$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB8BA/2B732E70BA8511EABA838E30C4F9AE02/RwqTRJ5hH6mtBaKJ1hiCILX8_Do.mft File: RwqTRJ5hH6mtBaKJ1hiCILX8_Do.mft (raw, json) Hash identifier: KuLnLMLEJUCtgMlhQui0BvRDXCINbBqK+pwDdy9rTlU= Subject key identifier: 44:8B:AE:00:24:60:03:67:27:9B:40:9B:24:44:7D:2D:3D:B1:98:C8 Authority key identifier: 47:0A:93:44:9E:61:1F:A9:AD:05:A2:89:D6:18:82:20:B5:FC:FC:3A Certificate issuer: /CN=A91CB8BA/serialNumber=470A93449E611FA9AD05A289D6188220B5FCFC3A Certificate serial: 08D8 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RwqTRJ5hH6mtBaKJ1hiCILX8_Do.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB8BA/2B732E70BA8511EABA838E30C4F9AE02/RwqTRJ5hH6mtBaKJ1hiCILX8_Do.mft Manifest number: 08C7 Signing time: Wed 02 Jul 2025 20:46:20 +0000 Manifest this update: Wed 02 Jul 2025 20:46:19 +0000 Manifest next update: Wed 09 Jul 2025 20:46:19 +0000 Files and hashes: 1: RwqTRJ5hH6mtBaKJ1hiCILX8_Do.crl (hash: +ixFfPc85N7e0ny+pR84iwRHFtNrBigxL5lN+SBOFEQ=) 2: 465DBB30BA8811EAAF996D39C4F9AE02.roa (hash: 23ndFVCcLg+/bCNKhL706A7YBuPjvG2i31lg9YjdTYE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB8BA/2B732E70BA8511EABA838E30C4F9AE02/RwqTRJ5hH6mtBaKJ1hiCILX8_Do.crl rsync://rpki.apnic.net/member_repository/A91CB8BA/2B732E70BA8511EABA838E30C4F9AE02/RwqTRJ5hH6mtBaKJ1hiCILX8_Do.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RwqTRJ5hH6mtBaKJ1hiCILX8_Do.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 20:46:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2264 (0x8d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB8BA, serialNumber=470A93449E611FA9AD05A289D6188220B5FCFC3A Validity Not Before: Jul 2 20:46:19 2025 GMT Not After : Jul 9 20:46:19 2025 GMT Subject: CN=68659a9b-1f13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:e4:fc:b2:0f:84:dc:39:b8:ed:2d:7f:e2:7c: 79:71:fb:78:c7:4b:33:36:38:c8:8b:66:42:0b:73: b3:78:64:27:3b:9d:fc:01:cc:24:63:36:b2:df:a7: a9:3c:10:b6:8e:88:02:22:f0:50:a6:f9:f0:0c:88: 64:da:5e:32:3b:c7:37:bc:7e:21:a4:23:b7:27:5d: 85:a4:bd:32:cd:50:7d:85:c9:09:b5:3b:51:68:14: 34:d0:fc:44:b1:9a:77:09:22:df:5a:dc:12:92:c0: 13:55:81:77:6f:46:ff:36:91:1d:57:cf:4a:ac:fa: cf:4c:26:90:c4:79:15:41:ca:da:c7:a7:e3:b6:02: 39:d9:da:6a:8d:cc:46:0f:ba:f6:c3:19:df:cc:26: 24:de:af:84:67:c3:ad:cd:52:42:04:f8:ff:39:7b: c8:25:6c:94:1e:fc:b7:b5:b9:ce:a3:5e:a5:1c:fc: d2:8a:f1:a5:c5:bf:31:8a:e0:8f:a0:a8:05:da:08: e0:53:50:f2:d3:eb:29:62:38:e3:84:46:0d:24:dc: b3:3c:27:33:af:f1:3d:91:c3:46:e8:81:f8:85:a2: ce:e4:72:5e:58:49:e4:d1:97:3d:5e:17:38:7b:39: 9f:c0:a6:85:0f:d0:de:aa:e1:30:77:be:8c:77:13: 09:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:8B:AE:00:24:60:03:67:27:9B:40:9B:24:44:7D:2D:3D:B1:98:C8 X509v3 Authority Key Identifier: keyid:47:0A:93:44:9E:61:1F:A9:AD:05:A2:89:D6:18:82:20:B5:FC:FC:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB8BA/2B732E70BA8511EABA838E30C4F9AE02/RwqTRJ5hH6mtBaKJ1hiCILX8_Do.