42B03911EC953BFB0DC4F9AE02/Znvt9oJs9x83Ba2x89T7FITwiBQ.mft File: Znvt9oJs9x83Ba2x89T7FITwiBQ.mft (raw, json) Hash identifier: X1iXhNAK1pXJGRf9navtHpVDnccu8sF3iP/aggvrRCo= Subject key identifier: 1D:FC:4F:AD:70:66:7E:8E:3B:00:41:AA:E0:9E:61:29:F1:E7:6B:39 Authority key identifier: 66:7B:ED:F6:82:6C:F7:1F:37:05:AD:B1:F3:D4:FB:14:84:F0:88:14 Certificate issuer: /CN=A91DB39A/serialNumber=667BEDF6826CF71F3705ADB1F3D4FB1484F08814 Certificate serial: 0387 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Znvt9oJs9x83Ba2x89T7FITwiBQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB39A/E1DD5D42B03911EC953BFB0DC4F9AE02/Znvt9oJs9x83Ba2x89T7FITwiBQ.mft Manifest number: 0382 Signing time: Mon 21 Jul 2025 01:07:51 +0000 Manifest this update: Mon 21 Jul 2025 01:07:51 +0000 Manifest next update: Mon 28 Jul 2025 01:07:51 +0000 Files and hashes: 1: Znvt9oJs9x83Ba2x89T7FITwiBQ.crl (hash: ry7x2MkwOpk4QTqIbWbiIGn5HuBWOQMxUFyetzP7Pso=) 2: 6108822AB03C11EC918CBA0EC4F9AE02.roa (hash: 1IbCI6SUsnpFHSypZmjM58SN3Uz6QJzWDA0ZH6CaOF8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB39A/E1DD5D42B03911EC953BFB0DC4F9AE02/Znvt9oJs9x83Ba2x89T7FITwiBQ.crl rsync://rpki.apnic.net/member_repository/A91DB39A/E1DD5D42B03911EC953BFB0DC4F9AE02/Znvt9oJs9x83Ba2x89T7FITwiBQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Znvt9oJs9x83Ba2x89T7FITwiBQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 01:07:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 903 (0x387) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB39A, serialNumber=667BEDF6826CF71F3705ADB1F3D4FB1484F08814 Validity Not Before: Jul 21 01:07:51 2025 GMT Not After : Jul 28 01:07:51 2025 GMT Subject: CN=687d92e7-faa8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:7c:9f:c0:f6:7b:7f:4b:8d:ee:c0:95:d9:4c: d8:dc:3b:a7:d4:a7:72:e7:1a:3b:a4:e8:53:73:4b: a0:77:8f:a8:71:c7:b9:9d:a7:64:f0:9a:2f:be:e9: 19:1f:71:a5:25:a0:fc:23:8d:1a:6c:aa:c6:eb:05: 7c:ea:e3:ff:ad:7c:45:55:71:4e:3a:16:dc:30:72: dc:b3:7d:7f:a7:78:a4:2b:85:d8:fc:1c:af:03:2e: 2f:16:c4:20:7c:5e:e1:02:6a:85:70:5b:7b:bc:7c: 50:2c:ff:c4:b7:f4:41:f8:0e:2e:1c:7e:ca:55:3d: 7b:7e:bc:18:75:b2:b3:4e:73:58:b2:35:d4:89:51: bf:b2:3a:ef:21:7f:49:fe:6c:3a:d2:af:73:fb:52: fc:29:b4:da:f3:03:d2:0c:a7:50:3e:60:a7:76:1b: 31:07:8d:6d:bf:b2:27:be:51:2e:c5:52:ad:2e:f2: 43:d3:f9:f3:33:45:ad:e4:70:a7:75:81:4c:0f:4d: a7:a5:ef:7b:dd:45:ee:f8:67:26:4d:e7:24:49:c9: c7:bd:c9:f5:7d:26:8a:60:2c:bf:a9:5d:53:8a:fb: 23:63:c8:c7:45:b1:9d:6c:7c:3b:91:ff:59:c4:fe: 8e:79:a2:0d:7b:d1:10:0c:fb:b9:30:b4:aa:58:b4: ce:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:FC:4F:AD:70:66:7E:8E:3B:00:41:AA:E0:9E:61:29:F1:E7:6B:39 X509v3 Authority Key Identifier: