$ rpki-client -vvf rpki.apnic.net/member_repository/A91FCF44/94110604602C11EF97D73C5FC4F9AE02/aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.mft File: aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.mft (raw, json) Hash identifier: HCo7bDjF4YRHMD5NBm27EfuGgtti1vE1gvlCMyQb6t0= Subject key identifier: 29:3E:50:4A:E3:70:E9:5C:1F:E1:A6:9F:39:C9:51:62:FC:53:3A:6F Authority key identifier: 69:98:D9:B5:32:7B:BF:89:4E:D5:61:97:C4:7E:C8:96:FA:E5:9E:34 Certificate issuer: /CN=A91FCF44/serialNumber=6998D9B5327BBF894ED56197C47EC896FAE59E34 Certificate serial: C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FCF44/94110604602C11EF97D73C5FC4F9AE02/aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.mft Manifest number: BD Signing time: Sat 19 Jul 2025 06:20:33 +0000 Manifest this update: Sat 19 Jul 2025 06:20:32 +0000 Manifest next update: Sat 26 Jul 2025 06:20:32 +0000 Files and hashes: 1: aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.crl (hash: 8YpII+7kjOVSe8AsLF9ZamTOB/WRjaV5T5QMiIT2DvU=) 2: B2A0074EAD4F11EF93ECF282C4F9AE02.roa (hash: Vji2bwj5pG0AmszlyVBCPumUcxu21MvYnK8Tx2Nah1A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FCF44/94110604602C11EF97D73C5FC4F9AE02/aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.crl rsync://rpki.apnic.net/member_repository/A91FCF44/94110604602C11EF97D73C5FC4F9AE02/aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 06:20:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 199 (0xc7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FCF44, serialNumber=6998D9B5327BBF894ED56197C47EC896FAE59E34 Validity Not Before: Jul 19 06:20:32 2025 GMT Not After : Jul 26 06:20:32 2025 GMT Subject: CN=687b3930-2a3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:9e:20:9b:2d:b2:f5:61:9d:c0:cc:66:6d:98: fa:c1:8c:54:1d:e8:08:86:b2:ab:a8:2f:b9:84:c7: bb:97:dc:82:f6:4c:67:18:f2:9a:6c:59:b8:42:9a: f2:35:97:00:5c:95:46:02:20:ce:9a:c2:d4:0c:31: 79:e6:ee:29:7e:45:23:31:b0:b2:94:3b:78:44:fd: 49:81:a6:bc:6a:57:dd:ea:71:d1:a4:4c:c2:e3:70: e7:a7:14:49:f8:8e:c2:2d:4a:8c:0f:0c:21:ba:ff: eb:c8:94:72:c1:0c:ba:0a:d0:ed:c2:db:10:a2:38: 58:d6:2d:4e:c8:a4:de:d2:31:8b:8c:0d:dc:11:16: a0:6c:eb:25:d0:f1:7d:ac:89:97:f2:45:cf:1b:29: 04:ce:5f:7e:73:20:3b:65:92:5c:4e:05:d5:68:c5: 97:81:bf:ca:63:a1:02:bf:4c:e1:94:91:e7:b0:57: c4:a5:17:f2:d3:47:57:5f:29:8a:ec:c2:db:58:eb: 61:09:ea:00:5d:cd:3e:5b:06:5c:c1:64:9c:07:e9: 48:9c:e8:49:9f:a3:c6:84:22:49:10:fe:f3:e3:18: 3e:da:a5:b7:42:45:60:15:45:b0:f0:05:ff:c2:c3: 0e:be:87:3a:0c:3f:b5:03:c8:79:d8:2f:c7:35:1e: 37:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:3E:50:4A:E3:70:E9:5C:1F:E1:A6:9F:39:C9:51:62:FC:53:3A:6F X509v3 Authority Key Identifier: