$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4614/1C94899AF4F011E9AC202B1DC4F9AE02/SU13HlEeEgBTuwmx8nS9j1nXOqg.mft File: SU13HlEeEgBTuwmx8nS9j1nXOqg.mft (raw, json) Hash identifier: HNfz1HJZLrMyGyFwVPrQ4wfniAJs5Vmmbb9efOcDv80= Subject key identifier: B0:51:8D:5E:77:8A:E4:32:8A:77:7E:09:26:E7:D0:76:E7:8E:BA:E0 Authority key identifier: 49:4D:77:1E:51:1E:12:00:53:BB:09:B1:F2:74:BD:8F:59:D7:3A:A8 Certificate issuer: /CN=A91C4614/serialNumber=494D771E511E120053BB09B1F274BD8F59D73AA8 Certificate serial: 0CC3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SU13HlEeEgBTuwmx8nS9j1nXOqg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C4614/1C94899AF4F011E9AC202B1DC4F9AE02/SU13HlEeEgBTuwmx8nS9j1nXOqg.mft Manifest number: 0CB2 Signing time: Wed 02 Jul 2025 18:24:04 +0000 Manifest this update: Wed 02 Jul 2025 18:24:03 +0000 Manifest next update: Wed 09 Jul 2025 18:24:03 +0000 Files and hashes: 1: SU13HlEeEgBTuwmx8nS9j1nXOqg.crl (hash: dHLoGxkz9RJaaqJ/+vjGTLqQBLkgKGcH1G0iFT7AbvI=) 2: 7A89B302E7E511EFA8BD237AC4F9AE02.roa (hash: 3cZWclJtX3V6aTw+zOu2W0FHd/b2ev4flaWcS3tJ/J0=) 3: ACEBFE04E7E511EFBC775C0EC4F9AE02.roa (hash: KypfxpsYSUZAZe6pLsx6D3j38tcpQYPu6XyVBPdIPY4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C4614/1C94899AF4F011E9AC202B1DC4F9AE02/SU13HlEeEgBTuwmx8nS9j1nXOqg.crl rsync://rpki.apnic.net/member_repository/A91C4614/1C94899AF4F011E9AC202B1DC4F9AE02/SU13HlEeEgBTuwmx8nS9j1nXOqg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SU13HlEeEgBTuwmx8nS9j1nXOqg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 18:24:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3267 (0xcc3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C4614, serialNumber=494D771E511E120053BB09B1F274BD8F59D73AA8 Validity Not Before: Jul 2 18:24:03 2025 GMT Not After : Jul 9 18:24:03 2025 GMT Subject: CN=68657944-59ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:ca:fb:40:21:2f:83:52:4c:ea:d1:84:79:97: 6f:ad:b4:1c:36:40:13:52:e0:e4:25:bd:4f:5f:ca: 6d:28:35:be:1d:e7:0b:31:df:34:45:34:08:38:ee: 31:0d:04:7d:c1:9e:c6:e1:31:1f:9f:35:aa:fd:b8: 5e:b4:a7:1f:42:bb:a0:96:ab:3d:9c:be:a8:4a:53: f8:03:19:3c:13:3c:8d:e4:e3:9e:a2:ec:ed:cc:a6: ff:fc:24:7c:4a:0b:f1:4f:c3:11:84:66:65:c7:40: 7f:3c:72:9b:f2:76:2b:aa:27:88:ba:c0:99:a2:f9: 4c:a6:07:65:9d:75:2d:51:15:cc:db:ab:67:eb:1d: 09:91:24:65:4e:62:60:7b:b7:51:22:54:d6:01:c5: cd:5d:8f:08:a7:4c:b7:ec:bd:2e:7a:ec:a3:d4:83: f8:f2:1b:85:22:f8:dc:da:f1:22:ef:3c:a5:d3:31: 64:0e:65:88:93:6c:4e:13:94:47:d4:27:54:40:ee: 73:04:58:b6:d0:61:aa:66:1e:f0:d3:8e:88:34:af: b2:73:81:e7:e0:63:a9:0d:78:f0:5b:6a:82:9f:1e: e2:9b:7c:3e:8d:44:b6:1a:4d:5c:a6:f2:f9:30:0e: 5f:77:46:7d:9f:58:4f:77:41:99:c5:3a:95:e1:e1: 91:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:51:8D:5E:77:8A:E4:32:8A:77:7E:09:26:E7:D0:76:E7:8E:BA:E0 X509v3 Authority Key Identifier: keyid:49:4D:77:1E:51:1E:12:00:53:BB:09:B1:F2:74:BD:8F:59:D7:3A:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C4614/1C94899AF4F011E9AC202B1DC4F9AE02/SU13HlEeEgBTuwmx8nS9j1nXOqg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SU13HlEeEgBTuwmx8nS9j1nXOqg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4614/1C94899AF4F011E9AC202B1DC4F9AE02/SU13HlEeEgBTuwmx8nS9j1nXOqg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:57:0e:0e:cc:c0:c4:ea:30:f0:93:7b:47:b4:50:a5:be:b0: 59:d6:76:b7:b3:bd:9c:33:7a:15:a3:5c:0c:07:3a:50:3e:24: b2:36:77:65:7a:da:24:07:85:4c:06:59:40:59:a1:d0:38:27: c9:ce:3e:8f:75:f8:0e:a3:42:b6:c9:f5:dc:5a:35:d7:00:92: 95:98:8d:45:da:fe:94:ef:af:fd:9b:1f:e1:50:12:38:11:f5: e6:82:b6:23:7c:f2:31:26:f9:cb:ee:2b:c9:bc:c9:9b:55:4f: c1:9e:29:e0:dc:c3:c2:ef:69:3b:fb:af:98:e5:14:9c:dd:5e: 85:35:63:cc:c1:ad:ad:5b:46:df:55:1e:5f:6c:8c:a5:a4:b9: 0d:5a:34:8d:88:5c:69:64:12:8f:49:91:12:ff:54:37:1b:a6: 4f:81:01:00:00:0c:15:12:c4:b2:54:d4:e4:26:86:f9:b9:ff: 77:75:14:bb:8f:2d:73:4b:55:bd:a9:ad:56:85:51:55:a6:c5: 1e:e0:89:90:33:39:b2:66:ed:13:ce:50:51:01:69:ea:8b:a4: b3:b4:01:6a:1e:55:2d:4d:7d:f8:7c:7c:3e:e8:0f:a7:67:97: 00:87:f0:3b:71:ad:83:13:4b:9c:70:80:f6:34:da:bd:a2:4e: 98:8f:2c:de -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDMMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzQ2MTQxMTAvBgNVBAUTKDQ5NEQ3NzFFNTExRTEyMDA1M0JCMDlCMUYyNzRCRDhG NTlENzNBQTgwHhcNMjUwNzAyMTgyNDAzWhcNMjUwNzA5MTgyNDAzWjAYMRYwFAYD VQQDEw02ODY1Nzk0NC01OWVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlcr7QCEvg1JM6tGEeZdvrbQcNkATUuDkJb1PX8ptKDW+HecLMd80RTQIOO4x DQR9wZ7G4TEfnzWq/bhetKcfQruglqs9nL6oSlP4Axk8EzyN5OOeouztzKb//CR8 SgvxT8MRhGZlx0B/PHKb8nYrqieIusCZovlMpgdlnXUtURXM26tn6x0JkSRlTmJg e7dRIlTWAcXNXY8Ip0y37L0ueuyj1IP48huFIvjc2vEi7zyl0zFkDmWIk2xOE5RH 1CdUQO5zBFi20GGqZh7w046INK+yc4Hn4GOpDXjwW2qCnx7im3w+jUS2Gk1cpvL5 MA5fd0Z9n1hPd0GZxTqV4eGR5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLBRjV53 iuQyind+CSbn0HbnjrrgMB8GA1UdIwQYMBaAFElNdx5RHhIAU7sJsfJ0vY9Z1zqo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNDYxNC8xQzk0ODk5QUY0 RjAxMUU5QUMyMDJCMURDNEY5QUUwMi9TVTEzSGxFZUVnQlR1d214OG5TOWoxblhP cWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NVMTNIbEVlRWdCVHV3bXg4blM5ajFuWE9xZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NDYxNC8xQzk0ODk5QUY0RjAxMUU5QUMyMDJCMURDNEY5QUUwMi9TVTEzSGxFZUVn QlR1d214OG5TOWoxblhPcWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQVw4OzMDE6jDwk3tHtFClvrBZ1na3s72cM3oVo1wMBzpQPiSyNndl etokB4VMBllAWaHQOCfJzj6PdfgOo0K2yfXcWjXXAJKVmI1F2v6U76/9mx/hUBI4 EfXmgrYjfPIxJvnL7ivJvMmbVU/Bning3MPC72k7+6+Y5RSc3V6FNWPMwa2tW0bf VR5fbIylpLkNWjSNiFxpZBKPSZES/1Q3G6ZPgQEAAAwVEsSyVNTkJob5uf93dRS7 jy1zS1W9qa1WhVFVpsUe4ImQMzmyZu0TzlBRAWnqi6SztAFqHlUtTX34fHw+6A+n Z5cAh/A7ca2DE0uccID2NNq9ok6Yjyze -----END CERTIFICATE-----Generated at Thu Jul 3 17:53:36 2025 by rpki-client