$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE3F2/86A0FB28461611ED92EAAD20C4F9AE02/_-G3qHKaDsu-yLL9mpe3SCbM28U.mft File: _-G3qHKaDsu-yLL9mpe3SCbM28U.mft (raw, json) Hash identifier: /kRp9MVWbLFwmMzGCipyDfqEceX+PHOstKB/gaiboOI= Subject key identifier: A4:9C:1F:15:39:CA:0C:BE:56:51:02:1D:0D:84:24:F8:45:F2:E2:A7 Authority key identifier: FF:E1:B7:A8:72:9A:0E:CB:BE:C8:B2:FD:9A:97:B7:48:26:CC:DB:C5 Certificate issuer: /CN=A91AE3F2/serialNumber=FFE1B7A8729A0ECBBEC8B2FD9A97B74826CCDBC5 Certificate serial: 020D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_-G3qHKaDsu-yLL9mpe3SCbM28U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AE3F2/86A0FB28461611ED92EAAD20C4F9AE02/_-G3qHKaDsu-yLL9mpe3SCbM28U.mft Manifest number: 0206 Signing time: Tue 01 Jul 2025 02:44:27 +0000 Manifest this update: Tue 01 Jul 2025 02:44:26 +0000 Manifest next update: Tue 08 Jul 2025 02:44:26 +0000 Files and hashes: 1: _-G3qHKaDsu-yLL9mpe3SCbM28U.crl (hash: FPjo8aUgV4K9j4L1EM30h6AJlpr+JWASpkwpyS46HVU=) 2: EEA8968C461A11ED898DD14FC4F9AE02.roa (hash: xvgbQt4eEZhtv3D2xw3qg4iJxZwYxghUdqa6K5JPB6M=) 3: 41669A1AFA7111EFBBC5374BC4F9AE02.roa (hash: xErCMLXYoA0hL6AVT+7fD9OFndfuVCyqiiQ1j2stZZI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AE3F2/86A0FB28461611ED92EAAD20C4F9AE02/_-G3qHKaDsu-yLL9mpe3SCbM28U.crl rsync://rpki.apnic.net/member_repository/A91AE3F2/86A0FB28461611ED92EAAD20C4F9AE02/_-G3qHKaDsu-yLL9mpe3SCbM28U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_-G3qHKaDsu-yLL9mpe3SCbM28U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 02:44:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 525 (0x20d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AE3F2, serialNumber=FFE1B7A8729A0ECBBEC8B2FD9A97B74826CCDBC5 Validity Not Before: Jul 1 02:44:26 2025 GMT Not After : Jul 8 02:44:26 2025 GMT Subject: CN=68634b8b-e706 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:6c:b6:17:9e:18:c6:e4:95:be:66:a7:14:29: 32:4b:b3:cb:68:48:b3:fe:4f:30:01:af:e0:4b:28: bc:a7:71:91:4e:bd:94:6e:6b:33:31:f0:97:f7:42: 69:01:7d:9a:2f:01:1d:f8:9a:1e:5c:d6:d2:eb:2c: 19:c5:a2:00:36:a1:0a:f5:a3:8e:5a:d5:47:9d:aa: cf:6a:db:6d:db:01:c9:2e:be:b6:1d:45:ac:0c:d7: 47:4f:25:c6:3a:ae:06:3d:02:98:2e:d9:f2:b0:2d: 78:62:3c:38:3c:aa:8c:fb:b4:08:bc:30:d2:f4:52: c1:b1:e9:ab:8b:89:1b:ec:03:72:36:b5:d4:d1:e8: 3b:42:64:25:c4:48:7e:b9:25:d7:9d:04:bf:a6:d5: 07:99:21:ef:e3:27:39:a1:8e:b2:dc:38:32:53:ce: d0:26:58:2a:85:3e:eb:f3:ae:e6:f9:4b:4c:56:13: 9d:93:24:47:b1:fa:cb:83:de:90:13:d0:44:fa:67: b0:15:4a:89:3c:3e:2f:5e:98:20:bc:9e:d1:03:fa: 83:6e:7c:72:49:4a:2d:08:20:f9:64:e0:bc:b2:be: a6:d6:9f:3a:4c:93:61:f3:c0:e0:c4:cf:3c:65:a7: 09:53:c9:e8:b4:ba:d5:70:63:78:c2:c9:cc:16:aa: 35:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:9C:1F:15:39:CA:0C:BE:56:51:02:1D:0D:84:24:F8:45:F2:E2:A7 X509v3 Authority Key Identifier: keyid:FF:E1:B7:A8:72:9A:0E:CB:BE:C8:B2:FD:9A:97:B7:48:26:CC:DB:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AE3F2/86A0FB28461611ED92EAAD20C4F9AE02/_-G3qHKaDsu-yLL9mpe3SCbM28U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_-G3qHKaDsu-yLL9mpe3SCbM28U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE3F2/86A0FB28461611ED92EAAD20C4F9AE02/_-G3qHKaDsu-yLL9mpe3SCbM28U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:45:92:ab:69:d7:64:f4:18:68:7e:2d:b7:e0:72:41:cb:b4: 5d:67:1e:29:a5:0c:a6:38:a8:dc:80:f5:31:ea:10:16:c0:d8: 8f:35:ee:67:fc:e2:a1:a8:36:4d:14:67:7d:ea:7c:d6:8b:ee: 30:e4:db:9b:2f:32:56:82:98:b1:b6:84:d7:3b:59:cc:5f:31: 54:da:4c:b7:a6:18:8d:b9:2b:eb:ea:1a:1b:98:42:a9:00:ad: 5a:b1:59:ff:94:8a:4f:6c:b4:39:b8:f2:34:57:00:52:de:5f: 8e:38:68:40:33:7e:cb:9c:24:e4:bc:e0:47:33:7a:1a:b3:b6: c6:98:85:19:98:7c:e9:69:c3:6f:ea:b2:8f:43:8e:50:65:a2: 28:b9:3a:89:3c:54:05:f6:4f:22:5e:75:cf:0a:63:37:57:c7: e1:22:73:84:cd:d3:ee:06:0f:20:00:3c:46:ac:30:34:2b:48: 1e:69:a2:d0:c9:3a:1b:90:54:bd:60:03:2c:5a:da:05:b0:51: 34:79:2d:40:97:ac:36:b7:0c:16:2c:77:6c:54:66:93:e3:b0: 93:cc:26:a8:bc:a1:06:00:18:55:2b:df:14:fc:64:fe:1d:11: 6f:ef:0a:34:96:72:c1:39:d3:ca:8d:b4:fb:d2:63:36:e5:88: 7c:e0:d5:88 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAg0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUUzRjIxMTAvBgNVBAUTKEZGRTFCN0E4NzI5QTBFQ0JCRUM4QjJGRDlBOTdCNzQ4 MjZDQ0RCQzUwHhcNMjUwNzAxMDI0NDI2WhcNMjUwNzA4MDI0NDI2WjAYMRYwFAYD VQQDEw02ODYzNGI4Yi1lNzA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtGy2F54YxuSVvmanFCkyS7PLaEiz/k8wAa/gSyi8p3GRTr2UbmszMfCX90Jp AX2aLwEd+JoeXNbS6ywZxaIANqEK9aOOWtVHnarPattt2wHJLr62HUWsDNdHTyXG Oq4GPQKYLtnysC14Yjw4PKqM+7QIvDDS9FLBsemri4kb7ANyNrXU0eg7QmQlxEh+ uSXXnQS/ptUHmSHv4yc5oY6y3DgyU87QJlgqhT7r867m+UtMVhOdkyRHsfrLg96Q E9BE+mewFUqJPD4vXpggvJ7RA/qDbnxySUotCCD5ZOC8sr6m1p86TJNh88DgxM88 ZacJU8notLrVcGN4wsnMFqo1PQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKScHxU5 ygy+VlECHQ2EJPhF8uKnMB8GA1UdIwQYMBaAFP/ht6hymg7Lvsiy/ZqXt0gmzNvF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRTNGMi84NkEwRkIyODQ2 MTYxMUVEOTJFQUFEMjBDNEY5QUUwMi9fLUczcUhLYURzdS15TEw5bXBlM1NDYk0y OFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL18tRzNxSEthRHN1LXlMTDltcGUzU0NiTTI4VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RTNGMi84NkEwRkIyODQ2MTYxMUVEOTJFQUFEMjBDNEY5QUUwMi9fLUczcUhLYURz dS15TEw5bXBlM1NDYk0yOFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA6RZKraddk9Bhofi234HJBy7RdZx4ppQymOKjcgPUx6hAWwNiPNe5n /OKhqDZNFGd96nzWi+4w5NubLzJWgpixtoTXO1nMXzFU2ky3phiNuSvr6hobmEKp AK1asVn/lIpPbLQ5uPI0VwBS3l+OOGhAM37LnCTkvOBHM3oas7bGmIUZmHzpacNv 6rKPQ45QZaIouTqJPFQF9k8iXnXPCmM3V8fhInOEzdPuBg8gADxGrDA0K0geaaLQ yTobkFS9YAMsWtoFsFE0eS1Al6w2twwWLHdsVGaT47CTzCaovKEGABhVK98U/GT+ HRFv7wo0lnLBOdPKjbT70mM25Yh84NWI -----END CERTIFICATE-----Generated at Thu Jul 3 01:12:54 2025 by rpki-client