$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5560/4C3D6BC0216F11EFAF45EA2DC4F9AE02/446z9aUQfjDwynHd6nWxcNCwMlY.mft File: 446z9aUQfjDwynHd6nWxcNCwMlY.mft (raw, json) Hash identifier: TZlwKYeDGDqs0gWc4EHgaMTmQleHVL/SsC54Cc1VRmY= Subject key identifier: B0:FD:18:85:34:60:AE:D9:00:4E:97:E0:77:9F:D9:45:F4:02:E4:AD Authority key identifier: E3:8E:B3:F5:A5:10:7E:30:F0:CA:71:DD:EA:75:B1:70:D0:B0:32:56 Certificate issuer: /CN=A91A5560/serialNumber=E38EB3F5A5107E30F0CA71DDEA75B170D0B03256 Certificate serial: DE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/446z9aUQfjDwynHd6nWxcNCwMlY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5560/4C3D6BC0216F11EFAF45EA2DC4F9AE02/446z9aUQfjDwynHd6nWxcNCwMlY.mft Manifest number: D3 Signing time: Thu 03 Jul 2025 05:53:05 +0000 Manifest this update: Thu 03 Jul 2025 05:53:05 +0000 Manifest next update: Thu 10 Jul 2025 05:53:05 +0000 Files and hashes: 1: 446z9aUQfjDwynHd6nWxcNCwMlY.crl (hash: 6349u/LUd1CeO8Sxmzhglo5d2qeZieZHNIwTXV46/qs=) 2: CEA2276C1AD511F0A8A8811CC4F9AE02.roa (hash: 2A1lG71X8xYaIUoTChjegPu89TboGvrn5Fad8OHtf1k=) 3: B84D6D3AF81811EFACB5925BC4F9AE02.roa (hash: OXnTHrIuW8lqh4Zru5Af4wCTMKEnL5QDhv8/K+4cKxI=) 4: F9ECF4A0295A11EFBECFCA7EC4F9AE02.roa (hash: NdbphxCCW/0QaYFIIuCoc2s3U5MsSxFLdZGoiC7E3Ew=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5560/4C3D6BC0216F11EFAF45EA2DC4F9AE02/446z9aUQfjDwynHd6nWxcNCwMlY.crl rsync://rpki.apnic.net/member_repository/A91A5560/4C3D6BC0216F11EFAF45EA2DC4F9AE02/446z9aUQfjDwynHd6nWxcNCwMlY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/446z9aUQfjDwynHd6nWxcNCwMlY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 222 (0xde) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5560, serialNumber=E38EB3F5A5107E30F0CA71DDEA75B170D0B03256 Validity Not Before: Jul 3 05:53:05 2025 GMT Not After : Jul 10 05:53:05 2025 GMT Subject: CN=68661ac1-5a4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:06:24:a5:fe:e1:b9:37:64:e2:18:eb:be:53: 50:9d:81:ef:8d:85:34:f7:c5:55:67:0f:6a:13:74: db:7e:c1:89:c2:01:95:f5:3d:00:f5:77:96:b8:1d: 8b:e9:db:1a:1a:b5:58:b0:1d:14:4e:85:51:91:b5: 76:1a:53:ed:fd:62:3a:e1:df:1e:69:01:d4:a4:d7: 86:c5:b0:a7:98:92:d5:17:8b:b0:45:4f:c6:25:82: 8c:b6:07:01:2e:4a:88:61:2e:88:a3:4c:d0:b0:e8: 4b:fc:e7:e3:5c:2d:96:ca:08:22:f5:11:0b:a4:ae: 74:0c:74:65:30:e0:09:d6:28:44:cf:86:2f:dc:5b: 53:e5:89:10:56:f1:80:37:8d:d7:08:20:c3:26:47: 1f:e1:47:59:82:dc:26:65:91:0f:9f:59:d2:23:56: 6d:95:89:4c:a3:4d:cb:4d:46:1b:2c:2a:7d:73:1a: 01:7d:89:24:65:31:3e:f2:13:b6:d7:c3:b9:f4:31: 36:84:10:6a:56:43:21:ec:eb:58:07:37:04:0f:38: 15:09:29:46:c9:7e:99:38:b6:a1:cb:3e:73:65:b1: 91:d7:15:17:d0:64:04:3b:5b:93:20:e5:a2:ad:b1: 31:cf:07:cc:8a:ac:04:50:9a:49:91:e5:c0:93:be: de:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:FD:18:85:34:60:AE:D9:00:4E:97:E0:77:9F:D9:45:F4:02:E4:AD X509v3 Authority Key Identifier: keyid:E3:8E:B3:F5:A5:10:7E:30:F0:CA:71:DD:EA:75:B1:70:D0:B0:32:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5560/4C3D6BC0216F11EFAF45EA2DC4F9AE02/446z9aUQfjDwynHd6nWxcNCwMlY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/446z9aUQfjDwynHd6nWxcNCwMlY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5560/4C3D6BC0216F11EFAF45EA2DC4F9AE02/446z9aUQfjDwynHd6nWxcNCwMlY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cb:90:aa:02:6c:e5:14:3e:c5:22:ad:5a:dd:06:5a:05:58:f1: d0:95:26:27:36:e8:0c:8b:64:19:47:de:55:f1:44:90:1d:80: 89:c4:b8:ee:95:d3:e1:ec:34:77:fe:36:a8:2a:33:cb:26:77: 6a:55:e2:e8:90:9f:97:67:b8:6e:12:b1:aa:49:58:cb:91:2a: 47:15:68:bf:8e:8f:a2:c5:88:a1:ef:b4:22:ac:f5:50:c0:42: 72:6c:68:6d:5f:2a:f1:a7:8e:48:e3:b0:b5:b9:10:b2:a8:b1: fd:0b:ff:d6:c6:19:c1:9b:bd:70:a1:fa:51:f4:61:38:04:14: da:3f:b1:3b:83:da:79:82:4c:22:5b:ab:8b:0f:5e:a4:48:d6: d2:d5:99:e1:cb:0e:28:3b:20:99:38:7b:75:b8:eb:7f:1e:64: 1c:35:25:37:ff:e4:4c:2d:3b:05:89:74:84:7e:f5:57:80:6c: 54:31:ca:55:f7:8a:2e:c8:ad:02:e8:73:07:be:84:4f:6f:63: 91:15:47:66:00:f0:b4:e2:8c:22:50:80:67:bd:71:86:38:ea: 8d:c2:0e:a4:db:e9:1f:cb:4d:cc:7f:64:ff:b7:de:e7:28:91: c7:bb:fc:28:88:b5:3f:6a:8d:9e:d7:b5:01:06:2f:c3:fc:7b: 4c:fa:6c:52 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAN4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU1NjAxMTAvBgNVBAUTKEUzOEVCM0Y1QTUxMDdFMzBGMENBNzFEREVBNzVCMTcw RDBCMDMyNTYwHhcNMjUwNzAzMDU1MzA1WhcNMjUwNzEwMDU1MzA1WjAYMRYwFAYD VQQDEw02ODY2MWFjMS01YTRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1QYkpf7huTdk4hjrvlNQnYHvjYU098VVZw9qE3TbfsGJwgGV9T0A9XeWuB2L 6dsaGrVYsB0UToVRkbV2GlPt/WI64d8eaQHUpNeGxbCnmJLVF4uwRU/GJYKMtgcB LkqIYS6Io0zQsOhL/OfjXC2Wyggi9RELpK50DHRlMOAJ1ihEz4Yv3FtT5YkQVvGA N43XCCDDJkcf4UdZgtwmZZEPn1nSI1ZtlYlMo03LTUYbLCp9cxoBfYkkZTE+8hO2 18O59DE2hBBqVkMh7OtYBzcEDzgVCSlGyX6ZOLahyz5zZbGR1xUX0GQEO1uTIOWi rbExzwfMiqwEUJpJkeXAk77e8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLD9GIU0 YK7ZAE6X4Hef2UX0AuStMB8GA1UdIwQYMBaAFOOOs/WlEH4w8Mpx3ep1sXDQsDJW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTU2MC80QzNENkJDMDIx NkYxMUVGQUY0NUVBMkRDNEY5QUUwMi80NDZ6OWFVUWZqRHd5bkhkNm5XeGNOQ3dN bFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzQ0Nno5YVVRZmpEd3luSGQ2bld4Y05Dd01sWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NTU2MC80QzNENkJDMDIxNkYxMUVGQUY0NUVBMkRDNEY5QUUwMi80NDZ6OWFVUWZq RHd5bkhkNm5XeGNOQ3dNbFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDLkKoCbOUUPsUirVrdBloFWPHQlSYnNugMi2QZR95V8USQHYCJxLju ldPh7DR3/jaoKjPLJndqVeLokJ+XZ7huErGqSVjLkSpHFWi/jo+ixYih77QirPVQ wEJybGhtXyrxp45I47C1uRCyqLH9C//WxhnBm71wofpR9GE4BBTaP7E7g9p5gkwi W6uLD16kSNbS1Znhyw4oOyCZOHt1uOt/HmQcNSU3/+RMLTsFiXSEfvVXgGxUMcpV 94ouyK0C6HMHvoRPb2ORFUdmAPC04owiUIBnvXGGOOqNwg6k2+kfy03Mf2T/t97n KJHHu/woiLU/ao2e17UBBi/D/HtM+mxS -----END CERTIFICATE-----Generated at Thu Jul 3 18:10:44 2025 by rpki-client