$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1E55/4C09862E78FA11EFA44FE586C4F9AE02/3XyND0ePm-ar9znAT1tb5NyfYfg.mft File: 3XyND0ePm-ar9znAT1tb5NyfYfg.mft (raw, json) Hash identifier: 1P16j6dURjO9SW0aGst6KtvLXOraO9XzaPPZqE2R5xI= Subject key identifier: 3D:FB:B3:24:78:17:A1:1A:99:92:EC:77:F3:7D:13:CA:45:AA:3B:23 Authority key identifier: DD:7C:8D:0F:47:8F:9B:E6:AB:F7:39:C0:4F:5B:5B:E4:DC:9F:61:F8 Certificate issuer: /CN=A91B1E55/serialNumber=DD7C8D0F478F9BE6ABF739C04F5B5BE4DC9F61F8 Certificate serial: 93 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3XyND0ePm-ar9znAT1tb5NyfYfg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B1E55/4C09862E78FA11EFA44FE586C4F9AE02/3XyND0ePm-ar9znAT1tb5NyfYfg.mft Manifest number: 91 Signing time: Thu 03 Jul 2025 06:36:49 +0000 Manifest this update: Thu 03 Jul 2025 06:36:49 +0000 Manifest next update: Thu 10 Jul 2025 06:36:49 +0000 Files and hashes: 1: 3XyND0ePm-ar9znAT1tb5NyfYfg.crl (hash: enaWpmykHUM8Fb6hJuKP/8cTAievNOyGKVhIhbD2Lh0=) 2: EAF1E48478FA11EF9043060AC4F9AE02.roa (hash: Y94sd9E5GlcMt+lxymyuqjd3AEApdFlcMVQYEZaGYA0=) 3: EA810E6278FA11EF9043060AC4F9AE02.roa (hash: jUEy/iUbesTw/bKzIqKbuM3aQtOsfpKNSiK5hvDoL0g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B1E55/4C09862E78FA11EFA44FE586C4F9AE02/3XyND0ePm-ar9znAT1tb5NyfYfg.crl rsync://rpki.apnic.net/member_repository/A91B1E55/4C09862E78FA11EFA44FE586C4F9AE02/3XyND0ePm-ar9znAT1tb5NyfYfg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3XyND0ePm-ar9znAT1tb5NyfYfg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 147 (0x93) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B1E55, serialNumber=DD7C8D0F478F9BE6ABF739C04F5B5BE4DC9F61F8 Validity Not Before: Jul 3 06:36:49 2025 GMT Not After : Jul 10 06:36:49 2025 GMT Subject: CN=68662501-58ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:f3:bb:43:d5:db:84:db:40:85:bc:11:c2:07: a7:8a:c8:9c:0c:95:f1:fe:8d:f7:f0:77:d9:c4:84: 14:95:8b:f8:2a:86:a0:8b:61:8b:cd:f5:33:ce:36: e2:da:7d:d1:55:39:d0:5d:b5:86:a5:35:c5:2c:55: 76:9a:9d:69:7c:98:c3:0e:31:9b:b6:65:00:8e:ed: 9a:c3:a4:72:81:b0:92:31:72:fa:64:c5:2b:a4:b7: b8:9d:0b:5e:ae:bc:6b:d0:b9:1e:f9:10:76:2f:23: b3:5d:18:be:28:86:ec:0a:af:27:f3:81:4e:13:65: 50:70:52:e2:54:4a:e9:a4:db:ed:18:a7:8c:21:e8: 0e:22:df:62:9a:cf:22:20:4e:45:58:a0:05:a3:7d: cd:08:de:77:72:8a:a3:fd:cd:4a:b5:f3:3b:31:54: 9c:80:71:1f:e4:cc:8e:0f:44:0e:01:61:69:94:6a: 9d:af:56:12:67:17:28:1c:d5:6c:ef:b4:ee:da:df: eb:0a:38:9e:45:55:a2:be:05:de:0e:ad:0e:91:f0: 9a:c2:2d:82:fc:cb:52:79:d2:d1:d5:83:d2:21:9c: f6:d1:c6:f2:c2:38:66:23:9f:fb:17:f5:37:58:b9: a7:26:33:00:05:79:63:30:1e:16:95:90:76:09:93: ed:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:FB:B3:24:78:17:A1:1A:99:92:EC:77:F3:7D:13:CA:45:AA:3B:23 X509v3 Authority Key Identifier: