$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.mft File: d0hrYQ0zOuvajyVcUBQRsB8Y_0k.mft (raw, json) Hash identifier: ObfCV18RS/l8OjQHv7aKfoVMzcHx7lqeVFrDJ3kwsPY= Subject key identifier: 86:E0:78:2D:80:EA:0A:AF:92:3D:5E:F4:15:1D:77:CD:C1:16:0E:D4 Authority key identifier: 77:48:6B:61:0D:33:3A:EB:DA:8F:25:5C:50:14:11:B0:1F:18:FF:49 Certificate issuer: /CN=A91C2CC7/serialNumber=77486B610D333AEBDA8F255C501411B01F18FF49 Certificate serial: 0FD4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.mft Manifest number: 0F61 Signing time: Wed 02 Jul 2025 17:50:25 +0000 Manifest this update: Wed 02 Jul 2025 17:50:24 +0000 Manifest next update: Wed 09 Jul 2025 17:50:24 +0000 Files and hashes: 1: d0hrYQ0zOuvajyVcUBQRsB8Y_0k.crl (hash: X779kWXpSR+lUXg/CJc+tDichL1dOO6Lwu1y2mROO6s=) 2: B35E5B46334111EF9770A542C4F9AE02.roa (hash: UPuDmnzuzvNsFm0+p8zRrUqRDIqQAuxYTPJw8nD+iQM=) 3: 931E0F7681C911EFA5B1D80BC4F9AE02.roa (hash: HvCeCNMd3cDYBcsUNmnAZgRE0yTF+p8FgFeiy4l06fs=) 4: B1F39E9C334111EF9770A542C4F9AE02.roa (hash: gH07d0tdWpzxCvfeG7l6D2uFfEY6tpwzzgDCtY/pYyE=) 5: 6AB0F2A2892611EEB5E27D69C4F9AE02.roa (hash: nicSmvXStk5YSg3xIJcJaFbSV0F719Jx8dhmknr9Hs0=) 6: B2A71CE2334111EF9770A542C4F9AE02.roa (hash: pfS5+RaNkCZt3S0EiNJ59HEgMt0xojAMbKbcs9rYZR4=) 7: B431D7F0334111EF9770A542C4F9AE02.roa (hash: xTikHJ/TFdvmPXV1CWU8Y1J+6HX1EdWOaYbA1B5GtDI=) 8: 7BD12E3A480811EE8C512B0DC4F9AE02.roa (hash: PTHJR1ja6PHKnchzMzvjSZlwBo+yBYxt/AqG4ozJw5A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.crl rsync://rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 17:50:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4052 (0xfd4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C2CC7, serialNumber=77486B610D333AEBDA8F255C501411B01F18FF49 Validity Not Before: Jul 2 17:50:24 2025 GMT Not After : Jul 9 17:50:24 2025 GMT Subject: CN=68657160-ed61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:6f:00:83:6b:43:a8:dd:35:fc:6a:4d:a9:aa: 0b:41:fd:82:de:03:60:5b:4d:16:28:18:2a:1f:fd: 9d:6a:81:78:9c:5f:d9:4a:9c:47:c1:5f:d6:d7:f2: 66:47:2f:d5:d9:c8:73:8b:9f:c9:b6:40:5a:81:72: 62:95:76:d6:be:bc:50:70:94:3b:7e:f5:c1:09:5e: a8:e6:ce:7e:ac:55:48:65:89:2f:c9:de:44:6b:f0: 7f:9c:be:f5:63:97:87:19:d9:02:f7:0e:c2:f1:6a: e3:ce:fd:97:2e:06:6b:54:b4:21:72:ff:44:41:6a: c7:9f:a1:09:b4:65:e7:27:cb:fe:80:5b:37:06:8b: dd:be:b5:3d:7c:49:6b:ec:ba:e0:3b:45:a5:32:59: 0f:44:c8:dd:3f:3a:97:de:55:78:15:74:1b:5e:eb: c7:b7:fb:d7:52:e3:d9:e1:26:22:81:20:41:10:1b: 4f:6c:23:bc:5b:d5:37:ec:85:1e:32:5c:db:18:14: 26:da:31:86:08:ae:be:59:ac:e6:d6:45:eb:0d:a5: 4e:87:f3:14:85:e8:01:62:6e:d2:12:ea:7b:c4:11: b8:e2:a9:eb:97:0f:3d:d8:cf:f0:33:d2:74:28:74: 83:7f:06:f7:c5:ab:a1:16:8d:50:ee:7d:40:9e:a1: 05:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:E0:78:2D:80:EA:0A:AF:92:3D:5E:F4:15:1D:77:CD:C1:16:0E:D4 X509v3 Authority Key Identifier: keyid:77:48:6B:61:0D:33:3A:EB:DA:8F:25:5C:50:14:11:B0:1F:18:FF:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:c6:b5:43:94:97:ab:63:79:d1:2d:ff:1f:55:5a:ec:f7:19: 54:2f:e3:63:51:f0:43:47:f9:24:0a:e6:d4:c4:48:28:66:c8: 75:37:09:24:51:58:09:cc:1c:52:80:d1:27:6b:ec:00:e6:17: 23:12:31:4d:9b:dd:42:32:1f:e5:15:db:fe:0b:36:43:80:03: 08:65:47:62:9f:a2:e0:59:23:bf:09:f3:9a:8c:cd:21:e6:38: 8b:8f:59:04:eb:38:ea:ae:c6:13:b0:16:62:00:95:40:28:e4: 78:95:4d:1b:3e:99:fe:c4:d6:c5:9d:e5:ca:e5:8c:e1:2e:7e: 10:f4:83:90:6e:ea:2a:a1:61:97:18:6a:ee:ef:32:4d:c1:90: f2:8e:4b:0a:35:ba:6f:ca:cf:6b:e9:7e:b2:1b:98:23:91:42: 26:1d:4b:00:d6:5c:fb:3d:20:24:e4:ac:7e:5b:d6:c3:8e:dc: 0d:8c:ea:1e:72:4a:08:c3:65:1e:35:16:72:03:f3:10:0c:0f: 4b:4d:1a:1c:f6:2f:37:bc:40:50:5b:5d:95:7f:ad:e5:5e:f0: 5a:4d:86:77:31:04:ac:82:81:97:61:26:75:0b:a8:fc:05:66: 55:e8:38:ce:85:7b:5e:d6:b6:af:3a:e5:07:52:c7:32:0c:9f: ad:7d:89:44 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD9QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzJDQzcxMTAvBgNVBAUTKDc3NDg2QjYxMEQzMzNBRUJEQThGMjU1QzUwMTQxMUIw MUYxOEZGNDkwHhcNMjUwNzAyMTc1MDI0WhcNMjUwNzA5MTc1MDI0WjAYMRYwFAYD VQQDEw02ODY1NzE2MC1lZDYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2m8Ag2tDqN01/GpNqaoLQf2C3gNgW00WKBgqH/2daoF4nF/ZSpxHwV/W1/Jm Ry/V2chzi5/JtkBagXJilXbWvrxQcJQ7fvXBCV6o5s5+rFVIZYkvyd5Ea/B/nL71 Y5eHGdkC9w7C8Wrjzv2XLgZrVLQhcv9EQWrHn6EJtGXnJ8v+gFs3BovdvrU9fElr 7LrgO0WlMlkPRMjdPzqX3lV4FXQbXuvHt/vXUuPZ4SYigSBBEBtPbCO8W9U37IUe MlzbGBQm2jGGCK6+Wazm1kXrDaVOh/MUhegBYm7SEup7xBG44qnrlw892M/wM9J0 KHSDfwb3xauhFo1Q7n1AnqEFYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIbgeC2A 6gqvkj1e9BUdd83BFg7UMB8GA1UdIwQYMBaAFHdIa2ENMzrr2o8lXFAUEbAfGP9J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMkNDNy83OTFDNkEzNDdC MzgxMUU5QkMwRDNCMzJDNEY5QUUwMi9kMGhyWVEwek91dmFqeVZjVUJRUnNCOFlf MGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2QwaHJZUTB6T3V2YWp5VmNVQlFSc0I4WV8way5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MkNDNy83OTFDNkEzNDdCMzgxMUU5QkMwRDNCMzJDNEY5QUUwMi9kMGhyWVEwek91 dmFqeVZjVUJRUnNCOFlfMGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAxxrVDlJerY3nRLf8fVVrs9xlUL+NjUfBDR/kkCubUxEgoZsh1Nwkk UVgJzBxSgNEna+wA5hcjEjFNm91CMh/lFdv+CzZDgAMIZUdin6LgWSO/CfOajM0h 5jiLj1kE6zjqrsYTsBZiAJVAKOR4lU0bPpn+xNbFneXK5YzhLn4Q9IOQbuoqoWGX GGru7zJNwZDyjksKNbpvys9r6X6yG5gjkUImHUsA1lz7PSAk5Kx+W9bDjtwNjOoe ckoIw2UeNRZyA/MQDA9LTRoc9i83vEBQW12Vf63lXvBaTYZ3MQSsgoGXYSZ1C6j8 BWZV6DjOhXte1ravOuUHUscyDJ+tfYlE -----END CERTIFICATE-----Generated at Thu Jul 3 21:47:38 2025 by rpki-client