$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5590/A895249EF7C511EA871C000CC4F9AE02/cZYTj9n8jHj-hDolPLBICtzFfw0.mft File: cZYTj9n8jHj-hDolPLBICtzFfw0.mft (raw, json) Hash identifier: H6gWtPW9WtgogIW0xadf9Wb7Rq29xp7GZh7qunUQz4k= Subject key identifier: E9:13:C8:03:B8:31:90:9C:F5:78:CB:92:29:7B:C7:94:1F:5A:EE:BD Authority key identifier: 71:96:13:8F:D9:FC:8C:78:FE:84:3A:25:3C:B0:48:0A:DC:C5:7F:0D Certificate issuer: /CN=A91D5590/serialNumber=7196138FD9FC8C78FE843A253CB0480ADCC57F0D Certificate serial: 07CE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cZYTj9n8jHj-hDolPLBICtzFfw0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D5590/A895249EF7C511EA871C000CC4F9AE02/cZYTj9n8jHj-hDolPLBICtzFfw0.mft Manifest number: 07C4 Signing time: Fri 06 Jun 2025 21:10:52 +0000 Manifest this update: Fri 06 Jun 2025 21:10:51 +0000 Manifest next update: Fri 13 Jun 2025 21:10:51 +0000 Files and hashes: 1: cZYTj9n8jHj-hDolPLBICtzFfw0.crl (hash: yy23tygzX2FaqJJcryV31UF7gSzKKrIw1axsV9bDCQ8=) 2: 986F0854F7C611EA8B23C30CC4F9AE02.roa (hash: F2B6eTQtjw4DMTGhIIRc21e5xRW7fmJOpub38olCp9w=) 3: 9920D2E6F7C611EA8B23C30CC4F9AE02.roa (hash: d0oN/FUNzNpOKmQI6ds/0v5d1ZE90v5NzlRPE14knFk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D5590/A895249EF7C511EA871C000CC4F9AE02/cZYTj9n8jHj-hDolPLBICtzFfw0.crl rsync://rpki.apnic.net/member_repository/A91D5590/A895249EF7C511EA871C000CC4F9AE02/cZYTj9n8jHj-hDolPLBICtzFfw0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cZYTj9n8jHj-hDolPLBICtzFfw0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 13 Jun 2025 21:10:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1998 (0x7ce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D5590, serialNumber=7196138FD9FC8C78FE843A253CB0480ADCC57F0D Validity Not Before: Jun 6 21:10:51 2025 GMT Not After : Jun 13 21:10:51 2025 GMT Subject: CN=6843595b-69f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:e0:25:fa:a3:ad:66:f9:74:c4:a6:23:72:fc: 59:e5:87:89:ba:bc:1e:f2:47:a0:c4:84:d2:ae:3d: 18:ba:5c:d8:4d:17:d3:d5:30:22:e9:c6:1e:10:50: 55:ee:2a:e7:c0:88:45:76:9c:e6:59:fb:21:e5:40: a5:b3:e3:fb:fd:d5:e7:1c:fc:72:79:31:83:d3:05: 82:d9:f5:32:39:b5:47:05:03:46:29:b0:0a:d0:54: 4e:ed:67:65:83:fa:3b:3e:bb:b7:ce:c8:7a:2b:39: 09:09:a0:59:f1:b6:9f:c4:20:11:fc:6e:2d:b5:28: d7:b1:dd:65:5c:6d:ab:2e:3d:5d:c5:40:6a:e3:d0: 64:46:5a:cd:a6:78:ee:e4:a9:6d:5c:0e:e2:3b:a3: d5:10:fe:0f:5b:52:89:98:08:ff:0b:44:43:4b:f5: fb:11:0d:c5:bd:6e:c2:4b:d8:e6:d5:95:ab:ea:12: 3c:f5:de:d8:41:27:07:02:29:fb:b4:b8:c2:66:06: 64:3d:3c:9f:6a:bd:1a:38:39:70:f9:17:d0:b8:d1: dd:e8:30:41:c2:9c:7b:88:e6:0c:18:c5:0d:0f:8c: 76:cf:b2:4d:6b:be:82:d0:35:63:a1:b4:73:d8:30: d6:28:22:e3:ab:06:87:ed:60:53:51:d3:47:d7:dc: 8d:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:13:C8:03:B8:31:90:9C:F5:78:CB:92:29:7B:C7:94:1F:5A:EE:BD X509v3 Authority Key Identifier: keyid:71:96:13:8F:D9:FC:8C:78:FE:84:3A:25:3C:B0:48:0A:DC:C5:7F:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D5590/A895249EF7C511EA871C000CC4F9AE02/cZYTj9n8jHj-hDolPLBICtzFfw0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cZYTj9n8jHj-hDolPLBICtzFfw0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5590/A895249EF7C511EA871C000CC4F9AE02/cZYTj9n8jHj-hDolPLBICtzFfw0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:86:8f:14:26:89:49:b0:b4:40:e2:0e:f6:dc:9a:8d:ff:6f: 58:9e:8c:0f:b8:f0:aa:55:c2:cd:e8:56:12:ee:fd:b4:3b:5a: e6:81:c0:ed:8d:f5:f4:fe:96:f2:94:7c:1b:ea:ed:19:ab:c8: 6c:9e:49:d2:0d:e4:df:78:d4:df:0e:d3:db:9d:6d:49:d6:3e: d6:fb:be:71:e9:2c:22:28:15:bf:d7:11:93:40:2d:4a:ef:b1: d3:c6:a7:f9:e4:25:da:89:70:ea:9a:4d:68:bd:c5:af:aa:fd: 96:84:d6:b1:1d:e9:21:52:6b:84:b6:4c:a4:97:38:d8:c2:23: 93:70:43:99:dc:fc:b6:6c:4f:3b:87:ff:d8:20:d2:19:ea:ff: 6e:4a:ec:20:d0:ea:19:d8:31:0f:e7:35:5b:e4:e3:a4:ef:dd: 7f:a4:36:1d:9e:21:cf:75:77:1a:6c:d1:b6:8c:21:0d:65:56: 25:07:03:57:f0:0d:b9:4f:78:06:a8:54:78:95:b6:b4:7f:4b: 72:2e:0e:b8:e5:b7:fd:34:74:bb:1e:21:1e:a6:4a:b3:ff:d4: 00:8c:d4:62:4c:7a:29:04:36:2f:6a:5d:70:88:7b:67:f0:c1: a3:22:94:7f:21:0c:37:bc:3c:65:f8:89:55:28:d0:6e:74:73: b4:54:de:8e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB84wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDU1OTAxMTAvBgNVBAUTKDcxOTYxMzhGRDlGQzhDNzhGRTg0M0EyNTNDQjA0ODBB RENDNTdGMEQwHhcNMjUwNjA2MjExMDUxWhcNMjUwNjEzMjExMDUxWjAYMRYwFAYD VQQDEw02ODQzNTk1Yi02OWY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr+Al+qOtZvl0xKYjcvxZ5YeJurwe8kegxITSrj0YulzYTRfT1TAi6cYeEFBV 7irnwIhFdpzmWfsh5UCls+P7/dXnHPxyeTGD0wWC2fUyObVHBQNGKbAK0FRO7Wdl g/o7Pru3zsh6KzkJCaBZ8bafxCAR/G4ttSjXsd1lXG2rLj1dxUBq49BkRlrNpnju 5KltXA7iO6PVEP4PW1KJmAj/C0RDS/X7EQ3FvW7CS9jm1ZWr6hI89d7YQScHAin7 tLjCZgZkPTyfar0aODlw+RfQuNHd6DBBwpx7iOYMGMUND4x2z7JNa76C0DVjobRz 2DDWKCLjqwaH7WBTUdNH19yNlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOkTyAO4 MZCc9XjLkil7x5QfWu69MB8GA1UdIwQYMBaAFHGWE4/Z/Ix4/oQ6JTywSArcxX8N MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENTU5MC9BODk1MjQ5RUY3 QzUxMUVBODcxQzAwMENDNEY5QUUwMi9jWllUajluOGpIai1oRG9sUExCSUN0ekZm dzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NaWVRqOW44akhqLWhEb2xQTEJJQ3R6RmZ3MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NTU5MC9BODk1MjQ5RUY3QzUxMUVBODcxQzAwMENDNEY5QUUwMi9jWllUajluOGpI ai1oRG9sUExCSUN0ekZmdzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAeho8UJolJsLRA4g723JqN/29YnowPuPCqVcLN6FYS7v20O1rmgcDt jfX0/pbylHwb6u0Zq8hsnknSDeTfeNTfDtPbnW1J1j7W+75x6SwiKBW/1xGTQC1K 77HTxqf55CXaiXDqmk1ovcWvqv2WhNaxHekhUmuEtkyklzjYwiOTcEOZ3Py2bE87 h//YINIZ6v9uSuwg0OoZ2DEP5zVb5OOk791/pDYdniHPdXcabNG2jCENZVYlBwNX 8A25T3gGqFR4lba0f0tyLg645bf9NHS7HiEepkqz/9QAjNRiTHopBDYval1wiHtn 8MGjIpR/IQw3vDxl+IlVKNBudHO0VN6O -----END CERTIFICATE-----Generated at Sat Jun 7 12:26:58 2025 by rpki-client