$ rpki-client -vvf rpki.apnic.net/member_repository/A91CBF47/370CA2C01D8A11E2B79B13E408B02CD2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.mft File: MmNx45mCT4AE7ZZ1aBl2CIG3zZY.mft (raw, json) Hash identifier: 6dBLHmeUcIxky6HRwFH1CUQnEVBgpMm3/9PAMkgOcEU= Subject key identifier: E7:67:A9:D4:A4:40:34:D8:35:A7:53:84:A9:48:3C:02:D6:94:96:69 Authority key identifier: 32:63:71:E3:99:82:4F:80:04:ED:96:75:68:19:76:08:81:B7:CD:96 Certificate issuer: /CN=A91CBF47/serialNumber=326371E399824F8004ED96756819760881B7CD96 Certificate serial: 34A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CBF47/370CA2C01D8A11E2B79B13E408B02CD2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.mft Manifest number: 349E Signing time: Wed 02 Jul 2025 14:33:09 +0000 Manifest this update: Wed 02 Jul 2025 14:33:08 +0000 Manifest next update: Wed 09 Jul 2025 14:33:08 +0000 Files and hashes: 1: MmNx45mCT4AE7ZZ1aBl2CIG3zZY.crl (hash: b9G8tf4lvfYVdWEUzDzDDGHWXYZFMn9BPwULk11n5U4=) 2: 608C129E33E011ED979ED20EC4F9AE02.roa (hash: ZrPgwoRLGJ2fTtJOsuC6YjXCZss5mwGvBq/beIOJfYA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CBF47/370CA2C01D8A11E2B79B13E408B02CD2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.crl rsync://rpki.apnic.net/member_repository/A91CBF47/370CA2C01D8A11E2B79B13E408B02CD2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 14:33:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13474 (0x34a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CBF47, serialNumber=326371E399824F8004ED96756819760881B7CD96 Validity Not Before: Jul 2 14:33:08 2025 GMT Not After : Jul 9 14:33:08 2025 GMT Subject: CN=68654324-a248 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:cd:4d:51:ff:84:95:04:0a:3f:e7:f2:14:9a: fc:45:ce:37:d1:e7:73:17:4a:68:fe:af:18:9e:7f: 62:f3:1f:c7:56:df:6a:ce:59:4e:3e:09:8c:59:d1: 4a:8a:52:22:4b:c8:a2:8e:90:dc:a0:1b:d9:24:fe: f9:17:83:e1:73:fa:da:56:04:79:9e:68:9c:a5:e8: 0a:49:95:6b:95:18:e7:54:ea:3e:61:7b:20:6f:6c: 42:b6:ac:ff:4f:06:29:07:a8:9e:65:9a:cc:d3:61: 7a:4a:98:b0:ef:a2:2d:07:42:e3:68:c5:69:5b:68: bd:20:c6:e7:9b:a1:25:1f:95:9e:c6:a5:e1:91:99: 36:0f:ab:00:38:3f:63:0c:59:97:cf:ca:df:e2:79: 68:7d:9f:88:32:f5:db:c9:b4:4a:03:bf:fc:f4:08: 67:3e:4e:08:0d:0e:34:af:b5:a5:44:44:09:22:c1: dc:e4:6e:45:01:d3:55:7d:fb:6e:99:92:29:93:d1: f1:5b:fc:07:32:0f:58:36:19:e8:4f:c4:1f:c4:df: 13:2b:71:69:dc:ff:73:12:7a:c6:62:fb:ee:83:16: 9e:3d:07:90:82:cf:9e:e6:76:54:9c:ca:7f:91:18: 1d:6e:ab:36:03:dd:47:85:0a:4c:ea:02:76:e9:d4: c0:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:67:A9:D4:A4:40:34:D8:35:A7:53:84:A9:48:3C:02:D6:94:96:69 X509v3 Authority Key Identifier: keyid:32:63:71:E3:99:82:4F:80:04:ED:96:75:68:19:76:08:81:B7:CD:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CBF47/370CA2C01D8A11E2B79B13E408B02CD2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBF47/370CA2C01D8A11E2B79B13E408B02CD2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:e8:6f:5e:12:6b:e1:95:ca:66:31:26:a5:d1:4e:27:f4:0e: dd:1a:38:eb:18:19:99:86:40:16:bc:3b:fb:19:b6:90:e3:48: c8:13:1b:62:5d:b8:2b:fc:37:63:fb:d4:af:9b:93:99:ba:a6: b0:ae:d2:cf:ae:c2:52:ec:3f:4a:d2:56:b1:5d:a4:a7:c0:c2: cd:04:27:c8:11:af:47:d2:c4:87:c0:69:cb:88:f6:d5:ad:26: 66:14:3b:62:44:d5:b2:7b:22:96:ff:eb:fb:86:b1:45:80:bf: c6:95:56:ae:ff:e1:03:ca:37:b2:c8:88:7a:b5:fc:12:4e:ed: ef:c2:70:aa:24:16:30:cc:a3:0a:68:fa:10:e9:28:5d:28:7d: 4f:61:d0:9d:de:19:82:34:4b:3d:4a:52:fa:86:da:07:39:3a: ff:62:a0:91:e0:b8:9a:f9:3c:a7:98:a5:92:a5:26:f9:44:5e: 5c:51:fd:2b:dd:42:30:25:1e:6c:51:48:df:7e:76:73:95:9a: dc:67:58:06:a4:f7:1a:de:09:4c:7b:88:75:8a:e3:38:e1:dd: 17:02:61:d2:78:37:ed:8d:ce:17:cb:25:f2:d5:90:ee:e5:b7: 3c:21:e1:91:ea:3c:58:6c:c0:01:d6:8f:86:d9:7d:86:6b:ef: 4c:4b:01:0f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNKIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0JGNDcxMTAvBgNVBAUTKDMyNjM3MUUzOTk4MjRGODAwNEVEOTY3NTY4MTk3NjA4 ODFCN0NEOTYwHhcNMjUwNzAyMTQzMzA4WhcNMjUwNzA5MTQzMzA4WjAYMRYwFAYD VQQDEw02ODY1NDMyNC1hMjQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvc1NUf+ElQQKP+fyFJr8Rc430edzF0po/q8Ynn9i8x/HVt9qzllOPgmMWdFK ilIiS8iijpDcoBvZJP75F4Phc/raVgR5nmicpegKSZVrlRjnVOo+YXsgb2xCtqz/ TwYpB6ieZZrM02F6Spiw76ItB0LjaMVpW2i9IMbnm6ElH5WexqXhkZk2D6sAOD9j DFmXz8rf4nlofZ+IMvXbybRKA7/89AhnPk4IDQ40r7WlREQJIsHc5G5FAdNVfftu mZIpk9HxW/wHMg9YNhnoT8QfxN8TK3Fp3P9zEnrGYvvugxaePQeQgs+e5nZUnMp/ kRgdbqs2A91HhQpM6gJ26dTAmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOdnqdSk QDTYNadThKlIPALWlJZpMB8GA1UdIwQYMBaAFDJjceOZgk+ABO2WdWgZdgiBt82W MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQkY0Ny8zNzBDQTJDMDFE OEExMUUyQjc5QjEzRTQwOEIwMkNEMi9NbU54NDVtQ1Q0QUU3WloxYUJsMkNJRzN6 WlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01tTng0NW1DVDRBRTdaWjFhQmwyQ0lHM3paWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QkY0Ny8zNzBDQTJDMDFEOEExMUUyQjc5QjEzRTQwOEIwMkNEMi9NbU54NDVtQ1Q0 QUU3WloxYUJsMkNJRzN6WlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCB6G9eEmvhlcpmMSal0U4n9A7dGjjrGBmZhkAWvDv7GbaQ40jIExti Xbgr/Ddj+9Svm5OZuqawrtLPrsJS7D9K0laxXaSnwMLNBCfIEa9H0sSHwGnLiPbV rSZmFDtiRNWyeyKW/+v7hrFFgL/GlVau/+EDyjeyyIh6tfwSTu3vwnCqJBYwzKMK aPoQ6ShdKH1PYdCd3hmCNEs9SlL6htoHOTr/YqCR4Lia+TynmKWSpSb5RF5cUf0r 3UIwJR5sUUjffnZzlZrcZ1gGpPca3glMe4h1iuM44d0XAmHSeDftjc4XyyXy1ZDu 5bc8IeGR6jxYbMAB1o+G2X2Ga+9MSwEP -----END CERTIFICATE-----Generated at Thu Jul 3 09:05:21 2025 by rpki-client