$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADE0A/43567EE43D2811ECBEF77C76C4F9AE02/RrT_jckWend9mNhfL1Id0TZwc7M.mft File: RrT_jckWend9mNhfL1Id0TZwc7M.mft (raw, json) Hash identifier: r/3Y6cLrjFXcUdFspbAVQOPPwRoQLHLP0piPhH52ALk= Subject key identifier: 68:BE:BC:B4:43:01:FA:4B:6C:03:59:3B:29:85:AB:4A:F7:D1:CD:25 Authority key identifier: 46:B4:FF:8D:C9:16:7A:77:7D:98:D8:5F:2F:52:1D:D1:36:70:73:B3 Certificate issuer: /CN=A91ADE0A/serialNumber=46B4FF8DC9167A777D98D85F2F521DD1367073B3 Certificate serial: 04B2 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/RrT_jckWend9mNhfL1Id0TZwc7M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ADE0A/43567EE43D2811ECBEF77C76C4F9AE02/RrT_jckWend9mNhfL1Id0TZwc7M.mft Manifest number: 04AA Signing time: Wed 02 Jul 2025 15:59:11 +0000 Manifest this update: Wed 02 Jul 2025 15:59:11 +0000 Manifest next update: Wed 09 Jul 2025 15:59:11 +0000 Files and hashes: 1: RrT_jckWend9mNhfL1Id0TZwc7M.crl (hash: ukLJuaDRLmC74WTjVhN2bfHrvvc7KHHLrYexOH+9skU=) 2: B3789882F23211EC9A7DB924C4F9AE02.roa (hash: mHbYCPxnBj3PWJdh7qbfDGDK73T1pf2kWSW1uT2gXIg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ADE0A/43567EE43D2811ECBEF77C76C4F9AE02/RrT_jckWend9mNhfL1Id0TZwc7M.crl rsync://rpki.apnic.net/member_repository/A91ADE0A/43567EE43D2811ECBEF77C76C4F9AE02/RrT_jckWend9mNhfL1Id0TZwc7M.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/RrT_jckWend9mNhfL1Id0TZwc7M.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 15:59:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1202 (0x4b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ADE0A, serialNumber=46B4FF8DC9167A777D98D85F2F521DD1367073B3 Validity Not Before: Jul 2 15:59:11 2025 GMT Not After : Jul 9 15:59:11 2025 GMT Subject: CN=6865574f-482a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:45:86:da:4c:3e:4d:de:35:61:ab:85:8b:d6: 01:6f:d7:3c:f0:8e:ac:5f:1c:ea:6b:38:6f:5d:9e: 56:a2:e3:7f:3f:8a:2b:60:f8:ee:58:c9:ac:f1:ef: c3:f2:59:85:3a:55:a4:33:a9:f6:da:ec:96:d5:61: 46:6a:c2:92:fe:72:1a:85:b9:f8:8f:8d:e9:7e:7f: b7:4c:5b:d9:24:53:c8:c6:a7:df:b7:45:f1:4f:4a: af:38:cb:dd:b8:5d:60:b3:90:d2:c6:17:ae:52:f9: 2a:1c:99:03:04:ab:b8:6e:04:51:c0:d2:89:e2:e2: 84:31:ac:82:e6:61:66:f4:6a:73:50:23:53:29:25: 25:be:97:f7:83:ae:3e:f9:68:40:dc:e0:65:4c:ae: 34:9f:9a:32:4c:6b:e2:f5:33:59:5e:0c:51:43:68: f1:dc:65:d5:b1:45:02:a4:35:2a:b0:00:ca:d2:ed: 52:ba:fa:e1:b2:66:4f:10:da:12:1d:0f:7f:00:2b: 37:43:09:ab:5c:2f:1b:86:bc:4b:99:dc:f9:bd:d1: b6:73:f4:0f:85:e8:31:b2:ae:f1:10:7e:a1:be:4b: 6b:0a:ea:ca:ca:a4:74:e9:ab:ac:4b:c6:e4:14:85: f5:64:d4:d2:cf:1c:16:a6:03:38:b3:61:74:22:b5: bc:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:BE:BC:B4:43:01:FA:4B:6C:03:59:3B:29:85:AB:4A:F7:D1:CD:25 X509v3 Authority Key Identifier: