$ rpki-client -vvf rpki.apnic.net/member_repository/A91A60A9/6BA8061A1D8411E2B3A54FDA08B02CD2/d4fx5T6beBMt6aeHEQiDFt1gVbM.mft File: d4fx5T6beBMt6aeHEQiDFt1gVbM.mft (raw, json) Hash identifier: TnNCmffE/Jh48RZ0ELokfnWVHN6Uro1H8Oowv67Z478= Subject key identifier: 77:E5:34:F5:9F:CE:BD:FC:A3:25:0F:0F:6A:26:A2:95:25:01:FE:3C Authority key identifier: 77:87:F1:E5:3E:9B:78:13:2D:E9:A7:87:11:08:83:16:DD:60:55:B3 Certificate issuer: /CN=A91A60A9/serialNumber=7787F1E53E9B78132DE9A78711088316DD6055B3 Certificate serial: 34BF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d4fx5T6beBMt6aeHEQiDFt1gVbM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A60A9/6BA8061A1D8411E2B3A54FDA08B02CD2/d4fx5T6beBMt6aeHEQiDFt1gVbM.mft Manifest number: 34A3 Signing time: Mon 30 Jun 2025 14:27:44 +0000 Manifest this update: Mon 30 Jun 2025 14:27:43 +0000 Manifest next update: Mon 07 Jul 2025 14:27:43 +0000 Files and hashes: 1: d4fx5T6beBMt6aeHEQiDFt1gVbM.crl (hash: krsu4T7bddt+v3pmlpirFjOQzTq06TOJeEZH4Z/3bEs=) 2: 8F368BEEF9C411EB9F9E645DC4F9AE02.roa (hash: VGqKOKmiRQqT6yzNCTI4GsckVdo9EsIqZ8D30e0mo6o=) 3: C28E34620A2011EC8B517885C4F9AE02.roa (hash: WML6bSJiK9+KF/pEPMbVuQofZWsQq5X8goxfmm+ACQg=) 4: C3C5C43A0A2011EC8B517885C4F9AE02.roa (hash: mmOf8E5cH5F9E51SwHybcc0hD3kIHBOrU1OwIH3yXaA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A60A9/6BA8061A1D8411E2B3A54FDA08B02CD2/d4fx5T6beBMt6aeHEQiDFt1gVbM.crl rsync://rpki.apnic.net/member_repository/A91A60A9/6BA8061A1D8411E2B3A54FDA08B02CD2/d4fx5T6beBMt6aeHEQiDFt1gVbM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d4fx5T6beBMt6aeHEQiDFt1gVbM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 14:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13503 (0x34bf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A60A9, serialNumber=7787F1E53E9B78132DE9A78711088316DD6055B3 Validity Not Before: Jun 30 14:27:43 2025 GMT Not After : Jul 7 14:27:43 2025 GMT Subject: CN=68629ee0-c767 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:ea:f7:f4:09:80:25:82:88:05:a8:98:c5:17: 20:ea:3b:b2:4f:f4:71:f0:b9:b0:69:83:de:cd:46: ab:65:3f:43:72:0c:d9:2c:48:a9:81:31:c9:f6:93: fc:d0:0d:32:76:4c:7c:55:fc:88:c2:c8:71:61:4a: 8a:53:0f:ab:fd:91:23:14:6e:eb:13:d7:4b:35:49: 57:e3:27:b4:ae:bf:30:fd:70:24:36:19:d8:38:c8: 13:63:a5:0d:b2:50:03:1a:3e:57:59:6b:c1:c3:db: fb:ae:12:a5:7f:70:4c:e4:15:b2:2c:78:d7:eb:76: 5a:84:8f:44:40:98:bf:85:5c:82:c0:0e:5a:4b:cd: 7a:94:d4:b1:76:58:e5:2b:9b:41:1e:5d:f4:59:b6: 85:55:89:07:0b:8f:c6:27:7c:25:98:f1:27:65:47: 7d:9e:51:f6:c5:9b:6b:f9:a1:d5:f1:b5:5b:ed:fc: 72:b2:bb:95:b7:b3:7e:86:00:28:21:25:95:1e:3a: a7:1a:1c:88:94:83:07:c7:06:f8:02:cd:e2:08:54: 08:fc:07:b3:cf:29:8f:8f:89:9c:1e:cf:3b:9b:f5: 72:07:63:ee:b2:f9:41:cf:df:2b:40:e9:6c:6c:20: 08:ea:33:4c:32:96:e1:ec:fc:c2:bb:23:6f:c2:9d: 49:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:E5:34:F5:9F:CE:BD:FC:A3:25:0F:0F:6A:26:A2:95:25:01:FE:3C