$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB055/4ABBC01CF55511EEACF1234BC4F9AE02/mZsvZTnCPq60aeZ1OfstyTPZgEA.mft File: mZsvZTnCPq60aeZ1OfstyTPZgEA.mft (raw, json) Hash identifier: yr27//wIuEUodOBu4xWJYUt3Mfk8JgAW174XEHaTt+0= Subject key identifier: 30:35:8B:F2:4C:71:BE:91:DD:A3:C7:B4:45:C3:FE:78:BF:66:FD:FC Authority key identifier: 99:9B:2F:65:39:C2:3E:AE:B4:69:E6:75:39:FB:2D:C9:33:D9:80:40 Certificate issuer: /CN=A91AB055/serialNumber=999B2F6539C23EAEB469E67539FB2DC933D98040 Certificate serial: DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mZsvZTnCPq60aeZ1OfstyTPZgEA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB055/4ABBC01CF55511EEACF1234BC4F9AE02/mZsvZTnCPq60aeZ1OfstyTPZgEA.mft Manifest number: DD Signing time: Sun 15 Jun 2025 04:38:29 +0000 Manifest this update: Sun 15 Jun 2025 04:38:28 +0000 Manifest next update: Sun 22 Jun 2025 04:38:28 +0000 Files and hashes: 1: mZsvZTnCPq60aeZ1OfstyTPZgEA.crl (hash: sjy03CATHT2bPwr/ef2ZQJZkNp3+qoHB2RsbBoPshYc=) 2: 83CA613CF55611EE8CE6274DC4F9AE02.roa (hash: BonjniXMbmI4yDYc3ynOZLv8pgVSOdRZa/c5jpsq0Ug=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB055/4ABBC01CF55511EEACF1234BC4F9AE02/mZsvZTnCPq60aeZ1OfstyTPZgEA.crl rsync://rpki.apnic.net/member_repository/A91AB055/4ABBC01CF55511EEACF1234BC4F9AE02/mZsvZTnCPq60aeZ1OfstyTPZgEA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mZsvZTnCPq60aeZ1OfstyTPZgEA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 223 (0xdf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB055, serialNumber=999B2F6539C23EAEB469E67539FB2DC933D98040 Validity Not Before: Jun 15 04:38:28 2025 GMT Not After : Jun 22 04:38:28 2025 GMT Subject: CN=684e4e45-199e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:03:47:4f:ca:a9:cb:f0:91:72:8f:52:30:ad: 53:e7:21:ee:11:9b:57:3d:43:13:c9:bc:1a:e9:9b: 3d:9b:e0:07:a1:83:7e:bf:6a:a1:2b:50:44:63:73: 8a:96:49:aa:8e:e0:5c:25:79:87:d3:2b:9a:81:aa: ea:1e:87:aa:5f:ff:94:31:26:73:78:5f:33:c4:f0: 03:a1:75:b8:6e:9c:7b:72:d1:67:f9:78:ce:99:62: 53:f8:c5:61:12:34:9c:0d:da:f2:3c:43:81:f9:13: 04:f7:fd:d3:6d:c6:81:df:38:e5:8f:a1:f9:20:a3: 43:7b:82:47:65:43:66:03:60:ec:96:29:e1:3c:ee: 8e:b2:05:87:a3:0c:35:5b:a7:ec:4c:86:70:ce:5c: 4c:fd:e6:e1:b8:1d:cd:f7:2f:bb:9c:b9:58:29:03: df:f9:fa:50:73:b2:35:6c:b2:67:c3:6c:18:ee:80: 7b:92:82:77:c1:51:27:06:cb:de:f7:15:eb:de:18: 36:09:38:2a:be:bb:7b:02:dc:e8:74:f7:d7:e1:b4: 64:65:4a:63:9f:4a:cb:7a:58:f7:1b:70:c2:0c:ff: b5:c1:6e:04:8a:5e:5f:7c:a9:10:fb:7c:e0:d9:b8: 56:8e:87:07:2a:05:a3:b7:f3:8e:f6:9d:42:5f:4b: e2:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:35:8B:F2:4C:71:BE:91:DD:A3:C7:B4:45:C3:FE:78:BF:66:FD:FC X509v3 Authority Key Identifier: keyid:99:9B:2F:65:39:C2:3E:AE:B4:69:E6:75:39:FB:2D:C9:33:D9:80:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB055/4ABBC01CF55511EEACF1234BC4F9AE02/mZsvZTnCPq60aeZ1OfstyTPZgEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mZsvZTnCPq60aeZ1OfstyTPZgEA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB055/4ABBC01CF55511EEACF1234BC4F9AE02/mZsvZTnCPq60aeZ1OfstyTPZgEA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:46:0b:4c:90:23:2e:d9:3d:38:74:85:4e:20:f0:12:4e:b5: d9:9a:cd:69:ee:4e:f5:c0:3b:a0:fd:bc:1a:70:3b:e4:bc:de: de:1e:7d:a4:47:9e:a8:58:9c:cb:6a:95:6f:fa:9c:7c:ed:25: 19:81:01:48:4f:8c:96:dc:a4:04:c8:23:87:ad:27:e8:dd:71: 30:5e:18:78:76:94:5e:67:4e:c2:ff:a3:03:fd:1a:f2:dd:4f: 10:9a:7a:ef:e5:27:ef:9a:86:99:1f:4b:b2:68:f6:87:80:9e: c0:90:f4:eb:26:69:e9:4f:bd:f7:2e:bf:15:49:14:12:07:15: 21:7d:53:eb:3b:35:9c:d4:dd:21:39:2b:8c:a0:6d:57:c7:5a: db:38:d4:ba:06:ea:67:0c:e9:5a:9b:75:69:38:33:2d:82:cf: 91:5b:8c:30:d1:77:d9:b4:9f:95:b3:9e:15:f6:7b:73:1f:b3: 1c:a8:87:c6:86:f6:50:b5:67:95:72:62:70:9b:90:8b:f8:7c: 0f:15:53:84:3c:07:97:b7:db:86:5a:68:4b:01:56:0e:1f:6f: b9:f5:8d:4b:f5:21:a5:11:6b:b3:46:79:5c:99:ff:2c:60:ef: d5:d6:82:cd:c7:ed:b8:52:04:12:89:9a:03:3b:67:50:91:16: f7:e2:f6:ef -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAN8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUIwNTUxMTAvBgNVBAUTKDk5OUIyRjY1MzlDMjNFQUVCNDY5RTY3NTM5RkIyREM5 MzNEOTgwNDAwHhcNMjUwNjE1MDQzODI4WhcNMjUwNjIyMDQzODI4WjAYMRYwFAYD VQQDEw02ODRlNGU0NS0xOTllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsgNHT8qpy/CRco9SMK1T5yHuEZtXPUMTybwa6Zs9m+AHoYN+v2qhK1BEY3OK lkmqjuBcJXmH0yuagarqHoeqX/+UMSZzeF8zxPADoXW4bpx7ctFn+XjOmWJT+MVh EjScDdryPEOB+RME9/3TbcaB3zjlj6H5IKNDe4JHZUNmA2DslinhPO6OsgWHoww1 W6fsTIZwzlxM/ebhuB3N9y+7nLlYKQPf+fpQc7I1bLJnw2wY7oB7koJ3wVEnBsve 9xXr3hg2CTgqvrt7AtzodPfX4bRkZUpjn0rLelj3G3DCDP+1wW4Eil5ffKkQ+3zg 2bhWjocHKgWjt/OO9p1CX0vimwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDA1i/JM cb6R3aPHtEXD/ni/Zv38MB8GA1UdIwQYMBaAFJmbL2U5wj6utGnmdTn7Lckz2YBA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjA1NS80QUJCQzAxQ0Y1 NTUxMUVFQUNGMTIzNEJDNEY5QUUwMi9tWnN2WlRuQ1BxNjBhZVoxT2ZzdHlUUFpn RUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21ac3ZaVG5DUHE2MGFlWjFPZnN0eVRQWmdFQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QjA1NS80QUJCQzAxQ0Y1NTUxMUVFQUNGMTIzNEJDNEY5QUUwMi9tWnN2WlRuQ1Bx NjBhZVoxT2ZzdHlUUFpnRUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBARgtMkCMu2T04dIVOIPASTrXZms1p7k71wDug/bwacDvkvN7eHn2k R56oWJzLapVv+px87SUZgQFIT4yW3KQEyCOHrSfo3XEwXhh4dpReZ07C/6MD/Rry 3U8Qmnrv5SfvmoaZH0uyaPaHgJ7AkPTrJmnpT733Lr8VSRQSBxUhfVPrOzWc1N0h OSuMoG1Xx1rbONS6BupnDOlam3VpODMtgs+RW4ww0XfZtJ+Vs54V9ntzH7McqIfG hvZQtWeVcmJwm5CL+HwPFVOEPAeXt9uGWmhLAVYOH2+59Y1L9SGlEWuzRnlcmf8s YO/V1oLNx+24UgQSiZoDO2dQkRb34vbv -----END CERTIFICATE-----Generated at Sun Jun 15 08:44:47 2025 by rpki-client