$ rpki-client -vvf rpki.apnic.net/member_repository/A91534B8/9F03BB60094411ED8DD10971C4F9AE02/36hgRQpvzrHG57jU_1SxVBobabM.mft File: 36hgRQpvzrHG57jU_1SxVBobabM.mft (raw, json) Hash identifier: zeku44+JUSohdMSD3WSyZCv5ammCgU6LHYpGrEBFV9Q= Subject key identifier: 67:A1:EF:1C:02:5A:19:14:D3:50:23:DB:05:EA:7C:20:3C:4E:0D:9F Authority key identifier: DF:A8:60:45:0A:6F:CE:B1:C6:E7:B8:D4:FF:54:B1:54:1A:1B:69:B3 Certificate issuer: /CN=A91534B8/serialNumber=DFA860450A6FCEB1C6E7B8D4FF54B1541A1B69B3 Certificate serial: 02A9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/36hgRQpvzrHG57jU_1SxVBobabM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91534B8/9F03BB60094411ED8DD10971C4F9AE02/36hgRQpvzrHG57jU_1SxVBobabM.mft Manifest number: 02A1 Signing time: Thu 03 Jul 2025 01:59:12 +0000 Manifest this update: Thu 03 Jul 2025 01:59:12 +0000 Manifest next update: Thu 10 Jul 2025 01:59:12 +0000 Files and hashes: 1: 36hgRQpvzrHG57jU_1SxVBobabM.crl (hash: /s5CRzv52SGkPP/uNVJ9vVVqwBexXSHJFPAlXA8qujM=) 2: 56C4B5083DF511ED98215F18C4F9AE02.roa (hash: u+f2WuZi/RfejSsKb+UJ5iop6uONOfiC5gYEcHsbs6w=) 3: B0FA33FE6F9611ED8A672F69C4F9AE02.roa (hash: YDAiAdPjFYhBL5YjXoGqzzo8vheOfOc5VPFiiANGCJc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91534B8/9F03BB60094411ED8DD10971C4F9AE02/36hgRQpvzrHG57jU_1SxVBobabM.crl rsync://rpki.apnic.net/member_repository/A91534B8/9F03BB60094411ED8DD10971C4F9AE02/36hgRQpvzrHG57jU_1SxVBobabM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/36hgRQpvzrHG57jU_1SxVBobabM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 01:59:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 681 (0x2a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91534B8, serialNumber=DFA860450A6FCEB1C6E7B8D4FF54B1541A1B69B3 Validity Not Before: Jul 3 01:59:12 2025 GMT Not After : Jul 10 01:59:12 2025 GMT Subject: CN=6865e3f0-c48d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:6d:04:87:d9:ea:13:62:b2:35:87:e6:4b:59: 09:6a:e9:18:82:d0:ab:49:0b:86:7d:3b:69:a7:de: 91:d1:cd:89:db:25:1a:98:3e:76:45:d8:c8:b7:b8: fc:5e:31:5c:ca:4c:e4:fe:94:f6:06:27:49:b8:86: 7a:78:67:d5:3e:de:23:a1:ec:d8:2d:f7:75:8d:f6: 31:52:4d:90:7f:a5:a1:95:ea:38:55:e7:ab:0b:fa: 09:05:e9:d2:cb:26:13:0b:3d:93:c1:c0:22:7b:d4: 94:41:d7:29:73:ae:fe:47:60:8a:2a:da:bf:49:7d: ce:46:07:e8:11:ac:35:9b:89:e1:fc:9e:76:f2:e0: de:2d:4c:ee:8b:51:a8:79:a6:55:0d:23:49:1a:88: ba:9e:2d:f7:aa:05:ee:23:e6:2a:7d:88:53:1b:ad: 21:50:71:f9:97:10:ff:37:67:76:24:3f:41:a7:84: a1:2d:72:76:cd:a8:9d:5f:98:b5:59:b4:59:2d:08: 28:ab:e6:e5:92:1b:6f:9e:50:e6:a0:ba:b5:b9:fa: ae:f4:cf:69:76:55:ed:12:f5:a5:5b:f5:38:28:38: 94:bc:0c:2a:0c:55:3f:bc:4c:96:c1:bc:3f:41:10: c8:b4:b8:f5:e7:d8:ca:38:61:54:5e:17:0a:42:46: f9:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:A1:EF:1C:02:5A:19:14:D3:50:23:DB:05:EA:7C:20:3C:4E:0D:9F X509v3 Authority Key Identifier: keyid:DF:A8:60:45:0A:6F:CE:B1:C6:E7:B8:D4:FF:54:B1:54:1A:1B:69:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91534B8/9F03BB60094411ED8DD10971C4F9AE02/36hgRQpvzrHG57jU_1SxVBobabM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/36hgRQpvzrHG57jU_1SxVBobabM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91534B8/9F03BB60094411ED8DD10971C4F9AE02/36hgRQpvzrHG57jU_1SxVBobabM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:3b:b6:c8:2b:24:d4:b7:80:1b:da:c6:51:1b:9d:d5:2a:70: a1:52:4c:64:7b:65:fe:45:3c:17:5b:a2:8c:81:86:fb:e0:38: 15:e2:c0:5f:e5:4d:b8:1e:8b:80:f2:ea:f4:c6:18:2a:56:78: 3a:dd:a4:f8:26:ec:ea:e4:6f:31:b9:dc:a5:8e:91:33:2b:40: d0:9b:b1:5f:de:59:fe:31:6a:a0:9f:08:d8:4d:55:38:c6:3f: 56:d6:7a:58:c5:dd:17:d3:66:03:16:5b:98:98:ff:be:e0:26: d5:bb:4d:f2:aa:f9:0f:30:ce:95:b2:24:dc:73:e9:91:37:a5: 9a:fb:1d:54:71:7e:cf:f4:e1:fd:a0:92:06:f7:96:51:46:a7: 59:13:ee:18:a9:45:c8:d9:c8:c7:93:fd:4e:2e:a2:a3:14:ca: f7:32:a5:5e:c8:21:5f:86:ab:00:12:92:6b:38:f1:fe:f1:eb: a6:d3:54:d9:4a:d5:de:13:45:7a:ae:eb:c5:70:a2:d3:7b:4f: 5c:d2:40:0f:99:8d:0e:5d:c0:9f:31:5f:b9:d9:76:2b:67:01: a0:28:d9:c3:dd:a4:da:55:2f:7d:9c:8e:2d:a2:64:fb:8b:dd: c5:36:28:39:15:51:e3:60:53:d4:7c:7a:92:15:a7:41:90:6c: 1f:cf:4c:88 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAqkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTM0QjgxMTAvBgNVBAUTKERGQTg2MDQ1MEE2RkNFQjFDNkU3QjhENEZGNTRCMTU0 MUExQjY5QjMwHhcNMjUwNzAzMDE1OTEyWhcNMjUwNzEwMDE1OTEyWjAYMRYwFAYD VQQDEw02ODY1ZTNmMC1jNDhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw20Eh9nqE2KyNYfmS1kJaukYgtCrSQuGfTtpp96R0c2J2yUamD52RdjIt7j8 XjFcykzk/pT2BidJuIZ6eGfVPt4joezYLfd1jfYxUk2Qf6Whleo4VeerC/oJBenS yyYTCz2TwcAie9SUQdcpc67+R2CKKtq/SX3ORgfoEaw1m4nh/J528uDeLUzui1Go eaZVDSNJGoi6ni33qgXuI+YqfYhTG60hUHH5lxD/N2d2JD9Bp4ShLXJ2zaidX5i1 WbRZLQgoq+blkhtvnlDmoLq1ufqu9M9pdlXtEvWlW/U4KDiUvAwqDFU/vEyWwbw/ QRDItLj159jKOGFUXhcKQkb5pwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGeh7xwC WhkU01Aj2wXqfCA8Tg2fMB8GA1UdIwQYMBaAFN+oYEUKb86xxue41P9UsVQaG2mz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MzRCOC85RjAzQkI2MDA5 NDQxMUVEOEREMTA5NzFDNEY5QUUwMi8zNmhnUlFwdnpySEc1N2pVXzFTeFZCb2Jh Yk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzM2aGdSUXB2enJIRzU3alVfMVN4VkJvYmFiTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MzRCOC85RjAzQkI2MDA5NDQxMUVEOEREMTA5NzFDNEY5QUUwMi8zNmhnUlFwdnpy SEc1N2pVXzFTeFZCb2JhYk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQO7bIKyTUt4Ab2sZRG53VKnChUkxke2X+RTwXW6KMgYb74DgV4sBf 5U24HouA8ur0xhgqVng63aT4Juzq5G8xudyljpEzK0DQm7Ff3ln+MWqgnwjYTVU4 xj9W1npYxd0X02YDFluYmP++4CbVu03yqvkPMM6VsiTcc+mRN6Wa+x1UcX7P9OH9 oJIG95ZRRqdZE+4YqUXI2cjHk/1OLqKjFMr3MqVeyCFfhqsAEpJrOPH+8eum01TZ StXeE0V6ruvFcKLTe09c0kAPmY0OXcCfMV+52XYrZwGgKNnD3aTaVS99nI4tomT7 i93FNig5FVHjYFPUfHqSFadBkGwfz0yI -----END CERTIFICATE-----Generated at Thu Jul 3 23:22:44 2025 by rpki-client