$ rpki-client -vvf rpki.apnic.net/member_repository/A91D09BC/D35B082EA70711EF99A57741C4F9AE02/AfBcfqXyou38GDiX9YNZgrLPA78.mft File: AfBcfqXyou38GDiX9YNZgrLPA78.mft (raw, json) Hash identifier: I33i1xf18aUBXVI7DZ06+Xvex0zExONPnoQdqhOw2/Y= Subject key identifier: 89:A2:47:AD:B0:9B:5F:FE:49:BE:9A:A7:A2:C1:C2:86:6B:02:73:37 Authority key identifier: 01:F0:5C:7E:A5:F2:A2:ED:FC:18:38:97:F5:83:59:82:B2:CF:03:BF Certificate issuer: /CN=A91D09BC/serialNumber=01F05C7EA5F2A2EDFC183897F5835982B2CF03BF Certificate serial: 76 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AfBcfqXyou38GDiX9YNZgrLPA78.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D09BC/D35B082EA70711EF99A57741C4F9AE02/AfBcfqXyou38GDiX9YNZgrLPA78.mft Manifest number: 75 Signing time: Sat 05 Jul 2025 07:07:27 +0000 Manifest this update: Sat 05 Jul 2025 07:07:27 +0000 Manifest next update: Sat 12 Jul 2025 07:07:27 +0000 Files and hashes: 1: AfBcfqXyou38GDiX9YNZgrLPA78.crl (hash: dzNO4DVZbGfI+jVhraxstfvu64prpt09hdh24fOkI6A=) 2: A69DB4ACA70811EFB1511445C4F9AE02.roa (hash: ve1sSgZ6oct5AOmrySo9DC5xQlX3NPwVMFkq6CjA+1w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D09BC/D35B082EA70711EF99A57741C4F9AE02/AfBcfqXyou38GDiX9YNZgrLPA78.crl rsync://rpki.apnic.net/member_repository/A91D09BC/D35B082EA70711EF99A57741C4F9AE02/AfBcfqXyou38GDiX9YNZgrLPA78.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AfBcfqXyou38GDiX9YNZgrLPA78.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 118 (0x76) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D09BC, serialNumber=01F05C7EA5F2A2EDFC183897F5835982B2CF03BF Validity Not Before: Jul 5 07:07:27 2025 GMT Not After : Jul 12 07:07:27 2025 GMT Subject: CN=6868cf2f-af27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:f1:17:2e:ec:d3:b0:45:a2:2d:39:a3:35:b8: ee:71:19:66:c2:6b:a2:ad:af:a1:4b:33:0d:a1:12: 54:de:84:e3:7d:3c:0d:75:f9:a2:e2:ff:21:41:07: ec:06:f8:4b:21:e7:87:b3:7b:42:2f:a0:1f:5d:49: 1c:1b:3e:8f:63:6d:11:10:ea:4f:22:36:e5:01:f4: 09:8a:dd:00:c4:39:c8:25:5f:3b:22:ff:e8:45:c8: 58:0f:ff:0b:b3:03:ff:27:18:87:36:98:d8:30:15: b1:4b:be:a7:df:3f:e7:5a:51:9e:91:90:73:f5:ba: 15:4d:e8:cc:c0:10:5c:ad:91:c5:a6:09:ef:aa:2e: d5:39:9a:55:db:a6:dd:6c:d1:26:7d:78:41:d9:5c: 6d:e7:42:ff:6e:ac:ba:b8:fe:64:c1:db:e1:bc:54: a6:8b:59:10:d8:e6:59:ef:c3:32:bf:a9:d6:71:4e: c3:08:e2:1d:00:cc:52:cf:0a:65:bc:e6:20:56:6d: 40:7e:3c:ad:86:8e:ea:25:66:18:00:d5:44:3b:26: 1e:2d:30:46:44:9a:c1:a2:ce:cc:15:dc:ac:e1:ad: 62:31:2f:57:a1:06:04:b8:30:44:bc:6f:e7:29:6e: f3:ab:1e:91:89:9d:74:b3:d0:13:bf:fc:f2:44:0b: f9:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:A2:47:AD:B0:9B:5F:FE:49:BE:9A:A7:A2:C1:C2:86:6B:02:73:37 X509v3 Authority Key Identifier: keyid:01:F0:5C:7E:A5:F2:A2:ED:FC:18:38:97:F5:83:59:82:B2:CF:03:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D09BC/D35B082EA70711EF99A57741C4F9AE02/AfBcfqXyou38GDiX9YNZgrLPA78.