$ rpki-client -vvf rpki.apnic.net/member_repository/A914C3FB/701782160BA111F08EFED219C4F9AE02/T191psKYj1i2AwEqjbRFofN9XXI.mft File: T191psKYj1i2AwEqjbRFofN9XXI.mft (raw, json) Hash identifier: 0tW185ZaNhujqCcIDiT7lVoTXRblou9XSBx5pLDhsxw= Subject key identifier: 7B:64:75:C9:70:01:82:91:C3:AA:02:C6:83:53:FF:85:F5:07:3E:47 Authority key identifier: 4F:5F:75:A6:C2:98:8F:58:B6:03:01:2A:8D:B4:45:A1:F3:7D:5D:72 Certificate issuer: /CN=A914C3FB/serialNumber=4F5F75A6C2988F58B603012A8DB445A1F37D5D72 Certificate serial: 4C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T191psKYj1i2AwEqjbRFofN9XXI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C3FB/701782160BA111F08EFED219C4F9AE02/T191psKYj1i2AwEqjbRFofN9XXI.mft Manifest number: 3F Signing time: Tue 01 Jul 2025 08:27:07 +0000 Manifest this update: Tue 01 Jul 2025 08:27:07 +0000 Manifest next update: Tue 08 Jul 2025 08:27:07 +0000 Files and hashes: 1: T191psKYj1i2AwEqjbRFofN9XXI.crl (hash: zQIzdYZkpP/uiJDYWlZPJ7vtVo1xGS3lw8VTmbuBImU=) 2: 41E7BB1C0BA211F08457541BC4F9AE02.roa (hash: SLWKUoxyCCrW041ENZCKTkuF3OJqQTSoY0CsLhDIP04=) 3: 850942E4325311F081E87832C4F9AE02.roa (hash: YKfa7XcZECRGtp0hZwgH99jMIjA/4Bdgt+cMhZRSKcQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C3FB/701782160BA111F08EFED219C4F9AE02/T191psKYj1i2AwEqjbRFofN9XXI.crl rsync://rpki.apnic.net/member_repository/A914C3FB/701782160BA111F08EFED219C4F9AE02/T191psKYj1i2AwEqjbRFofN9XXI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T191psKYj1i2AwEqjbRFofN9XXI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 08:27:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76 (0x4c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C3FB, serialNumber=4F5F75A6C2988F58B603012A8DB445A1F37D5D72 Validity Not Before: Jul 1 08:27:07 2025 GMT Not After : Jul 8 08:27:07 2025 GMT Subject: CN=68639bdb-fcf7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:c5:8e:21:10:a3:fa:b8:2f:66:3d:55:c8:28: 80:05:ba:dd:95:ac:8c:7f:c2:b6:a2:c3:94:fe:29: c7:16:bc:50:ce:69:1c:0e:b3:9e:bb:d2:df:fb:cd: 97:e1:91:26:fb:76:31:66:8d:38:d5:c4:97:21:c2: 1d:9c:4b:f0:ea:85:e4:68:6c:fc:8d:7e:de:47:72: 91:c3:c8:14:31:22:d7:1b:dd:eb:e4:eb:92:c9:91: 95:9d:d6:b6:2e:ed:3a:2e:68:48:a3:cb:2c:65:06: 55:9f:40:50:bf:3d:8a:b5:40:f3:50:ca:24:b1:fa: e2:7b:f2:17:9a:2b:8a:eb:30:cb:da:91:ff:45:6b: d2:bc:76:0b:03:f6:c0:06:42:90:13:22:db:45:ca: 4a:c6:77:4b:0a:0a:aa:ad:3c:2a:a3:f1:90:84:bb: 79:2e:20:cc:b8:16:6e:97:46:1e:16:12:ca:fe:5c: d0:5c:92:a2:4a:a9:ec:73:b1:94:7a:46:6b:4f:d8: e4:6b:44:b5:a0:73:df:e8:71:ba:89:eb:67:32:0d: 90:a6:01:05:85:80:0d:7d:4a:88:d7:6e:e6:89:a2: 9a:70:72:bd:11:4f:b3:b8:aa:16:94:57:91:43:e4: 1b:57:13:6d:66:5a:56:28:e0:f5:dc:8c:20:96:6c: 73:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:64:75:C9:70:01:82:91:C3:AA:02:C6:83:53:FF:85:F5:07:3E:47 X509v3 Authority Key