$ rpki-client -vvf rpki.apnic.net/member_repository/A91884A1/D7DB1C60149E11EEABDC7532C4F9AE02/j3AW2iLylktW9Cz0bZ8SOvNoMas.mft File: j3AW2iLylktW9Cz0bZ8SOvNoMas.mft (raw, json) Hash identifier: NNDgxF1DMDiilpS13VaGfzy69eSG7QRK2V7xDNm4394= Subject key identifier: 3C:1E:CF:49:64:81:39:1F:8A:BA:38:F7:3E:A5:9D:C6:E6:A5:14:B8 Authority key identifier: 8F:70:16:DA:22:F2:96:4B:56:F4:2C:F4:6D:9F:12:3A:F3:68:31:AB Certificate issuer: /CN=A91884A1/serialNumber=8F7016DA22F2964B56F42CF46D9F123AF36831AB Certificate serial: 0182 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j3AW2iLylktW9Cz0bZ8SOvNoMas.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91884A1/D7DB1C60149E11EEABDC7532C4F9AE02/j3AW2iLylktW9Cz0bZ8SOvNoMas.mft Manifest number: 017D Signing time: Sun 29 Jun 2025 02:51:23 +0000 Manifest this update: Sun 29 Jun 2025 02:51:22 +0000 Manifest next update: Sun 06 Jul 2025 02:51:22 +0000 Files and hashes: 1: j3AW2iLylktW9Cz0bZ8SOvNoMas.crl (hash: pp6NXWReGXHwgpey7Tht7CAEjnVknmBuF1DzJrDn3HA=) 2: 87695D32591811EE973B1058C4F9AE02.roa (hash: dzvekpBIKEZcV3J3iTc2a3q9pWoOoEEAik7qmwT7yrE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91884A1/D7DB1C60149E11EEABDC7532C4F9AE02/j3AW2iLylktW9Cz0bZ8SOvNoMas.crl rsync://rpki.apnic.net/member_repository/A91884A1/D7DB1C60149E11EEABDC7532C4F9AE02/j3AW2iLylktW9Cz0bZ8SOvNoMas.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j3AW2iLylktW9Cz0bZ8SOvNoMas.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 02:51:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 386 (0x182) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91884A1, serialNumber=8F7016DA22F2964B56F42CF46D9F123AF36831AB Validity Not Before: Jun 29 02:51:22 2025 GMT Not After : Jul 6 02:51:22 2025 GMT Subject: CN=6860aa2a-fcea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:7e:6a:db:ee:23:68:35:62:30:3a:8c:53:1e: 30:0f:7d:85:eb:7e:8b:d0:2c:f4:28:d8:67:11:6a: 13:1a:fd:39:87:00:9e:83:5c:81:1f:7b:b1:42:43: ac:78:e5:a9:a9:fc:37:3b:06:8d:f8:9f:23:00:2e: 0b:ff:38:18:38:20:dc:26:7f:db:89:ae:7f:cb:80: 8b:ac:26:b3:37:7b:88:d1:e7:17:25:dd:32:1a:15: ae:56:94:fd:de:f1:88:e7:9d:7a:ce:e3:3f:66:f6: 52:0e:e2:03:db:eb:d7:1e:09:0d:9c:e6:5b:c3:c9: a6:55:62:93:85:0f:0a:91:ef:8a:08:93:a8:c8:91: 8b:06:4b:6c:08:48:85:96:27:29:55:70:14:14:40: c2:a0:38:d5:99:ef:df:90:2f:57:1a:c5:a6:31:c4: 4d:22:3d:a8:2b:ac:6d:87:fe:67:8a:3d:5c:9d:69: 97:72:ff:16:4f:5e:21:c7:00:2d:5a:e1:93:56:82: a8:6c:a5:82:45:b2:66:77:08:8a:40:08:ae:d8:e7: a6:bc:f8:b6:67:8d:3f:da:9c:eb:84:d1:87:a6:72: dc:f2:4a:18:c5:c3:b6:02:ef:f3:1c:b4:cc:59:8a: bc:47:c5:71:2c:c7:51:bb:d4:d5:e2:da:16:da:fc: 82:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:1E:CF:49:64:81:39:1F:8A:BA:38:F7:3E:A5:9D:C6:E6:A5:14:B8 X509v3 Authority Key Identifier: keyid:8F:70:16:DA:22:F2:96:4B:56:F4:2C:F4:6D:9F:12:3A:F3:68:31:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91884A1/D7DB1C60149E11EEABDC7532C4F9AE02/j3AW2iLylktW9Cz0bZ8SOvNoMas.