$ rpki-client -vvf rpki.apnic.net/member_repository/A91B02A2/EFD2158477EB11EE93B68B3AC4F9AE02/b814Gaj5P69A0OOH8htG6E3p1ws.mft File: b814Gaj5P69A0OOH8htG6E3p1ws.mft (raw, json) Hash identifier: oTqmNU2+3zRTkcm+s5BilrJ2EQ5RX71Zw52guD6tniI= Subject key identifier: 01:FA:D2:44:90:4B:C9:1E:DF:53:D6:8D:9A:67:64:C1:C6:31:3B:A7 Authority key identifier: 6F:CD:78:19:A8:F9:3F:AF:40:D0:E3:87:F2:1B:46:E8:4D:E9:D7:0B Certificate issuer: /CN=A91B02A2/serialNumber=6FCD7819A8F93FAF40D0E387F21B46E84DE9D70B Certificate serial: 0138 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b814Gaj5P69A0OOH8htG6E3p1ws.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B02A2/EFD2158477EB11EE93B68B3AC4F9AE02/b814Gaj5P69A0OOH8htG6E3p1ws.mft Manifest number: 0136 Signing time: Sun 29 Jun 2025 03:34:25 +0000 Manifest this update: Sun 29 Jun 2025 03:34:25 +0000 Manifest next update: Sun 06 Jul 2025 03:34:25 +0000 Files and hashes: 1: b814Gaj5P69A0OOH8htG6E3p1ws.crl (hash: vSwXhyEnPeWoFGLe/cSDiWxcjHngvZHKjW9j9olr3X4=) 2: 5D98833C77EC11EEA06F373BC4F9AE02.roa (hash: PTNlCaFqxgAXX8dh1a7LSvNmOXF/4erL00o7/e/JlJk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B02A2/EFD2158477EB11EE93B68B3AC4F9AE02/b814Gaj5P69A0OOH8htG6E3p1ws.crl rsync://rpki.apnic.net/member_repository/A91B02A2/EFD2158477EB11EE93B68B3AC4F9AE02/b814Gaj5P69A0OOH8htG6E3p1ws.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b814Gaj5P69A0OOH8htG6E3p1ws.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 03:34:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 312 (0x138) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B02A2, serialNumber=6FCD7819A8F93FAF40D0E387F21B46E84DE9D70B Validity Not Before: Jun 29 03:34:25 2025 GMT Not After : Jul 6 03:34:25 2025 GMT Subject: CN=6860b441-52e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:c1:01:1a:f2:a4:1a:a5:8a:dc:f2:cf:5b:df: 16:83:16:1d:fe:99:5e:88:5f:c1:d5:0c:42:a0:40: b0:be:c5:dd:59:25:8f:7a:62:7e:e7:9b:32:a7:18: bb:ce:e9:4f:2b:80:35:c3:14:94:c7:0c:b6:cb:47: 93:4a:e7:9c:80:1c:1b:58:c8:88:6e:9f:1f:5a:9e: ab:0e:44:2e:ef:73:f5:b2:34:83:e4:8f:44:2a:98: f3:a2:c5:5a:8f:cf:d4:e1:c2:54:e0:56:01:b1:1c: 2c:ca:58:34:a0:ec:5e:01:8a:5f:cd:e9:09:bd:d5: 95:7d:54:c1:4f:cf:fa:a8:ab:c1:61:21:41:db:4e: c9:04:53:51:53:9c:e7:d8:ff:a5:e6:f4:d4:4a:d2: a9:e1:21:f0:4f:66:e4:ba:00:d8:89:c4:fb:40:e7: 5a:65:ed:fb:39:7c:61:ba:39:aa:2c:76:e9:70:53: 60:6d:dc:58:16:35:83:39:bc:7e:c9:97:bf:82:24: 07:f1:24:c8:34:30:1f:87:e6:01:d2:ad:f5:4e:be: 68:35:a8:ff:e4:19:93:ce:ca:6a:e5:b6:3e:d3:a4: 78:c4:2c:fe:9b:b0:1f:04:9b:21:df:c7:0f:e5:42: e8:f9:b7:1b:80:66:36:21:a6:95:c4:df:27:ff:c4: a6:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:FA:D2:44:90:4B:C9:1E:DF:53:D6:8D:9A:67:64:C1:C6:31:3B:A7 X509v3 Authority Key Identifier: keyid:6F:CD:78:19:A8:F9:3F:AF:40:D0:E3:87:F2:1B:46:E8:4D:E9:D7:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B02A2/EFD2158477EB11EE93B68B3AC4F9AE02/b814Gaj5P69A0OOH8htG6E3p1ws.