$ rpki-client -vvf rpki.apnic.net/member_repository/A91A36B8/388413182A6311EDA127203FC4F9AE02/-APDcY8OgSDUPrA0gJ9qiziE15s.mft File: -APDcY8OgSDUPrA0gJ9qiziE15s.mft (raw, json) Hash identifier: 8RB+jK3J3R3gL+0P19bYhJU0y9uU4Ku+4wmuJZ07WFo= Subject key identifier: E0:D2:41:76:06:E9:A6:C6:B1:55:0C:7C:59:C0:EB:67:2A:AD:54:E8 Authority key identifier: F8:03:C3:71:8F:0E:81:20:D4:3E:B0:34:80:9F:6A:8B:38:84:D7:9B Certificate issuer: /CN=A91A36B8/serialNumber=F803C3718F0E8120D43EB034809F6A8B3884D79B Certificate serial: 0248 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-APDcY8OgSDUPrA0gJ9qiziE15s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A36B8/388413182A6311EDA127203FC4F9AE02/-APDcY8OgSDUPrA0gJ9qiziE15s.mft Manifest number: 0243 Signing time: Thu 03 Jul 2025 02:16:41 +0000 Manifest this update: Thu 03 Jul 2025 02:16:41 +0000 Manifest next update: Thu 10 Jul 2025 02:16:41 +0000 Files and hashes: 1: -APDcY8OgSDUPrA0gJ9qiziE15s.crl (hash: LRaWZVnrViQK9aC4YhXqqoBqbUh3ocbced6D6h04GTE=) 2: 0C04EFB43C9811EDB6A25D4FC4F9AE02.roa (hash: qFfisBxRiCqfGUur/S/I0P4ucD2aKemCvw2qjb/eV4k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A36B8/388413182A6311EDA127203FC4F9AE02/-APDcY8OgSDUPrA0gJ9qiziE15s.crl rsync://rpki.apnic.net/member_repository/A91A36B8/388413182A6311EDA127203FC4F9AE02/-APDcY8OgSDUPrA0gJ9qiziE15s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-APDcY8OgSDUPrA0gJ9qiziE15s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 02:16:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 584 (0x248) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A36B8, serialNumber=F803C3718F0E8120D43EB034809F6A8B3884D79B Validity Not Before: Jul 3 02:16:41 2025 GMT Not After : Jul 10 02:16:41 2025 GMT Subject: CN=6865e809-6487 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:99:a8:3e:89:11:27:06:d3:98:25:39:66:3f: 5f:94:f1:cb:5e:e8:05:42:4b:ed:f2:d8:b2:7f:ce: ee:5e:a1:da:a7:a0:21:3a:49:8b:a9:df:f3:4f:06: e4:eb:6b:b4:a9:73:e9:84:f3:2b:9d:46:b3:7a:d3: a2:88:16:30:b9:59:2d:a2:d1:d6:1b:eb:28:96:56: 53:15:86:b5:b9:18:83:b2:91:ad:cc:e7:e4:83:7c: b6:b5:af:f6:28:02:02:0a:1c:ed:74:c8:6a:00:8d: c8:04:e6:00:8d:b3:10:bb:05:c6:de:8c:e2:1c:1e: aa:ce:ca:2e:c6:c1:45:08:9d:8e:20:b7:86:02:60: b3:8f:f7:54:6e:52:44:17:a0:25:1d:26:03:22:80: d6:c9:30:17:1c:f9:2b:43:c7:a8:ed:06:fb:4b:32: 5d:be:e3:80:6d:6c:84:aa:c9:f3:b2:22:2c:65:b6: 8f:fb:a7:f0:57:5d:58:a7:25:fc:c3:fe:3e:d3:f0: 14:20:01:00:62:ac:39:3c:e1:85:ae:d5:a0:a3:11: 67:c5:75:10:f3:48:1a:c8:a2:ea:58:de:a1:cf:d4: 07:69:4a:fe:63:39:ed:99:73:1a:19:a1:00:03:c2: 1a:1a:bb:6c:53:9b:b8:47:59:7d:b5:40:79:42:c1: c4:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:D2:41:76:06:E9:A6:C6:B1:55:0C:7C:59:C0:EB:67:2A:AD:54:E8 X509v3 Authority Key Identifier: keyid:F8:03:C3:71:8F:0E:81:20:D4:3E:B0:34:80:9F:6A:8B:38:84:D7:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A36B8/388413182A6311EDA127203FC4F9AE02/-APDcY8OgSDUPrA0gJ9qiziE15s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-APDcY8OgSDUPrA0gJ9qiziE15s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A36B8/388413182A6311EDA127203FC4F9AE02/-APDcY8OgSDUPrA0gJ9qiziE15s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:a5:19:c4:69:d6:35:e3:f6:0c:e3:6b:b8:31:4c:83:50:d7: 1d:bf:96:43:dc:84:86:8e:ef:81:a8:10:74:12:de:6a:9a:02: ec:4b:0f:87:29:1b:b3:9c:af:c5:8c:68:55:05:6a:fe:38:6a: f4:9b:d6:a0:02:7c:5b:c5:4d:ab:8f:d1:73:de:14:7f:20:c8: 69:34:6e:9a:92:53:ec:68:d9:e0:96:49:c2:fe:ed:3a:32:2d: 62:f4:87:24:fa:b9:8f:64:24:22:3e:14:77:cd:d0:fc:a1:21: 28:d6:21:9f:94:55:91:01:f0:69:54:89:1c:42:9d:ff:d7:d4: 4e:e3:09:b3:3b:a3:f3:ff:10:c1:48:6c:d0:4c:2f:f0:d6:23: 8f:8c:0e:c7:20:36:39:c6:6e:1c:3a:55:30:29:57:dd:30:f1: ba:d6:34:48:58:86:9a:db:e9:12:eb:df:ca:d2:74:88:d3:cc: 3e:90:6a:23:f0:2b:b9:8d:2c:ba:a2:71:28:a8:62:9f:5c:0a: b7:0a:f4:91:17:2f:05:12:b8:4f:c9:ab:63:4e:5e:4a:46:6c: a1:3d:37:40:1a:f8:71:98:1d:20:19:47:ed:74:ff:99:c0:f7: 0f:fd:1c:de:3b:7a:5e:d6:d2:4c:8f:57:43:a2:f3:ce:d0:a0: a5:af:7e:49 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAkgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTM2QjgxMTAvBgNVBAUTKEY4MDNDMzcxOEYwRTgxMjBENDNFQjAzNDgwOUY2QThC Mzg4NEQ3OUIwHhcNMjUwNzAzMDIxNjQxWhcNMjUwNzEwMDIxNjQxWjAYMRYwFAYD VQQDEw02ODY1ZTgwOS02NDg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA05moPokRJwbTmCU5Zj9flPHLXugFQkvt8tiyf87uXqHap6AhOkmLqd/zTwbk 62u0qXPphPMrnUazetOiiBYwuVktotHWG+sollZTFYa1uRiDspGtzOfkg3y2ta/2 KAICChztdMhqAI3IBOYAjbMQuwXG3oziHB6qzsouxsFFCJ2OILeGAmCzj/dUblJE F6AlHSYDIoDWyTAXHPkrQ8eo7Qb7SzJdvuOAbWyEqsnzsiIsZbaP+6fwV11YpyX8 w/4+0/AUIAEAYqw5POGFrtWgoxFnxXUQ80gayKLqWN6hz9QHaUr+YzntmXMaGaEA A8IaGrtsU5u4R1l9tUB5QsHEOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFODSQXYG 6abGsVUMfFnA62cqrVToMB8GA1UdIwQYMBaAFPgDw3GPDoEg1D6wNICfaos4hNeb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMzZCOC8zODg0MTMxODJB NjMxMUVEQTEyNzIwM0ZDNEY5QUUwMi8tQVBEY1k4T2dTRFVQckEwZ0o5cWl6aUUx NXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1BUERjWThPZ1NEVVByQTBnSjlxaXppRTE1cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MzZCOC8zODg0MTMxODJBNjMxMUVEQTEyNzIwM0ZDNEY5QUUwMi8tQVBEY1k4T2dT RFVQckEwZ0o5cWl6aUUxNXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCypRnEadY14/YM42u4MUyDUNcdv5ZD3ISGju+BqBB0Et5qmgLsSw+H KRuznK/FjGhVBWr+OGr0m9agAnxbxU2rj9Fz3hR/IMhpNG6aklPsaNnglknC/u06 Mi1i9Ick+rmPZCQiPhR3zdD8oSEo1iGflFWRAfBpVIkcQp3/19RO4wmzO6Pz/xDB SGzQTC/w1iOPjA7HIDY5xm4cOlUwKVfdMPG61jRIWIaa2+kS69/K0nSI08w+kGoj 8Cu5jSy6onEoqGKfXAq3CvSRFy8FErhPyatjTl5KRmyhPTdAGvhxmB0gGUftdP+Z wPcP/RzeO3pe1tJMj1dDovPO0KClr35J -----END CERTIFICATE-----Generated at Fri Jul 4 07:23:40 2025 by rpki-client