keyid:46:B4:FF:8D:C9:16:7A:77:7D:98:D8:5F:2F:52:1D:D1:36:70:73:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ADE0A/43567EE43D2811ECBEF77C76C4F9AE02/RrT_jckWend9mNhfL1Id0TZwc7M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/RrT_jckWend9mNhfL1Id0TZwc7M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADE0A/43567EE43D2811ECBEF77C76C4F9AE02/RrT_jckWend9mNhfL1Id0TZwc7M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:ee:89:d6:f0:52:f5:f7:99:23:d5:4d:39:81:0d:15:1a:b6: 2b:06:e4:25:a8:06:4d:6f:ab:09:1c:cd:b6:59:ec:a1:35:5b: 06:e0:7b:60:d7:87:36:ae:a4:5d:36:49:30:0c:65:48:94:1a: 58:a4:2f:af:c3:fa:2f:50:b1:2f:c2:50:33:af:47:6e:52:50: ef:d3:07:18:21:a6:30:8d:1d:25:04:df:9a:1b:8b:5e:4e:75: 72:28:c3:0c:6f:c5:2e:cb:d8:90:e5:ba:b9:95:c5:ee:db:6c: b5:e0:b7:b4:68:d6:68:c5:bf:2c:e4:be:15:9e:e9:a2:b8:e4: ed:36:4d:a3:43:b9:0a:ab:bf:3f:41:16:d5:c2:2c:ee:c2:2e: e5:dc:2e:20:a7:fc:09:5f:77:f2:2b:e6:9a:99:3e:25:c8:33: df:3b:70:95:39:7a:53:13:5e:78:f3:3c:3c:7e:ed:8d:c8:d7: 35:31:0c:73:26:c6:9e:c9:ed:a2:31:df:e1:d4:74:a7:71:a8: 9c:ca:3a:b4:90:a8:cc:31:e0:43:0f:ad:fa:fe:11:12:9d:86: 44:da:e4:08:14:27:b7:a4:fe:1d:57:84:6c:3a:af:ee:d6:4d: 6b:58:1c:84:88:15:78:ce:b4:66:ef:eb:53:07:d4:08:6d:c0: 29:7b:87:df -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBLIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QURFMEExMTAvBgNVBAUTKDQ2QjRGRjhEQzkxNjdBNzc3RDk4RDg1RjJGNTIxREQx MzY3MDczQjMwHhcNMjUwNzAyMTU1OTExWhcNMjUwNzA5MTU1OTExWjAYMRYwFAYD VQQDEw02ODY1NTc0Zi00ODJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqUWG2kw+Td41YauFi9YBb9c88I6sXxzqazhvXZ5WouN/P4orYPjuWMms8e/D 8lmFOlWkM6n22uyW1WFGasKS/nIahbn4j43pfn+3TFvZJFPIxqfft0XxT0qvOMvd uF1gs5DSxheuUvkqHJkDBKu4bgRRwNKJ4uKEMayC5mFm9GpzUCNTKSUlvpf3g64+ +WhA3OBlTK40n5oyTGvi9TNZXgxRQ2jx3GXVsUUCpDUqsADK0u1SuvrhsmZPENoS HQ9/ACs3QwmrXC8bhrxLmdz5vdG2c/QPhegxsq7xEH6hvktrCurKyqR06ausS8bk FIX1ZNTSzxwWpgM4s2F0IrW84wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGi+vLRD AfpLbANZOymFq0r30c0lMB8GA1UdIwQYMBaAFEa0/43JFnp3fZjYXy9SHdE2cHOz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBREUwQS80MzU2N0VFNDNE MjgxMUVDQkVGNzdDNzZDNEY5QUUwMi9SclRfamNrV2VuZDltTmhmTDFJZDBUWndj N00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL1JyVF9qY2tXZW5kOW1OaGZMMUlkMFRad2M3TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB REUwQS80MzU2N0VFNDNEMjgxMUVDQkVGNzdDNzZDNEY5QUUwMi9SclRfamNrV2Vu ZDltTmhmTDFJZDBUWndjN00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCP7onW8FL195kj1U05gQ0VGrYrBuQlqAZNb6sJHM22WeyhNVsG4Htg 14c2rqRdNkkwDGVIlBpYpC+vw/ovULEvwlAzr0duUlDv0wcYIaYwjR0lBN+aG4te TnVyKMMMb8Uuy9iQ5bq5lcXu22y14Le0aNZoxb8s5L4VnumiuOTtNk2jQ7kKq78/ QRbVwizuwi7l3C4gp/wJX3fyK+aamT4lyDPfO3CVOXpTE1548zw8fu2NyNc1MQxz Jsaeye2iMd/h1HSncaicyjq0kKjMMeBDD636/hESnYZE2uQIFCe3pP4dV4RsOq/u 1k1rWByEiBV4zrRm7+tTB9QIbcApe4ff -----END CERTIFICATE-----Generated at Fri Jul 4 13:35:09 2025 by rpki-client