$ rpki-client -vvf rpki.apnic.net/member_repository/A91168FD/9A799644E11111E5AB017727C4F9AE02/_7wtQc3ZX_z4p35SkZ4ubRuvAt8.mft File: _7wtQc3ZX_z4p35SkZ4ubRuvAt8.mft (raw, json) Hash identifier: YXNEPnq8gCZzOOP1hnet80SKpVGbU6hpmhW5bSJuNyI= Subject key identifier: DC:BB:D3:59:04:05:A7:D8:5B:2D:C5:83:DF:70:C3:0C:6E:78:F3:FD Authority key identifier: FF:BC:2D:41:CD:D9:5F:FC:F8:A7:7E:52:91:9E:2E:6D:1B:AF:02:DF Certificate issuer: /CN=A91168FD/serialNumber=FFBC2D41CDD95FFCF8A77E52919E2E6D1BAF02DF Certificate serial: 2170 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_7wtQc3ZX_z4p35SkZ4ubRuvAt8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91168FD/9A799644E11111E5AB017727C4F9AE02/_7wtQc3ZX_z4p35SkZ4ubRuvAt8.mft Manifest number: 2167 Signing time: Sat 14 Jun 2025 15:53:14 +0000 Manifest this update: Sat 14 Jun 2025 15:53:14 +0000 Manifest next update: Sat 21 Jun 2025 15:53:14 +0000 Files and hashes: 1: _7wtQc3ZX_z4p35SkZ4ubRuvAt8.crl (hash: UGVW0goy1Kl4bCySXslA7vkV5xQe43iGWzDBf6yimNQ=) 2: D07411B6661211ECBCD61A65C4F9AE02.roa (hash: /mOiRGW1T9qa7YdW+2kPvRZkQyewAraUry397iZAYjE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91168FD/9A799644E11111E5AB017727C4F9AE02/_7wtQc3ZX_z4p35SkZ4ubRuvAt8.crl rsync://rpki.apnic.net/member_repository/A91168FD/9A799644E11111E5AB017727C4F9AE02/_7wtQc3ZX_z4p35SkZ4ubRuvAt8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_7wtQc3ZX_z4p35SkZ4ubRuvAt8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 15:53:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8560 (0x2170) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91168FD, serialNumber=FFBC2D41CDD95FFCF8A77E52919E2E6D1BAF02DF Validity Not Before: Jun 14 15:53:14 2025 GMT Not After : Jun 21 15:53:14 2025 GMT Subject: CN=684d9aea-be5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:33:2e:7a:f3:76:dd:28:a0:9a:ce:ad:4b:53: 2c:9e:08:df:dd:e0:44:ca:cb:f3:02:6d:22:f8:31: 9b:38:cf:47:4e:d0:98:4e:bc:42:27:8f:08:30:95: f6:8e:d3:56:fd:c9:70:bf:fd:90:e6:53:cf:d6:a6: 86:e9:54:7e:5e:dc:b4:da:88:76:d3:96:4f:ff:2c: 36:b7:76:71:2f:29:0e:67:36:7c:91:b3:ae:86:b3: 87:2a:35:ee:08:fc:0f:38:0d:bc:a3:40:7f:8e:46: 10:85:0c:5b:6e:07:78:9d:32:f3:99:96:bb:00:8e: c5:fc:2e:6f:eb:65:45:e8:3c:56:5a:7a:fb:b4:8b: f7:d8:b8:cb:de:8d:98:a1:fc:73:a2:69:02:5c:cb: 71:3f:b4:79:ea:bc:f8:0a:5f:ae:9c:8e:b7:d1:02: 5c:d0:47:78:97:9e:9c:87:57:46:65:b9:45:ce:5d: b3:f4:8a:15:03:9b:07:70:5c:11:ff:69:43:5f:9a: c4:1e:bc:7b:67:17:17:00:bd:3b:0a:b9:f0:30:18: 87:5f:d5:bc:4d:6a:1f:d5:ac:8a:a9:f7:bf:bf:05: d9:c6:12:a1:00:0c:2e:64:4f:80:c6:55:06:43:92: af:87:8f:c9:52:33:f3:69:47:fe:0d:2c:0a:71:f1: 53:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:BB:D3:59:04:05:A7:D8:5B:2D:C5:83:DF:70:C3:0C:6E:78:F3:FD X509v3 Authority Key Identifier: keyid:FF:BC:2D:41:CD:D9:5F:FC:F8:A7:7E:52:91:9E:2E:6D:1B:AF:02:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91168FD/9A799644E11111E5AB017727C4F9AE02/_7wtQc3ZX_z4p35SkZ4ubRuvAt8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_7wtQc3ZX_z4p35SkZ4ubRuvAt8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91168FD/9A799644E11111E5AB017727C4F9AE02/_7wtQc3ZX_z4p35SkZ4ubRuvAt8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:d5:d5:1d:cb:07:33:86:88:9e:fd:8e:cc:75:5a:6d:6d:21: 73:c3:4b:02:98:96:49:7c:c7:54:c6:98:d3:0b:68:b4:84:a8: f3:2e:d9:34:37:f4:a1:3b:ec:19:53:41:3b:68:7b:45:1a:1e: 20:1b:6f:16:bd:2f:88:52:b9:bb:23:7e:f8:c8:d6:b4:9a:63: 84:f3:b0:a4:6c:bb:36:9e:6f:0c:12:0d:ce:f0:2f:a0:23:39: 2d:b9:bd:20:5e:0b:83:1b:c3:81:e3:19:f2:a3:d3:cb:f0:87: a1:4d:7d:fe:f3:06:e9:45:39:81:ad:b8:7c:75:fc:f3:27:fd: e8:28:dc:05:04:dc:dd:05:bb:58:c2:11:12:36:d4:5b:37:ad: 19:43:3f:4d:ad:23:b2:99:4f:78:59:6f:05:82:9c:b5:1f:cb: a5:ab:6e:f2:5d:49:2e:5a:60:5b:c5:f5:0d:8c:14:86:61:9a: 51:40:7f:fe:69:19:69:83:ea:5d:ba:05:d2:f8:a1:6a:db:30: 80:18:41:eb:39:45:4a:1b:cd:65:84:db:e9:4f:8f:75:e1:88: 1c:d6:c3:0f:02:82:52:d6:f7:c0:d3:e3:22:4e:80:cd:f9:3d: 3a:7c:41:34:c5:b1:29:64:81:53:81:de:a3:17:97:28:02:e5: 18:cd:3d:be -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIXAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTY4RkQxMTAvBgNVBAUTKEZGQkMyRDQxQ0REOTVGRkNGOEE3N0U1MjkxOUUyRTZE MUJBRjAyREYwHhcNMjUwNjE0MTU1MzE0WhcNMjUwNjIxMTU1MzE0WjAYMRYwFAYD VQQDEw02ODRkOWFlYS1iZTVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4DMuevN23Sigms6tS1Msngjf3eBEysvzAm0i+DGbOM9HTtCYTrxCJ48IMJX2 jtNW/clwv/2Q5lPP1qaG6VR+Xty02oh205ZP/yw2t3ZxLykOZzZ8kbOuhrOHKjXu CPwPOA28o0B/jkYQhQxbbgd4nTLzmZa7AI7F/C5v62VF6DxWWnr7tIv32LjL3o2Y ofxzomkCXMtxP7R56rz4Cl+unI630QJc0Ed4l56ch1dGZblFzl2z9IoVA5sHcFwR /2lDX5rEHrx7ZxcXAL07CrnwMBiHX9W8TWof1ayKqfe/vwXZxhKhAAwuZE+AxlUG Q5Kvh4/JUjPzaUf+DSwKcfFTlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNy701kE BafYWy3Fg99wwwxuePP9MB8GA1UdIwQYMBaAFP+8LUHN2V/8+Kd+UpGeLm0brwLf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjhGRC85QTc5OTY0NEUx MTExMUU1QUIwMTc3MjdDNEY5QUUwMi9fN3d0UWMzWlhfejRwMzVTa1o0dWJSdXZB dDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL183d3RRYzNaWF96NHAzNVNrWjR1YlJ1dkF0OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NjhGRC85QTc5OTY0NEUxMTExMUU1QUIwMTc3MjdDNEY5QUUwMi9fN3d0UWMzWlhf ejRwMzVTa1o0dWJSdXZBdDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCF1dUdywczhoie/Y7MdVptbSFzw0sCmJZJfMdUxpjTC2i0hKjzLtk0 N/ShO+wZU0E7aHtFGh4gG28WvS+IUrm7I374yNa0mmOE87CkbLs2nm8MEg3O8C+g Izktub0gXguDG8OB4xnyo9PL8IehTX3+8wbpRTmBrbh8dfzzJ/3oKNwFBNzdBbtY whESNtRbN60ZQz9NrSOymU94WW8Fgpy1H8ulq27yXUkuWmBbxfUNjBSGYZpRQH/+ aRlpg+pdugXS+KFq2zCAGEHrOUVKG81lhNvpT4914Ygc1sMPAoJS1vfA0+MiToDN +T06fEE0xbEpZIFTgd6jF5coAuUYzT2+ -----END CERTIFICATE-----Generated at Sat Jun 14 19:10:00 2025 by rpki-client