$ rpki-client -vvf rpki.apnic.net/member_repository/A9191170/F32308C2042A11EE94A84941C4F9AE02/31OLuqk3tpugC7J7caS3dubkGf4.mft File: 31OLuqk3tpugC7J7caS3dubkGf4.mft (raw, json) Hash identifier: tP4o7a3A/EvxGRqbEkqb5GK9kuYnCBdWkG/JAcPVzfg= Subject key identifier: D5:42:CB:4C:53:D9:6F:FC:98:57:AF:7D:48:AC:A9:D0:E8:7A:79:B9 Authority key identifier: DF:53:8B:BA:A9:37:B6:9B:A0:0B:B2:7B:71:A4:B7:76:E6:E4:19:FE Certificate issuer: /CN=A9191170/serialNumber=DF538BBAA937B69BA00BB27B71A4B776E6E419FE Certificate serial: 0189 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/31OLuqk3tpugC7J7caS3dubkGf4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191170/F32308C2042A11EE94A84941C4F9AE02/31OLuqk3tpugC7J7caS3dubkGf4.mft Manifest number: 0185 Signing time: Tue 01 Jul 2025 04:00:34 +0000 Manifest this update: Tue 01 Jul 2025 04:00:34 +0000 Manifest next update: Tue 08 Jul 2025 04:00:34 +0000 Files and hashes: 1: 31OLuqk3tpugC7J7caS3dubkGf4.crl (hash: HbRl4RE1nP+LnAWXQipbX7frLR5jISm60SBFplP6NYk=) 2: 086823BE07B911F0875CC733C4F9AE02.roa (hash: M5+rFpRElgL5MsNDAAy/cLdqoRb25PYbimpSg/t1Z3k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191170/F32308C2042A11EE94A84941C4F9AE02/31OLuqk3tpugC7J7caS3dubkGf4.crl rsync://rpki.apnic.net/member_repository/A9191170/F32308C2042A11EE94A84941C4F9AE02/31OLuqk3tpugC7J7caS3dubkGf4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/31OLuqk3tpugC7J7caS3dubkGf4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 04:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 393 (0x189) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191170, serialNumber=DF538BBAA937B69BA00BB27B71A4B776E6E419FE Validity Not Before: Jul 1 04:00:34 2025 GMT Not After : Jul 8 04:00:34 2025 GMT Subject: CN=68635d62-7b22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:70:ae:7e:ee:36:07:aa:51:08:63:8d:52:b8: 58:df:f1:f6:a4:d8:17:7d:6b:ab:21:f1:b6:ae:5d: a6:c1:36:3c:4e:96:0e:a8:ad:7f:ab:fa:95:46:e1: f8:a7:9e:34:a2:d9:fa:33:a6:95:c6:02:0c:85:bd: 66:fc:9e:fe:62:f3:d8:9f:ab:72:35:d5:06:6c:65: 27:c5:28:e9:c7:97:cb:cc:31:8d:ec:2a:9d:c3:d6: a3:26:2f:1e:53:e9:c4:19:0f:ab:3f:e8:9d:ac:5b: a9:5f:9b:27:3c:68:af:08:5b:1d:5f:13:00:9b:15: 85:93:d3:bb:fb:54:41:e8:6a:1e:53:12:d1:c2:08: 84:00:c0:40:03:18:2e:94:13:7c:81:2c:8d:24:19: fb:97:98:6d:73:2a:3e:f1:e2:ad:ce:6d:a3:80:c0: cc:a4:9e:34:fc:06:ef:61:9a:b8:97:5a:6d:db:68: 83:8b:1f:79:19:92:60:0e:10:4b:44:8d:74:26:a0: 89:ff:06:96:82:dd:3a:90:e0:47:64:fd:5a:a3:3f: 1c:cc:5e:55:c8:dc:d3:dc:d3:33:88:01:fd:cf:79: f4:3b:d7:cf:30:cf:c8:a7:7d:ce:1f:e0:59:76:c7: 08:06:0f:c1:3f:1f:90:35:41:51:0a:f3:44:2a:0f: 41:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:42:CB:4C:53:D9:6F:FC:98:57:AF:7D:48:AC:A9:D0:E8:7A:79:B9 X509v3 Authority Key Identifier: keyid:DF:53:8B:BA:A9:37:B6:9B:A0:0B:B2:7B:71:A4:B7:76:E6:E4:19:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191170/F32308C2042A11EE94A84941C4F9AE02/31OLuqk3tpugC7J7caS3dubkGf4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/31OLuqk3tpugC7J7caS3dubkGf4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191170/F32308C2042A11EE94A84941C4F9AE02/31OLuqk3tpugC7J7caS3dubkGf4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:dc:c6:be:86:9d:71:c8:81:32:e2:f9:5d:53:95:f3:5a:de: ea:17:13:c9:ce:51:b6:89:98:30:91:c7:66:8f:30:54:ff:2a: a1:cb:1a:c6:e2:57:4c:b5:00:07:6d:39:96:05:a6:c2:cf:5f: 24:f3:d2:b1:cd:65:1a:75:55:eb:0f:7e:1f:fb:4c:53:fd:d7: 68:95:e0:d4:f5:5a:d1:09:2e:ff:31:96:12:15:6e:c7:22:66: 57:50:08:35:c1:bf:09:2a:41:da:a9:81:de:7f:a6:cc:0b:ec: 33:2b:15:15:c7:45:52:f5:91:3c:e8:f6:8a:40:4a:3f:da:c5: a2:bc:ae:cd:4e:59:cf:f3:4d:1d:3e:d3:6a:9c:c0:39:e9:8c: 8e:37:fb:15:7a:98:b3:f1:3e:c9:13:4f:7a:13:db:91:3e:cc: 67:c3:88:d7:b3:ef:d2:c9:82:4f:e9:e4:fb:5a:4e:b2:7c:4e: e2:1d:a6:5a:87:4c:46:f6:d6:d3:d7:e1:f1:94:0e:84:7a:ce: de:37:63:56:80:8b:0a:e5:c2:c8:2a:88:76:e2:f9:ca:30:2b: de:d0:8a:fb:96:1c:80:81:fd:da:14:bd:5c:e1:c3:06:b7:ac: 3b:67:95:bb:30:d2:87:91:05:18:d2:f6:bd:4d:80:ae:06:d2: c4:05:bb:c4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTExNzAxMTAvBgNVBAUTKERGNTM4QkJBQTkzN0I2OUJBMDBCQjI3QjcxQTRCNzc2 RTZFNDE5RkUwHhcNMjUwNzAxMDQwMDM0WhcNMjUwNzA4MDQwMDM0WjAYMRYwFAYD VQQDEw02ODYzNWQ2Mi03YjIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr3Cufu42B6pRCGONUrhY3/H2pNgXfWurIfG2rl2mwTY8TpYOqK1/q/qVRuH4 p540otn6M6aVxgIMhb1m/J7+YvPYn6tyNdUGbGUnxSjpx5fLzDGN7Cqdw9ajJi8e U+nEGQ+rP+idrFupX5snPGivCFsdXxMAmxWFk9O7+1RB6GoeUxLRwgiEAMBAAxgu lBN8gSyNJBn7l5htcyo+8eKtzm2jgMDMpJ40/AbvYZq4l1pt22iDix95GZJgDhBL RI10JqCJ/waWgt06kOBHZP1aoz8czF5VyNzT3NMziAH9z3n0O9fPMM/Ip33OH+BZ dscIBg/BPx+QNUFRCvNEKg9BWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNVCy0xT 2W/8mFevfUisqdDoenm5MB8GA1UdIwQYMBaAFN9Ti7qpN7aboAuye3Gkt3bm5Bn+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MTE3MC9GMzIzMDhDMjA0 MkExMUVFOTRBODQ5NDFDNEY5QUUwMi8zMU9MdXFrM3RwdWdDN0o3Y2FTM2R1YmtH ZjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzMxT0x1cWszdHB1Z0M3SjdjYVMzZHVia0dmNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MTE3MC9GMzIzMDhDMjA0MkExMUVFOTRBODQ5NDFDNEY5QUUwMi8zMU9MdXFrM3Rw dWdDN0o3Y2FTM2R1YmtHZjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCS3Ma+hp1xyIEy4vldU5XzWt7qFxPJzlG2iZgwkcdmjzBU/yqhyxrG 4ldMtQAHbTmWBabCz18k89KxzWUadVXrD34f+0xT/ddoleDU9VrRCS7/MZYSFW7H ImZXUAg1wb8JKkHaqYHef6bMC+wzKxUVx0VS9ZE86PaKQEo/2sWivK7NTlnP800d PtNqnMA56YyON/sVepiz8T7JE096E9uRPsxnw4jXs+/SyYJP6eT7Wk6yfE7iHaZa h0xG9tbT1+HxlA6Ees7eN2NWgIsK5cLIKoh24vnKMCve0Ir7lhyAgf3aFL1c4cMG t6w7Z5W7MNKHkQUY0va9TYCuBtLEBbvE -----END CERTIFICATE-----Generated at Tue Jul 1 22:39:06 2025 by rpki-client