$ rpki-client -vvf rpki.apnic.net/member_repository/A91799A0/40EDA11E9AE811EC974B491CC4F9AE02/N-A1JLWEfb6tAP43jEar0MpwRfg.mft File: N-A1JLWEfb6tAP43jEar0MpwRfg.mft (raw, json) Hash identifier: wfnMtAWKdbHsVvd3SWFDwfd+NmYXQY4vRn+MkEYYmLg= Subject key identifier: 0D:89:E3:DF:26:2F:9F:19:DB:A9:9B:00:A2:6A:6F:BD:FC:FD:53:20 Authority key identifier: 37:E0:35:24:B5:84:7D:BE:AD:00:FE:37:8C:46:AB:D0:CA:70:45:F8 Certificate issuer: /CN=A91799A0/serialNumber=37E03524B5847DBEAD00FE378C46ABD0CA7045F8 Certificate serial: 03BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N-A1JLWEfb6tAP43jEar0MpwRfg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91799A0/40EDA11E9AE811EC974B491CC4F9AE02/N-A1JLWEfb6tAP43jEar0MpwRfg.mft Manifest number: 03B1 Signing time: Tue 01 Jul 2025 01:18:29 +0000 Manifest this update: Tue 01 Jul 2025 01:18:29 +0000 Manifest next update: Tue 08 Jul 2025 01:18:29 +0000 Files and hashes: 1: N-A1JLWEfb6tAP43jEar0MpwRfg.crl (hash: qJhd8w53Sj8ID2BKWXvuxlG3W939zdBFZX9EkLc6hqc=) 2: 99C173847DA711EFBC48DB25C4F9AE02.roa (hash: BrxJSBI7Q6Tw0excD7qGChxBI2yuS7vr/0+QLL4MRIg=) 3: B0A47CAE7DA711EFB7190E26C4F9AE02.roa (hash: MnBCnb88Lb1soYhMr2JBZDZOHnyxIxINjkfdJ2fBlW0=) 4: 46A569387DA911EFAC4E642AC4F9AE02.roa (hash: f8XNdnN9MpGjh5uhvA20BgKfLLbWC1Eb3g7qFqX+uVY=) 5: F39CE41C7C3811EFBF44AF4FC4F9AE02.roa (hash: qYKHA79o/QNNLBRngvTLprJN4A1dHBhKA8ix5QbqNOU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91799A0/40EDA11E9AE811EC974B491CC4F9AE02/N-A1JLWEfb6tAP43jEar0MpwRfg.crl rsync://rpki.apnic.net/member_repository/A91799A0/40EDA11E9AE811EC974B491CC4F9AE02/N-A1JLWEfb6tAP43jEar0MpwRfg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N-A1JLWEfb6tAP43jEar0MpwRfg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 01:18:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 957 (0x3bd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91799A0, serialNumber=37E03524B5847DBEAD00FE378C46ABD0CA7045F8 Validity Not Before: Jul 1 01:18:29 2025 GMT Not After : Jul 8 01:18:29 2025 GMT Subject: CN=68633765-6bce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:05:0a:8e:4e:33:bc:0e:96:ce:77:ee:cc:2e: db:1b:43:2f:33:99:09:0d:52:58:8c:e4:ee:59:fb: 52:03:c7:7e:58:6c:33:a9:4a:05:f2:f7:df:38:b6: 55:43:be:cf:5d:cd:fc:86:95:49:f7:aa:5d:a7:39: b5:ba:fc:5e:68:01:52:bc:bc:b6:38:47:84:bd:93: 56:97:fd:c6:97:e1:e9:10:ce:b1:04:08:06:04:4f: e4:a0:bb:1d:a6:c6:c3:76:96:d6:42:05:63:91:3b: 6a:91:1e:da:78:44:7c:dc:52:1c:bf:0c:e6:47:47: de:bf:32:20:fa:75:d4:28:32:53:cc:5f:c2:b6:15: 97:c4:26:40:95:db:e7:4d:53:e4:c8:44:28:39:44: a5:cf:15:28:41:bb:0f:51:a0:f5:3a:0b:f2:87:a9: 55:d0:17:e0:73:b7:d5:58:00:df:7e:69:b6:f6:3f: 29:93:5b:19:f3:6a:20:ca:dc:3b:c9:bd:2e:b2:e6: 73:e8:02:60:7b:a0:ed:78:8f:5b:c0:de:29:5b:12: 8d:dd:3b:eb:b4:61:4b:5b:ee:57:0b:53:1a:72:3d: 0b:ed:bf:5a:05:98:7a:d3:de:13:89:9f:6c:f5:8b: 3d:64:d9:19:90:8d:66:89:ef:fc:c3:10:58:8e:d8: 4e:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:89:E3:DF:26:2F:9F:19:DB:A9:9B:00:A2:6A:6F:BD:FC:FD:53:20 