$ rpki-client -vvf rpki.apnic.net/member_repository/A91D63AF/E14D1AB4B6A611EEA04A8B23C4F9AE02/7zCiQUbfZrH6b7pdZ2dp62Szh6o.mft File: 7zCiQUbfZrH6b7pdZ2dp62Szh6o.mft (raw, json) Hash identifier: T+EFut8FUqUUE1xM5Wj1hkitNFRgA5H58c77D1o/wLM= Subject key identifier: D5:1E:A6:12:41:C3:8E:C7:DF:76:26:56:BA:0B:BC:40:47:69:FC:63 Authority key identifier: EF:30:A2:41:46:DF:66:B1:FA:6F:BA:5D:67:67:69:EB:64:B3:87:AA Certificate issuer: /CN=A91D63AF/serialNumber=EF30A24146DF66B1FA6FBA5D676769EB64B387AA Certificate serial: 010F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7zCiQUbfZrH6b7pdZ2dp62Szh6o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D63AF/E14D1AB4B6A611EEA04A8B23C4F9AE02/7zCiQUbfZrH6b7pdZ2dp62Szh6o.mft Manifest number: 010C Signing time: Fri 13 Jun 2025 03:59:51 +0000 Manifest this update: Fri 13 Jun 2025 03:59:50 +0000 Manifest next update: Fri 20 Jun 2025 03:59:50 +0000 Files and hashes: 1: 7zCiQUbfZrH6b7pdZ2dp62Szh6o.crl (hash: PSeEZXjk5Kil1TpXujeOhMTmQppTislEkDG4vMB8NdY=) 2: E3E47D36B6B911EE8E72C641C4F9AE02.roa (hash: yzICNTcM283Dqn+31XlCHYK+SaKesuIOk3Z/S3+BpWk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D63AF/E14D1AB4B6A611EEA04A8B23C4F9AE02/7zCiQUbfZrH6b7pdZ2dp62Szh6o.crl rsync://rpki.apnic.net/member_repository/A91D63AF/E14D1AB4B6A611EEA04A8B23C4F9AE02/7zCiQUbfZrH6b7pdZ2dp62Szh6o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7zCiQUbfZrH6b7pdZ2dp62Szh6o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 03:59:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 271 (0x10f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D63AF, serialNumber=EF30A24146DF66B1FA6FBA5D676769EB64B387AA Validity Not Before: Jun 13 03:59:50 2025 GMT Not After : Jun 20 03:59:50 2025 GMT Subject: CN=684ba237-8de0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:ec:03:ea:65:2e:1b:2e:1a:1d:b9:6a:18:d3: 59:64:07:f9:50:70:65:10:23:48:2c:03:48:92:c3: bb:2c:e0:a9:a9:1a:29:3d:87:91:ce:b4:71:ed:57: ff:0b:bc:8f:e4:fe:cb:7e:c3:4a:18:fd:b3:82:ee: b0:53:39:42:ed:20:17:09:fc:34:2a:ba:44:5e:38: 2c:00:31:16:25:ce:18:55:8b:4e:be:77:d2:39:6e: 6e:81:4b:90:1b:19:62:ea:c0:30:93:73:49:01:2d: 92:25:dd:3e:52:ba:72:77:81:4b:2d:24:02:ea:e8: 0b:57:5d:e8:c2:39:69:a5:db:cf:f1:47:e2:a7:db: 83:fc:b4:a0:b5:80:35:04:0f:99:3c:8b:24:1d:2e: 43:ef:02:7c:60:27:54:08:a4:29:13:b8:4a:13:b9: 19:3e:b2:99:0b:b5:ed:98:e0:cf:c0:46:4c:d4:54: c9:5f:13:76:32:5a:12:fe:e7:79:ac:44:14:ba:25: fe:b6:cf:14:15:b4:ed:8a:82:e1:40:0a:41:18:b5: 71:ea:d7:de:ea:be:e4:79:57:cc:af:34:2a:58:54: 6d:43:9d:f2:63:cf:1c:39:05:0c:61:70:e4:99:13: 1b:eb:7e:fb:c0:2a:12:23:c1:2f:cf:d7:e5:d7:72: ff:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:1E:A6:12:41:C3:8E:C7:DF:76:26:56:BA:0B:BC:40:47:69:FC:63 X509v3 Authority Key Identifier: keyid:EF:30:A2:41:46:DF:66:B1:FA:6F:BA:5D:67:67:69:EB:64:B3:87:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D63AF/E14D1AB4B6A611EEA04A8B23C4F9AE02/7zCiQUbfZrH6b7pdZ2dp62Szh6o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7zCiQUbfZrH6b7pdZ2dp62Szh6o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D63AF/E14D1AB4B6A611EEA04A8B23C4F9AE02/7zCiQUbfZrH6b7pdZ2dp62Szh6o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:f4:45:a6:3d:9c:2a:d7:11:a3:04:fa:1a:d3:7f:53:a3:01: 08:c6:5f:68:34:05:06:ad:23:bb:16:d3:5e:02:a1:62:28:b2: af:ea:a2:cf:55:8b:6d:28:7b:b9:c9:3f:44:e3:67:f6:37:d1: cc:96:b3:d2:be:b7:82:68:19:10:8f:63:6b:10:cc:a8:4e:e3: 76:eb:b7:b2:f3:48:bf:bb:2d:d3:15:ca:e1:73:72:0e:74:33: f9:01:e2:7c:94:86:c5:6f:0a:e7:dd:b8:f8:4d:38:19:9f:1b: a2:a4:e8:b9:2a:22:05:c3:91:c6:7a:c9:da:e3:41:e2:75:36: 46:67:1b:ef:3b:2c:7d:61:91:41:2a:6b:a9:64:79:98:c4:1c: 82:88:2d:97:00:5a:47:d4:d6:0d:a5:7a:ca:4c:75:91:54:27: 67:25:be:21:f8:bf:75:db:5e:df:43:31:fc:eb:04:b1:c4:e5: 08:21:71:fd:2d:d8:6e:bf:4f:97:fd:ac:bb:b1:97:06:15:98: 58:a4:ef:93:bb:18:87:3c:a2:e5:01:27:df:bf:33:ec:f0:cc: 8c:8f:69:25:f2:85:9c:4c:23:d3:02:09:19:a8:de:04:81:5b: 31:02:f2:e2:8c:8f:4d:ad:e8:3a:17:12:b9:5f:6a:47:2c:9b: 79:ac:5e:31 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDYzQUYxMTAvBgNVBAUTKEVGMzBBMjQxNDZERjY2QjFGQTZGQkE1RDY3Njc2OUVC NjRCMzg3QUEwHhcNMjUwNjEzMDM1OTUwWhcNMjUwNjIwMDM1OTUwWjAYMRYwFAYD VQQDEw02ODRiYTIzNy04ZGUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0ewD6mUuGy4aHblqGNNZZAf5UHBlECNILANIksO7LOCpqRopPYeRzrRx7Vf/ C7yP5P7LfsNKGP2zgu6wUzlC7SAXCfw0KrpEXjgsADEWJc4YVYtOvnfSOW5ugUuQ Gxli6sAwk3NJAS2SJd0+Urpyd4FLLSQC6ugLV13owjlppdvP8Ufip9uD/LSgtYA1 BA+ZPIskHS5D7wJ8YCdUCKQpE7hKE7kZPrKZC7XtmODPwEZM1FTJXxN2MloS/ud5 rEQUuiX+ts8UFbTtioLhQApBGLVx6tfe6r7keVfMrzQqWFRtQ53yY88cOQUMYXDk mRMb6377wCoSI8Evz9fl13L/ywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNUephJB w47H33YmVroLvEBHafxjMB8GA1UdIwQYMBaAFO8wokFG32ax+m+6XWdnaetks4eq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjNBRi9FMTREMUFCNEI2 QTYxMUVFQTA0QThCMjNDNEY5QUUwMi83ekNpUVViZlpySDZiN3BkWjJkcDYyU3po Nm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzd6Q2lRVWJmWnJINmI3cGRaMmRwNjJTemg2by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NjNBRi9FMTREMUFCNEI2QTYxMUVFQTA0QThCMjNDNEY5QUUwMi83ekNpUVViZlpy SDZiN3BkWjJkcDYyU3poNm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC19EWmPZwq1xGjBPoa039TowEIxl9oNAUGrSO7FtNeAqFiKLKv6qLP VYttKHu5yT9E42f2N9HMlrPSvreCaBkQj2NrEMyoTuN267ey80i/uy3TFcrhc3IO dDP5AeJ8lIbFbwrn3bj4TTgZnxuipOi5KiIFw5HGesna40HidTZGZxvvOyx9YZFB KmupZHmYxByCiC2XAFpH1NYNpXrKTHWRVCdnJb4h+L91217fQzH86wSxxOUIIXH9 Ldhuv0+X/ay7sZcGFZhYpO+TuxiHPKLlASffvzPs8MyMj2kl8oWcTCPTAgkZqN4E gVsxAvLijI9Nreg6FxK5X2pHLJt5rF4x -----END CERTIFICATE-----Generated at Sun Jun 15 04:44:24 2025 by rpki-client