$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.mft File: _0lSk8tfFeXRS6zC2xBSsuLIJcg.mft (raw, json) Hash identifier: Jv4vc4LAD+HMeYdHeRpkypIGpyK9it177FAOg2nX0Vs= Subject key identifier: 3E:C2:3E:00:18:40:97:B9:D7:62:D6:18:A5:01:31:4E:AC:B2:42:52 Authority key identifier: FF:49:52:93:CB:5F:15:E5:D1:4B:AC:C2:DB:10:52:B2:E2:C8:25:C8 Certificate issuer: /CN=A91CEAA2/serialNumber=FF495293CB5F15E5D14BACC2DB1052B2E2C825C8 Certificate serial: 34C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.mft Manifest number: 34AE Signing time: Sat 28 Jun 2025 14:52:32 +0000 Manifest this update: Sat 28 Jun 2025 14:52:32 +0000 Manifest next update: Sat 05 Jul 2025 14:52:32 +0000 Files and hashes: 1: _0lSk8tfFeXRS6zC2xBSsuLIJcg.crl (hash: tk70IxxZdzwdXcYnPI1zqV25XbnXZUNJj0pWdJykgf8=) 2: 767E7B3CA60211EFBFCDB65FC4F9AE02.roa (hash: sDAVT78GpTIvV3Pk7DGbULa+i4kn7uu7qVMnxNmpH28=) 3: B2306182F3F911EAB9D11D26C4F9AE02.roa (hash: XuAw72l1y8+xZhjG02bLa91Tpql6DxMPw1rT8RJ+tTY=) 4: 0DEF13D4FC1711EC919B6757C4F9AE02.roa (hash: ZplEo/zP0jHGZr0dLBLSTaxCxcoclbSDg8qfGUwBkSQ=) 5: 75906378FC1F11ECAD09AF21C4F9AE02.roa (hash: KUnun5lZEQw4kuW5EOrvbt/fHn0giqX+CGkWFRK4Ts8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.crl rsync://rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 14:52:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13512 (0x34c8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CEAA2, serialNumber=FF495293CB5F15E5D14BACC2DB1052B2E2C825C8 Validity Not Before: Jun 28 14:52:32 2025 GMT Not After : Jul 5 14:52:32 2025 GMT Subject: CN=686001b0-e3d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:40:97:68:0c:c2:75:56:10:ef:62:b6:36:44: 78:ff:44:b1:61:f9:5c:96:be:b6:4d:df:a3:a6:c8: 39:43:54:01:76:bc:a8:2b:06:bf:26:56:63:a4:7e: cf:fc:7c:df:e6:e2:b7:8b:db:ac:85:4f:ee:bc:59: b4:ab:0e:0c:84:a7:06:d8:55:a2:45:78:28:28:ea: 7e:c5:3d:7b:75:28:f0:5d:31:09:2d:5f:93:4f:b0: 40:f8:a3:04:a1:72:98:e5:f1:c0:d3:1b:1e:49:4c: ad:d4:96:66:1d:71:0b:f4:cf:f9:01:0d:10:96:c2: 66:97:d1:4b:7d:22:59:f1:5d:73:92:70:38:59:8a: 08:6a:2d:a3:2c:91:d2:3f:00:db:d8:96:fa:82:c7: 34:fd:8c:00:62:4d:2e:c3:8b:51:2f:5f:4f:0d:dc: 96:8c:f7:0e:7d:e7:ee:a1:15:b9:a6:3d:d0:be:fc: 68:60:07:22:e2:a8:a1:18:dd:21:29:ff:9b:45:6f: d9:19:52:ba:70:d4:83:36:7a:95:7b:0e:01:eb:2d: 50:b5:18:6d:5f:e4:1e:fa:44:9d:e7:6f:3b:a7:41: ba:87:5e:9a:3f:f8:16:2e:25:a0:cf:b3:1e:1d:87: 77:64:a6:28:b8:fa:7c:f3:d5:6d:4c:5d:85:70:c2: 73:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:C2:3E:00:18:40:97:B9:D7:62:D6:18:A5:01:31:4E:AC:B2:42:52 X509v3 Authority Key