$ rpki-client -vvf rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/d1_lofYadAjf7tR_FEfjRk2lCyo.mft File: d1_lofYadAjf7tR_FEfjRk2lCyo.mft (raw, json) Hash identifier: GjXUDcy8jxh7ntB+mfDaSCJUTPMZMCd0tZvZblJ+3rM= Subject key identifier: 58:C9:AD:7B:54:FC:82:88:B1:6A:A8:8E:C7:5E:69:11:D2:4E:D9:B3 Authority key identifier: 77:5F:E5:A1:F6:1A:74:08:DF:EE:D4:7F:14:47:E3:46:4D:A5:0B:2A Certificate issuer: /CN=A91398A3/serialNumber=775FE5A1F61A7408DFEED47F1447E3464DA50B2A Certificate serial: 0435 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d1_lofYadAjf7tR_FEfjRk2lCyo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/d1_lofYadAjf7tR_FEfjRk2lCyo.mft Manifest number: 041A Signing time: Tue 01 Jul 2025 00:56:24 +0000 Manifest this update: Tue 01 Jul 2025 00:56:23 +0000 Manifest next update: Tue 08 Jul 2025 00:56:23 +0000 Files and hashes: 1: d1_lofYadAjf7tR_FEfjRk2lCyo.crl (hash: c43VK8CYINGoWRagvoATdVcSmVW+W9hWybbr8inlmgM=) 2: 5B17230CDE9B11EC9AE23269C4F9AE02.roa (hash: iXt8wY4xDmSntkF4mr4ren6r7L4k9/tTpksHGcZedNM=) 3: 57B53F64DE9B11EC9AE23269C4F9AE02.roa (hash: OtRC1FOzJ2VnQ1iDT/pgw77NVRkDqW1cgJOs0qquLx8=) 4: 59D82E00DE9B11EC9AE23269C4F9AE02.roa (hash: z9il2KLvmM35CEJ33D6dQT01IjqffT1KfUHR8PJEmYw=) 5: DEE5E3C49F0511EC9DA80B77C4F9AE02.roa (hash: rDIkGkc5RWLLbbHLbXvxxPcvgv9UCQJUW3VRbKAdmkE=) 6: 5879949ADE9B11EC9AE23269C4F9AE02.roa (hash: vJqrrt0bxSwZaP1IHOgSaljOyb8CxyRpUsYkTfCzlUg=) 7: 59230714DE9B11EC9AE23269C4F9AE02.roa (hash: D86sbiTviOSy/5MbuHJAROiiKuXxKjWRrOsJTtvytBU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/d1_lofYadAjf7tR_FEfjRk2lCyo.crl rsync://rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/d1_lofYadAjf7tR_FEfjRk2lCyo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d1_lofYadAjf7tR_FEfjRk2lCyo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 00:56:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1077 (0x435) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91398A3, serialNumber=775FE5A1F61A7408DFEED47F1447E3464DA50B2A Validity Not Before: Jul 1 00:56:23 2025 GMT Not After : Jul 8 00:56:23 2025 GMT Subject: CN=68633238-8651 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:6f:07:98:40:aa:e4:b2:46:04:89:e0:5b:81: 5e:d2:cb:36:ab:0c:4a:cb:d3:dd:85:8c:ae:02:98: f7:26:13:e3:99:03:80:de:cd:c4:67:42:8e:f9:64: 23:2c:bf:1b:fe:c0:e6:b8:b1:ed:dd:69:c3:6a:01: 25:da:9e:40:f1:e0:c9:6e:c1:aa:a4:50:ff:00:c8: f1:2f:39:89:a2:09:25:65:1b:29:f8:bd:16:94:80: 11:c4:b7:e8:1f:0e:aa:4c:46:b3:f8:89:ad:08:0b: 2d:a7:30:7c:27:d9:94:74:a7:6a:a1:00:9a:d8:06: 6b:ea:12:c3:94:26:70:a4:0d:b5:34:85:9b:bb:10: d4:f4:9f:11:df:0f:f9:c5:99:2d:ea:0a:1a:f5:ea: 73:86:fa:e9:0e:82:6a:f6:41:39:1d:06:41:e0:9e: 85:b8:db:90:f8:ea:9d:29:94:5b:1b:11:f8:07:52: 9f:97:61:83:9f:7b:db:0e:91:36:ba:d7:18:19:a7: 29:89:0b:87:6b:24:d6:82:37:d6:ec:b7:b1:1d:55: a0:36:da:9e:7c:73:10:61:12:9e:7b:da:f6:97:93: 41:05:7c:de:2d:16:b3:df:cb:26:57:97:78:2d:f1: 52:3d:7c:2b:cf:2e:15:2b:0d:8c:e3:ad:67:f3:52: fc:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:C9:AD:7B:54:FC:82:88:B1:6A:A8:8E:C7:5E:69:11:D2:4E:D9:B3 X509v3 Authority Key Identifier: keyid:77:5F:E5:A1:F6:1A:74:08:DF:EE:D4:7F:14:47:E3:46:4D:A5:0B:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/d1_lofYadAjf7tR_FEfjRk2lCyo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d1_lofYadAjf7tR_FEfjRk2lCyo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/d1_lofYadAjf7tR_FEfjRk2lCyo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:22:a4:94:c5:ba:b7:e1:ce:d3:43:8a:50:51:f2:ea:5f:64: 36:95:b4:fe:2a:d6:a6:a1:99:b9:c3:b0:a0:81:ea:b8:d2:ee: 36:0d:ca:ea:b9:ba:43:3a:3f:1e:f9:0e:4a:a0:a7:0b:f9:b3: 15:1f:1f:ad:ed:97:b6:6e:8e:ff:50:b5:4e:ff:28:34:8c:70: 23:8f:8d:df:51:01:e9:60:f4:8e:81:c9:ff:34:da:8c:da:5f: 18:cf:b6:ef:b8:fc:dd:e4:5a:0f:7a:88:6e:15:95:be:90:80: 35:b8:7a:f3:c7:85:19:ac:48:24:61:32:f0:ac:93:fa:bd:6d: 16:6d:93:02:8c:cd:ea:97:bf:57:90:21:19:60:d2:25:85:26: 7b:3f:4c:68:89:2f:94:dc:1f:09:03:fd:c0:f3:a4:f8:33:81: ee:69:a5:42:9b:3b:5e:9d:9e:3a:a8:e0:d2:8a:c6:6e:fe:a0: e0:ff:2e:13:cd:5f:16:42:b3:a5:28:01:59:6e:0e:8b:0a:f2: db:84:c2:b9:4f:ec:71:00:56:39:99:ba:00:5b:89:20:94:d1: e1:45:e9:7a:e6:19:62:6e:48:0b:6e:d9:92:d0:58:34:77:94: aa:f5:c5:ed:34:93:55:aa:03:31:ad:30:a4:8b:a4:64:86:97: ab:10:a7:e7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBDUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzk4QTMxMTAvBgNVBAUTKDc3NUZFNUExRjYxQTc0MDhERkVFRDQ3RjE0NDdFMzQ2 NERBNTBCMkEwHhcNMjUwNzAxMDA1NjIzWhcNMjUwNzA4MDA1NjIzWjAYMRYwFAYD VQQDEw02ODYzMzIzOC04NjUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsG8HmECq5LJGBIngW4Fe0ss2qwxKy9PdhYyuApj3JhPjmQOA3s3EZ0KO+WQj LL8b/sDmuLHt3WnDagEl2p5A8eDJbsGqpFD/AMjxLzmJogklZRsp+L0WlIARxLfo Hw6qTEaz+ImtCAstpzB8J9mUdKdqoQCa2AZr6hLDlCZwpA21NIWbuxDU9J8R3w/5 xZkt6goa9epzhvrpDoJq9kE5HQZB4J6FuNuQ+OqdKZRbGxH4B1Kfl2GDn3vbDpE2 utcYGacpiQuHayTWgjfW7LexHVWgNtqefHMQYRKee9r2l5NBBXzeLRaz38smV5d4 LfFSPXwrzy4VKw2M461n81L80wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFjJrXtU /IKIsWqojsdeaRHSTtmzMB8GA1UdIwQYMBaAFHdf5aH2GnQI3+7UfxRH40ZNpQsq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOThBMy9FMjE5QjYxQzcx MTMxMUVDQkMzMDg5MTlDNEY5QUUwMi9kMV9sb2ZZYWRBamY3dFJfRkVmalJrMmxD eW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2QxX2xvZllhZEFqZjd0Ul9GRWZqUmsybEN5by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OThBMy9FMjE5QjYxQzcxMTMxMUVDQkMzMDg5MTlDNEY5QUUwMi9kMV9sb2ZZYWRB amY3dFJfRkVmalJrMmxDeW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAWIqSUxbq34c7TQ4pQUfLqX2Q2lbT+KtamoZm5w7Cggeq40u42Dcrq ubpDOj8e+Q5KoKcL+bMVHx+t7Ze2bo7/ULVO/yg0jHAjj43fUQHpYPSOgcn/NNqM 2l8Yz7bvuPzd5FoPeohuFZW+kIA1uHrzx4UZrEgkYTLwrJP6vW0WbZMCjM3ql79X kCEZYNIlhSZ7P0xoiS+U3B8JA/3A86T4M4HuaaVCmztenZ46qODSisZu/qDg/y4T zV8WQrOlKAFZbg6LCvLbhMK5T+xxAFY5mboAW4kglNHhRel65hlibkgLbtmS0Fg0 d5Sq9cXtNJNVqgMxrTCki6RkhperEKfn -----END CERTIFICATE-----Generated at Wed Jul 2 19:30:38 2025 by rpki-client