X509v3 Authority Key Identifier: keyid:37:E0:35:24:B5:84:7D:BE:AD:00:FE:37:8C:46:AB:D0:CA:70:45:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91799A0/40EDA11E9AE811EC974B491CC4F9AE02/N-A1JLWEfb6tAP43jEar0MpwRfg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N-A1JLWEfb6tAP43jEar0MpwRfg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91799A0/40EDA11E9AE811EC974B491CC4F9AE02/N-A1JLWEfb6tAP43jEar0MpwRfg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:cf:66:65:2e:da:96:ea:fc:01:e1:c6:49:56:66:b2:1a:d5: 63:0d:a5:11:80:25:8d:bc:c3:c1:4a:dd:c9:2e:9a:cf:b8:27: b9:b5:0b:57:f9:a6:7e:ee:bc:3c:ae:a7:37:17:1e:3b:8b:e5: 56:2e:ba:26:33:a9:a0:f4:02:e8:3f:48:e0:8b:d1:4e:4f:56: be:c1:8c:c6:1d:f6:55:38:ea:c7:9f:2e:f2:5b:fd:83:3c:bc: ea:bd:3f:af:45:6c:eb:ed:ab:80:49:4f:17:74:c8:7d:dc:94: 56:98:41:e9:5c:e2:54:84:39:81:3e:76:8f:7d:5a:43:85:fc: f3:bb:8c:01:c3:87:f5:92:13:eb:a5:db:6e:93:89:95:1a:62: 39:06:ae:56:27:80:53:74:be:b1:45:81:ad:70:00:92:c0:7b: f8:c2:0d:d2:2c:95:4d:bd:63:53:96:25:80:b5:89:bb:bb:c7: 2f:86:f9:6a:4e:7c:21:60:d4:e7:11:40:ff:a1:b1:50:d7:86: 8c:ea:5d:46:24:69:2b:7c:cd:e2:2c:3d:7b:ff:cb:be:ce:32: 5b:10:fc:27:c1:d3:2f:ab:9a:30:d2:5b:6d:96:e1:48:74:9b: 47:6c:3a:7e:6c:fa:9d:80:16:03:e4:12:7a:53:e7:5f:fc:01: a5:ea:ee:8b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA70wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Nzk5QTAxMTAvBgNVBAUTKDM3RTAzNTI0QjU4NDdEQkVBRDAwRkUzNzhDNDZBQkQw Q0E3MDQ1RjgwHhcNMjUwNzAxMDExODI5WhcNMjUwNzA4MDExODI5WjAYMRYwFAYD VQQDEw02ODYzMzc2NS02YmNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtgUKjk4zvA6WznfuzC7bG0MvM5kJDVJYjOTuWftSA8d+WGwzqUoF8vffOLZV Q77PXc38hpVJ96pdpzm1uvxeaAFSvLy2OEeEvZNWl/3Gl+HpEM6xBAgGBE/koLsd psbDdpbWQgVjkTtqkR7aeER83FIcvwzmR0fevzIg+nXUKDJTzF/CthWXxCZAldvn TVPkyEQoOUSlzxUoQbsPUaD1Ogvyh6lV0Bfgc7fVWADffmm29j8pk1sZ82ogytw7 yb0usuZz6AJge6DteI9bwN4pWxKN3TvrtGFLW+5XC1Macj0L7b9aBZh6094TiZ9s 9Ys9ZNkZkI1mie/8wxBYjthOcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA2J498m L58Z26mbAKJqb738/VMgMB8GA1UdIwQYMBaAFDfgNSS1hH2+rQD+N4xGq9DKcEX4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OTlBMC80MEVEQTExRTlB RTgxMUVDOTc0QjQ5MUNDNEY5QUUwMi9OLUExSkxXRWZiNnRBUDQzakVhcjBNcHdS ZmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL04tQTFKTFdFZmI2dEFQNDNqRWFyME1wd1JmZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OTlBMC80MEVEQTExRTlBRTgxMUVDOTc0QjQ5MUNDNEY5QUUwMi9OLUExSkxXRWZi NnRBUDQzakVhcjBNcHdSZmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC4z2ZlLtqW6vwB4cZJVmayGtVjDaURgCWNvMPBSt3JLprPuCe5tQtX +aZ+7rw8rqc3Fx47i+VWLromM6mg9ALoP0jgi9FOT1a+wYzGHfZVOOrHny7yW/2D PLzqvT+vRWzr7auASU8XdMh93JRWmEHpXOJUhDmBPnaPfVpDhfzzu4wBw4f1khPr pdtuk4mVGmI5Bq5WJ4BTdL6xRYGtcACSwHv4wg3SLJVNvWNTliWAtYm7u8cvhvlq TnwhYNTnEUD/obFQ14aM6l1GJGkrfM3iLD17/8u+zjJbEPwnwdMvq5ow0lttluFI dJtHbDp+bPqdgBYD5BJ6U+df/AGl6u6L -----END CERTIFICATE-----Generated at Wed Jul 2 04:29:37 2025 by rpki-client