$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA897/E1D1177095BA11EBB2812371C4F9AE02/1o1BGtA-cxTxSS0GLbDZGU6fUJU.mft File: 1o1BGtA-cxTxSS0GLbDZGU6fUJU.mft (raw, json) Hash identifier: rPnwkxifqIbz/T+44moRyKX0kwV3FIwLwwzLiiVhkvA= Subject key identifier: FD:54:06:C7:F7:52:4D:5D:A1:D6:67:38:B3:FA:CB:DB:08:64:B0:6F Authority key identifier: D6:8D:41:1A:D0:3E:73:14:F1:49:2D:06:2D:B0:D9:19:4E:9F:50:95 Certificate issuer: /CN=A91AA897/serialNumber=D68D411AD03E7314F1492D062DB0D9194E9F5095 Certificate serial: 0653 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1o1BGtA-cxTxSS0GLbDZGU6fUJU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AA897/E1D1177095BA11EBB2812371C4F9AE02/1o1BGtA-cxTxSS0GLbDZGU6fUJU.mft Manifest number: 0646 Signing time: Wed 02 Jul 2025 22:56:16 +0000 Manifest this update: Wed 02 Jul 2025 22:56:15 +0000 Manifest next update: Wed 09 Jul 2025 22:56:15 +0000 Files and hashes: 1: 1o1BGtA-cxTxSS0GLbDZGU6fUJU.crl (hash: GuWC+Am8nQELJ3AHHP1QrTTOB4OlLMi7EP8O3nGqfVE=) 2: D78A16ECCAC311EC910B8C20C4F9AE02.roa (hash: oJo0EldVtMJvTJnA4FpJe7JGIUD/xhTk+VY6Q3vUpoY=) 3: D6692528CAC311EC910B8C20C4F9AE02.roa (hash: ZgaT6NUPSJGrS2FDGhXNf1URQXdcMTQg5TCptCSVeas=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AA897/E1D1177095BA11EBB2812371C4F9AE02/1o1BGtA-cxTxSS0GLbDZGU6fUJU.crl rsync://rpki.apnic.net/member_repository/A91AA897/E1D1177095BA11EBB2812371C4F9AE02/1o1BGtA-cxTxSS0GLbDZGU6fUJU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1o1BGtA-cxTxSS0GLbDZGU6fUJU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 22:56:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1619 (0x653) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AA897, serialNumber=D68D411AD03E7314F1492D062DB0D9194E9F5095 Validity Not Before: Jul 2 22:56:15 2025 GMT Not After : Jul 9 22:56:15 2025 GMT Subject: CN=6865b90f-23a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:fc:27:84:16:4a:7e:97:fe:27:eb:15:10:7c: 62:2d:3b:33:c5:57:fb:a9:5c:68:67:6e:4e:c2:ad: bf:d5:ca:b4:70:1a:03:43:33:5c:32:d6:f4:73:7c: fc:4a:5a:18:db:95:18:ab:16:5e:7c:26:8e:f8:40: df:65:8b:7c:78:2f:5a:95:99:c3:5d:63:04:2d:45: 42:54:67:d1:4a:c0:99:c8:28:ce:f3:be:24:c4:9d: 3e:14:7d:3d:56:c9:c4:0d:52:85:36:d7:77:28:2f: d4:5b:fc:20:6e:ce:42:fb:ea:ce:47:77:f0:70:fc: 3b:07:18:c8:88:41:a5:78:32:ed:4a:73:ab:4a:34: a1:b1:31:bb:ac:c5:c7:ef:d0:4f:89:20:84:57:22: de:56:25:12:97:98:eb:19:69:a5:c0:a4:ef:18:df: 37:0f:e8:57:9b:a6:ef:ed:b8:29:2e:b2:7c:f6:92: 1c:fc:c3:c3:99:64:83:82:18:99:3f:3c:72:a4:72: cb:84:a4:b4:ea:b5:ca:9e:7e:ff:88:ec:f5:97:f6: 41:a5:e9:24:74:67:79:5e:e3:e0:49:b7:6a:db:90: f9:c5:17:7c:7d:54:20:9b:ac:fe:52:b0:58:29:2f: c8:1c:78:37:db:d4:aa:4c:84:62:e4:e5:d6:2d:5b: 54:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:54:06:C7:F7:52:4D:5D:A1:D6:67:38:B3:FA:CB:DB:08:64:B0:6F X509v3 Authority Key Identifier: