$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA1BF/84E10A4272CC11EEB7945A4DC4F9AE02/cOo3wZMr00-ztIWaNIMaEOYR0PY.mft File: cOo3wZMr00-ztIWaNIMaEOYR0PY.mft (raw, json) Hash identifier: SgU5dA6LT+8qOUre2ax+zAtHoai6bIrFw5324lFIAGU= Subject key identifier: 33:00:7C:43:E1:E3:D0:4B:2B:FC:D5:2F:D1:B5:55:BE:83:3C:3B:44 Authority key identifier: 70:EA:37:C1:93:2B:D3:4F:B3:B4:85:9A:34:83:1A:10:E6:11:D0:F6 Certificate issuer: /CN=A91BA1BF/serialNumber=70EA37C1932BD34FB3B4859A34831A10E611D0F6 Certificate serial: 0140 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cOo3wZMr00-ztIWaNIMaEOYR0PY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA1BF/84E10A4272CC11EEB7945A4DC4F9AE02/cOo3wZMr00-ztIWaNIMaEOYR0PY.mft Manifest number: 013C Signing time: Thu 03 Jul 2025 04:30:43 +0000 Manifest this update: Thu 03 Jul 2025 04:30:42 +0000 Manifest next update: Thu 10 Jul 2025 04:30:42 +0000 Files and hashes: 1: cOo3wZMr00-ztIWaNIMaEOYR0PY.crl (hash: cAUt4kZX/XsdZdiwKQlXQJo58XWGta1hNwHqfoilFFw=) 2: BC630BAE84FC11EE9887345FC4F9AE02.roa (hash: E3DVtUK4PKLNRTNWPdaED3S506iNVROikAhxbftKIaQ=) 3: 7C58D40872CD11EE81C60650C4F9AE02.roa (hash: hhVy8VlS8PQRYDzu0z2SFqVi4xOaWLt/VFPzg2LCqTM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA1BF/84E10A4272CC11EEB7945A4DC4F9AE02/cOo3wZMr00-ztIWaNIMaEOYR0PY.crl rsync://rpki.apnic.net/member_repository/A91BA1BF/84E10A4272CC11EEB7945A4DC4F9AE02/cOo3wZMr00-ztIWaNIMaEOYR0PY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cOo3wZMr00-ztIWaNIMaEOYR0PY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 320 (0x140) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA1BF, serialNumber=70EA37C1932BD34FB3B4859A34831A10E611D0F6 Validity Not Before: Jul 3 04:30:42 2025 GMT Not After : Jul 10 04:30:42 2025 GMT Subject: CN=68660773-36df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:3c:30:bc:ba:d9:89:61:32:0b:73:b3:1b:f3: e4:3b:df:4e:42:ca:56:bd:80:5f:e3:54:31:39:78: 74:78:67:dc:9e:2d:9d:9f:34:4e:74:0d:c3:d6:e2: ae:df:73:36:2e:6c:51:1d:2b:1a:a7:b7:7a:53:c8: a3:cb:f9:eb:27:07:4f:a0:ef:30:71:ba:1d:1b:35: 9f:38:bf:66:d0:ad:c4:5e:43:f9:64:b4:56:27:e1: 79:c8:cc:e9:9f:af:dc:88:25:51:c5:13:d2:f8:90: ab:e2:e7:80:cd:13:d3:7f:08:78:fa:3c:ac:66:90: 59:a8:43:55:8d:52:4a:53:8d:36:94:41:6d:03:7c: 60:48:65:51:86:0a:db:5a:65:6d:4a:9c:b8:80:f4: 1b:98:36:7d:10:ba:ed:62:dd:0b:53:54:2f:dc:af: 7c:86:1e:5f:cd:ab:1b:71:73:15:cb:76:43:d9:ba: 22:5c:b2:9b:a3:bc:3d:40:d6:8a:0d:b9:a8:6e:49: dc:bc:27:31:f7:6c:cc:bd:7c:ea:43:95:75:8d:bd: 21:85:d1:f1:54:ad:15:78:d7:7d:55:3a:71:0d:8f: 33:00:81:2b:49:53:86:ab:6c:4e:bd:be:7a:92:c7: e2:06:19:ab:04:85:3a:6f:de:a9:e6:cc:f5:94:36: 68:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:00:7C:43:E1:E3:D0:4B:2B:FC:D5:2F:D1:B5:55:BE:83:3C:3B:44 X509v3 Authority Key Identifier: keyid:70:EA:37:C1:93:2B:D3:4F:B3:B4:85:9A:34:83:1A:10:E6:11:D0:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA1BF/84E10A4272CC11EEB7945A4DC4F9AE02/cOo3wZMr00-ztIWaNIMaEOYR0PY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cOo3wZMr00-ztIWaNIMaEOYR0PY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA1BF/84E10A4272CC11EEB7945A4DC4F9AE02/cOo3wZMr00-ztIWaNIMaEOYR0PY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:39:89:57:17:df:27:84:f3:23:7b:86:73:56:cf:30:b4:6b: 20:0c:a5:e0:57:08:55:af:ec:d8:e8:17:9f:c0:ac:dd:9c:cc: d6:26:f0:25:23:58:37:fe:c4:55:f3:d6:64:1b:b9:40:11:47: 94:1d:70:5a:8e:8b:f5:5b:6c:95:4d:22:1a:50:7a:fc:21:a3: a2:17:52:6f:aa:5a:0e:c0:94:f1:96:e4:27:8f:bb:00:24:03: 92:83:1c:74:c3:02:51:53:01:9a:f9:9a:16:ed:10:57:6d:a4: 56:a6:e0:6d:f1:e7:9a:58:c6:80:e1:33:0e:21:90:a0:fd:62: 9b:8a:ae:0b:19:6b:78:b5:a3:f4:e5:ef:7e:ef:c7:8b:a5:b5: e2:04:37:1c:1d:75:c4:fb:e9:5a:9e:02:de:67:c8:37:02:60: b8:e0:0d:a2:ee:eb:c2:23:13:15:cc:8c:be:98:02:7f:cc:ea: 07:08:97:81:5c:68:eb:ec:be:db:83:97:da:0f:ac:da:ef:54: 3e:75:26:44:6e:4c:b5:99:9a:0c:1c:46:b9:1e:13:7a:91:75: f0:b1:81:e8:4c:93:7c:7b:84:f6:de:54:05:b2:2f:3c:c7:88: e4:94:06:23:e2:5a:0b:18:89:d3:a0:a6:34:51:01:e1:17:20: 7c:ee:03:59 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkExQkYxMTAvBgNVBAUTKDcwRUEzN0MxOTMyQkQzNEZCM0I0ODU5QTM0ODMxQTEw RTYxMUQwRjYwHhcNMjUwNzAzMDQzMDQyWhcNMjUwNzEwMDQzMDQyWjAYMRYwFAYD VQQDEw02ODY2MDc3My0zNmRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5TwwvLrZiWEyC3OzG/PkO99OQspWvYBf41QxOXh0eGfcni2dnzROdA3D1uKu 33M2LmxRHSsap7d6U8ijy/nrJwdPoO8wcbodGzWfOL9m0K3EXkP5ZLRWJ+F5yMzp n6/ciCVRxRPS+JCr4ueAzRPTfwh4+jysZpBZqENVjVJKU402lEFtA3xgSGVRhgrb WmVtSpy4gPQbmDZ9ELrtYt0LU1Qv3K98hh5fzasbcXMVy3ZD2boiXLKbo7w9QNaK DbmobkncvCcx92zMvXzqQ5V1jb0hhdHxVK0VeNd9VTpxDY8zAIErSVOGq2xOvb56 ksfiBhmrBIU6b96p5sz1lDZoiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDMAfEPh 49BLK/zVL9G1Vb6DPDtEMB8GA1UdIwQYMBaAFHDqN8GTK9NPs7SFmjSDGhDmEdD2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTFCRi84NEUxMEE0Mjcy Q0MxMUVFQjc5NDVBNERDNEY5QUUwMi9jT28zd1pNcjAwLXp0SVdhTklNYUVPWVIw UFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NPbzN3Wk1yMDAtenRJV2FOSU1hRU9ZUjBQWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QTFCRi84NEUxMEE0MjcyQ0MxMUVFQjc5NDVBNERDNEY5QUUwMi9jT28zd1pNcjAw LXp0SVdhTklNYUVPWVIwUFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBiOYlXF98nhPMje4ZzVs8wtGsgDKXgVwhVr+zY6BefwKzdnMzWJvAl I1g3/sRV89ZkG7lAEUeUHXBajov1W2yVTSIaUHr8IaOiF1JvqloOwJTxluQnj7sA JAOSgxx0wwJRUwGa+ZoW7RBXbaRWpuBt8eeaWMaA4TMOIZCg/WKbiq4LGWt4taP0 5e9+78eLpbXiBDccHXXE++langLeZ8g3AmC44A2i7uvCIxMVzIy+mAJ/zOoHCJeB XGjr7L7bg5faD6za71Q+dSZEbky1mZoMHEa5HhN6kXXwsYHoTJN8e4T23lQFsi88 x4jklAYj4loLGInToKY0UQHhFyB87gNZ -----END CERTIFICATE-----Generated at Thu Jul 3 06:28:42 2025 by rpki-client