$ rpki-client -vvf rpki.apnic.net/member_repository/A91706E4/3ABA80AAA68411EF8F5ED37FC4F9AE02/b35Y0Iljiffn_k6HlapVXVxVUYg.mft File: b35Y0Iljiffn_k6HlapVXVxVUYg.mft (raw, json) Hash identifier: jgwMrpLywzA4IPuhWHNIzwwSdbO0dxZ5dau4zhj93UI= Subject key identifier: 5A:1D:49:6D:46:73:FE:3D:09:BF:1F:D5:11:4A:57:93:EF:23:10:B2 Authority key identifier: 6F:7E:58:D0:89:63:89:F7:E7:FE:4E:87:95:AA:55:5D:5C:55:51:88 Certificate issuer: /CN=A91706E4/serialNumber=6F7E58D0896389F7E7FE4E8795AA555D5C555188 Certificate serial: 75 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b35Y0Iljiffn_k6HlapVXVxVUYg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91706E4/3ABA80AAA68411EF8F5ED37FC4F9AE02/b35Y0Iljiffn_k6HlapVXVxVUYg.mft Manifest number: 74 Signing time: Tue 01 Jul 2025 07:35:11 +0000 Manifest this update: Tue 01 Jul 2025 07:35:10 +0000 Manifest next update: Tue 08 Jul 2025 07:35:10 +0000 Files and hashes: 1: b35Y0Iljiffn_k6HlapVXVxVUYg.crl (hash: W8yUbRZlyKdzU1IAjpw1HgIOHRTeaXzFYFPG7A+ieUw=) 2: 31E9AEC6E30411EFBC0C3B2CC4F9AE02.roa (hash: iUCXkP/k8vFDK+xe4w0gGSkxJOnd/FNj32EaA1KJbt4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91706E4/3ABA80AAA68411EF8F5ED37FC4F9AE02/b35Y0Iljiffn_k6HlapVXVxVUYg.crl rsync://rpki.apnic.net/member_repository/A91706E4/3ABA80AAA68411EF8F5ED37FC4F9AE02/b35Y0Iljiffn_k6HlapVXVxVUYg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b35Y0Iljiffn_k6HlapVXVxVUYg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 07:35:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 117 (0x75) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91706E4, serialNumber=6F7E58D0896389F7E7FE4E8795AA555D5C555188 Validity Not Before: Jul 1 07:35:10 2025 GMT Not After : Jul 8 07:35:10 2025 GMT Subject: CN=68638fae-7512 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:75:39:92:c3:47:f0:92:c4:be:04:14:38:05: 1f:44:e8:69:f1:fd:30:29:49:c6:26:a4:33:c2:1f: 7a:d8:d0:39:2b:fe:61:65:9d:fe:c8:09:7a:c0:4f: 0d:68:19:d2:6b:b1:0f:e5:35:0c:10:96:95:38:ee: c0:0a:67:95:3f:2a:15:0e:fa:49:f6:cf:52:31:3b: 45:76:ab:2b:b1:cc:8b:3d:df:f8:5f:7a:87:a8:28: 8a:7b:36:db:44:89:9e:a6:10:1c:a3:ab:e2:71:1e: a2:a5:2c:76:34:1d:cd:30:f9:4e:d5:0e:1c:54:13: 25:b1:4a:30:6b:32:3f:a7:a2:dd:49:7b:be:22:11: 44:97:70:42:4f:1c:7a:85:99:6b:12:3a:8f:f0:27: 0f:a5:06:8c:68:e9:cc:dd:35:31:c5:0d:f3:93:46: 7c:90:7e:fc:f6:70:40:1b:bc:d3:25:d9:14:de:66: 71:1c:51:88:f8:64:1a:71:06:67:75:5b:89:f2:a3: 4f:ac:bc:f7:db:a5:72:cf:05:74:32:2b:e9:22:09: 0f:e7:b7:36:d5:5e:58:8f:e1:14:53:e4:94:0c:d4: f6:58:c3:f8:d6:8d:58:0d:d2:76:7e:ff:4f:56:8c: 09:50:50:51:de:d8:98:d6:f1:ad:3f:68:13:c0:7b: 93:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:1D:49:6D:46:73:FE:3D:09:BF:1F:D5:11:4A:57:93:EF:23:10:B2 X509v3 Authority Key Identifier: keyid:6F:7E:58:D0:89:63:89:F7:E7:FE:4E:87:95:AA:55:5D:5C:55:51:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91706E4/3ABA80AAA68411EF8F5ED37FC4F9AE02/b35Y0Iljiffn_k6HlapVXVxVUYg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b35Y0Iljiffn_k6HlapVXVxVUYg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91706E4/3ABA80AAA68411EF8F5ED37FC4F9AE02/b35Y0Iljiffn_k6HlapVXVxVUYg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:45:1d:be:33:ca:31:ea:42:5c:67:1b:ff:91:20:7b:9b:82: 59:aa:57:14:c2:f5:79:db:f9:49:9d:3d:ec:52:c9:28:12:5b: a2:bf:af:f6:b7:42:3d:f2:f9:01:04:91:8e:1f:b9:70:f8:f4: c1:7b:be:4d:a5:8e:8e:df:b1:40:5b:4c:bd:05:97:b4:f9:f7: 15:c8:28:1a:92:4d:a0:c1:0f:a9:8f:d8:bd:29:b9:80:d5:d9: 5e:46:ca:0c:2f:9e:27:b5:5c:dc:1c:03:49:47:31:fd:00:a1: 6b:5b:11:23:93:0d:db:b9:bd:5a:4e:5b:d4:d7:43:87:25:4b: e8:bb:f4:56:53:42:3f:93:44:21:1c:79:b1:48:1a:b0:2f:06: f5:b8:83:82:11:25:e8:ab:85:f8:40:db:36:7d:6e:fa:8f:bc: 8a:e1:88:bf:70:1b:42:a0:75:63:78:d1:f2:47:a1:28:58:c6: 5a:81:48:fb:18:2b:ff:d4:a2:d2:71:47:8b:1d:a9:6c:87:f6: 9e:d6:8f:5a:76:6d:cf:ad:58:8a:f6:c9:79:f2:04:a9:8c:15: 3c:3d:52:4a:34:d3:41:68:91:ed:c4:fc:f2:a7:5d:17:1c:83: 02:43:3b:f7:8d:4f:a2:f9:dc:73:f9:cc:15:34:b0:88:24:c1: 86:e9:57:d3 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBdTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 MDZFNDExMC8GA1UEBRMoNkY3RTU4RDA4OTYzODlGN0U3RkU0RTg3OTVBQTU1NUQ1 QzU1NTE4ODAeFw0yNTA3MDEwNzM1MTBaFw0yNTA3MDgwNzM1MTBaMBgxFjAUBgNV BAMTDTY4NjM4ZmFlLTc1MTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCwdTmSw0fwksS+BBQ4BR9E6Gnx/TApScYmpDPCH3rY0Dkr/mFlnf7ICXrATw1o GdJrsQ/lNQwQlpU47sAKZ5U/KhUO+kn2z1IxO0V2qyuxzIs93/hfeoeoKIp7NttE iZ6mEByjq+JxHqKlLHY0Hc0w+U7VDhxUEyWxSjBrMj+not1Je74iEUSXcEJPHHqF mWsSOo/wJw+lBoxo6czdNTHFDfOTRnyQfvz2cEAbvNMl2RTeZnEcUYj4ZBpxBmd1 W4nyo0+svPfbpXLPBXQyK+kiCQ/ntzbVXliP4RRT5JQM1PZYw/jWjVgN0nZ+/09W jAlQUFHe2JjW8a0/aBPAe5PlAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUWh1JbUZz /j0Jvx/VEUpXk+8jELIwHwYDVR0jBBgwFoAUb35Y0Iljiffn/k6HlapVXVxVUYgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcwNkU0LzNBQkE4MEFBQTY4 NDExRUY4RjVFRDM3RkM0RjlBRTAyL2IzNVkwSWxqaWZmbl9rNkhsYXBWWFZ4VlVZ Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYjM1WTBJbGppZmZuX2s2SGxhcFZYVnhWVVlnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcw NkU0LzNBQkE4MEFBQTY4NDExRUY4RjVFRDM3RkM0RjlBRTAyL2IzNVkwSWxqaWZm bl9rNkhsYXBWWFZ4VlVZZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHBFHb4zyjHqQlxnG/+RIHubglmqVxTC9Xnb+UmdPexSySgSW6K/r/a3 Qj3y+QEEkY4fuXD49MF7vk2ljo7fsUBbTL0Fl7T59xXIKBqSTaDBD6mP2L0puYDV 2V5Gygwvnie1XNwcA0lHMf0AoWtbESOTDdu5vVpOW9TXQ4clS+i79FZTQj+TRCEc ebFIGrAvBvW4g4IRJeirhfhA2zZ9bvqPvIrhiL9wG0KgdWN40fJHoShYxlqBSPsY K//UotJxR4sdqWyH9p7Wj1p2bc+tWIr2yXnyBKmMFTw9Uko000Foke3E/PKnXRcc gwJDO/eNT6L53HP5zBU0sIgkwYbpV9M= -----END CERTIFICATE-----Generated at Thu Jul 3 07:54:03 2025 by rpki-client