$ rpki-client -vvf rpki.apnic.net/member_repository/A91EFFF0/44FEBC92ADB211E89C9B4553C4F9AE02/rvzkuiTfpu1k5B5PJFHJ6ISuaaI.mft File: rvzkuiTfpu1k5B5PJFHJ6ISuaaI.mft (raw, json) Hash identifier: TQMnV5RMdIVTGe4elZZ8z2vXzVHdtfgTgcNNcPkRwGc= Subject key identifier: 0E:4C:52:12:93:B8:07:FF:B4:5D:0E:A4:FA:ED:9D:85:B6:B7:D4:BF Authority key identifier: AE:FC:E4:BA:24:DF:A6:ED:64:E4:1E:4F:24:51:C9:E8:84:AE:69:A2 Certificate issuer: /CN=A91EFFF0/serialNumber=AEFCE4BA24DFA6ED64E41E4F2451C9E884AE69A2 Certificate serial: 1354 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rvzkuiTfpu1k5B5PJFHJ6ISuaaI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EFFF0/44FEBC92ADB211E89C9B4553C4F9AE02/rvzkuiTfpu1k5B5PJFHJ6ISuaaI.mft Manifest number: 1344 Signing time: Sat 02 Aug 2025 17:10:32 +0000 Manifest this update: Sat 02 Aug 2025 17:10:31 +0000 Manifest next update: Sat 09 Aug 2025 17:10:31 +0000 Files and hashes: 1: rvzkuiTfpu1k5B5PJFHJ6ISuaaI.crl (hash: uzbaAZj254Icot599neef4nPziOZZrBY4B3zTKuNhjU=) 2: 8853B5C200FF11F09AD9E43CC4F9AE02.roa (hash: fDAbckuG9wFQsseJEFS548SLfcyPSORhEr8NleSSt0k=) 3: 2DD4424401A211F09D28335BC4F9AE02.roa (hash: /pUGpbO60Fe1yZM/qF6+zCst+2cZhcsURR33/zD2CVU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EFFF0/44FEBC92ADB211E89C9B4553C4F9AE02/rvzkuiTfpu1k5B5PJFHJ6ISuaaI.crl rsync://rpki.apnic.net/member_repository/A91EFFF0/44FEBC92ADB211E89C9B4553C4F9AE02/rvzkuiTfpu1k5B5PJFHJ6ISuaaI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rvzkuiTfpu1k5B5PJFHJ6ISuaaI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 17:10:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4948 (0x1354) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EFFF0, serialNumber=AEFCE4BA24DFA6ED64E41E4F2451C9E884AE69A2 Validity Not Before: Aug 2 17:10:31 2025 GMT Not After : Aug 9 17:10:31 2025 GMT Subject: CN=688e4688-83a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:be:ca:77:74:1b:15:60:60:b3:88:73:a0:90: c7:7d:cb:25:ce:a6:a9:6b:da:9d:11:e5:87:10:7d: 69:d2:e2:d9:2a:af:1e:a9:91:9c:f4:57:0a:1d:c1: e4:71:dd:30:d8:69:b7:07:46:a1:fb:e6:24:51:12: 32:2e:da:76:ba:3f:b5:02:aa:eb:27:e9:8c:f3:64: 1c:3c:5b:b3:63:7d:e2:ac:94:6b:14:6e:5a:7f:d6: fc:82:15:e4:b3:6a:b5:d2:68:01:71:bd:aa:43:11: cc:40:ba:cd:be:24:fc:81:c0:09:19:ff:8a:74:e3: 0e:16:27:69:f3:64:e9:d8:4f:7e:c2:5b:f1:e8:d0: 85:d8:a7:09:b1:48:5e:c6:08:4a:e6:25:46:9f:09: b9:35:2e:48:9c:1d:3a:12:f4:34:07:b5:4a:9a:1e: 31:7c:e4:d9:db:b8:60:20:a4:9a:aa:39:5b:9c:d3: 95:b0:21:7d:a9:fe:e2:5e:80:c5:b0:bc:59:ba:90: 1c:2d:e5:5e:54:83:22:07:ff:ca:e9:c6:6e:da:e4: 03:bd:ff:cc:16:67:73:d9:8a:c8:6e:57:a1:9c:d3: 80:1a:3c:e5:1d:d8:b4:07:86:98:86:14:89:34:82: 11:b6:69:f5:d3:48:41:3b:1c:3f:9e:68:76:4b:ee: 44:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:4C:52:12:93:B8:07:FF:B4:5D:0E:A4:FA:ED:9D:85:B6:B7:D4:BF X509v3 Authority Key Identifier: keyid:AE:FC:E4:BA:24:DF:A6:ED:64:E4:1E:4F:24:51:C9:E8:84:AE:69:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EFFF0/44FEBC92ADB211E89C9B4553C4F9AE02/rvzkuiTfpu1k5B5PJFHJ6ISuaaI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rvzkuiTfpu1k5B5PJFHJ6ISuaaI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EFFF0/44FEBC92ADB211E89C9B4553C4F9AE02/rvzkuiTfpu1k5B5PJFHJ6ISuaaI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:e7:31:dc:3e:91:41:24:e8:af:6c:26:ec:a3:d6:d4:22:7b: 12:2a:77:3e:b5:04:7a:68:82:1f:18:43:6b:a0:26:10:8f:02: be:82:fd:e5:3c:ac:d6:5b:f3:98:78:f5:0c:b2:76:1f:8f:a3: 8c:26:2d:1a:8d:d8:73:9e:7f:71:30:79:e6:91:de:22:5d:46: 6f:25:4c:d4:2e:e2:fe:99:56:4a:de:4d:75:d4:fd:fb:d3:72: 78:a4:c4:30:21:62:34:de:b9:2d:5a:74:92:3e:d9:25:c3:03: ec:fe:00:e1:a5:5a:5a:9b:d2:1c:15:fe:35:23:3b:c5:2e:45: ed:d3:48:af:d6:5e:50:aa:77:30:80:0c:89:9c:d3:58:46:3c: 33:0d:af:b1:65:92:20:c6:f1:df:ad:13:01:d8:44:76:4e:c6: bd:34:b8:09:23:a9:eb:be:f6:da:42:01:d0:4e:c0:49:65:d0: de:91:11:f2:cc:93:21:38:b2:b0:9c:2b:73:03:b7:dc:25:c3: cb:4e:cf:e9:5c:fc:66:be:6b:ef:7e:bd:ca:c3:de:1e:0f:e1: 75:59:d7:8f:78:5a:6b:37:0a:1e:97:69:66:1f:00:98:dc:c6: ba:ce:f6:64:2b:61:31:6f:e9:4a:0f:82:2f:f3:01:1c:5e:16: 01:fe:88:4c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICE1QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUZGRjAxMTAvBgNVBAUTKEFFRkNFNEJBMjRERkE2RUQ2NEU0MUU0RjI0NTFDOUU4 ODRBRTY5QTIwHhcNMjUwODAyMTcxMDMxWhcNMjUwODA5MTcxMDMxWjAYMRYwFAYD VQQDEw02ODhlNDY4OC04M2E0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApr7Kd3QbFWBgs4hzoJDHfcslzqapa9qdEeWHEH1p0uLZKq8eqZGc9FcKHcHk cd0w2Gm3B0ah++YkURIyLtp2uj+1AqrrJ+mM82QcPFuzY33irJRrFG5af9b8ghXk s2q10mgBcb2qQxHMQLrNviT8gcAJGf+KdOMOFidp82Tp2E9+wlvx6NCF2KcJsUhe xghK5iVGnwm5NS5InB06EvQ0B7VKmh4xfOTZ27hgIKSaqjlbnNOVsCF9qf7iXoDF sLxZupAcLeVeVIMiB//K6cZu2uQDvf/MFmdz2YrIblehnNOAGjzlHdi0B4aYhhSJ NIIRtmn100hBOxw/nmh2S+5E7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA5MUhKT uAf/tF0OpPrtnYW2t9S/MB8GA1UdIwQYMBaAFK785Lok36btZOQeTyRRyeiErmmi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRkZGMC80NEZFQkM5MkFE QjIxMUU4OUM5QjQ1NTNDNEY5QUUwMi9ydnprdWlUZnB1MWs1QjVQSkZISjZJU3Vh YUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3J2emt1aVRmcHUxazVCNVBKRkhKNklTdWFhSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RkZGMC80NEZFQkM5MkFEQjIxMUU4OUM5QjQ1NTNDNEY5QUUwMi9ydnprdWlUZnB1 MWs1QjVQSkZISjZJU3VhYUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCR5zHcPpFBJOivbCbso9bUInsSKnc+tQR6aIIfGENroCYQjwK+gv3l PKzWW/OYePUMsnYfj6OMJi0ajdhznn9xMHnmkd4iXUZvJUzULuL+mVZK3k111P37 03J4pMQwIWI03rktWnSSPtklwwPs/gDhpVpam9IcFf41IzvFLkXt00iv1l5Qqncw gAyJnNNYRjwzDa+xZZIgxvHfrRMB2ER2Tsa9NLgJI6nrvvbaQgHQTsBJZdDekRHy zJMhOLKwnCtzA7fcJcPLTs/pXPxmvmvvfr3Kw94eD+F1WdePeFprNwoel2lmHwCY 3Ma6zvZkK2Exb+lKD4Iv8wEcXhYB/ohM -----END CERTIFICATE-----Generated at Mon Aug 4 11:12:01 2025 by rpki-client