$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE500/49E6FE46C72D11EE9C7C351DC4F9AE02/cz1KHp8pnM0_jnJKteer9Ci7GV0.mft File: cz1KHp8pnM0_jnJKteer9Ci7GV0.mft (raw, json) Hash identifier: CBRCIUkqJulh/5J2MrA1WDI8SwAy/OlrxQMmCxGmOCw= Subject key identifier: A3:7D:A7:30:66:48:6B:19:E3:E8:D0:A9:B7:4A:FB:6E:C0:C6:0A:91 Authority key identifier: 73:3D:4A:1E:9F:29:9C:CD:3F:8E:72:4A:B5:E7:AB:F4:28:BB:19:5D Certificate issuer: /CN=A91DE500/serialNumber=733D4A1E9F299CCD3F8E724AB5E7ABF428BB195D Certificate serial: 0105 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cz1KHp8pnM0_jnJKteer9Ci7GV0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE500/49E6FE46C72D11EE9C7C351DC4F9AE02/cz1KHp8pnM0_jnJKteer9Ci7GV0.mft Manifest number: 0102 Signing time: Fri 13 Jun 2025 04:07:32 +0000 Manifest this update: Fri 13 Jun 2025 04:07:31 +0000 Manifest next update: Fri 20 Jun 2025 04:07:31 +0000 Files and hashes: 1: cz1KHp8pnM0_jnJKteer9Ci7GV0.crl (hash: 3X4kSzWNTuLdo+M2fXYnYbXdhhB3mXQI24JuPl4hgqg=) 2: 0C897F3EE84111EFA819A335C4F9AE02.roa (hash: 5gQHbtykFLXuasC1zPt+ul7Apydf3ObCnPPOkuixA6c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE500/49E6FE46C72D11EE9C7C351DC4F9AE02/cz1KHp8pnM0_jnJKteer9Ci7GV0.crl rsync://rpki.apnic.net/member_repository/A91DE500/49E6FE46C72D11EE9C7C351DC4F9AE02/cz1KHp8pnM0_jnJKteer9Ci7GV0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cz1KHp8pnM0_jnJKteer9Ci7GV0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 04:07:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 261 (0x105) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE500, serialNumber=733D4A1E9F299CCD3F8E724AB5E7ABF428BB195D Validity Not Before: Jun 13 04:07:31 2025 GMT Not After : Jun 20 04:07:31 2025 GMT Subject: CN=684ba404-c2ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:4b:05:fa:a1:26:6f:d8:a9:e3:5a:18:79:4b: 39:4f:73:93:bb:0f:d7:c8:06:f1:3d:c0:82:43:d9: f7:f2:fd:42:04:20:9d:08:b7:b9:ae:2d:c7:46:bd: b6:97:04:d7:51:a1:f2:91:c4:4d:94:1e:ed:75:2a: 26:86:0c:aa:4a:83:e7:aa:e3:72:2b:14:ac:5a:16: a7:b0:d1:00:c0:01:f3:cb:5f:f8:6d:67:95:79:20: 95:ad:4e:f4:36:dc:38:87:08:aa:90:37:c8:33:b6: 21:c6:f2:2b:f0:5e:e0:19:62:95:ef:7b:a2:fd:d0: 53:90:a4:e2:ef:57:5a:e0:a0:9b:ef:e4:78:51:27: ce:98:4f:77:8e:4d:86:b9:f1:1c:1c:6c:74:0e:0f: 17:36:a8:37:b1:8a:f2:f0:9d:65:c0:e3:1d:61:ec: bd:fd:16:22:1f:3b:47:fa:08:fc:34:b5:a1:17:bd: f5:c2:25:09:d5:af:41:2c:8e:cb:40:6f:02:e2:20: 90:23:bd:35:40:e8:d3:81:9f:f8:5a:e8:46:f5:b8: 5a:d6:85:9c:bd:f2:79:68:5f:06:a3:1d:cd:73:24: 04:eb:d3:aa:2c:a6:b2:b8:03:7f:87:ed:33:1a:03: 87:7e:66:3c:a6:8f:9d:fa:92:91:4a:2c:0f:bd:df: 12:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:7D:A7:30:66:48:6B:19:E3:E8:D0:A9:B7:4A:FB:6E:C0:C6:0A:91 X509v3 Authority Key Identifier: keyid:73:3D:4A:1E:9F:29:9C:CD:3F:8E:72:4A:B5:E7:AB:F4:28:BB:19:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE500/49E6FE46C72D11EE9C7C351DC4F9AE02/cz1KHp8pnM0_jnJKteer9Ci7GV0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cz1KHp8pnM0_jnJKteer9Ci7GV0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE500/49E6FE46C72D11EE9C7C351DC4F9AE02/cz1KHp8pnM0_jnJKteer9Ci7GV0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:9b:0a:7b:25:53:e0:d1:64:52:dc:1e:d4:cb:04:48:44:cd: 5a:eb:d0:5b:ac:e9:95:17:4a:0a:bc:e1:31:4d:9e:86:33:5b: b1:9f:e5:a5:df:2e:71:a7:c2:7f:1e:e7:dd:77:b1:7b:ba:31: b6:5a:d9:f2:a1:87:1f:68:7e:a2:4a:db:32:8d:90:08:07:01: 7a:60:ac:af:0c:cd:59:00:dd:b8:04:9b:cb:40:1c:2d:d4:2e: 76:ac:cb:a4:00:bf:db:c7:ed:8e:3e:0c:48:e2:49:88:3d:04: 93:26:9e:08:f0:8a:c8:da:76:02:65:26:ec:6a:d3:96:ec:b3: 81:c8:b2:d8:92:f3:83:71:38:5f:a5:e7:37:8b:7e:61:62:68: 34:c3:bd:14:60:24:02:70:2f:c9:a3:e9:3e:67:89:9a:62:42: dc:92:29:f1:c5:da:fc:ef:c0:b8:15:bb:53:04:bd:94:5b:71: 78:e8:7c:84:d1:95:6c:7f:aa:8e:d6:02:d8:6f:77:2f:4e:87: 63:93:15:5a:c6:e2:50:6d:79:6d:33:75:3a:19:f5:9e:63:65: bd:ca:b3:5d:46:36:26:30:8f:23:92:6e:25:58:3f:22:bd:15: 87:52:f7:3a:6b:0a:06:5f:29:ef:c1:5c:bd:8a:9e:e7:37:fd: 3b:dd:62:c2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REU1MDAxMTAvBgNVBAUTKDczM0Q0QTFFOUYyOTlDQ0QzRjhFNzI0QUI1RTdBQkY0 MjhCQjE5NUQwHhcNMjUwNjEzMDQwNzMxWhcNMjUwNjIwMDQwNzMxWjAYMRYwFAYD VQQDEw02ODRiYTQwNC1jMmVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA30sF+qEmb9ip41oYeUs5T3OTuw/XyAbxPcCCQ9n38v1CBCCdCLe5ri3HRr22 lwTXUaHykcRNlB7tdSomhgyqSoPnquNyKxSsWhansNEAwAHzy1/4bWeVeSCVrU70 Ntw4hwiqkDfIM7YhxvIr8F7gGWKV73ui/dBTkKTi71da4KCb7+R4USfOmE93jk2G ufEcHGx0Dg8XNqg3sYry8J1lwOMdYey9/RYiHztH+gj8NLWhF731wiUJ1a9BLI7L QG8C4iCQI701QOjTgZ/4WuhG9bha1oWcvfJ5aF8Gox3NcyQE69OqLKayuAN/h+0z GgOHfmY8po+d+pKRSiwPvd8SowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKN9pzBm SGsZ4+jQqbdK+27AxgqRMB8GA1UdIwQYMBaAFHM9Sh6fKZzNP45ySrXnq/Qouxld MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERTUwMC80OUU2RkU0NkM3 MkQxMUVFOUM3QzM1MURDNEY5QUUwMi9jejFLSHA4cG5NMF9qbkpLdGVlcjlDaTdH VjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2N6MUtIcDhwbk0wX2puSkt0ZWVyOUNpN0dWMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RTUwMC80OUU2RkU0NkM3MkQxMUVFOUM3QzM1MURDNEY5QUUwMi9jejFLSHA4cG5N MF9qbkpLdGVlcjlDaTdHVjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBOmwp7JVPg0WRS3B7UywRIRM1a69BbrOmVF0oKvOExTZ6GM1uxn+Wl 3y5xp8J/Hufdd7F7ujG2WtnyoYcfaH6iStsyjZAIBwF6YKyvDM1ZAN24BJvLQBwt 1C52rMukAL/bx+2OPgxI4kmIPQSTJp4I8IrI2nYCZSbsatOW7LOByLLYkvODcThf pec3i35hYmg0w70UYCQCcC/Jo+k+Z4maYkLckinxxdr878C4FbtTBL2UW3F46HyE 0ZVsf6qO1gLYb3cvTodjkxVaxuJQbXltM3U6GfWeY2W9yrNdRjYmMI8jkm4lWD8i vRWHUvc6awoGXynvwVy9ip7nN/073WLC -----END CERTIFICATE-----Generated at Sat Jun 14 19:16:45 2025 by rpki-client