Identifier: keyid:4F:5F:75:A6:C2:98:8F:58:B6:03:01:2A:8D:B4:45:A1:F3:7D:5D:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C3FB/701782160BA111F08EFED219C4F9AE02/T191psKYj1i2AwEqjbRFofN9XXI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T191psKYj1i2AwEqjbRFofN9XXI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C3FB/701782160BA111F08EFED219C4F9AE02/T191psKYj1i2AwEqjbRFofN9XXI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:70:31:14:0d:3a:6e:87:dd:8f:a0:39:50:fc:60:4b:fd:46: a5:f7:a7:3a:99:ea:ad:02:d8:1c:e8:12:3d:63:72:a2:00:13: 26:f3:9f:ba:75:67:06:37:f5:83:59:d8:8c:bb:8c:71:da:b7: 25:b9:c4:78:c2:cf:d4:55:b2:ea:72:11:d9:dd:50:13:3e:e9: bf:be:19:f4:f8:56:e1:a2:b4:b5:e0:7d:a2:4c:25:bd:8b:02: 96:4b:2e:3c:ef:bc:42:be:ec:58:b0:49:02:a8:61:6e:0e:f4: 9f:8f:8e:ce:c8:a6:53:0b:e7:78:6c:9a:3b:c3:72:75:b2:e9: 17:ad:fc:38:a4:f6:18:14:c8:fc:d6:28:d7:bf:09:2d:36:42: 82:ee:e6:6e:51:34:88:33:d9:59:f6:9a:35:e1:d3:d3:14:3f: 3f:5a:a4:ed:80:04:6e:42:f8:e4:03:f9:77:01:f0:ca:68:09: d6:9d:6e:e6:2c:44:fd:a0:23:28:f4:9b:e1:6f:4b:f0:04:79: 19:95:0f:44:5e:8b:d8:ca:7d:93:f0:3c:23:d7:a3:1f:02:e9: 5e:13:54:7b:46:ba:46:7f:71:03:29:62:0b:8f:68:96:9d:2f: 4a:19:37:14:f7:e2:7b:b6:73:6f:ed:73:04:ce:ee:2f:51:5d: 06:31:19:8e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 QzNGQjExMC8GA1UEBRMoNEY1Rjc1QTZDMjk4OEY1OEI2MDMwMTJBOERCNDQ1QTFG MzdENUQ3MjAeFw0yNTA3MDEwODI3MDdaFw0yNTA3MDgwODI3MDdaMBgxFjAUBgNV BAMTDTY4NjM5YmRiLWZjZjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDYxY4hEKP6uC9mPVXIKIAFut2VrIx/wraiw5T+KccWvFDOaRwOs5670t/7zZfh kSb7djFmjTjVxJchwh2cS/DqheRobPyNft5HcpHDyBQxItcb3evk65LJkZWd1rYu 7TouaEijyyxlBlWfQFC/PYq1QPNQyiSx+uJ78heaK4rrMMvakf9Fa9K8dgsD9sAG QpATIttFykrGd0sKCqqtPCqj8ZCEu3kuIMy4Fm6XRh4WEsr+XNBckqJKqexzsZR6 RmtP2ORrRLWgc9/ocbqJ62cyDZCmAQWFgA19SojXbuaJoppwcr0RT7O4qhaUV5FD 5BtXE21mWlYo4PXcjCCWbHO7AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUe2R1yXAB gpHDqgLGg1P/hfUHPkcwHwYDVR0jBBgwFoAUT191psKYj1i2AwEqjbRFofN9XXIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRDM0ZCLzcwMTc4MjE2MEJB MTExRjA4RUZFRDIxOUM0RjlBRTAyL1QxOTFwc0tZajFpMkF3RXFqYlJGb2ZOOVhY SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVDE5MXBzS1lqMWkyQXdFcWpiUkZvZk45WFhJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRD M0ZCLzcwMTc4MjE2MEJBMTExRjA4RUZFRDIxOUM0RjlBRTAyL1QxOTFwc0tZajFp MkF3RXFqYlJGb2ZOOVhYSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADlwMRQNOm6H3Y+gOVD8YEv9RqX3pzqZ6q0C2BzoEj1jcqIAEybzn7p1 ZwY39YNZ2Iy7jHHatyW5xHjCz9RVsupyEdndUBM+6b++GfT4VuGitLXgfaJMJb2L ApZLLjzvvEK+7FiwSQKoYW4O9J+Pjs7IplML53hsmjvDcnWy6Ret/Dik9hgUyPzW KNe/CS02QoLu5m5RNIgz2Vn2mjXh09MUPz9apO2ABG5C+OQD+XcB8MpoCdadbuYs RP2gIyj0m+FvS/AEeRmVD0Rei9jKfZPwPCPXox8C6V4TVHtGukZ/cQMpYguPaJad L0oZNxT34nu2c2/tcwTO7i9RXQYxGY4= -----END CERTIFICATE-----Generated at Thu Jul 3 00:58:51 2025 by rpki-client