$ rpki-client -vvf rpki.apnic.net/member_repository/A91889A4/27A25A5604FA11EE8D46E245C4F9AE02/_nQHcdbqABLeOHBW-Iy-3TbEqGA.mft File: _nQHcdbqABLeOHBW-Iy-3TbEqGA.mft (raw, json) Hash identifier: 0myXE0gQrYaZgDKODqX6FM4bGFidfo/EXX0nAzmqaQc= Subject key identifier: AB:3B:2A:89:B4:CB:E4:F0:BC:51:4B:DD:9B:E1:8B:E0:AD:6D:C4:42 Authority key identifier: FE:74:07:71:D6:EA:00:12:DE:38:70:56:F8:8C:BE:DD:36:C4:A8:60 Certificate issuer: /CN=A91889A4/serialNumber=FE740771D6EA0012DE387056F88CBEDD36C4A860 Certificate serial: 018A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_nQHcdbqABLeOHBW-Iy-3TbEqGA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91889A4/27A25A5604FA11EE8D46E245C4F9AE02/_nQHcdbqABLeOHBW-Iy-3TbEqGA.mft Manifest number: 0186 Signing time: Thu 03 Jul 2025 04:07:48 +0000 Manifest this update: Thu 03 Jul 2025 04:07:48 +0000 Manifest next update: Thu 10 Jul 2025 04:07:48 +0000 Files and hashes: 1: _nQHcdbqABLeOHBW-Iy-3TbEqGA.crl (hash: cI+qZ81vHzdCR2w2eUPSWNEm8P8tV1w/846sVmPZXyk=) 2: 37B318C0050111EEAFBCAE7EC4F9AE02.roa (hash: eMm1aATtYTxr8yulbbTqFy3KIRD0+Hc1f6QKDsCg/8Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91889A4/27A25A5604FA11EE8D46E245C4F9AE02/_nQHcdbqABLeOHBW-Iy-3TbEqGA.crl rsync://rpki.apnic.net/member_repository/A91889A4/27A25A5604FA11EE8D46E245C4F9AE02/_nQHcdbqABLeOHBW-Iy-3TbEqGA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_nQHcdbqABLeOHBW-Iy-3TbEqGA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 394 (0x18a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91889A4, serialNumber=FE740771D6EA0012DE387056F88CBEDD36C4A860 Validity Not Before: Jul 3 04:07:48 2025 GMT Not After : Jul 10 04:07:48 2025 GMT Subject: CN=68660214-39d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:69:fe:a6:76:d3:d2:9d:25:70:89:5a:bc:67: c0:da:f0:6a:08:7c:b0:a6:a6:e5:39:80:c2:71:a0: de:e3:fa:96:e9:d3:27:44:fb:c2:c2:c7:6a:fc:54: 05:5f:a5:5b:1b:7d:9b:6e:dd:48:d4:b8:93:9a:5e: 22:29:a4:2b:89:94:53:98:07:b9:99:d3:82:cb:d3: a2:1b:f7:58:a4:e6:52:f5:74:f9:07:75:a0:8a:12: 2e:12:af:5a:76:71:14:cd:d8:06:c8:e8:82:c9:7b: 62:24:23:11:fa:29:fb:85:6f:e3:c9:a2:2a:9d:38: 33:02:5f:02:16:27:f4:60:4d:57:b8:b8:3e:da:8c: 34:09:ed:5d:8b:05:81:42:18:71:a0:b8:9c:58:9a: 8c:22:74:32:b6:59:7d:e7:0a:d0:d9:5e:b0:d5:88: 14:23:3e:d1:a2:d9:78:e8:03:33:a2:63:ae:e0:33: 85:9b:a8:d6:ff:fb:e5:0a:ca:03:04:0a:37:fb:3c: aa:f8:00:16:a3:49:59:9c:7d:69:83:88:49:84:88: 7e:12:d4:25:e7:5d:a5:df:4c:c3:3f:5a:7c:7d:6d: 60:04:f1:7d:cb:a2:39:fc:de:6a:a9:f1:78:34:57: cf:16:40:b3:e9:dd:9e:a3:3b:e1:5d:63:bf:62:52: a1:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:3B:2A:89:B4:CB:E4:F0:BC:51:4B:DD:9B:E1:8B:E0:AD:6D:C4:42 X509v3 Authority Key Identifier: keyid:FE:74:07:71:D6:EA:00:12:DE:38:70:56:F8:8C:BE:DD:36:C4:A8:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91889A4/27A25A5604FA11EE8D46E245C4F9AE02/_nQHcdbqABLeOHBW-Iy-3TbEqGA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_nQHcdbqABLeOHBW-Iy-3TbEqGA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91889A4/27A25A5604FA11EE8D46E245C4F9AE02/_nQHcdbqABLeOHBW-Iy-3TbEqGA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:0f:b2:79:79:e5:54:9d:21:9a:15:10:be:e1:1d:97:d2:b9: 52:4a:cd:40:1b:2a:03:58:4e:ca:3c:eb:1b:f7:db:0c:97:36: a2:f0:4d:f6:7a:c5:4a:60:6d:c0:e1:76:93:9b:b7:b0:78:89: e5:40:43:cb:b4:ac:20:11:54:2a:14:6b:88:67:5f:f6:31:17: 38:c5:31:d0:da:27:5d:3f:e2:89:64:f3:0a:29:ad:8c:39:10: 56:27:55:1a:1c:e7:48:ed:4e:19:d4:a3:a9:fe:70:b1:3e:d7: 5c:25:b8:b0:23:d5:91:10:12:36:5b:d8:12:ad:bf:3e:88:df: 2a:1e:ed:07:e4:34:70:d1:a2:69:5f:cd:7b:57:54:f2:d2:d1: 00:ec:09:b8:e5:0d:3b:c6:30:d2:1a:ad:d3:5d:cc:4b:b3:0d: c9:b3:15:89:07:5f:ee:cb:40:78:b2:5a:5b:92:76:a8:81:60: b5:4e:80:77:24:ef:fb:94:a5:e0:e8:9a:3d:34:b5:96:aa:d4: 93:d4:3d:37:36:55:50:d0:92:0d:da:2a:36:45:17:05:78:ba: 9a:db:61:b0:4b:1d:34:ca:b6:d2:41:e7:58:85:70:5f:d4:7a: a1:dc:90:7b:cb:31:be:93:43:58:3e:22:dd:4f:91:6f:60:62: ae:71:86:82 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODg5QTQxMTAvBgNVBAUTKEZFNzQwNzcxRDZFQTAwMTJERTM4NzA1NkY4OENCRURE MzZDNEE4NjAwHhcNMjUwNzAzMDQwNzQ4WhcNMjUwNzEwMDQwNzQ4WjAYMRYwFAYD VQQDEw02ODY2MDIxNC0zOWQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3Wn+pnbT0p0lcIlavGfA2vBqCHywpqblOYDCcaDe4/qW6dMnRPvCwsdq/FQF X6VbG32bbt1I1LiTml4iKaQriZRTmAe5mdOCy9OiG/dYpOZS9XT5B3WgihIuEq9a dnEUzdgGyOiCyXtiJCMR+in7hW/jyaIqnTgzAl8CFif0YE1XuLg+2ow0Ce1diwWB QhhxoLicWJqMInQytll95wrQ2V6w1YgUIz7Rotl46AMzomOu4DOFm6jW//vlCsoD BAo3+zyq+AAWo0lZnH1pg4hJhIh+EtQl512l30zDP1p8fW1gBPF9y6I5/N5qqfF4 NFfPFkCz6d2eozvhXWO/YlKhpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKs7Kom0 y+TwvFFL3Zvhi+CtbcRCMB8GA1UdIwQYMBaAFP50B3HW6gAS3jhwVviMvt02xKhg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4ODlBNC8yN0EyNUE1NjA0 RkExMUVFOEQ0NkUyNDVDNEY5QUUwMi9fblFIY2RicUFCTGVPSEJXLUl5LTNUYkVx R0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19uUUhjZGJxQUJMZU9IQlctSXktM1RiRXFHQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 ODlBNC8yN0EyNUE1NjA0RkExMUVFOEQ0NkUyNDVDNEY5QUUwMi9fblFIY2RicUFC TGVPSEJXLUl5LTNUYkVxR0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCsD7J5eeVUnSGaFRC+4R2X0rlSSs1AGyoDWE7KPOsb99sMlzai8E32 esVKYG3A4XaTm7eweInlQEPLtKwgEVQqFGuIZ1/2MRc4xTHQ2iddP+KJZPMKKa2M ORBWJ1UaHOdI7U4Z1KOp/nCxPtdcJbiwI9WREBI2W9gSrb8+iN8qHu0H5DRw0aJp X817V1Ty0tEA7Am45Q07xjDSGq3TXcxLsw3JsxWJB1/uy0B4slpbknaogWC1ToB3 JO/7lKXg6Jo9NLWWqtST1D03NlVQ0JIN2io2RRcFeLqa22GwSx00yrbSQedYhXBf 1Hqh3JB7yzG+k0NYPiLdT5FvYGKucYaC -----END CERTIFICATE-----Generated at Thu Jul 3 09:47:46 2025 by rpki-client