$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1F95/FF93EC72195F11EDB2BDF95EC4F9AE02/1vBnJNCWhwftHfr9uyJYArPaoZQ.mft File: 1vBnJNCWhwftHfr9uyJYArPaoZQ.mft (raw, json) Hash identifier: jgY8vnODQHOPlYOL7se/buX6nbx63SlXUxLhmRY3GWw= Subject key identifier: 51:18:B4:65:C9:B8:DF:99:D1:54:5B:4B:E8:95:7F:26:77:AE:61:50 Authority key identifier: D6:F0:67:24:D0:96:87:07:ED:1D:FA:FD:BB:22:58:02:B3:DA:A1:94 Certificate issuer: /CN=A91D1F95/serialNumber=D6F06724D0968707ED1DFAFDBB225802B3DAA194 Certificate serial: 0275 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1vBnJNCWhwftHfr9uyJYArPaoZQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1F95/FF93EC72195F11EDB2BDF95EC4F9AE02/1vBnJNCWhwftHfr9uyJYArPaoZQ.mft Manifest number: 026D Signing time: Tue 01 Jul 2025 02:28:15 +0000 Manifest this update: Tue 01 Jul 2025 02:28:14 +0000 Manifest next update: Tue 08 Jul 2025 02:28:14 +0000 Files and hashes: 1: 1vBnJNCWhwftHfr9uyJYArPaoZQ.crl (hash: 4jSGouJNv9x6vWHafPr2TVC7PXD6LJWbr3q/a9tLdjc=) 2: 834FFE88679911EEB8243436C4F9AE02.roa (hash: Yrv7ZBN66aHo1fxboSYdyeMXxVo+vZh3rt3Di282sAw=) 3: C965E8C4679911EEB466ED36C4F9AE02.roa (hash: 4shhW+hfwKEr12lvGKCQFs6BqumTNDAweN+QTLEQJao=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1F95/FF93EC72195F11EDB2BDF95EC4F9AE02/1vBnJNCWhwftHfr9uyJYArPaoZQ.crl rsync://rpki.apnic.net/member_repository/A91D1F95/FF93EC72195F11EDB2BDF95EC4F9AE02/1vBnJNCWhwftHfr9uyJYArPaoZQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1vBnJNCWhwftHfr9uyJYArPaoZQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 02:28:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 629 (0x275) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1F95, serialNumber=D6F06724D0968707ED1DFAFDBB225802B3DAA194 Validity Not Before: Jul 1 02:28:14 2025 GMT Not After : Jul 8 02:28:14 2025 GMT Subject: CN=686347bf-6c1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:38:7e:11:a7:cf:42:0e:fd:0e:7a:e4:a2:b1: 51:7f:93:d6:de:a4:ab:3a:11:4a:76:ff:4d:e2:4a: 5f:71:96:57:23:27:a2:e5:ac:13:d0:12:1e:51:58: 07:3a:4a:e6:af:f7:03:0e:8e:0d:3b:df:9b:c8:93: bd:6f:76:c2:ca:fb:8a:8a:93:f6:33:52:97:b1:8e: 67:fe:4a:79:51:cf:2e:22:80:1a:97:e1:d9:0d:aa: 8d:af:b1:6b:cf:20:8d:99:7f:d4:e1:81:32:15:c7: 43:28:9e:df:8e:93:1a:d0:ba:71:9c:8a:72:ae:6a: f0:59:9b:0c:0a:a6:5d:a7:58:9a:14:7a:b7:4b:e4: 51:df:98:53:d3:8e:60:e7:90:2b:ea:0c:f4:31:23: 01:a6:ad:5e:a3:71:a4:16:bc:a5:0f:6f:a9:d3:1d: 2e:41:a9:9a:aa:da:0c:c5:b1:ba:40:ef:4a:b1:22: f6:7d:71:a1:d1:64:e4:f0:64:12:ed:c8:5f:21:b4: 40:04:09:bd:29:1f:46:82:4c:d7:99:84:42:e3:95: 90:1a:7b:c3:56:42:dd:50:76:ee:cf:35:08:39:49: 40:f8:23:bb:c4:4e:35:45:d3:a1:a8:81:dc:22:d4: 0c:1c:11:d5:d3:17:34:5e:77:69:cb:76:e6:87:68: 20:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:18:B4:65:C9:B8:DF:99:D1:54:5B:4B:E8:95:7F:26:77:AE:61:50 X509v3 Authority Key Identifier: keyid:D6:F0:67:24:D0:96:87:07:ED:1D:FA:FD:BB:22:58:02:B3:DA:A1:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1F95/FF93EC72195F11EDB2BDF95EC4F9AE02/1vBnJNCWhwftHfr9uyJYArPaoZQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1vBnJNCWhwftHfr9uyJYArPaoZQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1F95/FF93EC72195F11EDB2BDF95EC4F9AE02/1vBnJNCWhwftHfr9uyJYArPaoZQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:49:ba:a2:50:be:70:2e:8d:a8:a7:91:ca:13:5b:16:cf:90: c0:06:20:13:c6:fe:35:db:5a:83:cb:b4:e4:4e:31:62:d4:f3: be:f7:36:31:bf:07:39:0f:a5:60:fb:8c:93:2a:2f:33:e2:f0: a0:56:99:f9:4c:9b:1b:24:9b:21:41:ea:22:53:95:ba:80:47: 33:04:6b:07:9e:83:fe:94:2f:53:9a:e2:0e:64:52:0d:a6:c7: 1f:d6:cf:f8:a7:50:10:82:7f:ae:3c:c2:23:62:a3:f9:40:d8: 65:fb:0d:2a:14:70:47:c7:b8:a6:92:60:fb:b5:a3:5c:29:7b: 5e:cc:d6:9e:06:ed:f0:a6:b9:41:c3:9a:46:3d:ba:a5:bf:4b: fd:1f:ee:1c:28:c1:5f:97:be:fb:d5:9c:8f:ed:ba:b7:92:d0: ca:6d:d6:fc:13:b2:1e:bd:66:8c:b1:43:0c:5b:2e:8e:ca:26: d3:1a:94:2a:2b:d1:76:a4:3b:b6:ab:bd:3c:ae:80:0b:5f:fc: d0:08:d7:7c:67:fd:13:3a:b6:c8:c8:37:7a:77:c6:2c:54:19: 73:d1:aa:df:29:d5:de:72:de:96:bb:2c:4f:fb:85:84:ef:b8: 7b:45:41:86:3f:de:85:65:21:68:7d:e6:bf:fe:f8:68:41:0d: 9b:e8:a7:87 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAnUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDFGOTUxMTAvBgNVBAUTKEQ2RjA2NzI0RDA5Njg3MDdFRDFERkFGREJCMjI1ODAy QjNEQUExOTQwHhcNMjUwNzAxMDIyODE0WhcNMjUwNzA4MDIyODE0WjAYMRYwFAYD VQQDEw02ODYzNDdiZi02YzFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAozh+EafPQg79DnrkorFRf5PW3qSrOhFKdv9N4kpfcZZXIyei5awT0BIeUVgH Okrmr/cDDo4NO9+byJO9b3bCyvuKipP2M1KXsY5n/kp5Uc8uIoAal+HZDaqNr7Fr zyCNmX/U4YEyFcdDKJ7fjpMa0LpxnIpyrmrwWZsMCqZdp1iaFHq3S+RR35hT045g 55Ar6gz0MSMBpq1eo3GkFrylD2+p0x0uQamaqtoMxbG6QO9KsSL2fXGh0WTk8GQS 7chfIbRABAm9KR9GgkzXmYRC45WQGnvDVkLdUHbuzzUIOUlA+CO7xE41RdOhqIHc ItQMHBHV0xc0Xndpy3bmh2ggJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFEYtGXJ uN+Z0VRbS+iVfyZ3rmFQMB8GA1UdIwQYMBaAFNbwZyTQlocH7R36/bsiWAKz2qGU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMUY5NS9GRjkzRUM3MjE5 NUYxMUVEQjJCREY5NUVDNEY5QUUwMi8xdkJuSk5DV2h3ZnRIZnI5dXlKWUFyUGFv WlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzF2Qm5KTkNXaHdmdEhmcjl1eUpZQXJQYW9aUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MUY5NS9GRjkzRUM3MjE5NUYxMUVEQjJCREY5NUVDNEY5QUUwMi8xdkJuSk5DV2h3 ZnRIZnI5dXlKWUFyUGFvWlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAtSbqiUL5wLo2op5HKE1sWz5DABiATxv4121qDy7TkTjFi1PO+9zYx vwc5D6Vg+4yTKi8z4vCgVpn5TJsbJJshQeoiU5W6gEczBGsHnoP+lC9TmuIOZFIN pscf1s/4p1AQgn+uPMIjYqP5QNhl+w0qFHBHx7imkmD7taNcKXtezNaeBu3wprlB w5pGPbqlv0v9H+4cKMFfl7771ZyP7bq3ktDKbdb8E7IevWaMsUMMWy6OyibTGpQq K9F2pDu2q708roALX/zQCNd8Z/0TOrbIyDd6d8YsVBlz0arfKdXect6WuyxP+4WE 77h7RUGGP96FZSFofea//vhoQQ2b6KeH -----END CERTIFICATE-----Generated at Wed Jul 2 10:39:58 2025 by rpki-client