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b814Gaj5P69A0OOH8htG6E3p1ws.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B02A2/EFD2158477EB11EE93B68B3AC4F9AE02/b814Gaj5P69A0OOH8htG6E3p1ws.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:e3:95:3c:7b:0d:3f:0a:31:95:7c:a9:27:71:cf:5d:50:36: 51:89:49:5b:88:42:82:98:47:fa:f9:f8:73:97:26:87:64:94: d7:2e:ae:16:0f:61:d1:a8:02:d5:1b:d0:a3:5d:e7:0f:4d:49: cd:d0:54:86:b4:fe:32:57:dd:ba:a3:ad:66:3c:d4:c6:e1:28: 6e:bc:63:07:64:c3:52:80:4a:b2:34:aa:86:ec:2c:41:a9:ad: cc:f5:eb:65:94:72:17:e4:d6:d2:ca:52:c6:75:14:14:92:3c: e8:27:ff:32:96:31:12:b6:96:b5:47:76:8d:3a:89:40:ae:37: 4a:47:de:8a:b5:fa:9c:d7:b2:90:14:d0:f2:24:67:13:67:e3: 7d:28:92:2b:b8:61:22:d9:5e:40:0c:73:84:50:9f:a8:10:f1: a8:5c:f1:f2:0d:26:00:80:cb:b1:cc:6a:17:df:9b:b4:34:cf: f6:2a:e2:37:05:3f:fa:91:6c:e3:68:be:03:9a:51:60:42:61: 3d:db:48:4b:be:fb:06:0e:14:74:f2:6d:36:b9:75:a8:1d:6c: 49:28:9e:78:8f:74:1b:05:bf:65:2b:62:b0:d7:7c:0b:7a:6d: 2b:52:88:28:b2:54:44:8d:c8:70:be:28:46:14:f3:49:5a:c0: 53:44:09:15 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjAyQTIxMTAvBgNVBAUTKDZGQ0Q3ODE5QThGOTNGQUY0MEQwRTM4N0YyMUI0NkU4 NERFOUQ3MEIwHhcNMjUwNjI5MDMzNDI1WhcNMjUwNzA2MDMzNDI1WjAYMRYwFAYD VQQDEw02ODYwYjQ0MS01MmU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp8EBGvKkGqWK3PLPW98WgxYd/pleiF/B1QxCoECwvsXdWSWPemJ+55sypxi7 zulPK4A1wxSUxwy2y0eTSuecgBwbWMiIbp8fWp6rDkQu73P1sjSD5I9EKpjzosVa j8/U4cJU4FYBsRwsylg0oOxeAYpfzekJvdWVfVTBT8/6qKvBYSFB207JBFNRU5zn 2P+l5vTUStKp4SHwT2bkugDYicT7QOdaZe37OXxhujmqLHbpcFNgbdxYFjWDObx+ yZe/giQH8STINDAfh+YB0q31Tr5oNaj/5BmTzspq5bY+06R4xCz+m7AfBJsh38cP 5ULo+bcbgGY2IaaVxN8n/8SmMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAH60kSQ S8ke31PWjZpnZMHGMTunMB8GA1UdIwQYMBaAFG/NeBmo+T+vQNDjh/IbRuhN6dcL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDJBMi9FRkQyMTU4NDc3 RUIxMUVFOTNCNjhCM0FDNEY5QUUwMi9iODE0R2FqNVA2OUEwT09IOGh0RzZFM3Ax d3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2I4MTRHYWo1UDY5QTBPT0g4aHRHNkUzcDF3cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MDJBMi9FRkQyMTU4NDc3RUIxMUVFOTNCNjhCM0FDNEY5QUUwMi9iODE0R2FqNVA2 OUEwT09IOGh0RzZFM3Axd3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA345U8ew0/CjGVfKkncc9dUDZRiUlbiEKCmEf6+fhzlyaHZJTXLq4W D2HRqALVG9CjXecPTUnN0FSGtP4yV926o61mPNTG4ShuvGMHZMNSgEqyNKqG7CxB qa3M9etllHIX5NbSylLGdRQUkjzoJ/8yljEStpa1R3aNOolArjdKR96Ktfqc17KQ FNDyJGcTZ+N9KJIruGEi2V5ADHOEUJ+oEPGoXPHyDSYAgMuxzGoX35u0NM/2KuI3 BT/6kWzjaL4DmlFgQmE920hLvvsGDhR08m02uXWoHWxJKJ54j3QbBb9lK2Kw13wL em0rUogoslREjchwvihGFPNJWsBTRAkV -----END CERTIFICATE-----Generated at Tue Jul 1 01:00:13 2025 by rpki-client