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AfBcfqXyou38GDiX9YNZgrLPA78.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D09BC/D35B082EA70711EF99A57741C4F9AE02/AfBcfqXyou38GDiX9YNZgrLPA78.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:13:32:8c:e1:1f:6c:7d:bf:00:7d:c6:68:d8:c6:e7:a8:85: 15:7f:0b:e3:3f:a2:14:02:53:53:e6:5f:5f:70:72:11:7b:00: ca:8e:03:d5:4e:85:ef:a5:fa:da:0c:d8:66:37:bd:df:55:d9: b3:73:a8:e1:92:f0:ab:92:8a:70:91:98:c0:5d:8b:9a:2d:d2: f7:83:a1:b1:f9:ef:ce:e8:b1:62:66:9e:e6:46:be:8b:46:bd: 17:4a:52:3a:c5:27:6e:82:0c:5f:94:17:7c:2a:e0:93:93:75: 7c:16:d6:2e:54:fa:03:b6:b2:53:94:d0:c0:67:fb:4a:bb:71: 5c:a8:01:d8:47:8c:16:fd:3e:d2:7d:4a:15:1f:0f:fc:5c:17: 54:ca:6c:7b:3c:1f:1a:1c:18:d9:00:8f:88:37:e8:96:a1:b1: 08:4f:ec:19:49:15:a4:b2:43:94:0e:3e:1e:ad:f7:0a:31:d4: 46:58:0e:c4:6d:55:8f:e6:8a:e6:d6:80:a1:f8:b3:59:fc:88: 68:a2:b0:7f:cd:25:50:cf:69:76:6b:c6:06:b0:ff:3e:9e:17: 50:12:be:54:de:8e:ed:15:97:70:d9:02:af:8e:f1:1a:e5:fa: 66:ae:46:8d:49:65:a0:2a:cb:2b:42:d4:1e:7e:21:31:2e:a8: 5a:d9:12:7f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBdjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE MDlCQzExMC8GA1UEBRMoMDFGMDVDN0VBNUYyQTJFREZDMTgzODk3RjU4MzU5ODJC MkNGMDNCRjAeFw0yNTA3MDUwNzA3MjdaFw0yNTA3MTIwNzA3MjdaMBgxFjAUBgNV BAMTDTY4NjhjZjJmLWFmMjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC48Rcu7NOwRaItOaM1uO5xGWbCa6Ktr6FLMw2hElTehON9PA11+aLi/yFBB+wG +Esh54eze0IvoB9dSRwbPo9jbREQ6k8iNuUB9AmK3QDEOcglXzsi/+hFyFgP/wuz A/8nGIc2mNgwFbFLvqffP+daUZ6RkHP1uhVN6MzAEFytkcWmCe+qLtU5mlXbpt1s 0SZ9eEHZXG3nQv9urLq4/mTB2+G8VKaLWRDY5lnvwzK/qdZxTsMI4h0AzFLPCmW8 5iBWbUB+PK2GjuolZhgA1UQ7Jh4tMEZEmsGizswV3KzhrWIxL1ehBgS4MES8b+cp bvOrHpGJnXSz0BO//PJEC/lXAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUiaJHrbCb X/5JvpqnosHChmsCczcwHwYDVR0jBBgwFoAUAfBcfqXyou38GDiX9YNZgrLPA78w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQwOUJDL0QzNUIwODJFQTcw NzExRUY5OUE1Nzc0MUM0RjlBRTAyL0FmQmNmcVh5b3UzOEdEaVg5WU5aZ3JMUEE3 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQWZCY2ZxWHlvdTM4R0RpWDlZTlpnckxQQTc4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQw OUJDL0QzNUIwODJFQTcwNzExRUY5OUE1Nzc0MUM0RjlBRTAyL0FmQmNmcVh5b3Uz OEdEaVg5WU5aZ3JMUEE3OC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJoTMozhH2x9vwB9xmjYxueohRV/C+M/ohQCU1PmX19wchF7AMqOA9VO he+l+toM2GY3vd9V2bNzqOGS8KuSinCRmMBdi5ot0veDobH5787osWJmnuZGvotG vRdKUjrFJ26CDF+UF3wq4JOTdXwW1i5U+gO2slOU0MBn+0q7cVyoAdhHjBb9PtJ9 ShUfD/xcF1TKbHs8HxocGNkAj4g36JahsQhP7BlJFaSyQ5QOPh6t9wox1EZYDsRt VY/miubWgKH4s1n8iGiisH/NJVDPaXZrxgaw/z6eF1ASvlTeju0Vl3DZAq+O8Rrl +mauRo1JZaAqyytC1B5+ITEuqFrZEn8= -----END CERTIFICATE-----Generated at Sun Jul 6 01:10:54 2025 by rpki-client