$ rpki-client -vvf rpki.apnic.net/member_repository/A91C83EA/D82C61E81C4511E494A76F1BC4F9AE02/92dQUVu3YtGADFrmxsLbJP6VLQI.mft File: 92dQUVu3YtGADFrmxsLbJP6VLQI.mft (raw, json) Hash identifier: e8GiF71MXJZGRihi93T4hcNFoyGT26D2jkws7VquSV4= Subject key identifier: 03:C3:E7:83:F8:DC:CD:32:EE:F1:BD:43:78:F8:8E:A7:61:26:F5:9A Authority key identifier: F7:67:50:51:5B:B7:62:D1:80:0C:5A:E6:C6:C2:DB:24:FE:95:2D:02 Certificate issuer: /CN=A91C83EA/serialNumber=F76750515BB762D1800C5AE6C6C2DB24FE952D02 Certificate serial: 2A9D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/92dQUVu3YtGADFrmxsLbJP6VLQI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C83EA/D82C61E81C4511E494A76F1BC4F9AE02/92dQUVu3YtGADFrmxsLbJP6VLQI.mft Manifest number: 2A87 Signing time: Wed 02 Jul 2025 15:40:58 +0000 Manifest this update: Wed 02 Jul 2025 15:40:57 +0000 Manifest next update: Wed 09 Jul 2025 15:40:57 +0000 Files and hashes: 1: 92dQUVu3YtGADFrmxsLbJP6VLQI.crl (hash: hfKlXnKiFjAQgxShpUivAsFu5lPmiCwD8M02Mb29t2c=) 2: 2ED1150C561D11E7B003DF26C4F9AE02.roa (hash: VWQv/IH7NsqTcNchTqEWHo8sER9hJVbk+Ml69dI7l0g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C83EA/D82C61E81C4511E494A76F1BC4F9AE02/92dQUVu3YtGADFrmxsLbJP6VLQI.crl rsync://rpki.apnic.net/member_repository/A91C83EA/D82C61E81C4511E494A76F1BC4F9AE02/92dQUVu3YtGADFrmxsLbJP6VLQI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/92dQUVu3YtGADFrmxsLbJP6VLQI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 15:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10909 (0x2a9d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C83EA, serialNumber=F76750515BB762D1800C5AE6C6C2DB24FE952D02 Validity Not Before: Jul 2 15:40:57 2025 GMT Not After : Jul 9 15:40:57 2025 GMT Subject: CN=6865530a-398c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:3b:05:4c:83:0a:ba:aa:14:a2:fa:ab:1b:5f: 38:a7:1a:9a:dd:6e:a0:93:f6:38:1e:b3:c5:75:24: 8f:23:52:6c:46:8a:01:d1:92:0e:27:59:67:83:af: e1:4a:2f:20:77:56:49:e6:7a:00:ee:b5:ef:6c:a3: 95:63:49:70:46:90:62:b2:0d:67:35:d1:e6:1a:0f: b0:2c:31:6a:a1:61:9b:ec:2b:40:a1:ba:21:c2:26: b0:3d:d1:63:48:68:fd:66:74:3b:74:ca:28:a9:d6: 33:5e:cd:36:88:ef:a4:58:00:47:d2:3e:b9:a4:18: aa:92:05:6d:ca:2e:e5:52:21:82:cc:b4:a6:60:ab: 82:79:92:2d:57:46:36:38:64:fd:01:8b:11:41:6d: 15:84:8b:e6:23:ca:e5:c5:ac:3a:de:98:9d:03:2b: c7:cb:72:18:98:ac:9c:e1:ea:0a:e3:48:1e:6d:3d: ff:0c:1d:6d:3e:14:c3:e2:a3:b7:a0:3d:e3:53:c9: 31:0a:13:ef:2f:4f:49:1b:0a:c2:eb:ce:92:90:d6: 42:b7:41:e6:08:24:19:1b:6e:b6:1c:00:a8:a9:71: 5f:e6:8f:95:59:b0:5b:29:b3:4a:40:a7:61:34:43: 34:02:56:55:b3:22:9d:bf:62:9d:e9:b3:a5:5c:be: e0:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:C3:E7:83:F8:DC:CD:32:EE:F1:BD:43:78:F8:8E:A7:61:26:F5:9A X509v3 Authority Key Identifier: