$ rpki-client -vvf rpki.apnic.net/member_repository/A91437AC/0256EB964D6011EE8385F040C4F9AE02/I90ea4NEljsEULkpM3adRKcyUWs.mft File: I90ea4NEljsEULkpM3adRKcyUWs.mft (raw, json) Hash identifier: qidJrJptDStjjtTD1JeWgtBvxmuYP/8d7BDzXtXYzsE= Subject key identifier: 5C:60:EF:D3:DB:DA:CF:D3:6F:5F:C8:AF:63:EA:18:75:1E:82:3B:26 Authority key identifier: 23:DD:1E:6B:83:44:96:3B:04:50:B9:29:33:76:9D:44:A7:32:51:6B Certificate issuer: /CN=A91437AC/serialNumber=23DD1E6B8344963B0450B92933769D44A732516B Certificate serial: 015A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I90ea4NEljsEULkpM3adRKcyUWs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91437AC/0256EB964D6011EE8385F040C4F9AE02/I90ea4NEljsEULkpM3adRKcyUWs.mft Manifest number: 0154 Signing time: Sun 29 Jun 2025 03:14:00 +0000 Manifest this update: Sun 29 Jun 2025 03:13:59 +0000 Manifest next update: Sun 06 Jul 2025 03:13:59 +0000 Files and hashes: 1: I90ea4NEljsEULkpM3adRKcyUWs.crl (hash: zxJMpE2FhlmanfpG7N8uoO2+/IvBKEA1qiNhu0EIwIY=) 2: 229EA4AC57D811EEAB6EE280C4F9AE02.roa (hash: pevsaD4Tdrw3Ixu5KEE5rMHmedLOctKuJ/befOUTShA=) 3: 413CAD964D6011EE80905941C4F9AE02.roa (hash: T8iSluo7SP9pG/tufgbYgInS5lll4OSd156UhBgQ4N8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91437AC/0256EB964D6011EE8385F040C4F9AE02/I90ea4NEljsEULkpM3adRKcyUWs.crl rsync://rpki.apnic.net/member_repository/A91437AC/0256EB964D6011EE8385F040C4F9AE02/I90ea4NEljsEULkpM3adRKcyUWs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I90ea4NEljsEULkpM3adRKcyUWs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 03:13:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 346 (0x15a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91437AC, serialNumber=23DD1E6B8344963B0450B92933769D44A732516B Validity Not Before: Jun 29 03:13:59 2025 GMT Not After : Jul 6 03:13:59 2025 GMT Subject: CN=6860af77-9074 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:a8:3b:aa:60:29:28:b3:ef:a3:e9:6a:0f:71: b0:d3:41:c7:d0:10:04:19:4d:27:bd:8a:d1:db:66: b9:9a:a7:5f:4c:16:50:50:2f:28:54:7a:d2:7d:cd: b3:ae:20:8f:9a:fa:bb:e5:4f:0c:5a:21:53:f3:ac: 4d:c1:57:fb:87:10:a8:53:6f:57:ae:93:bc:f3:f3: a3:6d:da:bf:aa:19:72:37:40:fa:fc:8f:00:67:dd: 1c:43:52:d9:a6:3f:c8:84:1c:94:19:92:a6:80:07: a0:44:ed:aa:5a:dc:82:dd:bf:c2:a9:f3:d1:46:d3: dc:88:61:77:48:91:ef:a4:1f:83:c8:a8:3e:76:c1: c3:16:55:b9:ac:33:b6:db:4f:ff:b2:2f:20:ba:17: 8c:70:e5:48:56:65:32:45:5a:db:10:13:71:d0:b3: bd:04:81:25:b9:b5:38:d0:56:6c:94:22:bf:64:fd: eb:d6:56:77:22:aa:32:58:28:e7:91:da:f0:d4:f9: 31:75:76:07:3f:f9:97:56:67:18:7e:a4:45:dd:45: fd:d6:df:34:be:04:6c:fe:4d:71:cf:4c:06:c8:40: 26:d8:3b:28:4b:d7:ca:d5:44:df:a9:f6:6b:4a:45: 77:0a:cc:c2:b4:b3:f2:d6:e0:13:10:0d:0a:76:7d: ce:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:60:EF:D3:DB:DA:CF:D3:6F:5F:C8:AF:63:EA:18:75:1E:82:3B:26 X509v3 Authority