$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9011/3888E0C4C73A11EB90075510C4F9AE02/1RZ7lweHQQlX4l2fh1CFYPAFd24.mft File: 1RZ7lweHQQlX4l2fh1CFYPAFd24.mft (raw, json) Hash identifier: P1o3B2L7PFAoxTMFWQ6OMou7EewK66XzsNXXTB8eZA8= Subject key identifier: 8A:8C:21:79:95:F5:E6:6B:43:D3:8E:C8:90:C9:DC:35:CF:28:48:FA Authority key identifier: D5:16:7B:97:07:87:41:09:57:E2:5D:9F:87:50:85:60:F0:05:77:6E Certificate issuer: /CN=A91B9011/serialNumber=D5167B970787410957E25D9F87508560F005776E Certificate serial: 05C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1RZ7lweHQQlX4l2fh1CFYPAFd24.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B9011/3888E0C4C73A11EB90075510C4F9AE02/1RZ7lweHQQlX4l2fh1CFYPAFd24.mft Manifest number: 05BD Signing time: Sat 14 Jun 2025 22:50:29 +0000 Manifest this update: Sat 14 Jun 2025 22:50:29 +0000 Manifest next update: Sat 21 Jun 2025 22:50:29 +0000 Files and hashes: 1: 1RZ7lweHQQlX4l2fh1CFYPAFd24.crl (hash: Z/yP7GW/GvQfUSIIdcSJJwgqiXFmCsGC9gN+AKFFSTI=) 2: 438893AC55BE11EDBDE51983C4F9AE02.roa (hash: Y1Hqc3CucW1MGNfTEVOgwuu3xdmSB7zSj6HU8UBJr7c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B9011/3888E0C4C73A11EB90075510C4F9AE02/1RZ7lweHQQlX4l2fh1CFYPAFd24.crl rsync://rpki.apnic.net/member_repository/A91B9011/3888E0C4C73A11EB90075510C4F9AE02/1RZ7lweHQQlX4l2fh1CFYPAFd24.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1RZ7lweHQQlX4l2fh1CFYPAFd24.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 22:50:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1474 (0x5c2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B9011, serialNumber=D5167B970787410957E25D9F87508560F005776E Validity Not Before: Jun 14 22:50:29 2025 GMT Not After : Jun 21 22:50:29 2025 GMT Subject: CN=684dfcb5-452c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:c5:e4:0f:f1:55:85:6f:63:32:cc:15:b6:c9: 65:8e:9c:0f:d5:d1:66:97:b6:a8:f9:f1:d9:c7:82: e5:09:4e:79:b2:da:8c:73:76:a8:c4:83:c5:0f:ac: 70:ec:a1:0e:9d:48:00:83:eb:c8:86:2b:c7:c8:2f: 29:c3:e9:7a:08:8d:30:3a:b4:3b:eb:fb:fc:1a:23: 0c:b9:a8:cc:71:aa:0c:4e:2e:bb:c8:d6:43:e7:d7: cb:75:7d:5f:a4:2f:27:a2:bf:01:86:e9:48:70:e4: 14:f8:d8:45:d9:11:f4:bb:75:8f:7d:8b:32:01:82: 75:d0:be:d9:ce:0c:60:9a:83:d5:51:dd:03:3d:5c: 5d:c4:41:05:5f:03:99:1d:49:a6:f0:13:9b:4b:eb: 3c:33:fb:a9:6b:b3:ef:12:cc:4d:18:f3:da:b1:47: ec:25:a9:ec:8b:9f:9d:5e:88:45:d2:75:9c:79:83: 3b:f6:39:1e:e7:1a:e4:69:1c:0e:61:3c:05:78:94: a1:7e:7c:ef:c0:0f:e9:a0:3d:50:8f:91:56:a4:c1: 61:f3:9c:59:f4:bf:59:12:b5:58:7a:f8:6d:e9:21: ef:fa:cf:d0:81:83:82:c0:b0:23:8d:7a:bc:74:e6: bb:48:eb:0e:48:34:0d:87:e2:88:be:e7:e3:50:d6: 42:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:8C:21:79:95:F5:E6:6B:43:D3:8E:C8:90:C9:DC:35:CF:28:48:FA X509v3 Authority Key Identifier: keyid:D5:16:7B:97:07:87:41:09:57:E2:5D:9F:87:50:85:60:F0:05:77:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B9011/3888E0C4C73A11EB90075510C4F9AE02/1RZ7lweHQQlX4l2fh1CFYPAFd24.