keyid:F7:67:50:51:5B:B7:62:D1:80:0C:5A:E6:C6:C2:DB:24:FE:95:2D:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C83EA/D82C61E81C4511E494A76F1BC4F9AE02/92dQUVu3YtGADFrmxsLbJP6VLQI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/92dQUVu3YtGADFrmxsLbJP6VLQI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C83EA/D82C61E81C4511E494A76F1BC4F9AE02/92dQUVu3YtGADFrmxsLbJP6VLQI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:9b:0a:ac:15:16:e0:97:a0:67:a4:7a:06:5a:1d:80:cd:88: 65:98:84:91:4a:51:91:c2:ff:9e:78:24:45:8a:9c:75:6e:19: 39:32:6f:f4:98:66:06:40:86:94:0b:95:2f:42:17:e8:33:5f: 3b:46:5c:dd:9b:e7:50:ea:84:60:b3:79:e6:b6:2f:96:d5:f7: b2:dc:33:7c:d1:1b:92:42:5c:ef:5c:10:53:ad:9e:d1:bf:de: 56:2f:13:80:8b:d6:21:fb:21:a5:ad:37:20:ae:79:c6:8a:ec: 16:bc:94:7b:2f:1b:e0:4b:34:c3:4d:76:48:48:20:9d:fd:f3: d9:95:73:51:60:be:9f:94:f4:b7:dc:71:59:94:ec:b5:b7:38: 16:ec:69:cf:72:7f:76:f2:7e:c0:16:2e:cb:d1:ad:2b:c7:b2: 18:2a:18:15:cb:58:97:1d:5b:4d:29:eb:16:b2:ab:3a:fd:aa: ce:aa:e7:33:43:b5:ac:72:a8:27:66:98:6b:2e:92:f7:f3:8a: 91:84:0f:08:cf:11:78:78:7a:16:04:09:d8:cc:8a:c0:46:02: 2f:34:0c:8f:99:d5:62:23:1a:fd:d3:75:27:23:61:ab:83:bf: ee:ac:e7:e0:a8:0c:a6:50:25:be:16:f2:01:7d:87:c5:c9:32: fd:ef:fb:8d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICKp0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzgzRUExMTAvBgNVBAUTKEY3Njc1MDUxNUJCNzYyRDE4MDBDNUFFNkM2QzJEQjI0 RkU5NTJEMDIwHhcNMjUwNzAyMTU0MDU3WhcNMjUwNzA5MTU0MDU3WjAYMRYwFAYD VQQDEw02ODY1NTMwYS0zOThjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqDsFTIMKuqoUovqrG184pxqa3W6gk/Y4HrPFdSSPI1JsRooB0ZIOJ1lng6/h Si8gd1ZJ5noA7rXvbKOVY0lwRpBisg1nNdHmGg+wLDFqoWGb7CtAobohwiawPdFj SGj9ZnQ7dMooqdYzXs02iO+kWABH0j65pBiqkgVtyi7lUiGCzLSmYKuCeZItV0Y2 OGT9AYsRQW0VhIvmI8rlxaw63pidAyvHy3IYmKyc4eoK40gebT3/DB1tPhTD4qO3 oD3jU8kxChPvL09JGwrC686SkNZCt0HmCCQZG262HACoqXFf5o+VWbBbKbNKQKdh NEM0AlZVsyKdv2Kd6bOlXL7gnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAPD54P4 3M0y7vG9Q3j4jqdhJvWaMB8GA1UdIwQYMBaAFPdnUFFbt2LRgAxa5sbC2yT+lS0C MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDODNFQS9EODJDNjFFODFD NDUxMUU0OTRBNzZGMUJDNEY5QUUwMi85MmRRVVZ1M1l0R0FERnJteHNMYkpQNlZM UUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzkyZFFVVnUzWXRHQURGcm14c0xiSlA2VkxRSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD ODNFQS9EODJDNjFFODFDNDUxMUU0OTRBNzZGMUJDNEY5QUUwMi85MmRRVVZ1M1l0 R0FERnJteHNMYkpQNlZMUUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB1mwqsFRbgl6BnpHoGWh2AzYhlmISRSlGRwv+eeCRFipx1bhk5Mm/0 mGYGQIaUC5UvQhfoM187Rlzdm+dQ6oRgs3nmti+W1fey3DN80RuSQlzvXBBTrZ7R v95WLxOAi9Yh+yGlrTcgrnnGiuwWvJR7LxvgSzTDTXZISCCd/fPZlXNRYL6flPS3 3HFZlOy1tzgW7GnPcn928n7AFi7L0a0rx7IYKhgVy1iXHVtNKesWsqs6/arOqucz Q7WscqgnZphrLpL384qRhA8IzxF4eHoWBAnYzIrARgIvNAyPmdViIxr903UnI2Gr g7/urOfgqAymUCW+FvIBfYfFyTL97/uN -----END CERTIFICATE-----Generated at Wed Jul 2 23:18:58 2025 by rpki-client