$ rpki-client -vvf rpki.apnic.net/member_repository/A91C278B/06B0B62A0A4811ECBC573D5FC4F9AE02/PEM7ZOZMRt_VjmPBFShEhYFSMf8.mft File: PEM7ZOZMRt_VjmPBFShEhYFSMf8.mft (raw, json) Hash identifier: SrjdzgJtIQjiEZBMFBRnhTJjC/X9jy4lT9jbD1t6fpI= Subject key identifier: 84:14:8B:AD:9F:8B:72:AD:52:F7:ED:BB:24:D5:71:FE:F1:E2:15:76 Authority key identifier: 3C:43:3B:64:E6:4C:46:DF:D5:8E:63:C1:15:28:44:85:81:52:31:FF Certificate issuer: /CN=A91C278B/serialNumber=3C433B64E64C46DFD58E63C115284485815231FF Certificate serial: 0543 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PEM7ZOZMRt_VjmPBFShEhYFSMf8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C278B/06B0B62A0A4811ECBC573D5FC4F9AE02/PEM7ZOZMRt_VjmPBFShEhYFSMf8.mft Manifest number: 0533 Signing time: Sun 03 Aug 2025 00:01:38 +0000 Manifest this update: Sun 03 Aug 2025 00:01:37 +0000 Manifest next update: Sun 10 Aug 2025 00:01:37 +0000 Files and hashes: 1: PEM7ZOZMRt_VjmPBFShEhYFSMf8.crl (hash: mkMUGwp3rJBCNVF5q0qrDaw/cwlcUiMIDxC8ozRE98U=) 2: 9D752204479111ECA77ED34DC4F9AE02.roa (hash: XDKnImKrROyw/ip89561zvYG5bmwAM7xctdHrkfLbGA=) 3: 9BB673AA479111ECA77ED34DC4F9AE02.roa (hash: /DuM5c/5hK0oho9BwTuJNF7dRpHoa2sPJXkyJddg5oQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C278B/06B0B62A0A4811ECBC573D5FC4F9AE02/PEM7ZOZMRt_VjmPBFShEhYFSMf8.crl rsync://rpki.apnic.net/member_repository/A91C278B/06B0B62A0A4811ECBC573D5FC4F9AE02/PEM7ZOZMRt_VjmPBFShEhYFSMf8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PEM7ZOZMRt_VjmPBFShEhYFSMf8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 00:01:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1347 (0x543) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C278B, serialNumber=3C433B64E64C46DFD58E63C115284485815231FF Validity Not Before: Aug 3 00:01:37 2025 GMT Not After : Aug 10 00:01:37 2025 GMT Subject: CN=688ea6e1-c9e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:84:d7:a5:fb:42:53:cf:18:a5:e8:20:35:bf: d9:03:cf:58:ff:d7:79:23:6f:89:94:d8:5d:79:b3: 1a:79:cc:cc:5c:5c:11:35:76:63:04:4d:a4:59:08: b3:49:14:30:c2:ab:14:70:e8:03:99:57:e0:8d:57: 1a:1b:5c:82:3f:eb:70:38:7c:0a:e4:70:d1:13:b8: a3:d1:a4:57:9c:90:65:24:ac:5f:0f:24:5b:6f:60: 19:c2:7c:8e:2d:44:8d:8e:1b:6a:b6:9d:bd:ba:77: 4f:18:90:44:b5:c8:fd:5a:84:f2:16:c6:23:fe:d9: f0:42:51:1f:68:b4:e8:6e:6e:db:ef:95:fc:ff:e8: 47:6c:1a:b6:e3:fb:aa:cd:7c:9e:94:fa:62:7a:94: 0b:98:27:29:68:4b:5f:50:97:9a:50:80:d8:07:35: 52:b9:25:37:f3:c1:04:d4:5e:19:36:78:b1:46:09: 33:64:ad:2f:5e:fa:96:be:3c:3b:39:f9:12:bf:fe: 3d:cf:e2:11:4a:2c:7f:bf:82:6e:cd:2c:77:c8:69: ba:6a:26:70:82:12:ce:b1:f0:c8:c2:04:41:7c:d9: ce:0d:37:f9:fb:00:fa:2d:cc:cd:95:bf:44:db:a8: f3:2a:16:31:62:7f:f8:3d:75:ed:f4:59:67:14:32: 1f:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:14:8B:AD:9F:8B:72:AD:52:F7:ED:BB:24:D5:71:FE:F1:E2:15:76 X509v3 Authority Key Identifier: keyid:3C:43:3B:64:E6:4C:46:DF:D5:8E:63:C1:15:28:44:85:81:52:31:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C278B/06B0B62A0A4811ECBC573D5FC4F9AE02/PEM7ZOZMRt_VjmPBFShEhYFSMf8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PEM7ZOZMRt_VjmPBFShEhYFSMf8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C278B/06B0B62A0A4811ECBC573D5FC4F9AE02/PEM7ZOZMRt_VjmPBFShEhYFSMf8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:c2:f0:29:7d:02:8d:41:2c:35:4f:a9:99:a2:80:15:49:8d: 2a:b2:1d:ba:53:99:67:53:82:d5:b0:04:30:c6:d4:40:35:06: bd:13:d9:39:0f:5c:d9:6b:25:7d:19:86:e5:3b:a3:c9:97:04: 05:75:39:72:0e:33:2a:60:6d:33:32:2f:dc:26:af:25:2a:20: 8e:3c:ea:38:25:65:e1:15:17:14:27:ef:70:77:c9:78:e0:78: c4:44:dc:81:f9:e1:0d:35:5d:f6:fc:e5:ea:a0:b6:33:2d:34: 05:85:6f:fb:83:a6:2b:56:0c:49:f8:60:79:4b:53:2e:b6:d7: 4e:36:d1:2b:c0:f7:08:1d:bb:8a:14:24:f6:e7:24:ea:7d:e1: d5:c8:fb:fe:5f:7d:29:06:1d:9e:44:fe:b3:91:6f:9f:94:03: 8b:2e:e4:a1:d5:16:d3:38:13:54:60:36:66:09:e5:15:39:70: 09:95:40:94:4e:8c:ff:0b:cc:26:30:fa:04:75:04:44:d3:97: dd:3c:98:3f:eb:4d:0c:52:e5:1c:39:92:d1:0c:97:10:6a:a1: 6a:c1:f6:8f:55:a1:48:6d:76:bb:d0:38:6e:06:d3:4c:9f:29: 72:5b:47:b6:16:91:26:3e:af:4d:e2:ff:bf:6c:4a:e2:d5:2d: 8a:4b:99:99 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBUMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzI3OEIxMTAvBgNVBAUTKDNDNDMzQjY0RTY0QzQ2REZENThFNjNDMTE1Mjg0NDg1 ODE1MjMxRkYwHhcNMjUwODAzMDAwMTM3WhcNMjUwODEwMDAwMTM3WjAYMRYwFAYD VQQDEw02ODhlYTZlMS1jOWUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAroTXpftCU88YpeggNb/ZA89Y/9d5I2+JlNhdebMaeczMXFwRNXZjBE2kWQiz SRQwwqsUcOgDmVfgjVcaG1yCP+twOHwK5HDRE7ij0aRXnJBlJKxfDyRbb2AZwnyO LUSNjhtqtp29undPGJBEtcj9WoTyFsYj/tnwQlEfaLTobm7b75X8/+hHbBq24/uq zXyelPpiepQLmCcpaEtfUJeaUIDYBzVSuSU388EE1F4ZNnixRgkzZK0vXvqWvjw7 OfkSv/49z+IRSix/v4JuzSx3yGm6aiZwghLOsfDIwgRBfNnODTf5+wD6LczNlb9E 26jzKhYxYn/4PXXt9FlnFDIfuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIQUi62f i3KtUvftuyTVcf7x4hV2MB8GA1UdIwQYMBaAFDxDO2TmTEbf1Y5jwRUoRIWBUjH/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMjc4Qi8wNkIwQjYyQTBB NDgxMUVDQkM1NzNENUZDNEY5QUUwMi9QRU03Wk9aTVJ0X1ZqbVBCRlNoRWhZRlNN ZjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BFTTdaT1pNUnRfVmptUEJGU2hFaFlGU01mOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Mjc4Qi8wNkIwQjYyQTBBNDgxMUVDQkM1NzNENUZDNEY5QUUwMi9QRU03Wk9aTVJ0 X1ZqbVBCRlNoRWhZRlNNZjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAMwvApfQKNQSw1T6mZooAVSY0qsh26U5lnU4LVsAQwxtRANQa9E9k5 D1zZayV9GYblO6PJlwQFdTlyDjMqYG0zMi/cJq8lKiCOPOo4JWXhFRcUJ+9wd8l4 4HjERNyB+eENNV32/OXqoLYzLTQFhW/7g6YrVgxJ+GB5S1MuttdONtErwPcIHbuK FCT25yTqfeHVyPv+X30pBh2eRP6zkW+flAOLLuSh1RbTOBNUYDZmCeUVOXAJlUCU Toz/C8wmMPoEdQRE05fdPJg/600MUuUcOZLRDJcQaqFqwfaPVaFIbXa70DhuBtNM nylyW0e2FpEmPq9N4v+/bEri1S2KS5mZ -----END CERTIFICATE-----Generated at Mon Aug 4 16:13:35 2025 by rpki-client