$ rpki-client -vvf rpki.apnic.net/member_repository/A91B62A9/D77F91421DA111E2BFCB309408B02CD2/sLiO7pE7KqjXtZU3FT782HAKkUA.mft File: sLiO7pE7KqjXtZU3FT782HAKkUA.mft (raw, json) Hash identifier: rMqTE523SsFj8fuDbNq6s4YpsgU1Lkagn+NJZqraEP8= Subject key identifier: 20:E3:A9:C7:8D:89:35:6E:99:B6:D4:B6:B5:AC:19:BE:D4:01:F7:3A Authority key identifier: B0:B8:8E:EE:91:3B:2A:A8:D7:B5:95:37:15:3E:FC:D8:70:0A:91:40 Certificate issuer: /CN=A91B62A9/serialNumber=B0B88EEE913B2AA8D7B59537153EFCD8700A9140 Certificate serial: 3498 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sLiO7pE7KqjXtZU3FT782HAKkUA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B62A9/D77F91421DA111E2BFCB309408B02CD2/sLiO7pE7KqjXtZU3FT782HAKkUA.mft Manifest number: 3496 Signing time: Fri 04 Jul 2025 15:13:53 +0000 Manifest this update: Fri 04 Jul 2025 15:13:53 +0000 Manifest next update: Fri 11 Jul 2025 15:13:53 +0000 Files and hashes: 1: sLiO7pE7KqjXtZU3FT782HAKkUA.crl (hash: eziIN+4bposUMNUuJDYa9xaGCL1TMTx/fso1tRMvsE0=) 2: 8146430A45BE11EF92C29882C4F9AE02.roa (hash: t0r89bYo/YLfBIznDm5VJcksHUIZupXS77KseDePVYw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B62A9/D77F91421DA111E2BFCB309408B02CD2/sLiO7pE7KqjXtZU3FT782HAKkUA.crl rsync://rpki.apnic.net/member_repository/A91B62A9/D77F91421DA111E2BFCB309408B02CD2/sLiO7pE7KqjXtZU3FT782HAKkUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sLiO7pE7KqjXtZU3FT782HAKkUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13464 (0x3498) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B62A9, serialNumber=B0B88EEE913B2AA8D7B59537153EFCD8700A9140 Validity Not Before: Jul 4 15:13:53 2025 GMT Not After : Jul 11 15:13:53 2025 GMT Subject: CN=6867efb1-40df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:a2:f6:1d:ae:32:39:e2:be:8d:17:24:4a:62: 7c:dd:86:01:db:ac:e6:37:d2:a3:b1:87:4f:28:34: 60:ce:6a:5f:4b:5c:5e:71:2c:d5:26:35:c3:15:85: e7:d6:76:9b:f7:21:0f:60:69:07:44:70:03:90:91: 9e:84:8e:67:58:70:ba:89:42:e1:08:f2:dd:c7:d9: 84:ff:a6:6b:9a:41:38:e8:d8:17:5f:9b:e5:fb:c4: a2:6b:0e:89:c1:13:4a:66:7a:f7:2b:e3:76:99:ba: 7e:a2:7b:c9:70:8b:f4:d3:6b:63:c0:fe:f5:a6:ed: 64:72:75:aa:19:00:0f:7a:55:25:af:12:08:d8:eb: f8:37:a7:70:73:7b:52:73:af:ba:fe:42:d0:41:1d: bf:d1:af:bc:c4:af:2f:82:5f:77:8c:42:f2:af:ff: 43:0d:aa:af:e2:73:f3:6e:9d:77:5d:6d:be:45:0c: 98:e3:df:d6:bf:f3:db:af:ae:4e:b7:e1:89:70:44: e2:5a:fa:6d:f5:c0:66:c9:e8:ae:1f:8c:bf:74:79: e2:42:a9:1e:de:23:c3:dd:75:e1:fd:2c:69:d7:a7: 4f:03:ce:f5:a7:dc:73:42:9b:76:39:12:44:b3:76: 06:df:d8:90:33:4b:5b:f2:c6:0f:7d:14:ef:a5:8d: 00:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:E3:A9:C7:8D:89:35:6E:99:B6:D4:B6:B5:AC:19:BE:D4:01:F7:3A X509v3 Authority Key Identifier: keyid:B0:B8:8E:EE:91:3B:2A:A8:D7:B5:95:37:15:3E:FC:D8:70:0A:91:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B62A9/D77F91421DA111E2BFCB309408B02CD2/sLiO7pE7KqjXtZU3FT782HAKkUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sLiO7pE7KqjXtZU3FT782HAKkUA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B62A9/D77F91421DA111E2BFCB309408B02CD2/sLiO7pE7KqjXtZU3FT782HAKkUA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ba:24:70:88:56:eb:e4:90:00:b0:d6:07:c7:c1:32:f0:db:ff: bd:4e:ed:70:09:a0:ce:91:45:ba:02:6e:02:d8:23:bf:ee:09: 01:d5:47:bc:c3:35:a1:2b:71:6d:af:8e:ca:47:bf:03:e4:c1: f3:2e:0c:82:5b:e9:62:7c:a9:71:0f:d2:f4:e5:9d:59:ae:a1: 0d:c3:4c:44:84:54:32:1b:4e:00:c8:b8:e4:07:13:e4:0e:d2: 08:72:7b:d1:a0:07:55:1e:06:4d:af:72:61:68:a6:21:11:33: 84:fb:9b:6b:5e:4a:8d:9c:6f:86:01:8c:f0:4d:45:4e:fb:fd: 04:82:81:ef:38:38:62:b4:46:8b:d4:be:e8:ae:46:14:20:31: 2e:5f:2f:67:15:ed:8d:46:b7:4d:3f:b6:27:22:e1:57:fe:4d: a2:fb:70:5c:a5:66:d1:a4:99:8e:1a:bb:29:c7:a0:32:51:c5: 36:9e:32:63:d1:de:a8:69:dd:2c:6b:8c:5c:b4:46:93:05:a1: 32:53:2a:c6:b7:f9:c4:e3:fe:04:00:18:51:f1:3b:7f:19:17: 28:ee:05:a1:a6:56:5f:a8:4c:8c:7e:3d:f3:b3:64:90:6a:26: 97:95:50:0f:71:be:d1:a2:b7:eb:b8:c5:dc:76:93:02:3a:c1: f1:69:2b:f3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNJgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjYyQTkxMTAvBgNVBAUTKEIwQjg4RUVFOTEzQjJBQThEN0I1OTUzNzE1M0VGQ0Q4 NzAwQTkxNDAwHhcNMjUwNzA0MTUxMzUzWhcNMjUwNzExMTUxMzUzWjAYMRYwFAYD VQQDEw02ODY3ZWZiMS00MGRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7aL2Ha4yOeK+jRckSmJ83YYB26zmN9KjsYdPKDRgzmpfS1xecSzVJjXDFYXn 1nab9yEPYGkHRHADkJGehI5nWHC6iULhCPLdx9mE/6ZrmkE46NgXX5vl+8Siaw6J wRNKZnr3K+N2mbp+onvJcIv002tjwP71pu1kcnWqGQAPelUlrxII2Ov4N6dwc3tS c6+6/kLQQR2/0a+8xK8vgl93jELyr/9DDaqv4nPzbp13XW2+RQyY49/Wv/Pbr65O t+GJcETiWvpt9cBmyeiuH4y/dHniQqke3iPD3XXh/Sxp16dPA871p9xzQpt2ORJE s3YG39iQM0tb8sYPfRTvpY0ArQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCDjqceN iTVumbbUtrWsGb7UAfc6MB8GA1UdIwQYMBaAFLC4ju6ROyqo17WVNxU+/NhwCpFA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjJBOS9ENzdGOTE0MjFE QTExMUUyQkZDQjMwOTQwOEIwMkNEMi9zTGlPN3BFN0txalh0WlUzRlQ3ODJIQUtr VUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NMaU83cEU3S3FqWHRaVTNGVDc4MkhBS2tVQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NjJBOS9ENzdGOTE0MjFEQTExMUUyQkZDQjMwOTQwOEIwMkNEMi9zTGlPN3BFN0tx alh0WlUzRlQ3ODJIQUtrVUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC6JHCIVuvkkACw1gfHwTLw2/+9Tu1wCaDOkUW6Am4C2CO/7gkB1Ue8 wzWhK3Ftr47KR78D5MHzLgyCW+lifKlxD9L05Z1ZrqENw0xEhFQyG04AyLjkBxPk DtIIcnvRoAdVHgZNr3JhaKYhETOE+5trXkqNnG+GAYzwTUVO+/0EgoHvODhitEaL 1L7orkYUIDEuXy9nFe2NRrdNP7YnIuFX/k2i+3BcpWbRpJmOGrspx6AyUcU2njJj 0d6oad0sa4xctEaTBaEyUyrGt/nE4/4EABhR8Tt/GRco7gWhplZfqEyMfj3zs2SQ aiaXlVAPcb7RorfruMXcdpMCOsHxaSvz -----END CERTIFICATE-----Generated at Fri Jul 4 18:04:07 2025 by rpki-client