$ rpki-client -vvf rpki.apnic.net/member_repository/A91B189B/328BDD40387211EB997AA23AC4F9AE02/_SqdXvq5ERsKWjAT80wsva_QH8I.mft File: _SqdXvq5ERsKWjAT80wsva_QH8I.mft (raw, json) Hash identifier: hjyzFBKMFq5I1ND1skk7wmJRpiYwt3v3DLTEGO7pG6Q= Subject key identifier: 76:A6:8E:B4:79:AE:83:0B:C7:27:2B:57:EA:A6:06:D0:F3:B3:F6:93 Authority key identifier: FD:2A:9D:5E:FA:B9:11:1B:0A:5A:30:13:F3:4C:2C:BD:AF:D0:1F:C2 Certificate issuer: /CN=A91B189B/serialNumber=FD2A9D5EFAB9111B0A5A3013F34C2CBDAFD01FC2 Certificate serial: 0731 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_SqdXvq5ERsKWjAT80wsva_QH8I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B189B/328BDD40387211EB997AA23AC4F9AE02/_SqdXvq5ERsKWjAT80wsva_QH8I.mft Manifest number: 072C Signing time: Mon 30 Jun 2025 22:05:37 +0000 Manifest this update: Mon 30 Jun 2025 22:05:36 +0000 Manifest next update: Mon 07 Jul 2025 22:05:36 +0000 Files and hashes: 1: _SqdXvq5ERsKWjAT80wsva_QH8I.crl (hash: P0FBgsIE9xm0hngsSK2W7R8va4mWKeq9+FOqxBqlljc=) 2: DFCE0CFC387311EBA0AC593EC4F9AE02.roa (hash: OHqpc630iPDrvxa3JYL+djk/kcEwI5eOHtscWctQIpU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B189B/328BDD40387211EB997AA23AC4F9AE02/_SqdXvq5ERsKWjAT80wsva_QH8I.crl rsync://rpki.apnic.net/member_repository/A91B189B/328BDD40387211EB997AA23AC4F9AE02/_SqdXvq5ERsKWjAT80wsva_QH8I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_SqdXvq5ERsKWjAT80wsva_QH8I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 22:05:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1841 (0x731) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B189B, serialNumber=FD2A9D5EFAB9111B0A5A3013F34C2CBDAFD01FC2 Validity Not Before: Jun 30 22:05:36 2025 GMT Not After : Jul 7 22:05:36 2025 GMT Subject: CN=68630a30-bae8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:93:80:56:70:c6:8e:8a:9d:ce:f9:2e:75:91: ba:13:3a:bb:83:0c:d1:52:f3:b5:09:90:12:0d:29: 79:11:7e:32:c3:61:da:0f:68:1a:b1:e7:99:86:61: b1:ab:29:cc:3f:74:d8:15:10:72:c5:73:b8:bf:20: 1a:6a:b1:98:28:ef:88:01:34:a7:db:a2:8d:1e:15: d9:60:f3:26:87:8c:6c:d4:b0:9e:9b:76:6a:57:32: 4b:cd:10:da:d3:bf:96:82:5c:0a:c9:b4:e5:58:4f: eb:9d:dc:32:91:fd:86:d1:6c:1c:c9:ba:f0:93:85: 49:f4:14:56:99:a8:d3:1b:96:b4:26:30:ad:55:3e: 2b:e4:71:33:7d:1e:82:c9:18:44:e4:c9:da:77:e0: b0:f0:f4:f8:e8:06:9f:af:00:9e:ed:6a:6e:4a:f3: 2d:5e:e6:a5:93:4a:ab:aa:1d:0d:e6:4d:31:6c:eb: 78:3a:f9:7d:f9:3f:59:87:1d:15:b2:1d:0f:d5:8d: 8c:2f:8a:7b:45:ad:ce:85:24:6a:e4:0f:1c:af:6c: ef:f3:da:f5:ca:31:46:c8:66:d1:f2:fc:9d:31:6f: 1b:ac:8a:86:33:9f:8a:c6:fe:cb:d9:cb:66:ed:50: 01:88:1d:c4:ad:59:77:15:df:e7:67:12:57:dc:f5: f4:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:A6:8E:B4:79:AE:83:0B:C7:27:2B:57:EA:A6:06:D0:F3:B3:F6:93 X509v3 Authority Key Identifier: keyid:FD:2A:9D:5E:FA:B9:11:1B:0A:5A:30:13:F3:4C:2C:BD:AF:D0:1F:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B189B/328BDD40387211EB997AA23AC4F9AE02/_SqdXvq5ERsKWjAT80wsva_QH8I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_SqdXvq5ERsKWjAT80wsva_QH8I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B189B/328BDD40387211EB997AA23AC4F9AE02/_SqdXvq5ERsKWjAT80wsva_QH8I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:13:6c:4a:61:78:0d:03:a8:d1:8c:97:43:13:c3:52:6d:a6: a9:6f:7b:aa:71:d6:7a:00:84:fe:92:03:1c:ed:49:db:cb:78: 98:1f:7b:6a:a9:4d:6f:61:ac:2c:40:03:66:86:44:1b:15:0c: 42:f9:79:59:23:42:7e:9a:33:1c:c1:c9:88:f4:3c:7b:48:42: b7:cb:88:db:c9:35:d9:2f:7d:be:eb:52:18:df:a4:cc:9b:3f: 18:69:2e:25:d8:22:2b:24:b8:b9:c7:fb:84:92:32:ee:07:8c: 31:fa:eb:cb:09:b9:a5:61:0c:52:56:84:66:8a:09:60:a7:60: e3:3e:78:87:1d:7e:9d:4f:95:ac:f3:0d:a0:6d:21:52:69:c4: 28:0e:75:a4:1a:b9:f9:de:fc:6d:4a:91:d2:6e:e5:c2:2a:a4: dc:5c:ce:9c:5a:bb:27:7f:40:73:08:1d:8f:39:24:f5:81:ea: 53:0a:fe:ae:35:85:be:88:9a:13:30:d6:b7:c7:21:52:52:1b: 83:1f:dc:ac:1b:af:1e:25:6b:38:42:82:5b:36:3d:af:18:1f: d4:0a:35:6c:ca:56:be:d4:4e:73:2f:f8:50:f8:ba:7c:60:2b: 8f:20:8e:07:0a:88:8a:f4:5b:e1:80:8e:81:fa:eb:91:c6:29: 66:3f:59:a0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBzEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjE4OUIxMTAvBgNVBAUTKEZEMkE5RDVFRkFCOTExMUIwQTVBMzAxM0YzNEMyQ0JE QUZEMDFGQzIwHhcNMjUwNjMwMjIwNTM2WhcNMjUwNzA3MjIwNTM2WjAYMRYwFAYD VQQDEw02ODYzMGEzMC1iYWU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr5OAVnDGjoqdzvkudZG6Ezq7gwzRUvO1CZASDSl5EX4yw2HaD2gaseeZhmGx qynMP3TYFRByxXO4vyAaarGYKO+IATSn26KNHhXZYPMmh4xs1LCem3ZqVzJLzRDa 07+WglwKybTlWE/rndwykf2G0Wwcybrwk4VJ9BRWmajTG5a0JjCtVT4r5HEzfR6C yRhE5Mnad+Cw8PT46AafrwCe7WpuSvMtXualk0qrqh0N5k0xbOt4Ovl9+T9Zhx0V sh0P1Y2ML4p7Ra3OhSRq5A8cr2zv89r1yjFGyGbR8vydMW8brIqGM5+Kxv7L2ctm 7VABiB3ErVl3Fd/nZxJX3PX0DwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHamjrR5 roMLxycrV+qmBtDzs/aTMB8GA1UdIwQYMBaAFP0qnV76uREbClowE/NMLL2v0B/C MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMTg5Qi8zMjhCREQ0MDM4 NzIxMUVCOTk3QUEyM0FDNEY5QUUwMi9fU3FkWHZxNUVSc0tXakFUODB3c3ZhX1FI OEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19TcWRYdnE1RVJzS1dqQVQ4MHdzdmFfUUg4SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MTg5Qi8zMjhCREQ0MDM4NzIxMUVCOTk3QUEyM0FDNEY5QUUwMi9fU3FkWHZxNUVS c0tXakFUODB3c3ZhX1FIOEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCIE2xKYXgNA6jRjJdDE8NSbaapb3uqcdZ6AIT+kgMc7Unby3iYH3tq qU1vYawsQANmhkQbFQxC+XlZI0J+mjMcwcmI9Dx7SEK3y4jbyTXZL32+61IY36TM mz8YaS4l2CIrJLi5x/uEkjLuB4wx+uvLCbmlYQxSVoRmiglgp2DjPniHHX6dT5Ws 8w2gbSFSacQoDnWkGrn53vxtSpHSbuXCKqTcXM6cWrsnf0BzCB2POST1gepTCv6u NYW+iJoTMNa3xyFSUhuDH9ysG68eJWs4QoJbNj2vGB/UCjVsyla+1E5zL/hQ+Lp8 YCuPII4HCoiK9FvhgI6B+uuRxilmP1mg -----END CERTIFICATE-----Generated at Tue Jul 1 22:39:19 2025 by rpki-client