keyid:DD:7C:8D:0F:47:8F:9B:E6:AB:F7:39:C0:4F:5B:5B:E4:DC:9F:61:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B1E55/4C09862E78FA11EFA44FE586C4F9AE02/3XyND0ePm-ar9znAT1tb5NyfYfg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3XyND0ePm-ar9znAT1tb5NyfYfg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1E55/4C09862E78FA11EFA44FE586C4F9AE02/3XyND0ePm-ar9znAT1tb5NyfYfg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:3d:00:93:b7:9e:ea:46:ee:09:9c:47:66:a5:c1:ac:2b:2a: 70:38:97:f0:98:2c:aa:4f:05:50:21:58:7c:8b:72:e7:e3:e0: a5:e2:8b:21:67:77:19:01:af:d2:13:f5:86:e9:f6:db:f1:62: 7f:74:0e:4f:fa:3c:67:b8:19:07:d7:33:04:8a:ff:b5:08:05: 9c:96:e5:6a:fa:8d:40:50:9d:db:09:61:82:85:fe:b9:e6:d0: 33:55:0e:6b:39:ff:4c:15:28:a8:c7:cd:17:0a:c8:e2:db:be: 0f:c3:74:ff:ab:f5:f6:b5:f9:d0:3c:c4:49:b2:10:64:b8:df: 77:2a:42:dc:81:55:b6:15:e0:22:53:5b:e7:c4:a9:06:72:ca: fa:be:9e:fa:05:d1:8f:e1:51:86:0e:4e:4e:ea:72:fd:88:b9: 3a:d5:08:19:14:6c:ee:1a:da:b2:8d:a8:dd:65:cb:e5:a5:e1: fb:b2:1e:f8:60:e6:73:82:3d:6d:8c:4c:6d:f2:45:5a:f9:13: ec:55:81:6c:6f:f5:f0:4f:9b:ec:95:4d:10:3e:da:71:a8:6d: 69:37:12:61:80:34:9e:21:c1:5f:3d:9b:66:18:fa:6f:7b:e6: 99:1d:51:05:1c:11:5d:92:18:13:4b:00:58:72:85:1b:40:31: 1c:5d:66:d9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjFFNTUxMTAvBgNVBAUTKEREN0M4RDBGNDc4RjlCRTZBQkY3MzlDMDRGNUI1QkU0 REM5RjYxRjgwHhcNMjUwNzAzMDYzNjQ5WhcNMjUwNzEwMDYzNjQ5WjAYMRYwFAYD VQQDEw02ODY2MjUwMS01OGFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtvO7Q9XbhNtAhbwRwgenisicDJXx/o338HfZxIQUlYv4Koagi2GLzfUzzjbi 2n3RVTnQXbWGpTXFLFV2mp1pfJjDDjGbtmUAju2aw6RygbCSMXL6ZMUrpLe4nQte rrxr0Lke+RB2LyOzXRi+KIbsCq8n84FOE2VQcFLiVErppNvtGKeMIegOIt9ims8i IE5FWKAFo33NCN53coqj/c1KtfM7MVScgHEf5MyOD0QOAWFplGqdr1YSZxcoHNVs 77Tu2t/rCjieRVWivgXeDq0OkfCawi2C/MtSedLR1YPSIZz20cbywjhmI5/7F/U3 WLmnJjMABXljMB4WlZB2CZPtAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD37syR4 F6EamZLsd/N9E8pFqjsjMB8GA1UdIwQYMBaAFN18jQ9Hj5vmq/c5wE9bW+Tcn2H4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMUU1NS80QzA5ODYyRTc4 RkExMUVGQTQ0RkU1ODZDNEY5QUUwMi8zWHlORDBlUG0tYXI5em5BVDF0YjVOeWZZ ZmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzNYeU5EMGVQbS1hcjl6bkFUMXRiNU55ZllmZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MUU1NS80QzA5ODYyRTc4RkExMUVGQTQ0RkU1ODZDNEY5QUUwMi8zWHlORDBlUG0t YXI5em5BVDF0YjVOeWZZZmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBNPQCTt57qRu4JnEdmpcGsKypwOJfwmCyqTwVQIVh8i3Ln4+Cl4osh Z3cZAa/SE/WG6fbb8WJ/dA5P+jxnuBkH1zMEiv+1CAWcluVq+o1AUJ3bCWGChf65 5tAzVQ5rOf9MFSiox80XCsji274Pw3T/q/X2tfnQPMRJshBkuN93KkLcgVW2FeAi U1vnxKkGcsr6vp76BdGP4VGGDk5O6nL9iLk61QgZFGzuGtqyjajdZcvlpeH7sh74 YOZzgj1tjExt8kVa+RPsVYFsb/XwT5vslU0QPtpxqG1pNxJhgDSeIcFfPZtmGPpv e+aZHVEFHBFdkhgTSwBYcoUbQDEcXWbZ -----END CERTIFICATE-----Generated at Fri Jul 4 14:50:48 2025 by rpki-client