$ rpki-client -vvf rpki.apnic.net/member_repository/A91C278B/06B0B62A0A4811ECBC573D5FC4F9AE02/PEM7ZOZMRt_VjmPBFShEhYFSMf8.mft File: PEM7ZOZMRt_VjmPBFShEhYFSMf8.mft (raw, json) Hash identifier: gZ3Lm7K6FNCVswv0x8gAqyx70Q+KSes8WmQxdbTmMFA= Subject key identifier: E3:80:0F:96:D8:CB:A8:57:21:FB:D0:AE:F5:65:47:F9:51:37:55:07 Authority key identifier: 3C:43:3B:64:E6:4C:46:DF:D5:8E:63:C1:15:28:44:85:81:52:31:FF Certificate issuer: /CN=A91C278B/serialNumber=3C433B64E64C46DFD58E63C115284485815231FF Certificate serial: 0529 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PEM7ZOZMRt_VjmPBFShEhYFSMf8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C278B/06B0B62A0A4811ECBC573D5FC4F9AE02/PEM7ZOZMRt_VjmPBFShEhYFSMf8.mft Manifest number: 0519 Signing time: Thu 12 Jun 2025 23:12:51 +0000 Manifest this update: Thu 12 Jun 2025 23:12:50 +0000 Manifest next update: Thu 19 Jun 2025 23:12:50 +0000 Files and hashes: 1: PEM7ZOZMRt_VjmPBFShEhYFSMf8.crl (hash: zRXmhM8+vPK/XKbo5s98EgK1vTbkL1YNzfD51lnn1po=) 2: 9D752204479111ECA77ED34DC4F9AE02.roa (hash: XDKnImKrROyw/ip89561zvYG5bmwAM7xctdHrkfLbGA=) 3: 9BB673AA479111ECA77ED34DC4F9AE02.roa (hash: /DuM5c/5hK0oho9BwTuJNF7dRpHoa2sPJXkyJddg5oQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C278B/06B0B62A0A4811ECBC573D5FC4F9AE02/PEM7ZOZMRt_VjmPBFShEhYFSMf8.crl rsync://rpki.apnic.net/member_repository/A91C278B/06B0B62A0A4811ECBC573D5FC4F9AE02/PEM7ZOZMRt_VjmPBFShEhYFSMf8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PEM7ZOZMRt_VjmPBFShEhYFSMf8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 23:12:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1321 (0x529) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C278B, serialNumber=3C433B64E64C46DFD58E63C115284485815231FF Validity Not Before: Jun 12 23:12:50 2025 GMT Not After : Jun 19 23:12:50 2025 GMT Subject: CN=684b5ef2-6cf2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:f4:63:f1:a6:a6:bf:6e:ee:67:f9:d8:aa:6e: b1:97:88:cb:3f:e9:25:a7:30:a6:ae:fc:ba:ea:30: ea:49:3a:1f:2d:1e:2c:32:5f:39:74:77:68:fc:e9: 9f:be:bc:e3:b7:d4:9c:8c:2e:7a:c5:86:70:08:3a: 7b:03:20:58:77:ab:bf:6b:5a:fc:f4:8a:bc:a4:ae: 5e:6b:5e:fe:9e:d8:2d:77:c7:a2:a1:4f:5b:08:8a: 20:8e:09:9f:c6:ce:50:cd:a5:c4:93:a4:d7:cc:45: f0:80:35:b6:3a:fe:8c:60:63:07:4d:3a:d8:21:c7: 20:21:74:06:ab:f5:81:58:a8:0e:85:42:61:0e:f0: 2b:5f:fb:f6:44:a5:a5:72:16:b3:59:83:7c:5f:38: 67:6e:ba:60:10:9c:d2:ec:9f:1b:e4:0b:ab:17:aa: 0d:dc:dc:92:3c:27:13:28:de:b4:11:5f:f6:19:b3: 1c:33:ab:bc:73:70:5a:ea:89:e0:8b:aa:4a:2d:9b: 00:cb:04:bb:85:53:2b:13:d5:cf:87:c5:47:7e:d0: a6:81:bb:79:eb:44:e5:80:68:dd:f1:4a:bd:36:74: a2:e5:fc:1f:22:96:d8:18:3b:c5:f7:9b:d9:93:6f: 1e:2c:bf:4d:47:b1:af:b4:75:e8:13:1c:98:87:23: 36:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:80:0F:96:D8:CB:A8:57:21:FB:D0:AE:F5:65:47:F9:51:37:55:07 X509v3 Authority Key Identifier: keyid:3C:43:3B:64:E6:4C:46:DF:D5:8E:63:C1:15:28:44:85:81:52:31:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C278B/06B0B62A0A4811ECBC573D5FC4F9AE02/PEM7ZOZMRt_VjmPBFShEhYFSMf8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PEM7ZOZMRt_VjmPBFShEhYFSMf8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C278B/06B0B62A0A4811ECBC573D5FC4F9AE02/PEM7ZOZMRt_VjmPBFShEhYFSMf8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:ef:dd:09:b8:a4:fe:6f:49:be:bc:55:33:07:65:cd:ca:cb: f6:65:8a:f1:6d:0f:e7:83:d7:50:6d:e7:03:a2:ae:07:21:42: 4d:7f:ae:af:a3:db:89:a0:19:ae:f2:1c:76:b4:08:e6:7c:26: 6a:fa:37:71:33:8f:e9:3d:75:87:55:59:fd:a3:e1:3e:1c:01: 38:60:9c:91:be:e9:b3:c4:bd:5c:dd:e2:25:69:67:39:80:58: 23:a3:40:b9:98:22:4b:3a:15:b2:dd:36:4b:14:52:58:e8:e7: a1:e7:9b:2f:70:ec:f4:c3:3a:1d:dc:72:d6:5d:87:dd:90:b8: 86:78:3a:64:94:b9:f8:df:56:0b:24:35:7a:0b:cf:8c:74:42: 7c:56:8f:66:73:14:52:92:71:48:fa:7f:1c:a9:56:3b:58:25: b5:9c:ed:4f:f2:42:9c:9e:b1:f7:e7:43:11:a2:cf:af:84:d0: 8c:e6:d7:9b:ff:ab:29:e2:1f:16:87:5e:66:48:51:9e:7d:35: b6:22:63:77:8a:05:29:f5:69:e8:93:ba:4b:57:b2:11:00:41: f6:49:12:5a:cf:d8:27:05:94:54:cc:a9:af:b4:a0:e2:98:c4: 4c:ca:80:8d:53:69:ba:10:fe:04:ca:d4:c0:7f:be:0a:a3:2e: 79:c3:ab:d7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBSkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzI3OEIxMTAvBgNVBAUTKDNDNDMzQjY0RTY0QzQ2REZENThFNjNDMTE1Mjg0NDg1 ODE1MjMxRkYwHhcNMjUwNjEyMjMxMjUwWhcNMjUwNjE5MjMxMjUwWjAYMRYwFAYD VQQDEw02ODRiNWVmMi02Y2YyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp/Rj8aamv27uZ/nYqm6xl4jLP+klpzCmrvy66jDqSTofLR4sMl85dHdo/Omf vrzjt9ScjC56xYZwCDp7AyBYd6u/a1r89Iq8pK5ea17+ntgtd8eioU9bCIogjgmf xs5QzaXEk6TXzEXwgDW2Ov6MYGMHTTrYIccgIXQGq/WBWKgOhUJhDvArX/v2RKWl chazWYN8XzhnbrpgEJzS7J8b5AurF6oN3NySPCcTKN60EV/2GbMcM6u8c3Ba6ong i6pKLZsAywS7hVMrE9XPh8VHftCmgbt560TlgGjd8Uq9NnSi5fwfIpbYGDvF95vZ k28eLL9NR7GvtHXoExyYhyM2JwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOOAD5bY y6hXIfvQrvVlR/lRN1UHMB8GA1UdIwQYMBaAFDxDO2TmTEbf1Y5jwRUoRIWBUjH/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMjc4Qi8wNkIwQjYyQTBB NDgxMUVDQkM1NzNENUZDNEY5QUUwMi9QRU03Wk9aTVJ0X1ZqbVBCRlNoRWhZRlNN ZjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BFTTdaT1pNUnRfVmptUEJGU2hFaFlGU01mOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Mjc4Qi8wNkIwQjYyQTBBNDgxMUVDQkM1NzNENUZDNEY5QUUwMi9QRU03Wk9aTVJ0 X1ZqbVBCRlNoRWhZRlNNZjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAy790JuKT+b0m+vFUzB2XNysv2ZYrxbQ/ng9dQbecDoq4HIUJNf66v o9uJoBmu8hx2tAjmfCZq+jdxM4/pPXWHVVn9o+E+HAE4YJyRvumzxL1c3eIlaWc5 gFgjo0C5mCJLOhWy3TZLFFJY6Oeh55svcOz0wzod3HLWXYfdkLiGeDpklLn431YL JDV6C8+MdEJ8Vo9mcxRSknFI+n8cqVY7WCW1nO1P8kKcnrH350MRos+vhNCM5teb /6sp4h8Wh15mSFGefTW2ImN3igUp9Wnok7pLV7IRAEH2SRJaz9gnBZRUzKmvtKDi mMRMyoCNU2m6EP4EytTAf74Koy55w6vX -----END CERTIFICATE-----Generated at Sat Jun 14 17:21:45 2025 by rpki-client