$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5D53/FC7D6086AC8311EF8214972BC4F9AE02/j3TBdV8YhwjM46Z97ChZk2SN8YM.mft File: j3TBdV8YhwjM46Z97ChZk2SN8YM.mft (raw, json) Hash identifier: 3TwgWvGSoiL9y2Bqx3qPnWNU9fQEWvgucFyfSVnTXks= Subject key identifier: 2D:AE:21:2A:BE:77:9C:5F:08:C3:F6:2F:63:4E:A8:6C:12:ED:B8:47 Authority key identifier: 8F:74:C1:75:5F:18:87:08:CC:E3:A6:7D:EC:28:59:93:64:8D:F1:83 Certificate issuer: /CN=A91C5D53/serialNumber=8F74C1755F188708CCE3A67DEC285993648DF183 Certificate serial: 75 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/j3TBdV8YhwjM46Z97ChZk2SN8YM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C5D53/FC7D6086AC8311EF8214972BC4F9AE02/j3TBdV8YhwjM46Z97ChZk2SN8YM.mft Manifest number: 73 Signing time: Thu 03 Jul 2025 07:11:50 +0000 Manifest this update: Thu 03 Jul 2025 07:11:49 +0000 Manifest next update: Thu 10 Jul 2025 07:11:49 +0000 Files and hashes: 1: j3TBdV8YhwjM46Z97ChZk2SN8YM.crl (hash: aE9XRpim5fTndwy0BzqjsJ4gos01UTNB3F4WCnWGVlc=) 2: 916E1DB8C1D611EFB61BE32DC4F9AE02.roa (hash: f2L7OBQuOuTd2LqrR7JU6rutnUdXM8FYIeFEOoAz1u8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C5D53/FC7D6086AC8311EF8214972BC4F9AE02/j3TBdV8YhwjM46Z97ChZk2SN8YM.crl rsync://rpki.apnic.net/member_repository/A91C5D53/FC7D6086AC8311EF8214972BC4F9AE02/j3TBdV8YhwjM46Z97ChZk2SN8YM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/j3TBdV8YhwjM46Z97ChZk2SN8YM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 117 (0x75) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C5D53, serialNumber=8F74C1755F188708CCE3A67DEC285993648DF183 Validity Not Before: Jul 3 07:11:49 2025 GMT Not After : Jul 10 07:11:49 2025 GMT Subject: CN=68662d36-bfe4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:8a:76:f7:ba:6b:3f:8a:25:f8:59:9e:8c:8a: 3a:9c:b1:4f:04:9a:b0:a4:c6:57:a6:5b:8f:90:bb: d1:6f:ad:8c:ac:a6:52:01:51:c7:b7:f7:ca:d0:ac: 66:61:d8:6d:78:90:0f:e8:ed:c9:55:32:d4:46:bd: 45:23:a6:dc:e6:30:10:51:be:b9:fb:1d:02:b4:e1: b8:42:57:bc:30:9b:9a:8b:2c:6a:f6:18:d2:31:3e: 05:e9:84:a1:3f:bc:84:d8:3c:bd:cb:64:c0:cf:ab: 8e:e8:1e:6b:ef:b9:74:9e:a8:95:50:64:59:45:ee: ad:01:a6:99:cc:ab:6e:1c:19:9c:4f:00:44:73:cb: a0:55:da:41:c8:f0:c0:bf:5e:49:6c:d2:0f:f8:b4: 2f:b8:36:16:de:db:fd:69:4f:7b:cb:1f:3b:e0:26: a3:06:1d:94:97:c6:86:17:3d:d3:47:d3:d8:a4:24: d7:0a:63:c6:18:2e:16:c8:13:4b:ea:d2:65:24:4e: c8:f6:35:0d:37:33:1c:a2:03:11:6c:73:c2:ed:9e: 01:ea:fa:4e:e2:f2:e6:8d:3c:30:4d:dc:d2:4c:ba: e4:e1:76:b4:f3:08:e0:87:00:d7:b1:d8:6e:e7:9e: 43:07:91:c5:e5:47:eb:27:96:81:47:6a:fa:30:62: 88:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:AE:21:2A:BE:77:9C:5F:08:C3:F6:2F:63:4E:A8:6C:12:ED:B8:47 X509v3 Authority Key Identifier: keyid:8F:74:C1:75:5F:18:87:08:CC:E3:A6:7D:EC:28:59:93:64:8D:F1:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C5D53/FC7D6086AC8311EF8214972BC4F9AE02/j3TBdV8YhwjM46Z97ChZk2SN8YM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/j3TBdV8YhwjM46Z97ChZk2SN8YM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5D53/FC7D6086AC8311EF8214972BC4F9AE02/j3TBdV8YhwjM46Z97ChZk2SN8YM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:9f:32:19:f2:9d:51:42:5a:3f:e5:6d:a2:23:62:55:27:6f: 21:46:85:5a:e8:fb:4d:cb:e9:86:b6:fd:b4:88:d7:e3:61:08: 67:76:24:dd:68:a8:86:0f:a1:be:fd:84:f0:19:38:13:e7:52: 1e:70:32:26:36:1c:2d:70:d7:ee:c7:6e:c4:68:46:fb:86:35: 0b:76:7a:95:8a:68:3b:86:6d:b8:90:72:0f:2a:be:e0:c3:3e: 48:31:7b:f4:b6:9c:f5:03:18:9c:67:2e:08:4f:55:da:c2:a0: cf:bc:c1:58:7d:7c:9a:0d:66:93:95:47:d9:ef:ea:6c:36:5e: e7:7f:6b:0b:62:7d:84:1d:52:45:0e:9b:73:28:48:25:8a:84: 99:48:90:8e:7a:06:95:be:1f:ec:02:55:ef:90:33:e8:06:bc: ec:a2:8c:25:85:ab:72:9e:77:f3:23:91:c2:15:d9:9f:4d:ad: 55:82:91:5c:a3:59:86:c0:c9:67:6b:65:a1:5e:bf:21:c0:41: 12:c9:fb:86:25:94:1f:6a:6f:06:4e:c0:5b:0f:1b:db:d3:5e: 67:f7:87:89:6c:86:4a:32:ef:8b:c2:55:b1:ff:55:b9:3c:6d: 1d:84:c7:e7:39:99:72:b8:a4:33:e5:99:93:22:50:60:89:be: cf:cb:7c:52 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBdTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD NUQ1MzExMC8GA1UEBRMoOEY3NEMxNzU1RjE4ODcwOENDRTNBNjdERUMyODU5OTM2 NDhERjE4MzAeFw0yNTA3MDMwNzExNDlaFw0yNTA3MTAwNzExNDlaMBgxFjAUBgNV BAMTDTY4NjYyZDM2LWJmZTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC0inb3ums/iiX4WZ6MijqcsU8EmrCkxlemW4+Qu9FvrYysplIBUce398rQrGZh 2G14kA/o7clVMtRGvUUjptzmMBBRvrn7HQK04bhCV7wwm5qLLGr2GNIxPgXphKE/ vITYPL3LZMDPq47oHmvvuXSeqJVQZFlF7q0BppnMq24cGZxPAERzy6BV2kHI8MC/ Xkls0g/4tC+4Nhbe2/1pT3vLHzvgJqMGHZSXxoYXPdNH09ikJNcKY8YYLhbIE0vq 0mUkTsj2NQ03MxyiAxFsc8LtngHq+k7i8uaNPDBN3NJMuuThdrTzCOCHANex2G7n nkMHkcXlR+snloFHavowYoj3AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQULa4hKr53 nF8Iw/YvY06obBLtuEcwHwYDVR0jBBgwFoAUj3TBdV8YhwjM46Z97ChZk2SN8YMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM1RDUzL0ZDN0Q2MDg2QUM4 MzExRUY4MjE0OTcyQkM0RjlBRTAyL2ozVEJkVjhZaHdqTTQ2Wjk3Q2haazJTTjhZ TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvajNUQmRWOFlod2pNNDZaOTdDaFprMlNOOFlNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM1 RDUzL0ZDN0Q2MDg2QUM4MzExRUY4MjE0OTcyQkM0RjlBRTAyL2ozVEJkVjhZaHdq TTQ2Wjk3Q2haazJTTjhZTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADCfMhnynVFCWj/lbaIjYlUnbyFGhVro+03L6Ya2/bSI1+NhCGd2JN1o qIYPob79hPAZOBPnUh5wMiY2HC1w1+7HbsRoRvuGNQt2epWKaDuGbbiQcg8qvuDD Pkgxe/S2nPUDGJxnLghPVdrCoM+8wVh9fJoNZpOVR9nv6mw2Xud/awtifYQdUkUO m3MoSCWKhJlIkI56BpW+H+wCVe+QM+gGvOyijCWFq3Ked/MjkcIV2Z9NrVWCkVyj WYbAyWdrZaFevyHAQRLJ+4YllB9qbwZOwFsPG9vTXmf3h4lshkoy74vCVbH/Vbk8 bR2Ex+c5mXK4pDPlmZMiUGCJvs/LfFI= -----END CERTIFICATE-----Generated at Fri Jul 4 07:50:52 2025 by rpki-client