Identifier: keyid:FF:49:52:93:CB:5F:15:E5:D1:4B:AC:C2:DB:10:52:B2:E2:C8:25:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:4c:ee:45:48:9d:4d:55:40:15:f8:c0:f2:0c:dc:f7:cb:28: 5f:19:62:44:be:18:61:07:af:24:0b:cd:f2:2c:91:f6:be:e9: 29:ad:e5:c8:7b:b7:ae:08:a6:e5:06:e4:14:5f:f4:5a:b7:d6: d1:86:f2:fd:40:31:f2:03:46:0c:8b:23:3c:ce:17:6d:87:a3: f9:b5:c9:16:c2:50:60:e4:75:ec:55:4b:17:7e:34:66:4b:9e: b6:00:7a:cc:df:2a:df:2e:1c:22:66:3b:40:d9:dc:2e:31:99: 79:9a:8f:b8:54:2a:99:70:c7:70:79:20:74:e6:88:b1:98:91: 81:96:b2:d8:b4:fd:2b:44:f3:60:2a:f6:3f:56:3c:40:a0:f4: f3:e7:da:87:55:7f:cc:55:21:7d:6c:72:e5:89:d8:2f:f8:83: 84:ea:6b:8b:4a:cc:57:07:47:41:c0:97:97:ca:9c:d8:51:96: 66:80:67:9c:07:dc:31:49:98:cd:df:44:ee:39:17:13:4b:11: 46:dd:72:da:22:bc:db:28:4e:49:17:8b:e9:fd:30:c8:8f:f2: f8:52:d6:2d:8b:d9:da:67:e6:d9:fe:48:2a:37:f6:45:c2:4d: 40:46:14:34:f0:83:7c:d6:2c:0d:84:b9:c4:a7:68:11:41:62: c2:d0:53:57 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNMgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0VBQTIxMTAvBgNVBAUTKEZGNDk1MjkzQ0I1RjE1RTVEMTRCQUNDMkRCMTA1MkIy RTJDODI1QzgwHhcNMjUwNjI4MTQ1MjMyWhcNMjUwNzA1MTQ1MjMyWjAYMRYwFAYD VQQDEw02ODYwMDFiMC1lM2Q1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyECXaAzCdVYQ72K2NkR4/0SxYflclr62Td+jpsg5Q1QBdryoKwa/JlZjpH7P /Hzf5uK3i9ushU/uvFm0qw4MhKcG2FWiRXgoKOp+xT17dSjwXTEJLV+TT7BA+KME oXKY5fHA0xseSUyt1JZmHXEL9M/5AQ0QlsJml9FLfSJZ8V1zknA4WYoIai2jLJHS PwDb2Jb6gsc0/YwAYk0uw4tRL19PDdyWjPcOfefuoRW5pj3QvvxoYAci4qihGN0h Kf+bRW/ZGVK6cNSDNnqVew4B6y1QtRhtX+Qe+kSd5287p0G6h16aP/gWLiWgz7Me HYd3ZKYouPp889VtTF2FcMJzYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD7CPgAY QJe512LWGKUBMU6sskJSMB8GA1UdIwQYMBaAFP9JUpPLXxXl0UuswtsQUrLiyCXI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRUFBMi9EMkFCMjkyQzFE OTkxMUUyQkE1MjlBODYwOEIwMkNEMi9fMGxTazh0ZkZlWFJTNnpDMnhCU3N1TElK Y2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL18wbFNrOHRmRmVYUlM2ekMyeEJTc3VMSUpjZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RUFBMi9EMkFCMjkyQzFEOTkxMUUyQkE1MjlBODYwOEIwMkNEMi9fMGxTazh0ZkZl WFJTNnpDMnhCU3N1TElKY2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA3TO5FSJ1NVUAV+MDyDNz3yyhfGWJEvhhhB68kC83yLJH2vukpreXI e7euCKblBuQUX/Rat9bRhvL9QDHyA0YMiyM8zhdth6P5tckWwlBg5HXsVUsXfjRm S562AHrM3yrfLhwiZjtA2dwuMZl5mo+4VCqZcMdweSB05oixmJGBlrLYtP0rRPNg KvY/VjxAoPTz59qHVX/MVSF9bHLlidgv+IOE6muLSsxXB0dBwJeXypzYUZZmgGec B9wxSZjN30TuORcTSxFG3XLaIrzbKE5JF4vp/TDIj/L4UtYti9naZ+bZ/kgqN/ZF wk1ARhQ08IN81iwNhLnEp2gRQWLC0FNX -----END CERTIFICATE-----Generated at Sun Jun 29 17:44:40 2025 by rpki-client