$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5C90/42E1FD2A3D2911ECB0BCD21FC4F9AE02/L3f37TT2am_GcID7m2G7JnkvhaE.mft File: L3f37TT2am_GcID7m2G7JnkvhaE.mft (raw, json) Hash identifier: ynR++/VvN7smGF9/vngh1n30YV8fItuMEeIxlzHKbN4= Subject key identifier: 7A:82:17:F8:9D:0A:C1:B9:F5:17:94:9A:F0:F9:16:BD:D4:92:6A:AC Authority key identifier: 2F:77:F7:ED:34:F6:6A:6F:C6:70:80:FB:9B:61:BB:26:79:2F:85:A1 Certificate issuer: /CN=A91A5C90/serialNumber=2F77F7ED34F66A6FC67080FB9B61BB26792F85A1 Certificate serial: 04A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3f37TT2am_GcID7m2G7JnkvhaE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5C90/42E1FD2A3D2911ECB0BCD21FC4F9AE02/L3f37TT2am_GcID7m2G7JnkvhaE.mft Manifest number: 049A Signing time: Thu 03 Jul 2025 00:18:47 +0000 Manifest this update: Thu 03 Jul 2025 00:18:46 +0000 Manifest next update: Thu 10 Jul 2025 00:18:46 +0000 Files and hashes: 1: L3f37TT2am_GcID7m2G7JnkvhaE.crl (hash: wnAG4OE8mO2uNrxw3PuJDOyUd4UbGAtTItuBWJ0lsuE=) 2: CDA06D9C3D2A11EC8ECCEB1FC4F9AE02.roa (hash: cJIs31sqlgOhonhzClBxUM9SmxEaq46WFcZovXHGcPw=) 3: CE319EDE3D2A11EC8ECCEB1FC4F9AE02.roa (hash: Mum2g6Ft9eC1OvjjJ0nqhQo1XRrbGEG1M1RHx+Vnh0c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5C90/42E1FD2A3D2911ECB0BCD21FC4F9AE02/L3f37TT2am_GcID7m2G7JnkvhaE.crl rsync://rpki.apnic.net/member_repository/A91A5C90/42E1FD2A3D2911ECB0BCD21FC4F9AE02/L3f37TT2am_GcID7m2G7JnkvhaE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3f37TT2am_GcID7m2G7JnkvhaE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 00:18:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1186 (0x4a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5C90, serialNumber=2F77F7ED34F66A6FC67080FB9B61BB26792F85A1 Validity Not Before: Jul 3 00:18:46 2025 GMT Not After : Jul 10 00:18:46 2025 GMT Subject: CN=6865cc67-afa5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:87:ae:02:72:2a:cf:36:64:c0:c8:07:67:87: 26:43:56:43:bf:90:6f:4e:d2:5c:40:16:cc:e6:9e: f6:ac:75:1f:91:1b:29:66:1c:22:a2:92:15:8b:ed: 2d:27:ee:58:c9:b0:11:3f:e3:d3:92:8c:0b:03:35: 8c:ff:3f:8c:c7:72:a9:4c:b5:26:4f:7d:db:bb:dc: 71:72:6b:86:1e:f7:f4:39:58:b7:af:cf:90:1c:58: 03:4f:cc:64:f0:55:3e:99:fc:dd:84:5a:69:da:c0: ce:3c:e9:4e:f3:d5:1f:8f:6e:a6:ed:76:1d:db:f2: f1:65:10:ea:41:0b:f6:a3:37:db:3d:d5:51:c0:22: 76:ce:43:a3:6f:70:15:e0:0d:48:08:d7:40:66:5d: 97:3a:ec:bc:e6:df:77:15:36:c7:08:15:20:ef:8b: 47:5b:18:0c:36:7b:94:34:5c:51:75:87:cc:6f:51: c3:c1:55:02:18:e9:b2:90:9c:24:96:ec:53:4a:06: 31:07:83:46:c8:a6:3c:a0:5e:4a:27:59:e8:6d:bf: e9:f4:0d:13:f6:46:a0:69:e5:ab:7a:96:5f:57:19: 68:c2:15:8c:90:0b:16:f4:50:34:72:e9:14:ff:d7: e6:ce:6e:a6:a0:59:d0:e4:67:0d:8c:e7:ea:86:73: 69:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:82:17:F8:9D:0A:C1:B9:F5:17:94:9A:F0:F9:16:BD:D4:92:6A:AC X509v3 Authority Key Identifier: keyid:2F:77:F7:ED:34:F6:6A:6F:C6:70:80:FB:9B:61:BB:26:79:2F:85:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5C90/42E1FD2A3D2911ECB0BCD21FC4F9AE02/L3f37TT2am_GcID7m2G7JnkvhaE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3f37TT2am_GcID7m2G7JnkvhaE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5C90/42E1FD2A3D2911ECB0BCD21FC4F9AE02/L3f37TT2am_GcID7m2G7JnkvhaE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:db:a9:b8:06:21:a9:3e:38:1c:9f:32:91:12:50:68:d3:2d: 30:b4:f4:73:5d:d4:e1:0a:7f:ae:a7:65:9c:ad:19:76:77:fd: 59:76:22:06:ba:2a:0e:ad:9f:92:6d:8f:4f:f7:e4:d2:38:b5: 6c:c2:0b:57:c6:a5:17:35:d7:b3:eb:b3:4a:65:92:b8:fd:df: 7c:2b:ad:e1:2d:4f:7d:a7:d6:ae:fc:5f:c5:9d:1a:d9:8a:d6: 9b:83:94:82:b3:6a:1f:60:60:05:02:26:a1:c4:3f:0c:fc:91: 6c:e5:ec:4f:d3:eb:b4:cb:8e:9b:f7:3b:fb:e1:00:93:1a:89: 6f:f3:17:00:38:79:4d:d4:f4:bb:47:e8:67:36:fb:cd:8b:a8: a8:5d:87:d7:72:cf:8d:f2:d9:96:0d:27:c1:23:d3:1f:ad:cb: 08:61:50:0c:8f:1b:d1:4f:5f:c7:2f:d4:e3:42:56:48:1a:e8: 81:7e:36:06:ff:26:7d:73:76:e9:ee:ed:45:79:c7:cb:4a:80: 78:38:56:aa:31:c3:1b:ec:3f:c3:25:0a:4a:c5:db:93:7f:74: 9e:15:7e:c9:98:03:92:c8:1c:da:cd:a2:5c:86:6f:db:ad:56: b2:3f:42:18:17:a1:85:88:a0:7c:ee:09:9f:2f:08:7c:43:68: 3c:00:55:58 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBKIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTVDOTAxMTAvBgNVBAUTKDJGNzdGN0VEMzRGNjZBNkZDNjcwODBGQjlCNjFCQjI2 NzkyRjg1QTEwHhcNMjUwNzAzMDAxODQ2WhcNMjUwNzEwMDAxODQ2WjAYMRYwFAYD VQQDEw02ODY1Y2M2Ny1hZmE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuIeuAnIqzzZkwMgHZ4cmQ1ZDv5BvTtJcQBbM5p72rHUfkRspZhwiopIVi+0t J+5YybARP+PTkowLAzWM/z+Mx3KpTLUmT33bu9xxcmuGHvf0OVi3r8+QHFgDT8xk 8FU+mfzdhFpp2sDOPOlO89Ufj26m7XYd2/LxZRDqQQv2ozfbPdVRwCJ2zkOjb3AV 4A1ICNdAZl2XOuy85t93FTbHCBUg74tHWxgMNnuUNFxRdYfMb1HDwVUCGOmykJwk luxTSgYxB4NGyKY8oF5KJ1nobb/p9A0T9kagaeWrepZfVxlowhWMkAsW9FA0cukU /9fmzm6moFnQ5GcNjOfqhnNpdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHqCF/id CsG59ReUmvD5Fr3UkmqsMB8GA1UdIwQYMBaAFC939+009mpvxnCA+5thuyZ5L4Wh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNUM5MC80MkUxRkQyQTNE MjkxMUVDQjBCQ0QyMUZDNEY5QUUwMi9MM2YzN1RUMmFtX0djSUQ3bTJHN0pua3Zo YUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0wzZjM3VFQyYW1fR2NJRDdtMkc3Sm5rdmhhRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NUM5MC80MkUxRkQyQTNEMjkxMUVDQjBCQ0QyMUZDNEY5QUUwMi9MM2YzN1RUMmFt X0djSUQ3bTJHN0pua3ZoYUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBA26m4BiGpPjgcnzKRElBo0y0wtPRzXdThCn+up2WcrRl2d/1ZdiIG uioOrZ+SbY9P9+TSOLVswgtXxqUXNdez67NKZZK4/d98K63hLU99p9au/F/FnRrZ itabg5SCs2ofYGAFAiahxD8M/JFs5exP0+u0y46b9zv74QCTGolv8xcAOHlN1PS7 R+hnNvvNi6ioXYfXcs+N8tmWDSfBI9MfrcsIYVAMjxvRT1/HL9TjQlZIGuiBfjYG /yZ9c3bp7u1FecfLSoB4OFaqMcMb7D/DJQpKxduTf3SeFX7JmAOSyBzazaJchm/b rVayP0IYF6GFiKB87gmfLwh8Q2g8AFVY -----END CERTIFICATE-----Generated at Thu Jul 3 06:06:01 2025 by rpki-client