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1RZ7lweHQQlX4l2fh1CFYPAFd24.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9011/3888E0C4C73A11EB90075510C4F9AE02/1RZ7lweHQQlX4l2fh1CFYPAFd24.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:6b:0d:9a:9b:2f:93:2d:32:1c:c9:33:28:04:d6:00:8f:0d: 4d:d3:60:8c:8f:70:9b:96:3e:13:e9:71:ef:a4:39:64:14:18: 2f:27:40:87:76:4b:1b:4c:ce:75:7f:a1:6a:bd:3f:1b:3e:3f: 67:04:6f:38:14:ca:cf:8b:6c:a2:e9:c8:b3:ea:c3:05:79:8c: 43:ca:82:fd:d9:6b:d0:72:00:41:fa:36:67:2b:85:a1:2a:5c: ec:e3:58:37:c2:d0:c9:4b:18:c4:fe:7f:0e:57:ac:03:25:34: b5:8e:09:40:b7:42:18:f2:b9:e6:d7:a7:da:d9:fa:48:d7:d5: 76:5f:6d:e0:29:2f:9f:6c:3c:cb:4e:8a:42:40:cc:de:37:33: 60:be:29:4d:f5:60:60:15:eb:70:09:ff:c1:21:27:94:fa:6e: 85:ba:a0:8c:47:3f:86:17:cb:f7:c8:73:3b:c0:8f:87:8b:0d: 92:c2:70:5f:14:ca:ec:0f:e5:17:73:7b:d6:50:9c:ac:d5:f7: 70:64:79:38:cf:df:26:3d:67:76:7c:7c:72:25:a6:09:02:00: 15:fb:53:a7:9b:f0:ef:59:cb:a0:0e:7b:62:13:09:38:e7:0e: f9:55:08:1e:a5:2e:21:88:a6:76:7c:81:04:4c:45:1b:0a:20: ce:43:4e:a3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBcIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjkwMTExMTAvBgNVBAUTKEQ1MTY3Qjk3MDc4NzQxMDk1N0UyNUQ5Rjg3NTA4NTYw RjAwNTc3NkUwHhcNMjUwNjE0MjI1MDI5WhcNMjUwNjIxMjI1MDI5WjAYMRYwFAYD VQQDEw02ODRkZmNiNS00NTJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzcXkD/FVhW9jMswVtslljpwP1dFml7ao+fHZx4LlCU55stqMc3aoxIPFD6xw 7KEOnUgAg+vIhivHyC8pw+l6CI0wOrQ76/v8GiMMuajMcaoMTi67yNZD59fLdX1f pC8nor8BhulIcOQU+NhF2RH0u3WPfYsyAYJ10L7ZzgxgmoPVUd0DPVxdxEEFXwOZ HUmm8BObS+s8M/upa7PvEsxNGPPasUfsJansi5+dXohF0nWceYM79jke5xrkaRwO YTwFeJShfnzvwA/poD1Qj5FWpMFh85xZ9L9ZErVYevht6SHv+s/QgYOCwLAjjXq8 dOa7SOsOSDQNh+KIvufjUNZCGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIqMIXmV 9eZrQ9OOyJDJ3DXPKEj6MB8GA1UdIwQYMBaAFNUWe5cHh0EJV+Jdn4dQhWDwBXdu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOTAxMS8zODg4RTBDNEM3 M0ExMUVCOTAwNzU1MTBDNEY5QUUwMi8xUlo3bHdlSFFRbFg0bDJmaDFDRllQQUZk MjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFSWjdsd2VIUVFsWDRsMmZoMUNGWVBBRmQyNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OTAxMS8zODg4RTBDNEM3M0ExMUVCOTAwNzU1MTBDNEY5QUUwMi8xUlo3bHdlSFFR bFg0bDJmaDFDRllQQUZkMjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCVaw2amy+TLTIcyTMoBNYAjw1N02CMj3Cblj4T6XHvpDlkFBgvJ0CH dksbTM51f6FqvT8bPj9nBG84FMrPi2yi6ciz6sMFeYxDyoL92WvQcgBB+jZnK4Wh Klzs41g3wtDJSxjE/n8OV6wDJTS1jglAt0IY8rnm16fa2fpI19V2X23gKS+fbDzL TopCQMzeNzNgvilN9WBgFetwCf/BISeU+m6FuqCMRz+GF8v3yHM7wI+Hiw2SwnBf FMrsD+UXc3vWUJys1fdwZHk4z98mPWd2fHxyJaYJAgAV+1Onm/DvWcugDntiEwk4 5w75VQgepS4hiKZ2fIEETEUbCiDOQ06j -----END CERTIFICATE-----Generated at Sun Jun 15 10:21:41 2025 by rpki-client