keyid:D6:8D:41:1A:D0:3E:73:14:F1:49:2D:06:2D:B0:D9:19:4E:9F:50:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AA897/E1D1177095BA11EBB2812371C4F9AE02/1o1BGtA-cxTxSS0GLbDZGU6fUJU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1o1BGtA-cxTxSS0GLbDZGU6fUJU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA897/E1D1177095BA11EBB2812371C4F9AE02/1o1BGtA-cxTxSS0GLbDZGU6fUJU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:73:40:56:c5:40:ce:e1:13:37:28:bd:eb:c5:c6:7d:98:55: 56:d1:46:b6:3d:36:ab:96:e4:5e:49:5f:85:60:a3:0f:e4:dc: ea:ab:9b:1e:01:a1:de:27:3d:3c:6f:c3:26:e5:8b:11:60:f3: 35:4c:c0:e0:dc:7a:32:76:22:a1:f8:60:f9:a2:55:01:16:2d: eb:24:f0:72:9b:2b:8f:63:17:12:1f:ef:3e:e0:ae:10:6e:c9: ac:65:ec:e9:83:b2:a6:a3:0f:b7:7b:fb:21:e7:47:27:c9:30: 63:25:0d:0d:2f:78:fb:40:71:e7:f7:d9:4f:d2:0a:b8:bd:37: 3d:cd:0b:6a:ce:5d:d7:81:28:fc:70:3d:47:1f:3e:08:9c:26: 4e:a4:0b:68:e8:18:68:bd:c8:ec:3d:31:f9:a3:a5:7e:9a:0e: d0:ae:70:ca:33:ce:e2:84:26:7e:3a:9c:8f:99:13:46:a9:9a: b0:b7:66:62:a8:26:f7:30:aa:92:7c:ff:b9:27:45:fa:81:ab: c2:fb:ca:3e:fc:2d:74:fe:05:1c:f9:76:f5:0b:59:20:48:6d: 4b:1c:c7:8e:ff:32:18:fc:bb:07:6c:0a:cc:d1:93:d9:da:72: 93:0d:0b:19:d0:fd:75:9a:88:a9:9e:d6:96:c5:cd:59:28:87: 89:f7:7c:6a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBlMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUE4OTcxMTAvBgNVBAUTKEQ2OEQ0MTFBRDAzRTczMTRGMTQ5MkQwNjJEQjBEOTE5 NEU5RjUwOTUwHhcNMjUwNzAyMjI1NjE1WhcNMjUwNzA5MjI1NjE1WjAYMRYwFAYD VQQDEw02ODY1YjkwZi0yM2ExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwvwnhBZKfpf+J+sVEHxiLTszxVf7qVxoZ25Owq2/1cq0cBoDQzNcMtb0c3z8 SloY25UYqxZefCaO+EDfZYt8eC9alZnDXWMELUVCVGfRSsCZyCjO874kxJ0+FH09 VsnEDVKFNtd3KC/UW/wgbs5C++rOR3fwcPw7BxjIiEGleDLtSnOrSjShsTG7rMXH 79BPiSCEVyLeViUSl5jrGWmlwKTvGN83D+hXm6bv7bgpLrJ89pIc/MPDmWSDghiZ PzxypHLLhKS06rXKnn7/iOz1l/ZBpekkdGd5XuPgSbdq25D5xRd8fVQgm6z+UrBY KS/IHHg329SqTIRi5OXWLVtUdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP1UBsf3 Uk1dodZnOLP6y9sIZLBvMB8GA1UdIwQYMBaAFNaNQRrQPnMU8UktBi2w2RlOn1CV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQTg5Ny9FMUQxMTc3MDk1 QkExMUVCQjI4MTIzNzFDNEY5QUUwMi8xbzFCR3RBLWN4VHhTUzBHTGJEWkdVNmZV SlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFvMUJHdEEtY3hUeFNTMEdMYkRaR1U2ZlVKVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QTg5Ny9FMUQxMTc3MDk1QkExMUVCQjI4MTIzNzFDNEY5QUUwMi8xbzFCR3RBLWN4 VHhTUzBHTGJEWkdVNmZVSlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAWc0BWxUDO4RM3KL3rxcZ9mFVW0Ua2PTarluReSV+FYKMP5Nzqq5se AaHeJz08b8Mm5YsRYPM1TMDg3HoydiKh+GD5olUBFi3rJPBymyuPYxcSH+8+4K4Q bsmsZezpg7Kmow+3e/sh50cnyTBjJQ0NL3j7QHHn99lP0gq4vTc9zQtqzl3XgSj8 cD1HHz4InCZOpAto6BhovcjsPTH5o6V+mg7QrnDKM87ihCZ+OpyPmRNGqZqwt2Zi qCb3MKqSfP+5J0X6gavC+8o+/C10/gUc+Xb1C1kgSG1LHMeO/zIY/LsHbArM0ZPZ 2nKTDQsZ0P11moipntaWxc1ZKIeJ93xq -----END CERTIFICATE-----Generated at Thu Jul 3 10:42:36 2025 by rpki-client