X509v3 Authority Key Identifier: keyid:77:87:F1:E5:3E:9B:78:13:2D:E9:A7:87:11:08:83:16:DD:60:55:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A60A9/6BA8061A1D8411E2B3A54FDA08B02CD2/d4fx5T6beBMt6aeHEQiDFt1gVbM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d4fx5T6beBMt6aeHEQiDFt1gVbM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A60A9/6BA8061A1D8411E2B3A54FDA08B02CD2/d4fx5T6beBMt6aeHEQiDFt1gVbM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:3d:3c:ab:1b:a2:55:f3:68:6f:2f:6c:37:2d:40:6f:8b:a6: 5c:43:34:52:9b:90:18:22:4f:36:31:a8:d4:25:71:4d:79:66: 8e:40:f7:81:9f:41:a0:cd:9f:c8:05:95:cd:3a:84:91:bc:44: 54:f9:17:15:a8:8b:97:9b:6e:4f:d4:fb:a7:7c:5e:f9:aa:23: d2:3c:52:21:1c:b6:89:02:e7:9a:20:73:7a:e1:f8:7c:9c:bc: 69:a1:c7:67:82:57:32:ab:ac:6f:23:2d:46:20:cb:58:ab:46: 57:a2:4b:27:d2:bc:a4:3d:78:36:53:04:43:8a:20:7b:bb:98: 11:89:70:e4:7c:85:35:d2:0f:b4:9f:10:cf:2c:ee:f4:65:fa: 72:60:ae:c3:59:2e:7d:bb:7b:91:01:d7:ec:7d:e9:27:9e:85: a5:3e:ba:14:b9:87:a8:eb:e5:96:43:1e:05:6b:77:a8:22:38: 3f:3a:ed:ea:e6:b5:ae:20:60:10:86:1d:c1:1a:37:27:9f:32: d5:5e:f0:90:08:82:41:e2:7b:85:fe:e6:df:ec:9e:ea:58:04: c8:63:d9:39:76:a7:8b:ee:a2:0d:46:ac:02:d4:2e:7e:20:7e: cb:fe:e2:b2:c1:75:ed:01:f0:43:d5:1a:59:3a:13:58:e4:39: d7:35:dc:d9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNL8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTYwQTkxMTAvBgNVBAUTKDc3ODdGMUU1M0U5Qjc4MTMyREU5QTc4NzExMDg4MzE2 REQ2MDU1QjMwHhcNMjUwNjMwMTQyNzQzWhcNMjUwNzA3MTQyNzQzWjAYMRYwFAYD VQQDEw02ODYyOWVlMC1jNzY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs+r39AmAJYKIBaiYxRcg6juyT/Rx8LmwaYPezUarZT9DcgzZLEipgTHJ9pP8 0A0ydkx8VfyIwshxYUqKUw+r/ZEjFG7rE9dLNUlX4ye0rr8w/XAkNhnYOMgTY6UN slADGj5XWWvBw9v7rhKlf3BM5BWyLHjX63ZahI9EQJi/hVyCwA5aS816lNSxdljl K5tBHl30WbaFVYkHC4/GJ3wlmPEnZUd9nlH2xZtr+aHV8bVb7fxysruVt7N+hgAo ISWVHjqnGhyIlIMHxwb4As3iCFQI/AezzymPj4mcHs87m/VyB2PusvlBz98rQOls bCAI6jNMMpbh7PzCuyNvwp1J4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHflNPWf zr38oyUPD2omopUlAf48MB8GA1UdIwQYMBaAFHeH8eU+m3gTLemnhxEIgxbdYFWz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNjBBOS82QkE4MDYxQTFE ODQxMUUyQjNBNTRGREEwOEIwMkNEMi9kNGZ4NVQ2YmVCTXQ2YWVIRVFpREZ0MWdW Yk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Q0Zng1VDZiZUJNdDZhZUhFUWlERnQxZ1ZiTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NjBBOS82QkE4MDYxQTFEODQxMUUyQjNBNTRGREEwOEIwMkNEMi9kNGZ4NVQ2YmVC TXQ2YWVIRVFpREZ0MWdWYk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBwPTyrG6JV82hvL2w3LUBvi6ZcQzRSm5AYIk82MajUJXFNeWaOQPeB n0GgzZ/IBZXNOoSRvERU+RcVqIuXm25P1PunfF75qiPSPFIhHLaJAueaIHN64fh8 nLxpocdnglcyq6xvIy1GIMtYq0ZXoksn0rykPXg2UwRDiiB7u5gRiXDkfIU10g+0 nxDPLO70ZfpyYK7DWS59u3uRAdfsfeknnoWlProUuYeo6+WWQx4Fa3eoIjg/Ou3q 5rWuIGAQhh3BGjcnnzLVXvCQCIJB4nuF/ubf7J7qWATIY9k5dqeL7qINRqwC1C5+ IH7L/uKywXXtAfBD1RpZOhNY5DnXNdzZ -----END CERTIFICATE-----Generated at Tue Jul 1 03:17:39 2025 by rpki-client