$ rpki-client -vvf rpki.apnic.net/member_repository/A91560A3/E4DF96AAFDF811E8AD2C1262C4F9AE02/Di3qFP18_9DQqeo-N0N7keRUsjY.mft File: Di3qFP18_9DQqeo-N0N7keRUsjY.mft (raw, json) Hash identifier: G58bGZKxgpzp5bOTkCLsEYSb4G7d82RTqDbOCF0XGFs= Subject key identifier: 18:9B:DA:DF:1A:1D:A0:02:1B:DC:CA:FF:7B:9A:7D:D6:22:1F:EB:FC Authority key identifier: 0E:2D:EA:14:FD:7C:FF:D0:D0:A9:EA:3E:37:43:7B:91:E4:54:B2:36 Certificate issuer: /CN=A91560A3/serialNumber=0E2DEA14FD7CFFD0D0A9EA3E37437B91E454B236 Certificate serial: 1190 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Di3qFP18_9DQqeo-N0N7keRUsjY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91560A3/E4DF96AAFDF811E8AD2C1262C4F9AE02/Di3qFP18_9DQqeo-N0N7keRUsjY.mft Manifest number: 118A Signing time: Wed 02 Jul 2025 17:24:47 +0000 Manifest this update: Wed 02 Jul 2025 17:24:46 +0000 Manifest next update: Wed 09 Jul 2025 17:24:46 +0000 Files and hashes: 1: Di3qFP18_9DQqeo-N0N7keRUsjY.crl (hash: dJKjlB8AzyL5wfORqxxp/0LFfqd/f/2iITaVIhO0DhE=) 2: 2245CE0A606811EB80E3D531C4F9AE02.roa (hash: PSSQDCbjfGOv5hsREHHq3AE69qVBQBbQjxmYclshFuc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91560A3/E4DF96AAFDF811E8AD2C1262C4F9AE02/Di3qFP18_9DQqeo-N0N7keRUsjY.crl rsync://rpki.apnic.net/member_repository/A91560A3/E4DF96AAFDF811E8AD2C1262C4F9AE02/Di3qFP18_9DQqeo-N0N7keRUsjY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Di3qFP18_9DQqeo-N0N7keRUsjY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 17:24:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4496 (0x1190) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91560A3, serialNumber=0E2DEA14FD7CFFD0D0A9EA3E37437B91E454B236 Validity Not Before: Jul 2 17:24:46 2025 GMT Not After : Jul 9 17:24:46 2025 GMT Subject: CN=68656b5e-1799 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:e8:20:e7:46:7e:98:f4:bf:af:ec:88:32:1d: 68:1b:9a:af:6a:f3:19:6a:19:72:1c:42:75:03:e4: 4b:1c:fa:a2:4f:4a:d7:23:4a:3c:ec:26:79:41:cd: 73:43:ae:4b:0b:8f:10:f8:48:83:7b:3f:6e:0f:bb: 70:0d:40:c8:58:7f:f2:bc:2c:ac:16:e7:d9:70:39: b5:ee:a1:39:7e:a4:af:f5:4d:bf:f3:a5:84:68:2e: 14:25:5e:e6:54:07:60:05:1a:e0:21:1b:fe:b1:0e: 96:3a:7e:4d:e7:92:b4:06:48:bb:b0:ff:73:ad:e4: 1f:80:ee:57:f6:b7:6f:e8:fa:3b:46:d4:03:db:d1: e8:36:99:07:9b:9b:93:9c:cf:a7:51:f0:93:f4:8e: 68:2a:fc:2c:45:59:9c:2b:27:8f:f0:c2:32:ca:86: 06:e7:38:79:17:4e:f6:a0:35:ff:d2:90:8f:55:db: 1a:ef:83:cb:d9:a5:40:b0:5d:c9:c6:54:ad:ad:c7: f0:b7:4d:3d:55:73:6d:32:fa:d0:e3:1c:6d:d3:de: ae:9f:79:e1:51:d6:a2:31:80:ea:28:2c:cc:d0:38: 62:85:b0:46:ba:2b:aa:57:cb:ca:66:97:d5:99:f9: c1:33:5f:cf:93:72:0c:d8:94:08:1c:74:62:f7:a4: 8c:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:9B:DA:DF:1A:1D:A0:02:1B:DC:CA:FF:7B:9A:7D:D6:22:1F:EB:FC X509v3 Authority Key Identifier: