$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB39A/E1DD5D42B03911EC953BFB0DC4F9AE02/Znvt9oJs9x83Ba2x89T7FITwiBQ.mft File: Znvt9oJs9x83Ba2x89T7FITwiBQ.mft (raw, json) Hash identifier: 27Jl3rB1TlIRHt7Z8PWyVJz4EJV8SOTkdxTNrxA2OJo= Subject key identifier: EA:FB:F7:B6:2C:7F:18:76:EF:64:19:56:0C:34:57:9E:CA:7B:E4:AE Authority key identifier: 66:7B:ED:F6:82:6C:F7:1F:37:05:AD:B1:F3:D4:FB:14:84:F0:88:14 Certificate issuer: /CN=A91DB39A/serialNumber=667BEDF6826CF71F3705ADB1F3D4FB1484F08814 Certificate serial: 0375 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Znvt9oJs9x83Ba2x89T7FITwiBQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB39A/E1DD5D42B03911EC953BFB0DC4F9AE02/Znvt9oJs9x83Ba2x89T7FITwiBQ.mft Manifest number: 0370 Signing time: Sun 15 Jun 2025 00:38:14 +0000 Manifest this update: Sun 15 Jun 2025 00:38:13 +0000 Manifest next update: Sun 22 Jun 2025 00:38:13 +0000 Files and hashes: 1: Znvt9oJs9x83Ba2x89T7FITwiBQ.crl (hash: tOjMI37eE1+cK9mPSXRGLTAEMQYVVzZpTf3IkQ2ZQB8=) 2: 6108822AB03C11EC918CBA0EC4F9AE02.roa (hash: 1IbCI6SUsnpFHSypZmjM58SN3Uz6QJzWDA0ZH6CaOF8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB39A/E1DD5D42B03911EC953BFB0DC4F9AE02/Znvt9oJs9x83Ba2x89T7FITwiBQ.crl rsync://rpki.apnic.net/member_repository/A91DB39A/E1DD5D42B03911EC953BFB0DC4F9AE02/Znvt9oJs9x83Ba2x89T7FITwiBQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Znvt9oJs9x83Ba2x89T7FITwiBQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 00:38:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 885 (0x375) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB39A, serialNumber=667BEDF6826CF71F3705ADB1F3D4FB1484F08814 Validity Not Before: Jun 15 00:38:13 2025 GMT Not After : Jun 22 00:38:13 2025 GMT Subject: CN=684e15f5-c26f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:cc:d9:39:10:75:f4:7e:ad:24:f8:c8:62:23: de:12:d1:d7:56:27:d9:02:1f:d8:a4:25:1a:70:07: 06:de:57:28:a6:5d:29:3c:03:2d:ce:f8:c6:3c:f9: 33:78:f0:5f:5d:7b:7c:d0:b8:8c:1f:21:0f:76:36: 43:49:69:24:58:8e:5a:22:1a:a5:ed:76:4f:a6:e2: d6:74:b3:ca:88:df:38:e2:4b:df:d9:bb:d3:fe:88: 3d:d6:4f:c5:b8:3a:d0:a6:f5:56:12:6a:b6:85:a7: 37:64:dc:60:ec:47:97:69:1b:e7:8d:0e:e1:29:fa: c6:a9:b1:3b:08:05:63:c4:5f:01:d4:4e:70:99:47: 6f:a1:26:1d:45:5e:3b:51:f8:e2:49:79:d5:94:39: 46:b5:bc:cd:c5:e5:a0:2a:3f:4c:ce:2f:b7:ea:0a: 90:da:81:4a:fd:52:7c:45:39:ab:a1:38:5d:fb:80: 87:2c:ee:5e:97:c9:ee:3a:82:bf:68:8b:14:00:2c: 89:60:78:40:4c:61:64:27:40:0c:8b:51:43:05:5f: ce:2d:72:69:72:f9:a7:18:1d:20:3e:65:0f:a3:61: ad:30:1d:b1:81:00:21:2c:f2:3e:69:bc:ae:99:93: 28:60:df:fa:df:43:aa:36:10:a1:85:ce:3f:06:d4: aa:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:FB:F7:B6:2C:7F:18:76:EF:64:19:56:0C:34:57:9E:CA:7B:E4:AE X509v3 Authority Key Identifier: keyid:66:7B:ED:F6:82:6C:F7:1F:37:05:AD:B1:F3:D4:FB:14:84:F0:88:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB39A/E1DD5D42B03911EC953BFB0DC4F9AE02/Znvt9oJs9x83Ba2x89T7FITwiBQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Znvt9oJs9x83Ba2x89T7FITwiBQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB39A/E1DD5D42B03911EC953BFB0DC4F9AE02/Znvt9oJs9x83Ba2x89T7FITwiBQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:96:98:70:a4:2c:2a:d0:8a:b5:d7:93:3e:72:b0:b4:28:83: 2e:42:bd:5f:d4:9b:df:3b:15:81:14:f4:7d:4f:4a:5e:c4:b9: 68:48:62:76:bb:3c:3c:ea:06:34:ee:cb:18:03:6e:da:b9:df: e5:3d:d6:d7:4d:96:eb:5e:38:44:cd:7e:da:d3:ec:0d:1f:38: 13:36:89:4f:3e:e4:df:d6:cd:f9:68:dd:64:a8:8a:3c:43:92: d9:c7:dc:52:3c:58:ed:7a:5f:aa:0c:a8:80:30:1c:16:c5:51: 0f:02:94:41:81:a1:e2:2f:78:e2:a8:8e:ab:01:64:0c:74:99: 8e:db:f0:00:75:38:5a:dd:a1:29:07:7b:13:43:07:a7:a8:b4: 87:d0:0d:fd:4d:09:d0:8e:08:4a:8a:b8:ff:db:d5:fc:08:f7: b9:8f:ce:13:b2:34:b6:c8:14:42:7d:d7:4b:d2:29:31:06:5d: 66:55:15:15:d5:92:46:0f:de:ce:65:5c:c4:39:8d:40:fc:a1: 39:bf:f4:ab:4c:c4:0d:7d:85:1c:f5:a4:65:2f:2a:a8:31:83: 90:47:49:09:eb:59:2c:4d:b8:4b:a3:04:02:d9:dc:b6:96:4a: ed:a5:e0:ba:54:a9:48:58:44:25:66:10:55:8b:c5:15:b8:df: 19:eb:f1:0d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA3UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REIzOUExMTAvBgNVBAUTKDY2N0JFREY2ODI2Q0Y3MUYzNzA1QURCMUYzRDRGQjE0 ODRGMDg4MTQwHhcNMjUwNjE1MDAzODEzWhcNMjUwNjIyMDAzODEzWjAYMRYwFAYD VQQDEw02ODRlMTVmNS1jMjZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArszZORB19H6tJPjIYiPeEtHXVifZAh/YpCUacAcG3lcopl0pPAMtzvjGPPkz ePBfXXt80LiMHyEPdjZDSWkkWI5aIhql7XZPpuLWdLPKiN844kvf2bvT/og91k/F uDrQpvVWEmq2hac3ZNxg7EeXaRvnjQ7hKfrGqbE7CAVjxF8B1E5wmUdvoSYdRV47 UfjiSXnVlDlGtbzNxeWgKj9Mzi+36gqQ2oFK/VJ8RTmroThd+4CHLO5el8nuOoK/ aIsUACyJYHhATGFkJ0AMi1FDBV/OLXJpcvmnGB0gPmUPo2GtMB2xgQAhLPI+abyu mZMoYN/630OqNhChhc4/BtSqawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOr797Ys fxh272QZVgw0V57Ke+SuMB8GA1UdIwQYMBaAFGZ77faCbPcfNwWtsfPU+xSE8IgU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjM5QS9FMURENUQ0MkIw MzkxMUVDOTUzQkZCMERDNEY5QUUwMi9abnZ0OW9Kczl4ODNCYTJ4ODlUN0ZJVHdp QlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pudnQ5b0pzOXg4M0JhMng4OVQ3RklUd2lCUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QjM5QS9FMURENUQ0MkIwMzkxMUVDOTUzQkZCMERDNEY5QUUwMi9abnZ0OW9Kczl4 ODNCYTJ4ODlUN0ZJVHdpQlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB5lphwpCwq0Iq115M+crC0KIMuQr1f1JvfOxWBFPR9T0pexLloSGJ2 uzw86gY07ssYA27aud/lPdbXTZbrXjhEzX7a0+wNHzgTNolPPuTf1s35aN1kqIo8 Q5LZx9xSPFjtel+qDKiAMBwWxVEPApRBgaHiL3jiqI6rAWQMdJmO2/AAdTha3aEp B3sTQwenqLSH0A39TQnQjghKirj/29X8CPe5j84TsjS2yBRCfddL0ikxBl1mVRUV 1ZJGD97OZVzEOY1A/KE5v/SrTMQNfYUc9aRlLyqoMYOQR0kJ61ksTbhLowQC2dy2 lkrtpeC6VKlIWEQlZhBVi8UVuN8Z6/EN -----END CERTIFICATE-----Generated at Mon Jun 16 21:37:30 2025 by rpki-client