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j3AW2iLylktW9Cz0bZ8SOvNoMas.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91884A1/D7DB1C60149E11EEABDC7532C4F9AE02/j3AW2iLylktW9Cz0bZ8SOvNoMas.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:89:93:cc:3f:9a:cc:bf:fb:a4:53:c4:c5:72:d3:d2:c0:72: 7b:91:0d:95:d6:9b:ae:37:54:b4:7e:36:8e:75:2e:7a:55:e5: 8e:fe:4e:18:b4:17:a7:fb:95:ea:1f:4a:ed:29:9f:e7:ad:93: ad:79:a0:d2:02:b1:f2:20:03:6d:41:cf:a7:ef:52:c7:9c:15: 53:d2:4f:7d:1f:01:66:4e:27:d6:ee:7e:c0:f2:f8:37:ff:a0: c7:57:2d:b6:80:fb:1c:81:be:ff:b9:b0:94:61:51:95:54:8b: ce:d9:84:76:56:52:a0:1f:07:27:5c:51:91:8a:70:df:89:8d: 1c:73:e2:21:47:c4:59:d7:19:5b:f5:dd:90:08:8f:1c:ca:20: 60:02:3c:32:bf:d9:16:d8:58:31:c8:22:3f:b0:68:10:14:96: 3e:04:8a:77:fb:bb:75:9a:6c:06:08:b2:f7:e3:3a:67:21:ad: 06:8b:aa:bd:17:a0:c7:18:11:16:48:af:bf:2e:c5:b3:dc:88: a4:fc:e1:c2:46:88:29:0b:f0:17:b0:36:90:57:74:39:71:1a: b2:aa:44:93:f0:24:6c:61:6c:67:d8:89:0b:2d:f6:ca:72:78: cb:71:1c:ce:e0:74:55:55:e6:cc:4a:58:d0:0a:1f:af:97:78: a7:8f:ae:c4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODg0QTExMTAvBgNVBAUTKDhGNzAxNkRBMjJGMjk2NEI1NkY0MkNGNDZEOUYxMjNB RjM2ODMxQUIwHhcNMjUwNjI5MDI1MTIyWhcNMjUwNzA2MDI1MTIyWjAYMRYwFAYD VQQDEw02ODYwYWEyYS1mY2VhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsH5q2+4jaDViMDqMUx4wD32F636L0Cz0KNhnEWoTGv05hwCeg1yBH3uxQkOs eOWpqfw3OwaN+J8jAC4L/zgYOCDcJn/bia5/y4CLrCazN3uI0ecXJd0yGhWuVpT9 3vGI5516zuM/ZvZSDuID2+vXHgkNnOZbw8mmVWKThQ8Kke+KCJOoyJGLBktsCEiF licpVXAUFEDCoDjVme/fkC9XGsWmMcRNIj2oK6xth/5nij1cnWmXcv8WT14hxwAt WuGTVoKobKWCRbJmdwiKQAiu2OemvPi2Z40/2pzrhNGHpnLc8koYxcO2Au/zHLTM WYq8R8VxLMdRu9TV4toW2vyCuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDwez0lk gTkfiro49z6lncbmpRS4MB8GA1UdIwQYMBaAFI9wFtoi8pZLVvQs9G2fEjrzaDGr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4ODRBMS9EN0RCMUM2MDE0 OUUxMUVFQUJEQzc1MzJDNEY5QUUwMi9qM0FXMmlMeWxrdFc5Q3owYlo4U092Tm9N YXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ozQVcyaUx5bGt0VzlDejBiWjhTT3ZOb01hcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 ODRBMS9EN0RCMUM2MDE0OUUxMUVFQUJEQzc1MzJDNEY5QUUwMi9qM0FXMmlMeWxr dFc5Q3owYlo4U092Tm9NYXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA9iZPMP5rMv/ukU8TFctPSwHJ7kQ2V1puuN1S0fjaOdS56VeWO/k4Y tBen+5XqH0rtKZ/nrZOteaDSArHyIANtQc+n71LHnBVT0k99HwFmTifW7n7A8vg3 /6DHVy22gPscgb7/ubCUYVGVVIvO2YR2VlKgHwcnXFGRinDfiY0cc+IhR8RZ1xlb 9d2QCI8cyiBgAjwyv9kW2FgxyCI/sGgQFJY+BIp3+7t1mmwGCLL34zpnIa0Gi6q9 F6DHGBEWSK+/LsWz3Iik/OHCRogpC/AXsDaQV3Q5cRqyqkST8CRsYWxn2IkLLfbK cnjLcRzO4HRVVebMSljQCh+vl3inj67E -----END CERTIFICATE-----Generated at Sun Jun 29 20:20:34 2025 by rpki-client