keyid:0E:2D:EA:14:FD:7C:FF:D0:D0:A9:EA:3E:37:43:7B:91:E4:54:B2:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91560A3/E4DF96AAFDF811E8AD2C1262C4F9AE02/Di3qFP18_9DQqeo-N0N7keRUsjY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Di3qFP18_9DQqeo-N0N7keRUsjY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91560A3/E4DF96AAFDF811E8AD2C1262C4F9AE02/Di3qFP18_9DQqeo-N0N7keRUsjY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:0f:c5:f8:0f:25:6c:64:4d:48:2f:37:30:e2:dc:f1:ec:b3: 70:a5:9e:cb:53:2a:f5:8c:a1:8d:29:9a:ff:ed:bd:44:54:97: d5:ed:f1:5a:d9:0e:d7:fe:b2:6b:17:f2:56:b6:b4:20:fe:de: c4:c8:28:d6:05:9f:7d:2e:a9:c1:42:10:96:76:3d:00:40:13: 07:4d:92:3b:30:0a:e2:0d:62:7c:8d:52:cc:ea:a6:8e:a8:32: 6b:8a:e3:be:c0:29:e6:e6:11:29:56:34:13:8b:06:6f:05:7b: 6f:46:75:5b:95:fd:40:d1:ba:bc:c8:1b:3a:94:60:e1:e0:4b: b9:ae:7e:9d:92:b2:67:2f:c4:45:c3:0c:95:44:9f:39:d5:f3: 0f:f8:3c:ee:fd:0b:42:2d:10:bf:29:5b:ef:dc:8a:5a:03:e2: 3d:54:6b:cc:7d:4f:8a:08:65:2d:1d:ac:4b:22:bb:c4:ab:ed: 6a:f4:bf:6d:62:5e:2a:12:78:66:82:a1:8e:70:d0:24:1c:09: 9b:66:d7:68:76:c4:db:c9:4d:8f:6f:b2:7e:df:f9:8d:35:68: 38:48:4a:4d:2c:75:3a:88:eb:f4:33:de:bc:9d:2f:3d:24:74: 6d:5e:90:f2:4e:e1:f2:33:bd:89:90:aa:18:99:03:05:24:a8: e4:24:9e:f5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEZAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTYwQTMxMTAvBgNVBAUTKDBFMkRFQTE0RkQ3Q0ZGRDBEMEE5RUEzRTM3NDM3Qjkx RTQ1NEIyMzYwHhcNMjUwNzAyMTcyNDQ2WhcNMjUwNzA5MTcyNDQ2WjAYMRYwFAYD VQQDEw02ODY1NmI1ZS0xNzk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyOgg50Z+mPS/r+yIMh1oG5qvavMZahlyHEJ1A+RLHPqiT0rXI0o87CZ5Qc1z Q65LC48Q+EiDez9uD7twDUDIWH/yvCysFufZcDm17qE5fqSv9U2/86WEaC4UJV7m VAdgBRrgIRv+sQ6WOn5N55K0Bki7sP9zreQfgO5X9rdv6Po7RtQD29HoNpkHm5uT nM+nUfCT9I5oKvwsRVmcKyeP8MIyyoYG5zh5F072oDX/0pCPVdsa74PL2aVAsF3J xlStrcfwt009VXNtMvrQ4xxt096un3nhUdaiMYDqKCzM0DhihbBGuiuqV8vKZpfV mfnBM1/Pk3IM2JQIHHRi96SMaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBib2t8a HaACG9zK/3uafdYiH+v8MB8GA1UdIwQYMBaAFA4t6hT9fP/Q0KnqPjdDe5HkVLI2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NjBBMy9FNERGOTZBQUZE RjgxMUU4QUQyQzEyNjJDNEY5QUUwMi9EaTNxRlAxOF85RFFxZW8tTjBON2tlUlVz alkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RpM3FGUDE4XzlEUXFlby1OME43a2VSVXNqWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NjBBMy9FNERGOTZBQUZERjgxMUU4QUQyQzEyNjJDNEY5QUUwMi9EaTNxRlAxOF85 RFFxZW8tTjBON2tlUlVzalkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCmD8X4DyVsZE1ILzcw4tzx7LNwpZ7LUyr1jKGNKZr/7b1EVJfV7fFa 2Q7X/rJrF/JWtrQg/t7EyCjWBZ99LqnBQhCWdj0AQBMHTZI7MAriDWJ8jVLM6qaO qDJriuO+wCnm5hEpVjQTiwZvBXtvRnVblf1A0bq8yBs6lGDh4Eu5rn6dkrJnL8RF wwyVRJ851fMP+Dzu/QtCLRC/KVvv3IpaA+I9VGvMfU+KCGUtHaxLIrvEq+1q9L9t Yl4qEnhmgqGOcNAkHAmbZtdodsTbyU2Pb7J+3/mNNWg4SEpNLHU6iOv0M968nS89 JHRtXpDyTuHyM72JkKoYmQMFJKjkJJ71 -----END CERTIFICATE-----Generated at Fri Jul 4 04:02:38 2025 by rpki-client