keyid:69:98:D9:B5:32:7B:BF:89:4E:D5:61:97:C4:7E:C8:96:FA:E5:9E:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FCF44/94110604602C11EF97D73C5FC4F9AE02/aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCF44/94110604602C11EF97D73C5FC4F9AE02/aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b9:be:17:9b:d0:67:49:94:aa:ec:f2:98:95:7c:c8:26:25:7a: 47:c7:93:25:51:37:a0:de:97:57:41:c6:be:23:10:b0:3e:77: dc:78:e7:27:38:ef:f1:89:7d:b8:1f:ee:c0:c2:3b:03:8b:44: 7f:37:6f:4b:9b:c4:4f:f7:2e:45:78:03:51:6d:42:52:e4:0e: 7c:26:a2:91:0d:6e:d7:ef:6b:ea:af:5c:95:8b:d9:22:61:6b: c1:33:95:59:1f:56:39:d0:7c:85:7a:00:f6:13:3a:32:d5:7e: 28:ad:a2:8c:65:d8:dd:72:84:d3:02:da:49:e1:03:c1:03:56: 06:9b:da:db:7f:2a:a1:60:5e:29:42:75:2a:fc:40:55:ca:a2: 3c:7a:16:26:c4:52:66:16:2b:a9:80:95:bd:3a:5e:fc:82:71: 74:78:7b:7b:ea:4d:b6:de:39:88:ec:83:37:03:a4:b5:c0:c7: ce:df:a2:08:cf:3a:17:fc:b0:39:99:41:64:dc:c6:3f:5b:45: 25:e1:c5:66:39:65:19:55:13:78:3d:ae:df:c4:f5:b1:7f:f8: 42:d4:f3:4d:68:a3:15:94:a9:35:b4:99:45:17:61:79:f9:a8: 70:64:fe:f9:3f:50:b3:19:86:2f:10:95:52:25:bb:af:85:ae: e0:f8:7a:90 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkNGNDQxMTAvBgNVBAUTKDY5OThEOUI1MzI3QkJGODk0RUQ1NjE5N0M0N0VDODk2 RkFFNTlFMzQwHhcNMjUwNzE5MDYyMDMyWhcNMjUwNzI2MDYyMDMyWjAYMRYwFAYD VQQDEw02ODdiMzkzMC0yYTNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoJ4gmy2y9WGdwMxmbZj6wYxUHegIhrKrqC+5hMe7l9yC9kxnGPKabFm4Qpry NZcAXJVGAiDOmsLUDDF55u4pfkUjMbCylDt4RP1Jgaa8alfd6nHRpEzC43DnpxRJ +I7CLUqMDwwhuv/ryJRywQy6CtDtwtsQojhY1i1OyKTe0jGLjA3cERagbOsl0PF9 rImX8kXPGykEzl9+cyA7ZZJcTgXVaMWXgb/KY6ECv0zhlJHnsFfEpRfy00dXXymK 7MLbWOthCeoAXc0+WwZcwWScB+lInOhJn6PGhCJJEP7z4xg+2qW3QkVgFUWw8AX/ wsMOvoc6DD+1A8h52C/HNR439wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCk+UErj cOlcH+GmnznJUWL8UzpvMB8GA1UdIwQYMBaAFGmY2bUye7+JTtVhl8R+yJb65Z40 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQ0Y0NC85NDExMDYwNDYw MkMxMUVGOTdENzNDNUZDNEY5QUUwMi9hWmpadFRKN3Y0bE8xV0dYeEg3SWx2cmxu alEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Faalp0VEo3djRsTzFXR1h4SDdJbHZybG5qUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG Q0Y0NC85NDExMDYwNDYwMkMxMUVGOTdENzNDNUZDNEY5QUUwMi9hWmpadFRKN3Y0 bE8xV0dYeEg3SWx2cmxualEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC5vheb0GdJlKrs8piVfMgmJXpHx5MlUTeg3pdXQca+IxCwPnfceOcn OO/xiX24H+7AwjsDi0R/N29Lm8RP9y5FeANRbUJS5A58JqKRDW7X72vqr1yVi9ki YWvBM5VZH1Y50HyFegD2Ezoy1X4oraKMZdjdcoTTAtpJ4QPBA1YGm9rbfyqhYF4p QnUq/EBVyqI8ehYmxFJmFiupgJW9Ol78gnF0eHt76k223jmI7IM3A6S1wMfO36II zzoX/LA5mUFk3MY/W0Ul4cVmOWUZVRN4Pa7fxPWxf/hC1PNNaKMVlKk1tJlFF2F5 +ahwZP75P1CzGYYvEJVSJbuvha7g+HqQ -----END CERTIFICATE-----Generated at Sun Jul 20 02:55:25 2025 by rpki-client