$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE500/49E6FE46C72D11EE9C7C351DC4F9AE02/cz1KHp8pnM0_jnJKteer9Ci7GV0.mft File: cz1KHp8pnM0_jnJKteer9Ci7GV0.mft (raw, json) Hash identifier: WvJfnHr3UEuga86VL8Sh236OhLAo1za3V1zImOigyIg= Subject key identifier: 1C:1D:44:95:3A:52:7A:58:E1:1E:FC:A1:3E:A1:70:F7:D0:E1:60:50 Authority key identifier: 73:3D:4A:1E:9F:29:9C:CD:3F:8E:72:4A:B5:E7:AB:F4:28:BB:19:5D Certificate issuer: /CN=A91DE500/serialNumber=733D4A1E9F299CCD3F8E724AB5E7ABF428BB195D Certificate serial: 011B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cz1KHp8pnM0_jnJKteer9Ci7GV0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE500/49E6FE46C72D11EE9C7C351DC4F9AE02/cz1KHp8pnM0_jnJKteer9Ci7GV0.mft Manifest number: 0117 Signing time: Sat 19 Jul 2025 05:10:19 +0000 Manifest this update: Sat 19 Jul 2025 05:10:19 +0000 Manifest next update: Sat 26 Jul 2025 05:10:19 +0000 Files and hashes: 1: cz1KHp8pnM0_jnJKteer9Ci7GV0.crl (hash: AqYrkJpadyW8tuhyDu3E6ov192hcuFQHbqA0S8BVw+s=) 2: D035B7BE5BC711F097260D5EC4F9AE02.roa (hash: AlpyGioYVyajcJ7eEz9QWJBXQdVphfXg8wGbaRLMJmY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE500/49E6FE46C72D11EE9C7C351DC4F9AE02/cz1KHp8pnM0_jnJKteer9Ci7GV0.crl rsync://rpki.apnic.net/member_repository/A91DE500/49E6FE46C72D11EE9C7C351DC4F9AE02/cz1KHp8pnM0_jnJKteer9Ci7GV0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cz1KHp8pnM0_jnJKteer9Ci7GV0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 05:10:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 283 (0x11b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE500, serialNumber=733D4A1E9F299CCD3F8E724AB5E7ABF428BB195D Validity Not Before: Jul 19 05:10:19 2025 GMT Not After : Jul 26 05:10:19 2025 GMT Subject: CN=687b28bb-b36c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:35:9e:7c:5d:72:73:35:83:89:f1:b7:3f:38: 8e:d3:c5:c7:ef:a5:e7:15:5b:b9:54:7e:d6:3a:43: 18:0f:a0:b0:8d:fc:e6:29:59:92:20:c5:63:9d:29: 30:6c:96:c6:18:1e:04:19:04:4d:0c:0c:f8:54:88: 6d:be:e3:91:57:1a:d0:ad:48:30:08:3f:4c:f5:62: df:1b:47:85:62:51:71:cf:71:5b:82:6f:27:5d:53: 2b:48:fd:49:6b:ba:af:57:13:78:0e:e8:27:77:71: 86:b8:2c:c7:47:fe:ee:35:94:7c:5f:1a:4b:09:fd: be:04:7b:a5:57:6e:3b:61:cc:11:f4:67:9c:5b:45: f2:ff:c1:c8:34:ac:7e:d6:c0:db:a8:5f:78:11:bc: ef:2a:d6:5e:a4:dd:a2:9c:59:22:cb:3c:c2:b9:c8: c6:95:6b:fd:d3:1c:6a:22:be:a5:69:60:2d:bb:8f: 4a:83:f5:8b:b8:e0:d8:e9:0b:c7:b2:53:22:68:fc: 24:3f:31:10:c4:ea:87:b9:28:d2:3c:f0:5c:a7:db: 06:29:6c:c2:e5:b8:d4:15:e0:5f:ec:7b:7b:1d:72: 47:84:62:af:e6:ab:2f:fb:0c:a8:c6:fe:ec:83:eb: b2:6b:4f:b5:21:d4:b8:99:7b:9a:df:40:25:ef:37: c5:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:1D:44:95:3A:52:7A:58:E1:1E:FC:A1:3E:A1:70:F7:D0:E1:60:50 X509v3 Authority Key Identifier: