$ rpki-client -vvf rpki.apnic.net/member_repository/A91BCC23/925C80CE81E111EE8CF66B0AC4F9AE02/88hJQLK99AJViHBvWcHm7D0hR_A.mft File: 88hJQLK99AJViHBvWcHm7D0hR_A.mft (raw, json) Hash identifier: JCWyqGQcjatjY9AwV53vH7s2fGjTC60WbNZABktvH44= Subject key identifier: C5:56:07:F6:04:B5:DC:DF:A9:DF:C3:99:7B:9B:2A:11:EA:46:FF:BE Authority key identifier: F3:C8:49:40:B2:BD:F4:02:55:88:70:6F:59:C1:E6:EC:3D:21:47:F0 Certificate issuer: /CN=A91BCC23/serialNumber=F3C84940B2BDF4025588706F59C1E6EC3D2147F0 Certificate serial: 0132 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/88hJQLK99AJViHBvWcHm7D0hR_A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BCC23/925C80CE81E111EE8CF66B0AC4F9AE02/88hJQLK99AJViHBvWcHm7D0hR_A.mft Manifest number: 012F Signing time: Sun 29 Jun 2025 03:37:14 +0000 Manifest this update: Sun 29 Jun 2025 03:37:13 +0000 Manifest next update: Sun 06 Jul 2025 03:37:13 +0000 Files and hashes: 1: 88hJQLK99AJViHBvWcHm7D0hR_A.crl (hash: 922JrUdlYVlpyFR/FF9JTSDEV4tYOa3DcnBAaxhggtM=) 2: D36C048A81E211EEAF423C87C4F9AE02.roa (hash: AgEcJkKDpEPBaGjrS9V0jt2iST6E+qzc3K1SEhivhc4=) 3: FC3C8A6A81E211EE963BAB87C4F9AE02.roa (hash: 548P4XWsPS3JTWuhyip3nqsrffc51BRt/khZw2JCljI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BCC23/925C80CE81E111EE8CF66B0AC4F9AE02/88hJQLK99AJViHBvWcHm7D0hR_A.crl rsync://rpki.apnic.net/member_repository/A91BCC23/925C80CE81E111EE8CF66B0AC4F9AE02/88hJQLK99AJViHBvWcHm7D0hR_A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/88hJQLK99AJViHBvWcHm7D0hR_A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 03:37:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 306 (0x132) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BCC23, serialNumber=F3C84940B2BDF4025588706F59C1E6EC3D2147F0 Validity Not Before: Jun 29 03:37:13 2025 GMT Not After : Jul 6 03:37:13 2025 GMT Subject: CN=6860b4ea-e055 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:f5:83:59:a7:99:71:ee:d4:1f:70:77:a0:b0: cd:c6:de:0a:87:d0:a1:13:33:59:b6:c9:23:48:e7: b8:e1:5b:81:e6:1e:7f:0b:d2:f3:4c:c7:b1:18:ed: 7c:12:92:71:36:2f:c7:98:e8:bc:ed:18:5a:3e:5e: fc:87:1d:e4:2b:93:9a:8d:7b:d8:ad:78:54:2d:4a: 9e:0e:a3:d6:d9:48:37:d8:54:5f:62:07:6f:2e:3e: 0d:7d:df:61:28:9f:bc:66:98:a0:f3:eb:fc:2a:18: 79:04:a1:eb:0a:bb:47:8e:f2:87:16:64:ca:37:24: 46:a6:9d:5d:5e:a3:38:62:72:81:8c:6f:63:4c:83: e6:f3:99:51:22:fd:bc:88:6b:6e:ed:52:79:da:b8: 3a:c1:9b:e8:c3:7c:d4:59:87:3b:1d:37:13:74:88: 52:b6:da:af:cc:71:3c:f1:14:cf:dd:07:0b:6b:70: 97:36:cd:60:a7:00:c8:3c:28:79:1a:df:b8:d5:b7: bb:e8:f8:01:e5:b3:8c:a6:48:55:59:18:7f:85:0e: 5f:be:3f:aa:0e:1d:2f:b0:7d:51:b1:d3:ec:05:0c: c7:7f:b7:8e:23:db:fb:43:9f:24:0c:f2:87:2f:20: e1:f3:7d:e8:c4:5b:1e:7d:a1:d0:ca:93:de:8b:df: 17:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:56:07:F6:04:B5:DC:DF:A9:DF:C3:99:7B:9B:2A:11:EA:46:FF:BE X509v3 Authority