Key Identifier: keyid:23:DD:1E:6B:83:44:96:3B:04:50:B9:29:33:76:9D:44:A7:32:51:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91437AC/0256EB964D6011EE8385F040C4F9AE02/I90ea4NEljsEULkpM3adRKcyUWs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I90ea4NEljsEULkpM3adRKcyUWs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91437AC/0256EB964D6011EE8385F040C4F9AE02/I90ea4NEljsEULkpM3adRKcyUWs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:c4:ff:95:b2:71:38:eb:04:4c:a7:53:a3:18:df:23:7c:1d: 0d:68:f0:73:b8:d3:92:a7:28:ea:0a:20:fb:50:f7:83:26:2b: 56:77:20:e7:35:e8:6a:24:ae:86:b8:84:1d:54:bc:64:cd:36: b1:77:4f:5d:af:20:b3:00:fc:fb:b1:dc:56:3c:65:21:e5:36: 30:a7:d9:4d:1e:0d:af:e3:a6:96:ca:c8:39:9d:95:67:68:84: 12:8f:7d:57:ad:c8:6d:40:1d:9a:7d:87:2a:5b:f1:e3:bb:77: ab:20:da:42:2f:7e:a1:07:66:cc:6d:2a:97:39:f1:65:a3:c3: af:e0:de:91:e0:9c:a6:9b:3e:78:6c:55:1a:f9:1a:c2:ee:6f: a9:ab:6f:71:55:87:10:f0:3b:9e:55:16:d7:65:1d:14:7f:4a: fd:e7:2b:76:b8:46:0c:bf:5c:0d:da:27:6e:ae:87:ae:af:63: 62:28:0e:ec:53:9b:66:41:eb:36:e2:30:72:1e:b5:ea:6f:43: 3e:5e:85:c5:62:fe:b6:cb:1f:3f:c3:96:d5:fa:1b:a9:04:45: 50:82:4b:20:0d:b7:1f:62:13:ae:3f:ea:88:4c:2b:04:a1:ba: 15:46:d3:14:a4:4a:dc:af:c3:b6:9a:32:e1:3e:f1:f2:f0:53: 60:24:fb:2e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDM3QUMxMTAvBgNVBAUTKDIzREQxRTZCODM0NDk2M0IwNDUwQjkyOTMzNzY5RDQ0 QTczMjUxNkIwHhcNMjUwNjI5MDMxMzU5WhcNMjUwNzA2MDMxMzU5WjAYMRYwFAYD VQQDEw02ODYwYWY3Ny05MDc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuKg7qmApKLPvo+lqD3Gw00HH0BAEGU0nvYrR22a5mqdfTBZQUC8oVHrSfc2z riCPmvq75U8MWiFT86xNwVf7hxCoU29XrpO88/Ojbdq/qhlyN0D6/I8AZ90cQ1LZ pj/IhByUGZKmgAegRO2qWtyC3b/CqfPRRtPciGF3SJHvpB+DyKg+dsHDFlW5rDO2 20//si8guheMcOVIVmUyRVrbEBNx0LO9BIElubU40FZslCK/ZP3r1lZ3IqoyWCjn kdrw1PkxdXYHP/mXVmcYfqRF3UX91t80vgRs/k1xz0wGyEAm2DsoS9fK1UTfqfZr SkV3CszCtLPy1uATEA0Kdn3OUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFxg79Pb 2s/Tb1/Ir2PqGHUegjsmMB8GA1UdIwQYMBaAFCPdHmuDRJY7BFC5KTN2nUSnMlFr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MzdBQy8wMjU2RUI5NjRE NjAxMUVFODM4NUYwNDBDNEY5QUUwMi9JOTBlYTRORWxqc0VVTGtwTTNhZFJLY3lV V3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0k5MGVhNE5FbGpzRVVMa3BNM2FkUktjeVVXcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MzdBQy8wMjU2RUI5NjRENjAxMUVFODM4NUYwNDBDNEY5QUUwMi9JOTBlYTRORWxq c0VVTGtwTTNhZFJLY3lVV3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAVxP+VsnE46wRMp1OjGN8jfB0NaPBzuNOSpyjqCiD7UPeDJitWdyDn NehqJK6GuIQdVLxkzTaxd09dryCzAPz7sdxWPGUh5TYwp9lNHg2v46aWysg5nZVn aIQSj31XrchtQB2afYcqW/Hju3erINpCL36hB2bMbSqXOfFlo8Ov4N6R4Jymmz54 bFUa+RrC7m+pq29xVYcQ8DueVRbXZR0Uf0r95yt2uEYMv1wN2iduroeur2NiKA7s U5tmQes24jByHrXqb0M+XoXFYv62yx8/w5bV+hupBEVQgksgDbcfYhOuP+qITCsE oboVRtMUpErcr8O2mjLhPvHy8FNgJPsu -----END CERTIFICATE-----Generated at Mon Jun 30 19:24:08 2025 by rpki-client