$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC269/B1613118CFE511EC94BBC75AC4F9AE02/Im9yidTjf-ziJgxk07y6esAxWnU.mft File: Im9yidTjf-ziJgxk07y6esAxWnU.mft (raw, json) Hash identifier: ZRMlZLDi5fFQ/WoHPBbF/QQ6T2+BB/zwA5+yZ5XnIoY= Subject key identifier: 07:A7:17:16:BD:9B:A7:C6:9A:DE:AF:BD:2D:07:86:82:23:1F:4A:61 Authority key identifier: 22:6F:72:89:D4:E3:7F:EC:E2:26:0C:64:D3:BC:BA:7A:C0:31:5A:75 Certificate issuer: /CN=A91BC269/serialNumber=226F7289D4E37FECE2260C64D3BCBA7AC0315A75 Certificate serial: 0338 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Im9yidTjf-ziJgxk07y6esAxWnU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BC269/B1613118CFE511EC94BBC75AC4F9AE02/Im9yidTjf-ziJgxk07y6esAxWnU.mft Manifest number: 0331 Signing time: Thu 03 Jul 2025 01:29:10 +0000 Manifest this update: Thu 03 Jul 2025 01:29:09 +0000 Manifest next update: Thu 10 Jul 2025 01:29:09 +0000 Files and hashes: 1: Im9yidTjf-ziJgxk07y6esAxWnU.crl (hash: ZFY4Oezp0fsa3OMhn+V70+Q05/Ao4PAnwMjmadMF7Ms=) 2: 16DDC0F4CFE811ECA193B36BC4F9AE02.roa (hash: d8hKEngO/LeUHQoe5AIEcocjfTWcuilabUG2KLlGFLg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BC269/B1613118CFE511EC94BBC75AC4F9AE02/Im9yidTjf-ziJgxk07y6esAxWnU.crl rsync://rpki.apnic.net/member_repository/A91BC269/B1613118CFE511EC94BBC75AC4F9AE02/Im9yidTjf-ziJgxk07y6esAxWnU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Im9yidTjf-ziJgxk07y6esAxWnU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 01:29:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 824 (0x338) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BC269, serialNumber=226F7289D4E37FECE2260C64D3BCBA7AC0315A75 Validity Not Before: Jul 3 01:29:09 2025 GMT Not After : Jul 10 01:29:09 2025 GMT Subject: CN=6865dce5-2b83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:d9:f9:9b:43:c0:bd:0d:37:4f:ca:be:d7:7e: 3b:6f:cb:81:f0:8b:40:42:6f:f6:58:01:b6:2e:1c: d0:86:11:16:be:a8:9e:6f:60:7d:a0:0f:68:14:19: e1:59:38:31:c1:45:9d:f6:d2:e0:e4:05:95:e3:41: 9d:94:dc:5c:f5:10:cc:5f:a5:5c:68:74:a5:c6:11: 28:91:b3:12:9b:6f:51:74:bf:34:4d:7b:83:56:30: e8:08:40:9d:82:90:ad:3c:bc:39:1b:65:ed:07:54: ce:3d:e1:82:76:1d:69:0d:24:28:90:80:6a:2c:4c: a8:dd:dc:34:d7:86:18:e2:5c:9b:61:08:7b:4a:be: f1:55:37:af:74:37:33:c0:ef:c7:f9:c7:02:d9:19: 2f:d9:b6:37:c7:97:8a:b5:66:76:57:e5:7b:90:7b: e3:84:62:77:8f:a6:4a:b6:d2:19:23:9f:44:b5:56: de:4d:a9:04:52:80:fc:b2:34:7e:3a:7f:98:bf:53: 23:66:b5:bd:ea:cd:34:ee:ff:90:99:f0:cb:8a:1c: e2:78:d6:cf:aa:b4:49:5f:d8:ea:f6:fb:3a:fe:0d: f3:89:51:df:ea:21:5f:ad:a0:60:d6:27:1a:6e:94: 41:f1:15:88:b3:53:06:ef:c7:08:f8:7b:f2:a4:4b: fe:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:A7:17:16:BD:9B:A7:C6:9A:DE:AF:BD:2D:07:86:82:23:1F:4A:61 X509v3 Authority Key Identifier: keyid:22:6F:72:89:D4:E3:7F:EC:E2:26:0C:64:D3:BC:BA:7A:C0:31:5A:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BC269/B1613118CFE511EC94BBC75AC4F9AE02/Im9yidTjf-ziJgxk07y6esAxWnU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Im9yidTjf-ziJgxk07y6esAxWnU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC269/B1613118CFE511EC94BBC75AC4F9AE02/Im9yidTjf-ziJgxk07y6esAxWnU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:e5:13:00:74:41:c4:b6:b9:b8:4f:f7:99:b8:b6:84:c1:8e: 0a:63:48:eb:64:cb:9b:9f:54:8d:ca:d7:5a:16:06:69:63:ec: b2:43:f3:54:db:97:91:e5:25:2e:d0:b0:9c:2f:d0:89:b4:11: e6:0e:27:04:ca:db:c9:4e:fa:14:cb:b9:fe:b5:f2:69:ee:11: d8:f8:27:4f:b8:13:f3:f9:3b:00:cb:92:59:51:a9:e8:59:24: f6:bf:93:83:8d:b9:20:61:c7:7c:de:9e:ef:7a:a4:b9:d1:d7: 14:c3:41:66:af:d9:bb:8e:8d:8d:23:ba:1d:20:e4:27:d5:dc: 7b:9a:1a:05:d5:ea:48:34:14:d5:be:46:bf:dc:45:cc:e6:b3: d8:b9:e6:16:8d:11:56:3e:2a:34:1f:82:69:2e:de:f6:00:42: b5:ef:62:61:61:66:5d:7c:e1:4f:fa:ea:58:e5:e7:c9:39:39: 66:6c:69:93:f1:18:6b:4b:62:9b:26:0a:d4:5d:b3:4e:4b:54: 18:b4:d5:2c:f9:96:e4:fa:3b:1e:0d:8a:09:2b:e4:22:2e:2d: ba:0d:d2:6f:59:cf:b5:fb:f1:39:8b:9a:55:53:6a:cb:27:59: be:58:d6:e8:d3:41:63:86:e2:0d:44:c7:da:f0:f4:99:74:76: ee:b2:c8:09 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAzgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkMyNjkxMTAvBgNVBAUTKDIyNkY3Mjg5RDRFMzdGRUNFMjI2MEM2NEQzQkNCQTdB QzAzMTVBNzUwHhcNMjUwNzAzMDEyOTA5WhcNMjUwNzEwMDEyOTA5WjAYMRYwFAYD VQQDEw02ODY1ZGNlNS0yYjgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAttn5m0PAvQ03T8q+1347b8uB8ItAQm/2WAG2LhzQhhEWvqieb2B9oA9oFBnh WTgxwUWd9tLg5AWV40GdlNxc9RDMX6VcaHSlxhEokbMSm29RdL80TXuDVjDoCECd gpCtPLw5G2XtB1TOPeGCdh1pDSQokIBqLEyo3dw014YY4lybYQh7Sr7xVTevdDcz wO/H+ccC2Rkv2bY3x5eKtWZ2V+V7kHvjhGJ3j6ZKttIZI59EtVbeTakEUoD8sjR+ On+Yv1MjZrW96s007v+QmfDLihzieNbPqrRJX9jq9vs6/g3ziVHf6iFfraBg1ica bpRB8RWIs1MG78cI+HvypEv+IQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAenFxa9 m6fGmt6vvS0HhoIjH0phMB8GA1UdIwQYMBaAFCJvconU43/s4iYMZNO8unrAMVp1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzI2OS9CMTYxMzExOENG RTUxMUVDOTRCQkM3NUFDNEY5QUUwMi9JbTl5aWRUamYtemlKZ3hrMDd5NmVzQXhX blUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0ltOXlpZFRqZi16aUpneGswN3k2ZXNBeFduVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QzI2OS9CMTYxMzExOENGRTUxMUVDOTRCQkM3NUFDNEY5QUUwMi9JbTl5aWRUamYt emlKZ3hrMDd5NmVzQXhXblUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC35RMAdEHEtrm4T/eZuLaEwY4KY0jrZMubn1SNytdaFgZpY+yyQ/NU 25eR5SUu0LCcL9CJtBHmDicEytvJTvoUy7n+tfJp7hHY+CdPuBPz+TsAy5JZUano WST2v5ODjbkgYcd83p7veqS50dcUw0Fmr9m7jo2NI7odIOQn1dx7mhoF1epINBTV vka/3EXM5rPYueYWjRFWPio0H4JpLt72AEK172JhYWZdfOFP+upY5efJOTlmbGmT 8RhrS2KbJgrUXbNOS1QYtNUs+Zbk+jseDYoJK+QiLi26DdJvWc+1+/E5i5pVU2rL J1m+WNbo00FjhuINRMfa8PSZdHbussgJ -----END CERTIFICATE-----Generated at Thu Jul 3 23:10:41 2025 by rpki-client