$ rpki-client -vvf rpki.apnic.net/member_repository/A91B88CA/5696E746346511EFAF6DEB4EC4F9AE02/9iXmzAOQJv9byda9xC2NHBir8zs.mft File: 9iXmzAOQJv9byda9xC2NHBir8zs.mft (raw, json) Hash identifier: jhA7W4EEV4c5A47JiplulGGWdEuy4r1bKUXQ8FxUogE= Subject key identifier: 21:D4:D1:4A:A7:D5:00:36:5E:E4:1D:1C:C7:A9:3F:C5:D7:36:A7:C7 Authority key identifier: F6:25:E6:CC:03:90:26:FF:5B:C9:D6:BD:C4:2D:8D:1C:18:AB:F3:3B Certificate issuer: /CN=A91B88CA/serialNumber=F625E6CC039026FF5BC9D6BDC42D8D1C18ABF33B Certificate serial: 0104 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9iXmzAOQJv9byda9xC2NHBir8zs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B88CA/5696E746346511EFAF6DEB4EC4F9AE02/9iXmzAOQJv9byda9xC2NHBir8zs.mft Manifest number: E4 Signing time: Thu 03 Jul 2025 06:02:06 +0000 Manifest this update: Thu 03 Jul 2025 06:02:05 +0000 Manifest next update: Thu 10 Jul 2025 06:02:05 +0000 Files and hashes: 1: 9iXmzAOQJv9byda9xC2NHBir8zs.crl (hash: zxeHwPrHInz8BxWnyWicEyBor1sWCho4iJvSr0eMGZs=) 2: 4857445643A911F0AD37044DC4F9AE02.roa (hash: WkSg+sBSiJcoCE4RbowJKmOS2e9RO49Iq4fHf9Kfe8E=) 3: 5149E2D2320411F0A7F47652C4F9AE02.roa (hash: HH3GlG7L/oizFHurekpyH+8XRzajvV/dWmWXqsnoI54=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B88CA/5696E746346511EFAF6DEB4EC4F9AE02/9iXmzAOQJv9byda9xC2NHBir8zs.crl rsync://rpki.apnic.net/member_repository/A91B88CA/5696E746346511EFAF6DEB4EC4F9AE02/9iXmzAOQJv9byda9xC2NHBir8zs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9iXmzAOQJv9byda9xC2NHBir8zs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 260 (0x104) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B88CA, serialNumber=F625E6CC039026FF5BC9D6BDC42D8D1C18ABF33B Validity Not Before: Jul 3 06:02:05 2025 GMT Not After : Jul 10 06:02:05 2025 GMT Subject: CN=68661cdd-f437 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:1b:56:21:6d:6a:c7:72:dc:2f:6d:ff:a7:07: 08:f8:d0:4a:e0:77:0b:3f:fe:5f:7b:20:00:19:b3: 29:81:3a:4b:39:2e:06:4a:16:d5:97:b5:68:45:2b: db:ba:96:dd:89:4e:ce:6f:13:cc:38:98:30:f1:41: db:df:51:ad:49:b9:4d:56:2e:58:1c:9a:f6:cc:3c: d5:45:dc:01:d5:cc:b4:36:a8:f5:0f:0c:90:d3:43: 7e:b8:e9:ce:0c:b5:9b:2e:1a:a3:3e:95:f8:ad:a9: 02:b9:5b:e8:67:08:5f:bf:7f:3a:6c:27:da:df:b7: 7a:de:dc:5f:08:16:6d:4a:b0:9d:2b:35:91:66:2c: 9b:1d:b0:6b:7c:6e:f9:18:ce:86:04:1d:89:0f:97: e9:85:4d:7d:99:53:29:42:fd:33:98:3c:8a:88:6b: a0:c7:43:ba:44:8d:af:db:29:17:65:d9:a5:0e:ac: 62:09:a7:3a:fc:dc:78:99:3c:33:f7:0c:dc:4e:85: 16:b2:9d:7d:ba:63:63:7d:f1:85:42:f1:3a:e7:ee: 50:29:d0:34:62:0c:fe:73:88:6d:fd:fe:8c:55:97: 36:01:dd:49:cc:ef:d2:ce:6c:5d:91:d6:7e:9b:aa: dd:63:e2:58:28:d1:08:16:b1:f2:83:0c:97:19:bd: a0:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:D4:D1:4A:A7:D5:00:36:5E:E4:1D:1C:C7:A9:3F:C5:D7:36:A7:C7 X509v3 Authority Key Identifier: keyid:F6:25:E6:CC:03:90:26:FF:5B:C9:D6:BD:C4:2D:8D:1C:18:AB:F3:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B88CA/5696E746346511EFAF6DEB4EC4F9AE02/9iXmzAOQJv9byda9xC2NHBir8zs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9iXmzAOQJv9byda9xC2NHBir8zs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B88CA/5696E746346511EFAF6DEB4EC4F9AE02/9iXmzAOQJv9byda9xC2NHBir8zs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c2:8d:8b:90:e3:f6:7d:00:9e:45:bf:88:f5:f7:fc:96:c5:1a: ac:c9:e8:b8:7e:24:19:ff:5e:b2:c7:f9:5d:61:55:4f:93:fc: 1c:89:4e:7b:16:78:85:cf:07:4b:70:98:de:c1:83:3f:86:09: 40:a3:cc:ad:dc:55:18:0f:98:20:a7:a7:8a:a0:a2:0d:5b:f3: 1a:66:c3:13:eb:2e:3d:2c:c2:f2:bc:7a:4f:7a:8e:40:92:8e: b1:92:c9:06:b6:16:bf:09:13:8c:6b:70:3d:ca:21:b4:52:f0: c1:ce:ec:53:ee:42:5b:b7:a0:72:87:6a:ee:91:63:04:57:e7: fd:e7:78:b4:32:7c:6f:a3:ea:0c:24:03:fe:bc:02:e1:33:7a: b9:ea:4e:15:ca:c3:e4:f7:34:7f:29:41:8c:02:d7:b7:09:79: 5d:af:b7:2a:9b:0b:d1:af:f3:f5:c7:3e:d6:47:4e:1a:19:7c: 22:b9:78:ed:40:bc:8c:a4:a0:87:d4:84:8f:d3:34:7a:49:6f: 6e:40:68:38:d8:f6:2a:31:92:ac:fa:79:89:09:0e:00:16:84: ed:52:c4:72:cc:c0:e8:9d:db:7d:f9:ac:34:39:07:c9:24:d1: 19:01:6d:f8:75:a0:66:68:98:2c:f2:b1:51:6e:e0:32:91:88: f9:2c:b9:10 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjg4Q0ExMTAvBgNVBAUTKEY2MjVFNkNDMDM5MDI2RkY1QkM5RDZCREM0MkQ4RDFD MThBQkYzM0IwHhcNMjUwNzAzMDYwMjA1WhcNMjUwNzEwMDYwMjA1WjAYMRYwFAYD VQQDEw02ODY2MWNkZC1mNDM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtRtWIW1qx3LcL23/pwcI+NBK4HcLP/5feyAAGbMpgTpLOS4GShbVl7VoRSvb upbdiU7ObxPMOJgw8UHb31GtSblNVi5YHJr2zDzVRdwB1cy0Nqj1DwyQ00N+uOnO DLWbLhqjPpX4rakCuVvoZwhfv386bCfa37d63txfCBZtSrCdKzWRZiybHbBrfG75 GM6GBB2JD5fphU19mVMpQv0zmDyKiGugx0O6RI2v2ykXZdmlDqxiCac6/Nx4mTwz 9wzcToUWsp19umNjffGFQvE65+5QKdA0Ygz+c4ht/f6MVZc2Ad1JzO/SzmxdkdZ+ m6rdY+JYKNEIFrHygwyXGb2glQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCHU0Uqn 1QA2XuQdHMepP8XXNqfHMB8GA1UdIwQYMBaAFPYl5swDkCb/W8nWvcQtjRwYq/M7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCODhDQS81Njk2RTc0NjM0 NjUxMUVGQUY2REVCNEVDNEY5QUUwMi85aVhtekFPUUp2OWJ5ZGE5eEMyTkhCaXI4 enMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlpWG16QU9RSnY5YnlkYTl4QzJOSEJpcjh6cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC ODhDQS81Njk2RTc0NjM0NjUxMUVGQUY2REVCNEVDNEY5QUUwMi85aVhtekFPUUp2 OWJ5ZGE5eEMyTkhCaXI4enMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDCjYuQ4/Z9AJ5Fv4j19/yWxRqsyei4fiQZ/16yx/ldYVVPk/wciU57 FniFzwdLcJjewYM/hglAo8yt3FUYD5ggp6eKoKINW/MaZsMT6y49LMLyvHpPeo5A ko6xkskGtha/CROMa3A9yiG0UvDBzuxT7kJbt6Byh2rukWMEV+f953i0Mnxvo+oM JAP+vALhM3q56k4VysPk9zR/KUGMAte3CXldr7cqmwvRr/P1xz7WR04aGXwiuXjt QLyMpKCH1ISP0zR6SW9uQGg42PYqMZKs+nmJCQ4AFoTtUsRyzMDondt9+aw0OQfJ JNEZAW34daBmaJgs8rFRbuAykYj5LLkQ -----END CERTIFICATE-----Generated at Thu Jul 3 14:04:06 2025 by rpki-client