keyid:73:3D:4A:1E:9F:29:9C:CD:3F:8E:72:4A:B5:E7:AB:F4:28:BB:19:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE500/49E6FE46C72D11EE9C7C351DC4F9AE02/cz1KHp8pnM0_jnJKteer9Ci7GV0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cz1KHp8pnM0_jnJKteer9Ci7GV0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE500/49E6FE46C72D11EE9C7C351DC4F9AE02/cz1KHp8pnM0_jnJKteer9Ci7GV0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cf:25:15:81:30:bb:b3:88:a9:19:85:b9:36:2d:dc:16:4b:8f: 89:9a:f9:06:8f:32:4b:fd:67:d9:4a:88:63:e0:40:b6:dc:3a: 77:5c:fe:f4:d1:fb:b7:d5:41:66:14:42:9c:b7:d1:f1:9a:80: 84:d1:03:40:78:fc:02:05:a9:df:56:9a:31:f2:a1:83:e6:f2: 76:fb:f4:3e:c3:f6:80:2f:f9:f9:aa:aa:bb:65:ed:6c:94:d8: 60:b9:cd:d5:49:26:51:31:49:02:be:f1:37:d1:f5:75:9f:6d: 76:49:9f:74:87:58:de:55:eb:2a:27:1d:0a:97:2c:e2:56:c8: 41:70:b6:e2:ef:c9:56:82:4b:d6:6d:d9:72:25:f3:39:fb:17: bb:a2:5e:5b:6e:87:ed:5d:0a:82:de:a7:71:7e:54:87:f2:7d: 5f:72:3d:c0:5c:fd:5f:09:c8:89:b6:93:3c:02:c3:e5:ed:48: 13:a0:81:38:3c:8e:ea:d3:cb:f9:cb:f6:63:52:d0:d8:c3:16: bf:0c:7d:69:78:51:39:86:fc:dd:87:72:4b:0c:db:f7:ff:f8: 62:1a:82:02:09:8a:6d:62:05:37:d5:8b:db:fb:b3:f3:ca:f3: 90:7f:49:77:af:2b:10:06:86:1a:de:72:a3:e8:21:5e:15:9b: 4b:17:f8:ae -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REU1MDAxMTAvBgNVBAUTKDczM0Q0QTFFOUYyOTlDQ0QzRjhFNzI0QUI1RTdBQkY0 MjhCQjE5NUQwHhcNMjUwNzE5MDUxMDE5WhcNMjUwNzI2MDUxMDE5WjAYMRYwFAYD VQQDEw02ODdiMjhiYi1iMzZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlzWefF1yczWDifG3PziO08XH76XnFVu5VH7WOkMYD6CwjfzmKVmSIMVjnSkw bJbGGB4EGQRNDAz4VIhtvuORVxrQrUgwCD9M9WLfG0eFYlFxz3Fbgm8nXVMrSP1J a7qvVxN4Dugnd3GGuCzHR/7uNZR8XxpLCf2+BHulV247YcwR9GecW0Xy/8HINKx+ 1sDbqF94EbzvKtZepN2inFkiyzzCucjGlWv90xxqIr6laWAtu49Kg/WLuODY6QvH slMiaPwkPzEQxOqHuSjSPPBcp9sGKWzC5bjUFeBf7Ht7HXJHhGKv5qsv+wyoxv7s g+uya0+1IdS4mXua30Al7zfF6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBwdRJU6 UnpY4R78oT6hcPfQ4WBQMB8GA1UdIwQYMBaAFHM9Sh6fKZzNP45ySrXnq/Qouxld MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERTUwMC80OUU2RkU0NkM3 MkQxMUVFOUM3QzM1MURDNEY5QUUwMi9jejFLSHA4cG5NMF9qbkpLdGVlcjlDaTdH VjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2N6MUtIcDhwbk0wX2puSkt0ZWVyOUNpN0dWMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RTUwMC80OUU2RkU0NkM3MkQxMUVFOUM3QzM1MURDNEY5QUUwMi9jejFLSHA4cG5N MF9qbkpLdGVlcjlDaTdHVjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDPJRWBMLuziKkZhbk2LdwWS4+JmvkGjzJL/WfZSohj4EC23Dp3XP70 0fu31UFmFEKct9HxmoCE0QNAePwCBanfVpox8qGD5vJ2+/Q+w/aAL/n5qqq7Ze1s lNhguc3VSSZRMUkCvvE30fV1n212SZ90h1jeVesqJx0KlyziVshBcLbi78lWgkvW bdlyJfM5+xe7ol5bboftXQqC3qdxflSH8n1fcj3AXP1fCciJtpM8AsPl7UgToIE4 PI7q08v5y/ZjUtDYwxa/DH1peFE5hvzdh3JLDNv3//hiGoICCYptYgU31Yvb+7Pz yvOQf0l3rysQBoYa3nKj6CFeFZtLF/iu -----END CERTIFICATE-----Generated at Sun Jul 20 07:41:42 2025 by rpki-client