keyid:66:7B:ED:F6:82:6C:F7:1F:37:05:AD:B1:F3:D4:FB:14:84:F0:88:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB39A/E1DD5D42B03911EC953BFB0DC4F9AE02/Znvt9oJs9x83Ba2x89T7FITwiBQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Znvt9oJs9x83Ba2x89T7FITwiBQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB39A/E1DD5D42B03911EC953BFB0DC4F9AE02/Znvt9oJs9x83Ba2x89T7FITwiBQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:83:58:d5:f9:f0:74:c8:2a:93:31:f5:68:79:8f:5e:d8:f3: a1:57:fd:6d:ac:1d:9f:3a:70:94:10:c2:22:31:4d:31:1c:74: 9d:cd:6e:8a:29:04:d4:70:41:c4:89:d3:a6:fd:41:4d:78:d0: e3:aa:1e:9f:61:15:c1:01:a2:1c:eb:80:ae:40:5f:b1:f8:8c: 0a:0f:93:e2:98:70:85:6a:4d:df:43:e6:98:5b:a3:ed:4e:58: fb:7f:45:a5:b2:af:b5:93:07:ea:be:fa:01:55:dc:b2:98:b6: cd:d1:23:db:38:13:69:ac:75:31:a4:7e:15:9a:6a:25:8d:1d: 0d:15:bc:75:1e:8d:94:ec:a3:7e:e6:3b:00:1e:ae:25:ca:af: 9a:b3:f2:e7:fe:1f:cb:3e:d2:01:c9:0a:c7:50:a3:56:e1:ba: 0e:e8:65:52:4b:35:08:04:ca:b6:19:c3:d6:60:85:43:18:fc: ed:99:d3:e4:44:95:7b:e0:04:e6:08:8f:fc:88:90:44:a3:6d: ca:9e:c9:cf:ab:8f:3e:03:98:fc:42:12:11:73:1f:28:4b:4a: 1e:f6:ba:74:5a:fb:a4:b9:c2:3c:e8:bc:c3:94:09:b8:a3:97: 9f:2e:e3:a6:e1:f0:2a:43:ea:13:2e:c6:30:c8:db:03:63:cb: d1:46:d1:7e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA4cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REIzOUExMTAvBgNVBAUTKDY2N0JFREY2ODI2Q0Y3MUYzNzA1QURCMUYzRDRGQjE0 ODRGMDg4MTQwHhcNMjUwNzIxMDEwNzUxWhcNMjUwNzI4MDEwNzUxWjAYMRYwFAYD VQQDEw02ODdkOTJlNy1mYWE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzXyfwPZ7f0uN7sCV2UzY3Dun1Kdy5xo7pOhTc0ugd4+occe5nadk8JovvukZ H3GlJaD8I40abKrG6wV86uP/rXxFVXFOOhbcMHLcs31/p3ikK4XY/ByvAy4vFsQg fF7hAmqFcFt7vHxQLP/Et/RB+A4uHH7KVT17frwYdbKzTnNYsjXUiVG/sjrvIX9J /mw60q9z+1L8KbTa8wPSDKdQPmCndhsxB41tv7InvlEuxVKtLvJD0/nzM0Wt5HCn dYFMD02npe973UXu+GcmTeckScnHvcn1fSaKYCy/qV1TivsjY8jHRbGdbHw7kf9Z xP6OeaINe9EQDPu5MLSqWLTOPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB38T61w Zn6OOwBBquCeYSnx52s5MB8GA1UdIwQYMBaAFGZ77faCbPcfNwWtsfPU+xSE8IgU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjM5QS9FMURENUQ0MkIw MzkxMUVDOTUzQkZCMERDNEY5QUUwMi9abnZ0OW9Kczl4ODNCYTJ4ODlUN0ZJVHdp QlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pudnQ5b0pzOXg4M0JhMng4OVQ3RklUd2lCUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QjM5QS9FMURENUQ0MkIwMzkxMUVDOTUzQkZCMERDNEY5QUUwMi9abnZ0OW9Kczl4 ODNCYTJ4ODlUN0ZJVHdpQlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAAg1jV+fB0yCqTMfVoeY9e2POhV/1trB2fOnCUEMIiMU0xHHSdzW6K KQTUcEHEidOm/UFNeNDjqh6fYRXBAaIc64CuQF+x+IwKD5PimHCFak3fQ+aYW6Pt Tlj7f0Wlsq+1kwfqvvoBVdyymLbN0SPbOBNprHUxpH4VmmoljR0NFbx1Ho2U7KN+ 5jsAHq4lyq+as/Ln/h/LPtIByQrHUKNW4boO6GVSSzUIBMq2GcPWYIVDGPztmdPk RJV74ATmCI/8iJBEo23KnsnPq48+A5j8QhIRcx8oS0oe9rp0WvukucI86LzDlAm4 o5efLuOm4fAqQ+oTLsYwyNsDY8vRRtF+ -----END CERTIFICATE-----Generated at Mon Jul 21 05:47:03 2025 by rpki-client