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RwqTRJ5hH6mtBaKJ1hiCILX8_Do.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB8BA/2B732E70BA8511EABA838E30C4F9AE02/RwqTRJ5hH6mtBaKJ1hiCILX8_Do.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:64:11:89:d7:ab:6e:d2:d7:b2:6f:1b:15:c4:cc:24:d6:a7: f4:19:83:e8:c8:65:0e:19:e6:1a:37:3f:d3:79:a9:c8:9e:8a: 9b:1b:09:10:16:21:69:c8:17:e1:11:dd:45:ef:8f:76:fd:ca: e2:db:5b:fb:dd:9c:3d:b9:60:fa:84:c5:0f:96:56:c8:1d:8d: bb:6d:cf:c6:ae:8e:5d:e0:3e:a9:22:8f:d2:be:9c:4c:2d:56: a9:5b:d6:a4:83:07:c8:15:11:16:d3:35:83:dc:be:c2:06:30: ac:fa:bd:f0:1c:42:ed:89:4f:d8:81:59:cb:e3:b8:41:60:0b: c5:07:f2:f3:fe:d8:2f:59:d1:30:0e:73:0d:91:4d:ba:f8:73: f2:16:a0:03:2f:a5:00:4a:ff:d8:d8:eb:5e:66:60:8c:9e:23: dc:9f:4f:21:b0:08:4d:1b:ef:c6:3c:fd:e3:b1:07:a4:f0:4d: 3a:f2:99:c7:c3:0c:65:91:91:25:33:e5:92:80:50:2f:a1:99: 63:13:17:b8:2b:c8:fc:e8:f8:4a:bf:05:85:0d:d4:c0:53:51: df:2f:8e:ee:7b:1d:29:9d:33:82:7c:7b:48:89:39:1c:11:94: bd:5e:42:31:14:da:af:f7:27:7d:ac:e8:ba:ad:49:8f:7c:18: d6:c5:b1:35 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCNgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0I4QkExMTAvBgNVBAUTKDQ3MEE5MzQ0OUU2MTFGQTlBRDA1QTI4OUQ2MTg4MjIw QjVGQ0ZDM0EwHhcNMjUwNzAyMjA0NjE5WhcNMjUwNzA5MjA0NjE5WjAYMRYwFAYD VQQDEw02ODY1OWE5Yi0xZjEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv+T8sg+E3Dm47S1/4nx5cft4x0szNjjIi2ZCC3OzeGQnO538AcwkYzay36ep PBC2jogCIvBQpvnwDIhk2l4yO8c3vH4hpCO3J12FpL0yzVB9hckJtTtRaBQ00PxE sZp3CSLfWtwSksATVYF3b0b/NpEdV89KrPrPTCaQxHkVQcrax6fjtgI52dpqjcxG D7r2wxnfzCYk3q+EZ8OtzVJCBPj/OXvIJWyUHvy3tbnOo16lHPzSivGlxb8xiuCP oKgF2gjgU1Dy0+spYjjjhEYNJNyzPCczr/E9kcNG6IH4haLO5HJeWEnk0Zc9Xhc4 ezmfwKaFD9DequEwd76MdxMJvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFESLrgAk YANnJ5tAmyREfS09sZjIMB8GA1UdIwQYMBaAFEcKk0SeYR+prQWiidYYgiC1/Pw6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjhCQS8yQjczMkU3MEJB ODUxMUVBQkE4MzhFMzBDNEY5QUUwMi9Sd3FUUko1aEg2bXRCYUtKMWhpQ0lMWDhf RG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1J3cVRSSjVoSDZtdEJhS0oxaGlDSUxYOF9Eby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QjhCQS8yQjczMkU3MEJBODUxMUVBQkE4MzhFMzBDNEY5QUUwMi9Sd3FUUko1aEg2 bXRCYUtKMWhpQ0lMWDhfRG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBAZBGJ16tu0teybxsVxMwk1qf0GYPoyGUOGeYaNz/TeanInoqbGwkQ FiFpyBfhEd1F7492/cri21v73Zw9uWD6hMUPllbIHY27bc/Gro5d4D6pIo/SvpxM LVapW9akgwfIFREW0zWD3L7CBjCs+r3wHELtiU/YgVnL47hBYAvFB/Lz/tgvWdEw DnMNkU26+HPyFqADL6UASv/Y2OteZmCMniPcn08hsAhNG+/GPP3jsQek8E068pnH wwxlkZElM+WSgFAvoZljExe4K8j86PhKvwWFDdTAU1HfL47uex0pnTOCfHtIiTkc EZS9XkIxFNqv9yd9rOi6rUmPfBjWxbE1 -----END CERTIFICATE-----Generated at Thu Jul 3 23:06:13 2025 by rpki-client