$ rpki-client -vvf rpki.apnic.net/member_repository/A91EFFF0/44FEBC92ADB211E89C9B4553C4F9AE02/rvzkuiTfpu1k5B5PJFHJ6ISuaaI.mft File: rvzkuiTfpu1k5B5PJFHJ6ISuaaI.mft (raw, json) Hash identifier: ZKuywhon4q56CrMDxkSsBG8ofi36JUOX4jIdQKaqfgw= Subject key identifier: 28:85:E9:BA:35:89:4E:28:EA:B4:FB:E9:A9:99:57:6C:8A:B5:19:79 Authority key identifier: AE:FC:E4:BA:24:DF:A6:ED:64:E4:1E:4F:24:51:C9:E8:84:AE:69:A2 Certificate issuer: /CN=A91EFFF0/serialNumber=AEFCE4BA24DFA6ED64E41E4F2451C9E884AE69A2 Certificate serial: 134F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rvzkuiTfpu1k5B5PJFHJ6ISuaaI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EFFF0/44FEBC92ADB211E89C9B4553C4F9AE02/rvzkuiTfpu1k5B5PJFHJ6ISuaaI.mft Manifest number: 133F Signing time: Thu 24 Jul 2025 17:09:29 +0000 Manifest this update: Thu 24 Jul 2025 17:09:29 +0000 Manifest next update: Thu 31 Jul 2025 17:09:29 +0000 Files and hashes: 1: rvzkuiTfpu1k5B5PJFHJ6ISuaaI.crl (hash: lS7Nh8P7Sxg7wq4x1YB78UA2xi/h3s8TE48hwLZU24Q=) 2: 8853B5C200FF11F09AD9E43CC4F9AE02.roa (hash: fDAbckuG9wFQsseJEFS548SLfcyPSORhEr8NleSSt0k=) 3: 2DD4424401A211F09D28335BC4F9AE02.roa (hash: /pUGpbO60Fe1yZM/qF6+zCst+2cZhcsURR33/zD2CVU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EFFF0/44FEBC92ADB211E89C9B4553C4F9AE02/rvzkuiTfpu1k5B5PJFHJ6ISuaaI.crl rsync://rpki.apnic.net/member_repository/A91EFFF0/44FEBC92ADB211E89C9B4553C4F9AE02/rvzkuiTfpu1k5B5PJFHJ6ISuaaI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rvzkuiTfpu1k5B5PJFHJ6ISuaaI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 31 Jul 2025 17:09:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4943 (0x134f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EFFF0, serialNumber=AEFCE4BA24DFA6ED64E41E4F2451C9E884AE69A2 Validity Not Before: Jul 24 17:09:29 2025 GMT Not After : Jul 31 17:09:29 2025 GMT Subject: CN=688268c9-f8f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:63:bb:24:46:30:e9:88:35:34:6d:1f:ae:7a: 8a:bf:79:31:63:c8:f1:59:ab:f8:25:32:4c:52:86: bb:50:76:a6:15:e4:f5:3b:9f:5c:06:fb:4f:70:ca: be:71:87:cc:2f:dd:47:0a:e8:32:6d:10:c7:95:ed: ba:91:d4:6b:ab:a9:43:a9:b4:b5:79:9b:14:67:f1: 2c:29:fb:cc:23:c6:86:86:51:01:88:06:65:13:75: 4e:08:8f:46:eb:b2:fb:db:32:fb:a0:a4:6e:59:3d: a8:38:e8:9e:9a:eb:08:78:39:a4:ba:4b:5a:d6:14: 42:8c:1c:40:50:f8:e1:f3:88:44:b4:d1:cc:90:ad: b3:77:c1:e5:13:8b:36:fe:da:08:92:d8:f5:1e:17: a1:40:4d:4e:8e:5b:a5:91:66:84:75:04:a7:0a:d1: 96:92:87:b1:c7:a7:c9:7b:06:56:aa:98:7b:de:7c: f9:28:71:3c:a8:1f:96:f3:01:e7:eb:6c:fb:ce:39: 8c:97:5d:8e:bf:2e:a3:16:06:3c:f4:77:de:ef:76: 73:05:77:42:3a:e8:b1:43:a3:e5:72:7a:83:b1:40: 80:1a:59:f7:9c:32:13:42:65:ba:8c:c8:40:bf:3a: d2:9e:4e:84:de:7b:2b:7f:29:0b:e0:01:1a:35:22: ee:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:85:E9:BA:35:89:4E:28:EA:B4:FB:E9:A9:99:57:6C:8A:B5:19:79 X509v3 Authority Key Identifier: keyid:AE:FC:E4:BA:24:DF:A6:ED:64:E4:1E:4F:24:51:C9:E8:84:AE:69:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EFFF0/44FEBC92ADB211E89C9B4553C4F9AE02/rvzkuiTfpu1k5B5PJFHJ6ISuaaI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rvzkuiTfpu1k5B5PJFHJ6ISuaaI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EFFF0/44FEBC92ADB211E89C9B4553C4F9AE02/rvzkuiTfpu1k5B5PJFHJ6ISuaaI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:cd:19:39:d7:97:b1:f4:f7:05:11:3c:bd:e1:b1:c7:a9:c5: be:99:03:5a:f7:e7:a6:81:f3:6a:d7:06:01:b4:a5:00:34:fb: 6d:0b:14:e2:2b:0f:2a:65:39:81:e0:2c:00:61:ad:2a:4a:f4: d0:8d:a4:56:eb:52:ca:5f:a7:1d:d1:a9:27:4c:b9:37:34:df: 46:90:04:07:12:87:17:81:28:6d:eb:1a:5e:48:38:2f:03:b7: 24:c3:02:9b:8a:7a:b0:fe:66:a0:93:3a:43:e4:8d:77:17:3d: c3:50:35:79:25:2b:40:9a:8b:57:e1:da:7b:31:0d:8d:8e:71: da:7b:8b:58:30:5b:b6:e9:dd:8d:1d:6b:ff:9f:cf:c6:bd:1b: 08:55:7b:29:25:a9:f4:e9:5a:4e:c2:6b:78:91:8d:9b:1c:cb: ec:9f:43:4c:9e:46:9a:86:bd:e5:ad:f4:13:41:0d:7a:b4:1e: e5:7c:f6:79:53:d6:93:60:92:5d:f8:94:f1:19:23:8f:37:e5: 88:8a:85:ef:ef:08:2e:d1:99:82:1f:44:40:b7:8b:43:f0:68: 6b:fc:ff:65:87:48:11:1f:4d:10:f0:9d:0f:77:7c:65:1b:89: 8f:70:06:a9:fe:7b:b9:80:35:9d:70:74:f7:70:bd:a4:1b:d3: 49:ec:ac:12 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICE08wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUZGRjAxMTAvBgNVBAUTKEFFRkNFNEJBMjRERkE2RUQ2NEU0MUU0RjI0NTFDOUU4 ODRBRTY5QTIwHhcNMjUwNzI0MTcwOTI5WhcNMjUwNzMxMTcwOTI5WjAYMRYwFAYD VQQDEw02ODgyNjhjOS1mOGY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5mO7JEYw6Yg1NG0frnqKv3kxY8jxWav4JTJMUoa7UHamFeT1O59cBvtPcMq+ cYfML91HCugybRDHle26kdRrq6lDqbS1eZsUZ/EsKfvMI8aGhlEBiAZlE3VOCI9G 67L72zL7oKRuWT2oOOiemusIeDmkukta1hRCjBxAUPjh84hEtNHMkK2zd8HlE4s2 /toIktj1HhehQE1OjlulkWaEdQSnCtGWkoexx6fJewZWqph73nz5KHE8qB+W8wHn 62z7zjmMl12Ovy6jFgY89Hfe73ZzBXdCOuixQ6PlcnqDsUCAGln3nDITQmW6jMhA vzrSnk6E3nsrfykL4AEaNSLuOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCiF6bo1 iU4o6rT76amZV2yKtRl5MB8GA1UdIwQYMBaAFK785Lok36btZOQeTyRRyeiErmmi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRkZGMC80NEZFQkM5MkFE QjIxMUU4OUM5QjQ1NTNDNEY5QUUwMi9ydnprdWlUZnB1MWs1QjVQSkZISjZJU3Vh YUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3J2emt1aVRmcHUxazVCNVBKRkhKNklTdWFhSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RkZGMC80NEZFQkM5MkFEQjIxMUU4OUM5QjQ1NTNDNEY5QUUwMi9ydnprdWlUZnB1 MWs1QjVQSkZISjZJU3VhYUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAizRk515ex9PcFETy94bHHqcW+mQNa9+emgfNq1wYBtKUANPttCxTi Kw8qZTmB4CwAYa0qSvTQjaRW61LKX6cd0aknTLk3NN9GkAQHEocXgSht6xpeSDgv A7ckwwKbinqw/magkzpD5I13Fz3DUDV5JStAmotX4dp7MQ2NjnHae4tYMFu26d2N HWv/n8/GvRsIVXspJan06VpOwmt4kY2bHMvsn0NMnkaahr3lrfQTQQ16tB7lfPZ5 U9aTYJJd+JTxGSOPN+WIioXv7wgu0ZmCH0RAt4tD8Ghr/P9lh0gRH00Q8J0Pd3xl G4mPcAap/nu5gDWdcHT3cL2kG9NJ7KwS -----END CERTIFICATE-----Generated at Fri Jul 25 21:37:51 2025 by rpki-client