$ rpki-client -vvf rpki.apnic.net/member_repository/A91B673B/794630CC5DFE11EF8C7E817BC4F9AE02/_J3Ma6xPPZvsntHpBk2bytz5o6k.mft File: _J3Ma6xPPZvsntHpBk2bytz5o6k.mft (raw, json) Hash identifier: NeF4K4eFWbhoJwKEgjQREdI+Qe2a27E3dxpoyvm0sKQ= Subject key identifier: DB:72:13:AF:10:E8:31:36:9A:37:6C:D6:25:0A:24:6A:0D:B3:1D:39 Authority key identifier: FC:9D:CC:6B:AC:4F:3D:9B:EC:9E:D1:E9:06:4D:9B:CA:DC:F9:A3:A9 Certificate issuer: /CN=A91B673B/serialNumber=FC9DCC6BAC4F3D9BEC9ED1E9064D9BCADCF9A3A9 Certificate serial: A5 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_J3Ma6xPPZvsntHpBk2bytz5o6k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B673B/794630CC5DFE11EF8C7E817BC4F9AE02/_J3Ma6xPPZvsntHpBk2bytz5o6k.mft Manifest number: A4 Signing time: Thu 03 Jul 2025 06:23:17 +0000 Manifest this update: Thu 03 Jul 2025 06:23:16 +0000 Manifest next update: Thu 10 Jul 2025 06:23:16 +0000 Files and hashes: 1: _J3Ma6xPPZvsntHpBk2bytz5o6k.crl (hash: d2AomMLL0udVDhjf9QS7iFCfunLn/OsZ7WMvFhQwjwI=) 2: 390757225E1511EFB04EDA1DC4F9AE02.roa (hash: AOHVL3D6FsryT04X8+k30AkGqkWA0TurnsDlj6WqM9k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B673B/794630CC5DFE11EF8C7E817BC4F9AE02/_J3Ma6xPPZvsntHpBk2bytz5o6k.crl rsync://rpki.apnic.net/member_repository/A91B673B/794630CC5DFE11EF8C7E817BC4F9AE02/_J3Ma6xPPZvsntHpBk2bytz5o6k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_J3Ma6xPPZvsntHpBk2bytz5o6k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 165 (0xa5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B673B, serialNumber=FC9DCC6BAC4F3D9BEC9ED1E9064D9BCADCF9A3A9 Validity Not Before: Jul 3 06:23:16 2025 GMT Not After : Jul 10 06:23:16 2025 GMT Subject: CN=686621d4-9ea4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:5d:59:3a:c1:e0:31:1b:d4:c4:5c:cc:12:ba: 51:bc:2e:d2:d9:d6:8a:5b:7f:f0:41:4c:b5:a1:0c: 5c:c9:84:01:a0:42:1b:44:d3:b4:12:d8:05:98:0f: b6:ca:89:f8:30:52:f1:2e:dd:af:7b:87:13:fe:cd: ee:8d:01:2d:93:3c:2e:fc:a7:64:35:a5:77:7c:63: 3a:8a:b1:49:ed:86:4e:6c:3d:80:7f:0c:0e:eb:62: 3f:a6:5e:47:0b:c1:fa:cc:55:fb:97:4c:67:e4:e9: f0:23:dd:0a:54:c8:03:1a:bb:e6:68:9d:5f:37:c5: 41:0c:5e:16:12:c8:95:cc:8e:0e:bd:bf:00:a6:5d: 57:09:ce:6c:b0:58:07:78:55:b3:d0:2c:81:b6:a6: 12:cf:cb:e8:b0:35:a5:2b:79:49:66:bb:7e:47:e8: 5d:10:2e:f2:ec:35:96:65:22:13:42:ab:88:9e:48: e7:5d:03:67:37:43:d1:09:6d:0d:e5:93:f1:b8:d7: 8e:ae:70:ad:40:4e:57:5c:d9:21:14:de:72:42:15: a4:7e:04:42:d2:43:21:d8:1b:05:5a:2e:06:07:2e: e6:e8:37:0b:c7:1d:4d:3f:f5:05:54:cb:1e:1e:6e: 20:8c:61:e7:f0:a5:82:9b:d1:c1:0b:96:30:5f:20: fd:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:72:13:AF:10:E8:31:36:9A:37:6C:D6:25:0A:24:6A:0D:B3:1D:39 X509v3 Authority Key Identifier: keyid:FC:9D:CC:6B:AC:4F:3D:9B:EC:9E:D1:E9:06:4D:9B:CA:DC:F9:A3:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B673B/794630CC5DFE11EF8C7E817BC4F9AE02/_J3Ma6xPPZvsntHpBk2bytz5o6k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_J3Ma6xPPZvsntHpBk2bytz5o6k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B673B/794630CC5DFE11EF8C7E817BC4F9AE02/_J3Ma6xPPZvsntHpBk2bytz5o6k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:91:63:1b:e9:4b:bc:1f:fd:ca:be:f9:02:b1:39:4e:b5:bb: 59:b0:2f:e8:8b:4c:32:1c:01:95:ef:03:99:8c:0b:98:32:f7: 62:c6:e9:b7:e5:e3:f8:12:a2:3f:d0:ba:e5:7d:a9:dd:04:d1: 9f:45:15:1e:a6:9c:a0:6c:6d:9e:ca:66:11:13:b0:93:b2:16: f0:53:2b:e3:3a:4f:0c:69:bf:e4:c9:2a:04:30:af:10:15:70: 2e:98:b5:4c:70:07:ba:3f:57:bf:92:ed:29:6b:c1:62:0e:65: 00:85:ea:fb:c1:60:06:3b:66:96:9c:29:aa:3a:38:2a:ac:3a: b2:cb:3c:85:3f:16:8b:54:6e:5a:3f:cd:5a:bd:c6:e4:64:2e: 16:32:44:1a:1d:5f:81:89:c4:e9:8f:90:42:13:97:32:8b:90: 5c:09:c3:e6:92:ce:d0:a6:2d:77:fd:79:b0:b8:aa:cc:af:1b: d0:76:90:38:4e:c7:d6:06:a6:cd:95:74:be:ef:c8:97:88:c3: 73:69:14:8c:1b:d2:5d:ef:6f:59:8c:74:81:1c:d8:39:cb:19: 05:d7:a3:bf:42:10:cc:d2:4f:2d:28:0f:82:b2:f9:4d:22:e6: c8:c2:e0:0d:6a:95:b5:0d:83:52:ae:30:03:4a:79:5a:ef:ca: 04:bc:a9:59 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjY3M0IxMTAvBgNVBAUTKEZDOURDQzZCQUM0RjNEOUJFQzlFRDFFOTA2NEQ5QkNB RENGOUEzQTkwHhcNMjUwNzAzMDYyMzE2WhcNMjUwNzEwMDYyMzE2WjAYMRYwFAYD VQQDEw02ODY2MjFkNC05ZWE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyF1ZOsHgMRvUxFzMErpRvC7S2daKW3/wQUy1oQxcyYQBoEIbRNO0EtgFmA+2 yon4MFLxLt2ve4cT/s3ujQEtkzwu/KdkNaV3fGM6irFJ7YZObD2AfwwO62I/pl5H C8H6zFX7l0xn5OnwI90KVMgDGrvmaJ1fN8VBDF4WEsiVzI4Ovb8Apl1XCc5ssFgH eFWz0CyBtqYSz8vosDWlK3lJZrt+R+hdEC7y7DWWZSITQquInkjnXQNnN0PRCW0N 5ZPxuNeOrnCtQE5XXNkhFN5yQhWkfgRC0kMh2BsFWi4GBy7m6DcLxx1NP/UFVMse Hm4gjGHn8KWCm9HBC5YwXyD98wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNtyE68Q 6DE2mjds1iUKJGoNsx05MB8GA1UdIwQYMBaAFPydzGusTz2b7J7R6QZNm8rc+aOp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjczQi83OTQ2MzBDQzVE RkUxMUVGOEM3RTgxN0JDNEY5QUUwMi9fSjNNYTZ4UFBadnNudEhwQmsyYnl0ejVv NmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL19KM01hNnhQUFp2c250SHBCazJieXR6NW82ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NjczQi83OTQ2MzBDQzVERkUxMUVGOEM3RTgxN0JDNEY5QUUwMi9fSjNNYTZ4UFBa dnNudEhwQmsyYnl0ejVvNmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCpkWMb6Uu8H/3KvvkCsTlOtbtZsC/oi0wyHAGV7wOZjAuYMvdixum3 5eP4EqI/0LrlfandBNGfRRUeppygbG2eymYRE7CTshbwUyvjOk8Mab/kySoEMK8Q FXAumLVMcAe6P1e/ku0pa8FiDmUAher7wWAGO2aWnCmqOjgqrDqyyzyFPxaLVG5a P81avcbkZC4WMkQaHV+BicTpj5BCE5cyi5BcCcPmks7Qpi13/XmwuKrMrxvQdpA4 TsfWBqbNlXS+78iXiMNzaRSMG9Jd729ZjHSBHNg5yxkF16O/QhDM0k8tKA+CsvlN IubIwuANapW1DYNSrjADSnla78oEvKlZ -----END CERTIFICATE-----Generated at Thu Jul 3 23:11:55 2025 by rpki-client