$ rpki-client -vvf rpki.apnic.net/member_repository/A91149C8/2FC46590FF2B11E9BF20BF1DC4F9AE02/0va3pYZYVsPyxEYWNgMfsFtgYGo.mft File: 0va3pYZYVsPyxEYWNgMfsFtgYGo.mft (raw, json) Hash identifier: XaI3+Ig2khUCIV/jOW5dOwD2viAo3PDeEyYBMWwCgYg= Subject key identifier: 30:6D:38:0A:1A:AE:D8:A0:17:F9:31:2A:67:F4:D0:0A:E0:79:FA:11 Authority key identifier: D2:F6:B7:A5:86:58:56:C3:F2:C4:46:16:36:03:1F:B0:5B:60:60:6A Certificate issuer: /CN=A91149C8/serialNumber=D2F6B7A5865856C3F2C4461636031FB05B60606A Certificate serial: 0C7D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0va3pYZYVsPyxEYWNgMfsFtgYGo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91149C8/2FC46590FF2B11E9BF20BF1DC4F9AE02/0va3pYZYVsPyxEYWNgMfsFtgYGo.mft Manifest number: 0C73 Signing time: Sat 28 Jun 2025 18:01:37 +0000 Manifest this update: Sat 28 Jun 2025 18:01:37 +0000 Manifest next update: Sat 05 Jul 2025 18:01:37 +0000 Files and hashes: 1: 0va3pYZYVsPyxEYWNgMfsFtgYGo.crl (hash: g24xMUT6g4MvUofnFt6YXqhdi+CLqBEg392DhB078yU=) 2: A2A7584ACA7F11EAB343722AC4F9AE02.roa (hash: mvYo+h5Nn35EgX86xIvICgq41pXxREG1bc5pyoPj450=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91149C8/2FC46590FF2B11E9BF20BF1DC4F9AE02/0va3pYZYVsPyxEYWNgMfsFtgYGo.crl rsync://rpki.apnic.net/member_repository/A91149C8/2FC46590FF2B11E9BF20BF1DC4F9AE02/0va3pYZYVsPyxEYWNgMfsFtgYGo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0va3pYZYVsPyxEYWNgMfsFtgYGo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 18:01:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3197 (0xc7d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91149C8, serialNumber=D2F6B7A5865856C3F2C4461636031FB05B60606A Validity Not Before: Jun 28 18:01:37 2025 GMT Not After : Jul 5 18:01:37 2025 GMT Subject: CN=68602e01-e12d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:c8:23:65:25:1e:3d:ae:e7:ef:8d:07:4e:80: 7a:44:e4:7a:40:3f:5f:85:ec:a2:a8:da:db:39:ad: f9:b2:eb:fc:80:24:1c:7f:71:e9:c6:99:af:ed:30: f2:b2:13:ac:92:47:a2:02:3c:72:d7:84:d5:0f:70: ed:66:68:68:70:cd:46:2d:f8:c0:88:c8:d8:a7:44: b1:b0:cc:ff:2e:14:74:3c:d4:91:17:62:8b:98:2b: 77:a4:82:1c:7b:9b:d2:d7:d0:33:73:5c:16:e8:23: 12:c4:65:d6:16:21:a9:f6:6e:44:d5:3b:7d:bd:4d: 72:bb:38:ff:82:21:24:33:dc:d2:7f:bc:34:9e:00: db:00:b7:98:1e:9e:65:4f:b9:7e:a6:13:9b:a6:f3: 02:87:ab:5f:f8:11:de:09:91:e8:af:1d:31:7e:5d: 6b:ce:b7:02:d6:3e:3a:d8:dc:cf:f7:83:19:da:7a: 7e:d4:5d:fe:14:71:fd:7b:c8:bd:11:c4:5e:e9:09: 9b:10:6d:aa:a5:2a:d0:67:2c:8a:cd:76:31:ff:85: 6f:1d:93:87:13:9e:98:97:29:1d:2c:d0:6b:f1:df: 81:c2:81:b6:09:92:eb:dd:e3:5b:9b:3c:a6:21:78: dc:d2:5b:b4:79:70:fa:ab:7e:9b:5d:4e:ba:73:08: 06:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:6D:38:0A:1A:AE:D8:A0:17:F9:31:2A:67:F4:D0:0A:E0:79:FA:11 X509v3 Authority Key Identifier: keyid:D2:F6:B7:A5:86:58:56:C3:F2:C4:46:16:36:03:1F:B0:5B:60:60:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91149C8/2FC46590FF2B11E9BF20BF1DC4F9AE02/0va3pYZYVsPyxEYWNgMfsFtgYGo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0va3pYZYVsPyxEYWNgMfsFtgYGo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91149C8/2FC46590FF2B11E9BF20BF1DC4F9AE02/0va3pYZYVsPyxEYWNgMfsFtgYGo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c0:ba:48:49:42:fa:4d:cc:1f:c1:9f:31:d1:0f:9f:72:ed:2d: 26:df:73:8e:c3:57:b3:b7:4e:61:d9:d4:3d:68:41:5a:ce:ce: 9d:56:90:9b:d2:1a:29:e8:66:99:f7:12:e0:b5:bc:ae:4e:45: 64:91:2f:da:cd:f3:92:ee:4a:7c:cf:d9:d0:eb:28:f7:9c:99: 05:24:6e:a0:ae:83:29:8d:b7:10:6c:1b:6b:3d:2a:d2:ae:b3: 21:16:10:da:16:e7:21:c0:03:3c:5e:ac:65:47:9c:55:0d:f9: 76:38:6c:57:c3:1d:d2:7f:5b:2c:da:75:2b:1e:d3:92:bf:d0: 59:79:26:6d:95:79:1b:1e:7d:b4:d7:1a:e5:fa:ca:6c:ab:63: f6:f6:ae:d3:42:fe:36:e5:8a:65:be:0f:a1:eb:02:9b:bd:cc: 30:b6:66:17:29:c1:e3:b7:46:ba:8f:45:19:37:81:2b:d3:f2: 80:45:f0:2e:78:34:27:e1:5f:2a:7d:80:01:37:ca:ae:82:4a: 1e:78:2c:77:5b:37:39:59:b6:25:bc:7a:32:e6:77:62:ed:cc: c9:3b:f2:e1:e7:14:cb:29:9a:b2:10:4b:1a:d7:c2:b3:cf:e8: 51:56:e2:82:1e:50:19:aa:1f:06:2b:8d:74:9a:98:d4:3c:0a: f7:70:76:b2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDH0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTQ5QzgxMTAvBgNVBAUTKEQyRjZCN0E1ODY1ODU2QzNGMkM0NDYxNjM2MDMxRkIw NUI2MDYwNkEwHhcNMjUwNjI4MTgwMTM3WhcNMjUwNzA1MTgwMTM3WjAYMRYwFAYD VQQDEw02ODYwMmUwMS1lMTJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzMgjZSUePa7n740HToB6ROR6QD9fheyiqNrbOa35suv8gCQcf3Hpxpmv7TDy shOskkeiAjxy14TVD3DtZmhocM1GLfjAiMjYp0SxsMz/LhR0PNSRF2KLmCt3pIIc e5vS19Azc1wW6CMSxGXWFiGp9m5E1Tt9vU1yuzj/giEkM9zSf7w0ngDbALeYHp5l T7l+phObpvMCh6tf+BHeCZHorx0xfl1rzrcC1j462NzP94MZ2np+1F3+FHH9e8i9 EcRe6QmbEG2qpSrQZyyKzXYx/4VvHZOHE56YlykdLNBr8d+BwoG2CZLr3eNbmzym IXjc0lu0eXD6q36bXU66cwgGJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDBtOAoa rtigF/kxKmf00ArgefoRMB8GA1UdIwQYMBaAFNL2t6WGWFbD8sRGFjYDH7BbYGBq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNDlDOC8yRkM0NjU5MEZG MkIxMUU5QkYyMEJGMURDNEY5QUUwMi8wdmEzcFlaWVZzUHl4RVlXTmdNZnNGdGdZ R28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzB2YTNwWVpZVnNQeXhFWVdOZ01mc0Z0Z1lHby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NDlDOC8yRkM0NjU5MEZGMkIxMUU5QkYyMEJGMURDNEY5QUUwMi8wdmEzcFlaWVZz UHl4RVlXTmdNZnNGdGdZR28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDAukhJQvpNzB/BnzHRD59y7S0m33OOw1ezt05h2dQ9aEFazs6dVpCb 0hop6GaZ9xLgtbyuTkVkkS/azfOS7kp8z9nQ6yj3nJkFJG6groMpjbcQbBtrPSrS rrMhFhDaFuchwAM8XqxlR5xVDfl2OGxXwx3Sf1ss2nUrHtOSv9BZeSZtlXkbHn20 1xrl+spsq2P29q7TQv425Yplvg+h6wKbvcwwtmYXKcHjt0a6j0UZN4Er0/KARfAu eDQn4V8qfYABN8qugkoeeCx3Wzc5WbYlvHoy5ndi7czJO/Lh5xTLKZqyEEsa18Kz z+hRVuKCHlAZqh8GK410mpjUPAr3cHay -----END CERTIFICATE-----Generated at Sun Jun 29 13:25:17 2025 by rpki-client