Key Identifier: keyid:F3:C8:49:40:B2:BD:F4:02:55:88:70:6F:59:C1:E6:EC:3D:21:47:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BCC23/925C80CE81E111EE8CF66B0AC4F9AE02/88hJQLK99AJViHBvWcHm7D0hR_A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/88hJQLK99AJViHBvWcHm7D0hR_A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BCC23/925C80CE81E111EE8CF66B0AC4F9AE02/88hJQLK99AJViHBvWcHm7D0hR_A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:31:97:64:e6:61:63:57:b2:8c:2a:4a:5a:7a:c7:12:99:2c: 37:db:2a:20:df:e7:78:10:70:cd:44:e1:88:79:f7:99:39:c4: 2c:dc:a5:08:fd:76:36:cb:a2:b3:a6:3c:81:53:47:35:1b:be: 57:2d:06:03:b2:3f:b2:76:ab:12:04:51:2d:fc:7d:74:c6:21: f3:f0:0f:04:27:64:ec:cf:f1:e3:e4:95:78:e7:61:21:1f:9b: 10:43:f2:0a:60:aa:ed:0d:02:f8:4c:af:24:46:e5:01:e9:14: 1d:6e:d2:81:e9:e0:fb:3e:b7:60:a3:8c:d0:52:04:84:d7:36: ce:8d:14:f1:38:e7:72:86:5b:78:a0:97:93:b6:9e:1d:db:ee: e2:97:8a:97:5a:d3:51:97:24:56:58:7d:cb:68:2b:cb:66:6e: 00:10:88:c8:c5:a6:c9:a0:cd:b7:4f:bc:b7:21:01:8a:ed:22: 96:32:18:b5:0e:1b:2c:ed:10:7a:68:5c:25:91:55:1f:35:29: 90:a0:1d:ca:d7:62:7b:07:dc:c9:d2:e3:72:56:47:63:39:64: 16:a2:9f:fd:16:32:5c:dd:28:5a:4e:b0:03:1d:54:0d:45:79: 4d:45:eb:3a:29:eb:86:03:ac:01:ae:ee:d4:5d:e3:67:89:90: 4c:e7:88:29 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkNDMjMxMTAvBgNVBAUTKEYzQzg0OTQwQjJCREY0MDI1NTg4NzA2RjU5QzFFNkVD M0QyMTQ3RjAwHhcNMjUwNjI5MDMzNzEzWhcNMjUwNzA2MDMzNzEzWjAYMRYwFAYD VQQDEw02ODYwYjRlYS1lMDU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1vWDWaeZce7UH3B3oLDNxt4Kh9ChEzNZtskjSOe44VuB5h5/C9LzTMexGO18 EpJxNi/HmOi87RhaPl78hx3kK5OajXvYrXhULUqeDqPW2Ug32FRfYgdvLj4Nfd9h KJ+8Zpig8+v8Khh5BKHrCrtHjvKHFmTKNyRGpp1dXqM4YnKBjG9jTIPm85lRIv28 iGtu7VJ52rg6wZvow3zUWYc7HTcTdIhSttqvzHE88RTP3QcLa3CXNs1gpwDIPCh5 Gt+41be76PgB5bOMpkhVWRh/hQ5fvj+qDh0vsH1RsdPsBQzHf7eOI9v7Q58kDPKH LyDh833oxFsefaHQypPei98XxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMVWB/YE tdzfqd/DmXubKhHqRv++MB8GA1UdIwQYMBaAFPPISUCyvfQCVYhwb1nB5uw9IUfw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQ0MyMy85MjVDODBDRTgx RTExMUVFOENGNjZCMEFDNEY5QUUwMi84OGhKUUxLOTlBSlZpSEJ2V2NIbTdEMGhS X0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzg4aEpRTEs5OUFKVmlIQnZXY0htN0QwaFJfQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Q0MyMy85MjVDODBDRTgxRTExMUVFOENGNjZCMEFDNEY5QUUwMi84OGhKUUxLOTlB SlZpSEJ2V2NIbTdEMGhSX0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB0MZdk5mFjV7KMKkpaescSmSw32yog3+d4EHDNROGIefeZOcQs3KUI /XY2y6KzpjyBU0c1G75XLQYDsj+ydqsSBFEt/H10xiHz8A8EJ2Tsz/Hj5JV452Eh H5sQQ/IKYKrtDQL4TK8kRuUB6RQdbtKB6eD7Prdgo4zQUgSE1zbOjRTxOOdyhlt4 oJeTtp4d2+7il4qXWtNRlyRWWH3LaCvLZm4AEIjIxabJoM23T7y3IQGK7SKWMhi1 Dhss7RB6aFwlkVUfNSmQoB3K12J7B9zJ0uNyVkdjOWQWop/9FjJc3ShaTrADHVQN RXlNRes6KeuGA6wBru7UXeNniZBM54gp -----END CERTIFICATE-----Generated at Sun Jun 29 20:28:02 2025 by rpki-client