$ rpki-client -vvf rpki.apnic.net/member_repository/A91B352F/F6FFE29E1DA911E2A8EF6EA508B02CD2/d-lG0L0pqiF78bHFrwsxU2wUenE.mft File: d-lG0L0pqiF78bHFrwsxU2wUenE.mft (raw, json) Hash identifier: StOlE5aqf2EvuBgSuKFpuyFacgVxYBiZdaNfca3U8Ls= Subject key identifier: 18:AE:5F:C7:DD:6F:47:81:E2:23:6F:00:A7:18:5F:43:2E:E6:05:DB Authority key identifier: 77:E9:46:D0:BD:29:AA:21:7B:F1:B1:C5:AF:0B:31:53:6C:14:7A:71 Certificate issuer: /CN=A91B352F/serialNumber=77E946D0BD29AA217BF1B1C5AF0B31536C147A71 Certificate serial: 349B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d-lG0L0pqiF78bHFrwsxU2wUenE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B352F/F6FFE29E1DA911E2A8EF6EA508B02CD2/d-lG0L0pqiF78bHFrwsxU2wUenE.mft Manifest number: 3498 Signing time: Fri 04 Jul 2025 15:25:32 +0000 Manifest this update: Fri 04 Jul 2025 15:25:31 +0000 Manifest next update: Fri 11 Jul 2025 15:25:31 +0000 Files and hashes: 1: d-lG0L0pqiF78bHFrwsxU2wUenE.crl (hash: 7Q/r7fbCs0TBvoyeGevPxVZHtnVkVjwBk4HtJfkNZjw=) 2: 92BA7F4A69DE11EF8FF0EF50C4F9AE02.roa (hash: zYMb1XnG0WFocOb8g6o9H1kl0CBRuaJqUP3nm71UW5w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B352F/F6FFE29E1DA911E2A8EF6EA508B02CD2/d-lG0L0pqiF78bHFrwsxU2wUenE.crl rsync://rpki.apnic.net/member_repository/A91B352F/F6FFE29E1DA911E2A8EF6EA508B02CD2/d-lG0L0pqiF78bHFrwsxU2wUenE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d-lG0L0pqiF78bHFrwsxU2wUenE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13467 (0x349b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B352F, serialNumber=77E946D0BD29AA217BF1B1C5AF0B31536C147A71 Validity Not Before: Jul 4 15:25:31 2025 GMT Not After : Jul 11 15:25:31 2025 GMT Subject: CN=6867f26c-1dc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:b4:22:8a:40:4b:43:e9:e3:6c:0e:fb:c2:ce: 1c:31:d2:23:27:01:8f:f8:be:0c:a9:52:d4:c0:35: 12:2b:85:fd:07:aa:b2:2a:52:83:37:27:71:98:a1: 84:7a:17:1f:aa:72:47:be:01:47:dc:04:1b:fa:08: 50:95:f2:9c:17:eb:b8:04:5d:ac:a5:2c:72:d2:34: 3e:c5:db:1b:7d:06:ed:a7:14:10:e6:c2:30:97:2a: 5f:a0:e6:4a:86:5b:ef:fc:b0:da:73:08:38:0d:bd: 62:54:35:d5:aa:a4:44:69:61:f1:a8:8d:19:99:df: 9a:e9:6d:4f:0f:86:1c:4a:87:11:d2:bc:28:64:9c: 90:8c:81:21:39:6d:f4:54:b9:5a:59:3e:d3:83:c0: 07:07:41:fb:dc:54:c3:66:24:1c:a5:d9:46:3b:60: cb:5f:d7:ed:33:ee:4f:16:f3:68:0e:37:0d:80:ff: a6:a5:11:35:a1:42:4f:e7:8c:37:19:8c:d2:b6:8e: 44:27:52:cb:04:fc:23:24:39:2f:7b:85:7e:7c:90: dd:11:ff:bc:65:22:c3:0b:97:30:02:ee:a3:80:7c: 82:98:23:86:e8:a3:88:0c:1c:12:da:ef:9b:34:9a: 80:69:80:fc:d5:2b:de:0a:cb:ad:02:74:94:4e:55: 8b:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:AE:5F:C7:DD:6F:47:81:E2:23:6F:00:A7:18:5F:43:2E:E6:05:DB X509v3 Authority Key Identifier: keyid:77:E9:46:D0:BD:29:AA:21:7B:F1:B1:C5:AF:0B:31:53:6C:14:7A:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B352F/F6FFE29E1DA911E2A8EF6EA508B02CD2/d-lG0L0pqiF78bHFrwsxU2wUenE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d-lG0L0pqiF78bHFrwsxU2wUenE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B352F/F6FFE29E1DA911E2A8EF6EA508B02CD2/d-lG0L0pqiF78bHFrwsxU2wUenE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:2b:1f:a2:20:65:26:9e:68:a9:db:ea:00:a4:17:84:81:5e: 5e:64:53:c3:c7:ee:cc:89:ec:bf:8d:5f:15:b1:2f:1a:eb:45: 5a:d7:13:32:d1:58:e6:44:c2:49:f3:29:e7:d8:2a:e2:ff:37: 75:de:7c:4a:e5:11:17:4c:a2:56:63:4f:09:30:9b:bb:4f:12: 10:c4:ce:c9:a1:5f:de:84:96:08:63:9b:dc:38:e7:8f:b1:2f: 44:8f:8b:a0:6d:4e:12:83:a8:b0:49:53:28:59:ed:19:f4:e1: eb:9e:b9:18:a6:21:a3:96:44:9e:fb:7a:ee:f5:f6:f9:67:95: 97:3c:e6:b1:5b:f4:06:8f:8e:0a:ae:54:18:49:69:94:08:51: ba:ed:a5:53:c9:0e:11:ba:2e:25:9d:f6:23:34:c3:db:05:fd: db:04:5f:73:b0:bd:37:a5:35:c6:33:e4:3f:a5:c6:6e:78:9f: 58:1a:41:75:c6:df:3d:01:32:96:35:f9:73:63:df:8c:01:bb: 70:a3:11:0e:fc:48:9e:88:76:2a:2c:83:2f:33:b3:e4:66:d1: d5:1b:6c:ef:42:fb:1f:a0:b1:10:e4:f5:48:2a:d9:4d:d0:71: 93:67:6a:fb:f7:72:71:32:5c:ea:77:ae:8a:90:56:e0:85:c9: 34:48:09:65 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNJswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjM1MkYxMTAvBgNVBAUTKDc3RTk0NkQwQkQyOUFBMjE3QkYxQjFDNUFGMEIzMTUz NkMxNDdBNzEwHhcNMjUwNzA0MTUyNTMxWhcNMjUwNzExMTUyNTMxWjAYMRYwFAYD VQQDEw02ODY3ZjI2Yy0xZGM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqbQiikBLQ+njbA77ws4cMdIjJwGP+L4MqVLUwDUSK4X9B6qyKlKDNydxmKGE ehcfqnJHvgFH3AQb+ghQlfKcF+u4BF2spSxy0jQ+xdsbfQbtpxQQ5sIwlypfoOZK hlvv/LDacwg4Db1iVDXVqqREaWHxqI0Zmd+a6W1PD4YcSocR0rwoZJyQjIEhOW30 VLlaWT7Tg8AHB0H73FTDZiQcpdlGO2DLX9ftM+5PFvNoDjcNgP+mpRE1oUJP54w3 GYzSto5EJ1LLBPwjJDkve4V+fJDdEf+8ZSLDC5cwAu6jgHyCmCOG6KOIDBwS2u+b NJqAaYD81SveCsutAnSUTlWLcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBiuX8fd b0eB4iNvAKcYX0Mu5gXbMB8GA1UdIwQYMBaAFHfpRtC9Kaohe/Gxxa8LMVNsFHpx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMzUyRi9GNkZGRTI5RTFE QTkxMUUyQThFRjZFQTUwOEIwMkNEMi9kLWxHMEwwcHFpRjc4YkhGcndzeFUyd1Vl bkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2QtbEcwTDBwcWlGNzhiSEZyd3N4VTJ3VWVuRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MzUyRi9GNkZGRTI5RTFEQTkxMUUyQThFRjZFQTUwOEIwMkNEMi9kLWxHMEwwcHFp Rjc4YkhGcndzeFUyd1VlbkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQKx+iIGUmnmip2+oApBeEgV5eZFPDx+7Miey/jV8VsS8a60Va1xMy 0VjmRMJJ8ynn2Cri/zd13nxK5REXTKJWY08JMJu7TxIQxM7JoV/ehJYIY5vcOOeP sS9Ej4ugbU4Sg6iwSVMoWe0Z9OHrnrkYpiGjlkSe+3ru9fb5Z5WXPOaxW/QGj44K rlQYSWmUCFG67aVTyQ4Rui4lnfYjNMPbBf3bBF9zsL03pTXGM+Q/pcZueJ9YGkF1 xt89ATKWNflzY9+MAbtwoxEO/EieiHYqLIMvM7PkZtHVG2zvQvsfoLEQ5PVIKtlN 0HGTZ2r793JxMlzqd66KkFbghck0SAll -----END CERTIFICATE-----Generated at Fri Jul 4 18:41:52 2025 by rpki-client